Cortex REST API

Details
Content
Dependencies
Version History

Use Demisto REST APIs

Automations

Name	Description
SetIRProceduresMarkdown	Creates markdown tables based on information from the GetTasksWithSection command.
GetIncidentTasks	Get all tasks for a specific incident by the given state, name and/or tag.
DemistoCreateList	Create a new list.
DemistoGetIncidentTasksByState	Deprecated. Use GetIncidentTasksByState instead.
UploadFile	Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room.
DemistoUploadFileToIncident	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this incident to the specified incident. The file is uploaded as an attachment to the specified incident’s Summary page, and recorded as an entry in the War Room.
GetTasksWithSections	Groups all tasks for a specific incident according to the task headers (titles).
DemistoLogsBundle	Deprecated. No available replacement.
DemistoUploadFileV2	Deprecated. Use UploadFile instead.
DemistoUploadFile	Deprecated. Use UploadFileV2 instead.
DemistoSendInvite	Deprecated. No available replacement.
DemistoLeaveAllInvestigations	Deprecated. No available replacement.
DemistoLinkIncidents	Deprecated. No available replacement.
GetIncidentTasksByState	Deprecated. Use the GetIncidentTasks script instead.

Integrations

Name	Description
Demisto REST API (Deprecated)	Deprecated. Use Core REST API instead.
Core REST API	Use Core REST APIs.

Automations

Name	Description
DemistoGetIncidentTasksByState	Deprecated. Use GetIncidentTasksByState instead.
DemistoGetAlertTasksByState	Deprecated. Use GetAlertTasksByState instead.
GetTasksWithSections	Groups all tasks for a specific incident according to the task headers (titles).
GetIncidentTasks	Get all tasks for a specific incident by the given state, name and/or tag.
GetAlertTasks	Get all tasks for a specific alert by the given state, name and/or tag.
SetIRProceduresMarkdown	Creates markdown tables based on information from the GetTasksWithSection command.
GetIncidentTasksByState	Deprecated. Use the GetIncidentTasks script instead.
GetAlertTasksByState	Deprecated. Use the GetAlertTasks script instead.
DemistoUploadFile	Deprecated. Use UploadFileV2 instead.
DemistoLeaveAllInvestigations	Deprecated. No available replacement.
DemistoSendInvite	Deprecated. No available replacement.
UploadFile	Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room.
DemistoUploadFileV2	Deprecated. Use UploadFile instead.
DemistoUploadFileToIncident	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this incident to the specified incident. The file is uploaded as an attachment to the specified incident’s Summary page, and recorded as an entry in the War Room.
DemistoUploadFileToAlert	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this alert to the specified alert. The file is uploaded as an attachment to the specified alert’s Summary page, and recorded as an entry in the War Room.
DemistoLogsBundle	Deprecated. No available replacement.

Integrations

Name	Description
Core REST API	Use Core REST APIs.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.4.0 - 7912687 (March 26, 2026)

Integrations

Core REST API

Added support for "/platform" API endpoints in commands such as core-api-get and core-api-post.

Related pull requests:
- 43602
- 43207

Download

1.3.96 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.3.95 - 7533454 (March 9, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 43414

Download

1.3.94 - 7309700 (February 24, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 43262

Download

1.3.93 - 7298165 (February 24, 2026)

Integrations

Core REST API

Added the optional timeout_in_seconds argument to the core-api-install-packs command to allow configuring the request timeout.

Related pull requests:
- 43198

Download

1.3.92 - 7270993 (February 22, 2026)

Integrations

Core REST API

Fixed an issue with API response parsing that caused the "Test" button to fail on some tenants.

Related pull requests:
- 43050

Download

1.3.91 - 7188558 (February 17, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 43146

Download

1.3.90 - 6580350 (January 6, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 42564

Download

1.3.89 - 6238358 (December 11, 2025)

Scripts

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.12.12.6204436.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.12.12.6204436.

Related pull requests:
- 42247

Download

1.3.88 - 6231557 (December 10, 2025)

Scripts

GetIncidentTasks

Breaking Change Updated the GetIncidentTasks script to include tasks with undefined state.

Related pull requests:
- 41828
- 42241

Download

1.3.87 - 5888286 (November 16, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41916

Download

1.3.86 - 5717993 (November 3, 2025)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41760

Download

1.3.85 - 5538136 (October 23, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41627

Download

1.3.84 - R5469292 (October 20, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41087

Download

1.3.83 - 4633304 (August 24, 2025)

Scripts

GetIncidentTasks

Fixed an issue in GetIncidentTasks automation, where the raw response value was not compatible with previous versions.

Related pull requests:
- 41035

Download

1.3.82 - 4583601 (August 20, 2025)

Integrations

Core REST API

Documentation and metadata improvements.

Scripts

GetIncidentTasks

Improved script performance.

Related pull requests:
- 40979

Download

1.3.80 - 4166662 (July 14, 2025)

Integrations

Core REST API

Added support for timeout argument in the core-api-post command.

Related pull requests:
- 40579

Download

1.3.79 - 4130170 (July 10, 2025)

Cortex REST API

Documentation and Metadata improvements.

Related pull requests:
- 40577

Download

1.3.78 - 4121830 (July 10, 2025)

Scripts

DemistoUploadFileV2

Documentation and metadata improvements.

DemistoUploadFileToIncident

Documentation and metadata improvements.

SetIRProceduresMarkdown

Documentation and metadata improvements.

DemistoLeaveAllInvestigations

Documentation and metadata improvements.

DemistoSendInvite

Documentation and metadata improvements.

DemistoUploadFile

Documentation and metadata improvements.

GetIncidentTasks

Documentation and metadata improvements.

UploadFile

Documentation and metadata improvements.

GetIncidentTasksByState

Documentation and metadata improvements.

GetTasksWithSections

Documentation and metadata improvements.

DemistoLogsBundle

Documentation and metadata improvements.

DemistoGetIncidentTasksByState

Documentation and metadata improvements.

Related pull requests:
- 40523

Download

1.3.77 - 4096037 (July 8, 2025)

Integrations

Core REST API

Updated the Core REST API integration to support unified_platform platform version.

Related pull requests:
- 40532

Download

1.3.76 - 4049458 (July 3, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 40478

Download

1.3.75 - R3980324 (June 26, 2025)

Integrations

Core REST API

Improved the documentation for the core-api-file-attachment-delete and core-api-file-delete commands.

Related pull requests:
- 40314

Download

1.3.74 - 3648597 (June 5, 2025)

Scripts

UploadFile

Updated the UploadFile script to support alerts & issues.

Related pull requests:
- 40178

Download

1.3.73 - 3526238 (May 25, 2025)

Scripts

GetIncidentTasks

Updated the Docker image to: demisto/python3:3.12.8.3296088.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.12.8.3296088.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.12.8.3296088.

UploadFile

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 39931

Download

1.3.72 - 3459286 (May 19, 2025)

Integrations

Core REST API

Metadata and documentation improvements.

Related pull requests:
- 39911

Download

1.3.71 - R3444919 (May 18, 2025)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 39558

Download

1.3.70 - R3079234 (April 7, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 39427

Download

1.3.69 - 3042633 (April 2, 2025)

Scripts

UploadFile

Metadata and documentation improvements.

GetIncidentTasks

Metadata and documentation improvements.

GetTasksWithSections

Metadata and documentation improvements.

SetIRProceduresMarkdown

Metadata and documentation improvements.

Related pull requests:
- 39089

Download

1.3.68 - R2988527 (March 26, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.4.0 - 7912687 (March 26, 2026)

Integrations

Core REST API

Added support for "/platform" API endpoints in commands such as core-api-get and core-api-post.

Related pull requests:
- 43602
- 43207

Download

1.3.96 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.3.95 - 7502515 (March 9, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 43414

Download

1.3.94 - 7309700 (February 24, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 43262

Download

1.3.93 - 7298165 (February 24, 2026)

Integrations

Core REST API

Added the optional timeout_in_seconds argument to the core-api-install-packs command to allow configuring the request timeout.

Related pull requests:
- 43198

Download

1.3.92 - 7270993 (February 22, 2026)

Integrations

Core REST API

Fixed an issue with API response parsing that caused the "Test" button to fail on some tenants.

Related pull requests:
- 43050

Download

1.3.91 - 7188558 (February 17, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 43146

Download

1.3.90 - 6580350 (January 6, 2026)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 42564

Download

1.3.89 - 6238358 (December 11, 2025)

Scripts

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.12.12.6204436.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.12.12.6204436.

Related pull requests:
- 42247

Download

1.3.88 - 6231557 (December 10, 2025)

Scripts

GetIncidentTasks

Breaking Change Updated the GetIncidentTasks script to include tasks with undefined state.

Related pull requests:
- 41828
- 42241

Download

1.3.87 - 5888286 (November 16, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41916

Download

1.3.86 - 5717993 (November 3, 2025)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41760

Download

1.3.85 - 5538136 (October 23, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41627

Download

1.3.84 - R5469292 (October 20, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41087

Download

1.3.83 - 4633304 (August 24, 2025)

Scripts

GetIncidentTasks

Fixed an issue in GetIncidentTasks automation, where the raw response value was not compatible with previous versions.

Related pull requests:
- 41035

Download

1.3.82 - 4583601 (August 20, 2025)

Integrations

Core REST API

Documentation and metadata improvements.

Scripts

GetIncidentTasks

Improved script performance.

Related pull requests:
- 40979

Download

1.3.80 - 4166662 (July 14, 2025)

Integrations

Core REST API

Added support for timeout argument in the core-api-post command.

Related pull requests:
- 40579

Download

1.3.79 - 4130170 (July 10, 2025)

Cortex REST API

Documentation and Metadata improvements.

Related pull requests:
- 40577

Download

1.3.78 - 4118212 (July 9, 2025)

Scripts

DemistoUploadFileV2

Documentation and metadata improvements.

DemistoUploadFileToIncident

Documentation and metadata improvements.

SetIRProceduresMarkdown

Documentation and metadata improvements.

DemistoLeaveAllInvestigations

Documentation and metadata improvements.

DemistoSendInvite

Documentation and metadata improvements.

DemistoUploadFile

Documentation and metadata improvements.

GetIncidentTasks

Documentation and metadata improvements.

UploadFile

Documentation and metadata improvements.

GetIncidentTasksByState

Documentation and metadata improvements.

GetTasksWithSections

Documentation and metadata improvements.

DemistoLogsBundle

Documentation and metadata improvements.

DemistoGetIncidentTasksByState

Documentation and metadata improvements.

Related pull requests:
- 40523

Download

1.3.77 - 4096037 (July 8, 2025)

Integrations

Core REST API

Updated the Core REST API integration to support unified_platform platform version.

Related pull requests:
- 40532

Download

1.3.76 - 4049458 (July 3, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 40478

Download

1.3.75 - R3980324 (June 26, 2025)

Integrations

Core REST API

Improved the documentation for the core-api-file-attachment-delete and core-api-file-delete commands.

Related pull requests:
- 40314

Download

1.3.74 - 3648597 (June 5, 2025)

Scripts

UploadFile

Updated the UploadFile script to support alerts & issues.

Related pull requests:
- 40178

Download

1.3.73 - 3526238 (May 25, 2025)

Scripts

GetIncidentTasks

Updated the Docker image to: demisto/python3:3.12.8.3296088.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.12.8.3296088.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.12.8.3296088.

UploadFile

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 39931

Download

1.3.72 - 3466353 (May 20, 2025)

Integrations

Core REST API

Metadata and documentation improvements.

Related pull requests:
- 39911

Download

1.3.71 - R3444919 (May 18, 2025)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 39558

Download

1.3.70 - R3079234 (April 7, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 39427

Download

1.3.69 - 3042633 (April 2, 2025)

Scripts

UploadFile

Metadata and documentation improvements.

GetIncidentTasks

Metadata and documentation improvements.

GetTasksWithSections

Metadata and documentation improvements.

SetIRProceduresMarkdown

Metadata and documentation improvements.

Related pull requests:
- 39089

Download

1.3.68 - R2988527 (March 26, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 15, 2020
Last Release	March 26, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.