Cortex REST API

Details
Content
Dependencies
Version History

Use Demisto REST APIs

Automations

Name	Description
DemistoUploadFile	Deprecated. Use UploadFileV2 instead.
DemistoLinkIncidents	Deprecated. No available replacement.
DemistoCreateList	Create a new list.
DemistoLogsBundle	Deprecated. No available replacement.
DemistoGetIncidentTasksByState	Deprecated. Use GetIncidentTasksByState instead.
GetTasksWithSections	Groups all tasks for a specific incident according to the task headers (titles).
DemistoSendInvite	Deprecated. No available replacement.
GetIncidentTasksByState	Deprecated. Use the GetIncidentTasks script instead.
DemistoLeaveAllInvestigations	Deprecated. No available replacement.
SetIRProceduresMarkdown	Creates markdown tables based on information from the GetTasksWithSection command.
DemistoUploadFileToIncident	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this incident to the specified incident. The file is uploaded as an attachment to the specified incident’s Summary page, and recorded as an entry in the War Room.
GetIncidentTasks	Get all tasks for a specific incident by the given state, name and/or tag.
UploadFile	Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room.
DemistoUploadFileV2	Deprecated. Use UploadFile instead.

Integrations

Name	Description
Demisto REST API (Deprecated)	Deprecated. Use Core REST API instead.
Core REST API	Use Core REST APIs.

Automations

Name	Description
GetIncidentTasksByState	Deprecated. Use the GetIncidentTasks script instead.
GetAlertTasksByState	Deprecated. Use the GetAlertTasks script instead.
GetIncidentTasks	Get all tasks for a specific incident by the given state, name and/or tag.
GetAlertTasks	Get all tasks for a specific alert by the given state, name and/or tag.
SetIRProceduresMarkdown	Creates markdown tables based on information from the GetTasksWithSection command.
GetTasksWithSections	Groups all tasks for a specific incident according to the task headers (titles).
DemistoUploadFileToIncident	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this incident to the specified incident. The file is uploaded as an attachment to the specified incident’s Summary page, and recorded as an entry in the War Room.
DemistoUploadFileToAlert	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this alert to the specified alert. The file is uploaded as an attachment to the specified alert’s Summary page, and recorded as an entry in the War Room.
DemistoGetIncidentTasksByState	Deprecated. Use GetIncidentTasksByState instead.
DemistoGetAlertTasksByState	Deprecated. Use GetAlertTasksByState instead.
DemistoUploadFileV2	Deprecated. Use UploadFile instead.
DemistoUploadFile	Deprecated. Use UploadFileV2 instead.
DemistoLeaveAllInvestigations	Deprecated. No available replacement.
DemistoSendInvite	Deprecated. No available replacement.
UploadFile	Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room.
DemistoLogsBundle	Deprecated. No available replacement.

Integrations

Name	Description
Core REST API	Use Core REST APIs.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

1.3.76 - 4049458 (July 3, 2025)

Documentation and metadata improvements.

Related pull requests:
- 40478

Download

1.3.75 - R3980324 (June 26, 2025)

Integrations

Core REST API

Improved the documentation for the core-api-file-attachment-delete and core-api-file-delete commands.

Related pull requests:
- 40314

Download

1.3.74 - 3648597 (June 5, 2025)

Scripts

UploadFile

Updated the UploadFile script to support alerts & issues.

Related pull requests:
- 40178

Download

1.3.73 - 3526238 (May 25, 2025)

Scripts

GetIncidentTasks

Updated the Docker image to: demisto/python3:3.12.8.3296088.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.12.8.3296088.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.12.8.3296088.

UploadFile

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 39931

Download

1.3.72 - 3459286 (May 19, 2025)

Integrations

Core REST API

Metadata and documentation improvements.

Related pull requests:
- 39911

Download

1.3.71 - R3444919 (May 18, 2025)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 39558

Download

1.3.70 - R3079234 (April 7, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 39427

Download

1.3.69 - 3042633 (April 2, 2025)

Scripts

UploadFile

Metadata and documentation improvements.

GetIncidentTasks

Metadata and documentation improvements.

GetTasksWithSections

Metadata and documentation improvements.

SetIRProceduresMarkdown

Metadata and documentation improvements.

Related pull requests:
- 39089

Download

1.3.68 - R2988527 (March 26, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.3.67 - 2691641 (March 9, 2025)

Integrations

Core REST API

Added an internal timeout to the API calls.
Reordered the integrations' parameters by sections. Relevant for XSIAM and XSOAR 8.1 and above.

Related pull requests:
- 38534

Download

1.3.66 - 2533879 (February 20, 2025)

Integrations

Core REST API

Breaking Changes: The fields argument has been removed from the core-delete-incidents command. The function now exclusively returns the relevant fields: 'totalDeleted', 'notUpdated', and 'total'.
Updated the core-delete-incidents command to eliminate the fields argument.

Related pull requests:
- 38609

Download

1.3.65 - 2040490 (January 22, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 38251

Download

1.3.64 - 1801199 (December 12, 2024)

Integrations

Core REST API

Internal code improvements

Demisto REST API (Deprecated)

Internal code improvements

Related pull requests:
- 37273

Download

1.3.63 - R1681986 (November 21, 2024)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.11.10.115186.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.11.10.115186.

GetIncidentTasks

Updated the Docker image to: demisto/python3:3.11.10.115186.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37147
- 37137
- 37136
- 37140
- 37138
- 37139

Download

1.3.62 - 1615839 (November 10, 2024)

Scripts

DemistoUploadFile

Documentation and metadata improvements.

Related pull requests:
- 37129

Download

1.3.61 - 1475337 (October 7, 2024)

Scripts

UploadFile

Fixed the error returned when the script fails, to be more informative.

Related pull requests:
- 36410

Download

1.3.60 - 1375138 (September 12, 2024)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 36244

Download

1.3.59 - 1363131 (September 9, 2024)

Integrations

Core REST API

Fixed an issue where the core-api-file-upload command returned a timeout error.

Related pull requests:
- 36006

Download

1.3.58 - R1285984 (August 19, 2024)

Integrations

Core REST API

Fixed an issue where the core-api-install-packs command reached a timeout when installing large packs.

Related pull requests:
- 35265

Download

1.3.57 - 1155254 (July 7, 2024)

Integrations

Core REST API

Added logs for debugging purposes.

Related pull requests:
- 35277

Download

1.3.56 - 1082615 (June 10, 2024)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 34804

Download

1.3.55 - 1008139 (May 9, 2024)

Integrations

Core REST API

Fixed an issue where the core-api-install-packs command returns an incorrect message when it fails to install a pack.

Related pull requests:
- 34292

Download

1.3.54 - 998827 (May 6, 2024)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 34212

Download

1.3.53 - 995825 (May 5, 2024)

Integrations

Core REST API

Fixed an issue in which the core-api-install-packs command reached a timeout when installing large packs.

Related pull requests:
- 34170

Download

1.3.52 - 870683 (March 5, 2024)

Integrations

Core REST API

Fixed human readable message in the core-api-file-check command.

Related pull requests:
- 33230

Download

1.3.51 - 865088 (March 3, 2024)

Scripts

UploadFile

Added the functionality for the using argument, to use a specific instance to execute the automation.

Related pull requests:
- 33202

Download

1.3.50 - 816242 (February 8, 2024)

Integrations

Core REST API

Fixed an error in core-api-file-delete script where context data was converted from dict into a list.

Related pull requests:
- 32722

Download

1.3.49 - 803390 (February 4, 2024)

Scripts

GetIncidentTasksByState

Deprecated. Use the GetIncidentTasks script instead.

New: GetIncidentTasks

New: Get all tasks for a specific incident by the given state, name and/or tag. (Available from Cortex XSOAR 6.10.0).

Related pull requests:
- 32607
- 32384

Download

1.3.48 - 793334 (January 30, 2024)

Scripts

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.10.13.86272.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32408

Download

1.3.47 - 790822 (January 29, 2024)

Scripts

UploadFile

Added support for running on multiple entry IDs by using the isArray: true configuration.
Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32412

Download

1.3.46 - 783533 (January 24, 2024)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 32396

Download

1.3.45 - 778227 (January 22, 2024)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 32331

Download

1.3.44 - 778086 (January 22, 2024)

Integrations

Core REST API

Improved documentation related to API keys and URL

Related pull requests:
- 31930

Download

1.3.43 - 7220184 (December 20, 2023)

Integrations

Core REST API

Fixed an issue where deleting the default marketplace_url value in the integration settings resulted in usage of a broken marketplace url.

Related pull requests:
- 31067

Download

1.3.42 - 7216131 (December 20, 2023)

Integrations

Core REST API

Command demisto-api-multipart is deprecated. Use core-api-multipart instead.
Command demisto-api-post is deprecated. Use core-api-post instead.
Command demisto-api-put is deprecated. Use core-api-put instead.
Command demisto-api-get is deprecated. Use core-api-get instead.
Command demisto-api-delete is deprecated. Use core-api-delete instead.
Command demisto-api-download is deprecated. Use core-api-download instead.
Command demisto-api-install-packs is deprecated. Use core-api-install-packs instead.
Command demisto-delete-incidents is deprecated. Use core-delete-incidents instead.

Scripts

DemistoUploadFile

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoGetIncidentTasksByState

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoUploadFileToIncident

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python:2.7.18.76921.

DemistoLinkIncidents

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoLeaveAllInvestigations

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoUploadFileV2

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

DemistoLogsBundle

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

UploadFile

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

DemistoSendInvite

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoCreateList

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

GetIncidentTasksByState

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

Related pull requests:
- 31388

Download

1.3.41 - 7142940 (December 12, 2023)

Scripts

GetIncidentTasksByState

Fixed an issue where the script failed in XSOAR version 6.9.0

Related pull requests:
- 31414

Download

1.3.40 - 7066068 (December 4, 2023)

Integrations

Core REST API

Improved the description and documentation around the uri input arguments.

Related pull requests:
- 31262

Download

1.3.39 - 7033788 (November 30, 2023)

Integrations

Core REST API

Added support for XSIAM api endpoints.

Related pull requests:
- 31226

Download

1.3.38 - 6965450 (November 22, 2023)

Scripts

GetIncidentTasksByState

Added support for retrieving tasks that are in an error state due to failures in playbook loops.

Related pull requests:
- 31012

Download

1.3.37 - 6389447 (September 21, 2023)

Integrations

Core REST API

Fixed an issue where the integration would not work with XSOAR endpoints that do not start with the /xsoar prefix.

Related pull requests:
- 29781

Download

1.3.36 - 6285754 (September 10, 2023)

DemistoRESTAPI

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 29466

Download

1.3.35 - 6253250 (September 6, 2023)

Integrations

Core REST API

Fixed an issue where fileDeleteCommand deleted all context data of File key.

Related pull requests:
- 27960

Download

1.3.34 - 5969979 (August 6, 2023)

DemistoRESTAPI

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 28753

Download

1.3.33 - 5940472 (August 2, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.12.66339.

Related pull requests:
- 28679

Download

1.3.32 - R5866730 (July 25, 2023)

Scripts

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.10.12.63474.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 28221

Download

1.3.31 - 5782177 (July 16, 2023)

Integrations

Core REST API

Fixed an issue where the Test button failed on authentication.

Related pull requests:
- 28185

Download

1.3.30 - 5740912 (July 11, 2023)

Integrations

Core REST API

Improved the test-module command to validate the response content.

Demisto REST API (Deprecated)

Improved the test-module command to validate the response content.

Related pull requests:
- 27904

Download

1.3.29 - R5692327 (July 5, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 27865

Download

1.3.28 - 5560707 (June 18, 2023)

Integrations

Core REST API

Added the following commands:

core-api-file-upload
core-api-file-delete
core-api-file-attachment-delete
core-api-file-check

Related pull requests:
- 26455

Download

1.3.27 - 5501210 (June 11, 2023)

Integrations

Core REST API

Fixed an issue where the '/xsoar' suffix was not added to the URL parameter in some of the XSOAR 8.x machines.

Related pull requests:
- 27355

Download

1.3.26 - 5450895 (June 5, 2023)

Integrations

Core REST API

Fixed an issue where (in XSOAR 6.x) the integration added a "/xsoar" suffix to the URL when API Key ID was provided.

Related pull requests:
- 27227

Download

1.3.25 - 5304600 (May 19, 2023)

Scripts

DemistoUploadFileV2

Fixed typo in the script description, the right replacement for this script is UploadFile and not UploadFileV2 as was stated before.

Related pull requests:
- 26635

Download

1.3.24 - 5295992 (May 18, 2023)

Integrations

Core REST API

Description updates.

Related pull requests:
- 26305

Download

1.3.23 - 5289877 (May 17, 2023)

Scripts

New: GetIncidentTasksByState

Gets all tasks for a specific incident by a given state. Replaces the deprecated DemistoGetIncidentTasksByState script.

Related pull requests:
- 26468

Download

1.3.22 - R5170573 (May 2, 2023)

Integrations

Core REST API

Added the fields argument to core-delete-incidents command.

Related pull requests:
- 26150

Download

1.3.21 - 5065566 (April 18, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.11.54132.

Related pull requests:
- 25934

Download

1.3.20 - 4872060 (March 22, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.10.49934.

Related pull requests:
- 25383

Download

1.3.19 - 4746941 (March 5, 2023)

Integrations

Core REST API

Updated the Base marketplace url parameter's default value.

Demisto REST API (Deprecated)

Updated the Base marketplace url parameter's default value.

Related pull requests:
- 25063

Download

1.3.18 - 4718798 (March 1, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.10.48392.

Related pull requests:
- 24956

Download

1.3.17 - R4646022 (February 19, 2023)

Integrations

Demisto REST API (Deprecated)

Updated url parameter default value.

Core REST API

Fixed an issue where "/xsoar" was concatenated to the url parameter regardless of whether the url contained that suffix.
Description and README improvements.

Related pull requests:
- 24424

Download

1.3.16 - R4560457 (February 8, 2023)

Integrations

Core REST API

Documentation fixes.

Related pull requests:
- 24176

Download

1.3.15 - R4494864 (January 30, 2023)

Integrations

Demisto REST API (Deprecated)

Deprecated. Use the Core REST API integration instead.

Core REST API

Now available on the XSOAR platform.
Added a new parameter Authentication method. Supports authentication using a "Standard" API Key or an "Advanced" API key (relevant only for Cortex XSIAM and XSOAR 8.0.0 and above).
Added the core-api-install-packs command.

Related pull requests:
- 23804

Download

1.3.14 - 4376356 (January 11, 2023)

Scripts

DemistoCreateList

Updated the script to support XSOAR only.

Related pull requests:
- 23208

Download

1.3.12 - R4372591 (January 11, 2023)

Scripts

New: UploadFile

Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room. (Available from Cortex XSOAR 6.5.0).

DemistoUploadFileV2

Deprecated. Use UploadFile instead.

Related pull requests:
- 23429

Download

1.3.11 - R4366177 (January 10, 2023)

Scripts

DemistoLeaveAllInvestigations

Deprecated. No available replacement.

DemistoGetIncidentTasksByState

Deprecated. No available replacement.

DemistoLinkIncidents

Deprecated. No available replacement.

DemistoLogsBundle

Deprecated. No available replacement.

DemistoSendInvite

Deprecated. No available replacement.

Related pull requests:
- 23427

Download

1.3.6 - 4247670 (December 19, 2022)

Integrations

Demisto REST API

Added the entry_id argument to the demisto-api-install-packs command.

Related pull requests:
- 22991

Download

1.3.5 - 4244055 (December 19, 2022)

Integrations

Demisto REST API

Added the functionality of use-tenant parameter to the demisto-api-multipart command.
Fixed an issue where in some cases the URL was incorrect.

Related pull requests:
- 23045

Download

1.3.4 - 4179430 (December 8, 2022)

Integrations

Demisto REST API

Fixed an issue where the API calls were sent to the master tenant regardless of the tenant the user was using.
Added the Use tenant parameter, which allows API calls to be sent to the current tenant instead of the master tenant.

Related pull requests:
- 22659

Download

1.3.3 - 4172596 (December 8, 2022)

Integrations

Demisto REST API

Added the demisto-api-install-packs command.
Added the Base marketplace url parameter.

Related pull requests:
- 22634

Download

1.3.2 - R4152557 (December 4, 2022)

Scripts

DemistoLinkIncidents

Removed from XSIAM

Related pull requests:
- 22348

Download

1.3.1 - R3670044 (September 16, 2022)

Integrations

New: Core REST API

Use Core REST APIs (Available for Cortex XSIAM).

Scripts

DemistoUploadFileV2

Updated the Docker image to: demisto/python3:3.10.6.33415.

Related pull requests:
- 17638

Download

1.3.0 - 3134111 (June 22, 2022)

Scripts

SetIRProceduresMarkdown

Improved implementation by removing a dependency on the integration instance. This script may now be used independently.
Updated the Docker image to: demisto/python3:3.10.4.30607.

GetTasksWithSections

Improved implementation by removing a dependency on the integration instance. This script may now be used independently.
Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19483

Download

1.2.7 - 3118515 (June 19, 2022)

Scripts

SetIRProceduresMarkdown

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.4.30607.

GetTasksWithSections

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19507

Download

1.3.76 - 4049458 (July 3, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 40478

Download

1.3.75 - R3980324 (June 26, 2025)

Integrations

Core REST API

Improved the documentation for the core-api-file-attachment-delete and core-api-file-delete commands.

Related pull requests:
- 40314

Download

1.3.74 - 3648597 (June 5, 2025)

Scripts

UploadFile

Updated the UploadFile script to support alerts & issues.

Related pull requests:
- 40178

Download

1.3.73 - 3526238 (May 25, 2025)

Scripts

GetIncidentTasks

Updated the Docker image to: demisto/python3:3.12.8.3296088.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.12.8.3296088.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.12.8.3296088.

UploadFile

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 39931

Download

1.3.72 - 3466353 (May 20, 2025)

Integrations

Core REST API

Metadata and documentation improvements.

Related pull requests:
- 39911

Download

1.3.71 - R3444919 (May 18, 2025)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 39558

Download

1.3.70 - R3079234 (April 7, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 39427

Download

1.3.69 - 3042633 (April 2, 2025)

Scripts

UploadFile

Metadata and documentation improvements.

GetIncidentTasks

Metadata and documentation improvements.

GetTasksWithSections

Metadata and documentation improvements.

SetIRProceduresMarkdown

Metadata and documentation improvements.

Related pull requests:
- 39089

Download

1.3.68 - R2988527 (March 26, 2025)

Cortex REST API

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.3.67 - 2691641 (March 9, 2025)

Integrations

Core REST API

Added an internal timeout to the API calls.
Reordered the integrations' parameters by sections. Relevant for XSIAM and XSOAR 8.1 and above.

Related pull requests:
- 38534

Download

1.3.66 - 2533879 (February 20, 2025)

Integrations

Core REST API

Breaking Changes: The fields argument has been removed from the core-delete-incidents command. The function now exclusively returns the relevant fields: 'totalDeleted', 'notUpdated', and 'total'.
Updated the core-delete-incidents command to eliminate the fields argument.

Related pull requests:
- 38609

Download

1.3.65 - 2040490 (January 22, 2025)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 38251

Download

1.3.64 - 1801199 (December 12, 2024)

Integrations

Core REST API

Internal code improvements

Related pull requests:
- 37273

Download

1.3.63 - R1681986 (November 21, 2024)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.11.10.115186.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.11.10.115186.

GetIncidentTasks

Updated the Docker image to: demisto/python3:3.11.10.115186.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37147
- 37137
- 37136
- 37140
- 37138
- 37139

Download

1.3.62 - 1615839 (November 10, 2024)

Scripts

DemistoUploadFile

Documentation and metadata improvements.

Related pull requests:
- 37129

Download

1.3.61 - 1475337 (October 7, 2024)

Scripts

UploadFile

Fixed the error returned when the script fails, to be more informative.

Related pull requests:
- 36410

Download

1.3.60 - 1375138 (September 12, 2024)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 36244

Download

1.3.59 - 1363131 (September 9, 2024)

Integrations

Core REST API

Fixed an issue where the core-api-file-upload command returned a timeout error.

Related pull requests:
- 36006

Download

1.3.58 - R1285984 (August 19, 2024)

Integrations

Core REST API

Fixed an issue where the core-api-install-packs command reached a timeout when installing large packs.

Related pull requests:
- 35265

Download

1.3.57 - 1155254 (July 7, 2024)

Integrations

Core REST API

Added logs for debugging purposes.

Related pull requests:
- 35277

Download

1.3.56 - 1082615 (June 10, 2024)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 34804

Download

1.3.55 - 1008139 (May 9, 2024)

Integrations

Core REST API

Fixed an issue where the core-api-install-packs command returns an incorrect message when it fails to install a pack.

Related pull requests:
- 34292

Download

1.3.54 - 998827 (May 6, 2024)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 34212

Download

1.3.53 - 995825 (May 5, 2024)

Integrations

Core REST API

Fixed an issue in which the core-api-install-packs command reached a timeout when installing large packs.

Related pull requests:
- 34170

Download

1.3.52 - 870683 (March 5, 2024)

Integrations

Core REST API

Fixed human readable message in the core-api-file-check command.

Related pull requests:
- 33230

Download

1.3.51 - 865088 (March 3, 2024)

Scripts

UploadFile

Added the functionality for the using argument, to use a specific instance to execute the automation.

Related pull requests:
- 33202

Download

1.3.50 - 816242 (February 8, 2024)

Integrations

Core REST API

Fixed an error in core-api-file-delete script where context data was converted from dict into a list.

Related pull requests:
- 32722

Download

1.3.49 - 803390 (February 4, 2024)

Scripts

GetIncidentTasksByState

Deprecated. Use the GetIncidentTasks script instead.

New: GetIncidentTasks

New: Get all tasks for a specific incident by the given state, name and/or tag. (Available from Cortex XSOAR 6.10.0).

Related pull requests:
- 32607
- 32384

Download

1.3.48 - 793334 (January 30, 2024)

Scripts

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.10.13.86272.

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32408

Download

1.3.47 - 790822 (January 29, 2024)

Scripts

UploadFile

Added support for running on multiple entry IDs by using the isArray: true configuration.
Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32412

Download

1.3.46 - 783533 (January 24, 2024)

Integrations

Core REST API

Documentation and metadata improvements.

Related pull requests:
- 32396

Download

1.3.45 - 778227 (January 22, 2024)

Cortex REST API

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 32331

Download

1.3.44 - 778086 (January 22, 2024)

Integrations

Core REST API

Improved documentation related to API keys and URL

Related pull requests:
- 31930

Download

1.3.43 - 7220184 (December 20, 2023)

Integrations

Core REST API

Fixed an issue where deleting the default marketplace_url value in the integration settings resulted in usage of a broken marketplace url.

Related pull requests:
- 31067

Download

1.3.42 - 7216131 (December 20, 2023)

Integrations

Core REST API

Command demisto-api-multipart is deprecated. Use core-api-multipart instead.
Command demisto-api-post is deprecated. Use core-api-post instead.
Command demisto-api-put is deprecated. Use core-api-put instead.
Command demisto-api-get is deprecated. Use core-api-get instead.
Command demisto-api-delete is deprecated. Use core-api-delete instead.
Command demisto-api-download is deprecated. Use core-api-download instead.
Command demisto-api-install-packs is deprecated. Use core-api-install-packs instead.
Command demisto-delete-incidents is deprecated. Use core-delete-incidents instead.

Scripts

DemistoUploadFile

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoGetIncidentTasksByState

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoUploadFileToIncident

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python:2.7.18.76921.

DemistoLeaveAllInvestigations

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

DemistoUploadFileV2

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

DemistoLogsBundle

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

UploadFile

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

DemistoSendInvite

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

GetIncidentTasksByState

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

Related pull requests:
- 31388

Download

1.3.41 - 7142940 (December 12, 2023)

Scripts

GetIncidentTasksByState

Fixed an issue where the script failed in XSOAR version 6.9.0

Related pull requests:
- 31414

Download

1.3.40 - 7066068 (December 4, 2023)

Integrations

Core REST API

Improved the description and documentation around the uri input arguments.

Related pull requests:
- 31262

Download

1.3.39 - 7033788 (November 30, 2023)

Integrations

Core REST API

Added support for XSIAM api endpoints.

Related pull requests:
- 31226

Download

1.3.38 - 6965450 (November 22, 2023)

Scripts

GetIncidentTasksByState

Added support for retrieving tasks that are in an error state due to failures in playbook loops.

Related pull requests:
- 31012

Download

1.3.37 - 6389447 (September 21, 2023)

Integrations

Core REST API

Fixed an issue where the integration would not work with XSOAR endpoints that do not start with the /xsoar prefix.

Related pull requests:
- 29781

Download

1.3.36 - 6285754 (September 10, 2023)

DemistoRESTAPI

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 29466

Download

1.3.35 - 6253250 (September 6, 2023)

Integrations

Core REST API

Fixed an issue where fileDeleteCommand deleted all context data of File key.

Related pull requests:
- 27960

Download

1.3.34 - 5969979 (August 6, 2023)

DemistoRESTAPI

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 28753

Download

1.3.33 - 5940472 (August 2, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.12.66339.

Related pull requests:
- 28679

Download

1.3.32 - R5866730 (July 25, 2023)

Scripts

GetTasksWithSections

Updated the Docker image to: demisto/python3:3.10.12.63474.

SetIRProceduresMarkdown

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 28221

Download

1.3.31 - 5786478 (July 17, 2023)

Integrations

Core REST API

Fixed an issue where the Test button failed on authentication.

Related pull requests:
- 28185

Download

1.3.30 - 5740480 (July 11, 2023)

Integrations

Core REST API

Improved the test-module command to validate the response content.

Related pull requests:
- 27904

Download

1.3.29 - 5692327 (July 5, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 27865

Download

1.3.28 - 5560707 (June 18, 2023)

Integrations

Core REST API

Added the following commands:

core-api-file-upload
core-api-file-delete
core-api-file-attachment-delete
core-api-file-check

Related pull requests:
- 26455

Download

1.3.27 - 5501210 (June 11, 2023)

Integrations

Core REST API

Fixed an issue where the '/xsoar' suffix was not added to the URL parameter in some of the XSOAR 8.x machines.

Related pull requests:
- 27355

Download

1.3.26 - 5450895 (June 5, 2023)

Integrations

Core REST API

Fixed an issue where (in XSOAR 6.x) the integration added a "/xsoar" suffix to the URL when API Key ID was provided.

Related pull requests:
- 27227

Download

1.3.25 - 5304600 (May 19, 2023)

Scripts

DemistoUploadFileV2

Fixed typo in the script description, the right replacement for this script is UploadFile and not UploadFileV2 as was stated before.

Related pull requests:
- 26635

Download

1.3.24 - 5295992 (May 18, 2023)

Integrations

Core REST API

Description updates.

Scripts

New: GetIncidentTasksByState

Gets all tasks for a specific incident by a given state. Replaces the deprecated DemistoGetIncidentTasksByState script.

Related pull requests:
- 26305

Download

1.3.22 - R5170573 (May 2, 2023)

Integrations

Core REST API

Added the fields argument to core-delete-incidents command.

Related pull requests:
- 26150

Download

1.3.21 - 5065566 (April 18, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.11.54132.

Related pull requests:
- 25934

Download

1.3.20 - 4872060 (March 22, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.10.49934.

Related pull requests:
- 25383

Download

1.3.19 - 4746941 (March 5, 2023)

Integrations

Core REST API

Updated the Base marketplace url parameter's default value.

Related pull requests:
- 25063

Download

1.3.18 - 4718798 (March 1, 2023)

Scripts

UploadFile

Updated the Docker image to: demisto/python3:3.10.10.48392.

Related pull requests:
- 24956

Download

1.3.17 - R4710726 (February 28, 2023)

Integrations

Core REST API

Fixed an issue where "/xsoar" was concatenated to the url parameter regardless of whether the url contained that suffix.
Description and README improvements.

Related pull requests:
- 24424

Download

1.3.16 - 4506096 (January 31, 2023)

Integrations

Core REST API

Documentation fixes.

Related pull requests:
- 24176

Download

1.3.15 - 4434031 (January 20, 2023)

Integrations

Core REST API

Now available on the XSOAR platform.
Added a new parameter Authentication method. Supports authentication using a "Standard" API Key or an "Advanced" API key (relevant only for Cortex XSIAM and XSOAR 8.0.0 and above).
Added the core-api-install-packs command.

Related pull requests:
- 23804

Download

1.3.14 - 4376356 (January 11, 2023)

Scripts

New: UploadFile

Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room. (Available from Cortex XSOAR 6.5.0).

DemistoUploadFileV2

Deprecated. Use UploadFile instead.

Related pull requests:
- 23208

Download

1.3.11 - R4361094 (January 9, 2023)

Scripts

DemistoLeaveAllInvestigations

Deprecated. No available replacement.

DemistoGetIncidentTasksByState

Deprecated. No available replacement.

DemistoLogsBundle

Deprecated. No available replacement.

DemistoSendInvite

Deprecated. No available replacement.

Related pull requests:
- 23427

Download

1.3.6 - 4246715 (December 19, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 22991

Download

1.3.5 - 4244055 (December 19, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 23045

Download

1.3.4 - 4179430 (December 8, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 22659

Download

1.3.3 - 4172596 (December 7, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 22634

Download

1.3.2 - R4152557 (December 4, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 22348

Download

1.3.1 - R3670044 (September 16, 2022)

Integrations

New: Core REST API

Use Core REST APIs (Available for Cortex XSIAM).

Scripts

DemistoUploadFileV2

Updated the Docker image to: demisto/python3:3.10.6.33415.

Related pull requests:
- 17638

Download

1.3.0 - 3134111 (June 22, 2022)

Scripts

SetIRProceduresMarkdown

Improved implementation by removing a dependency on the integration instance. This script may now be used independently.
Updated the Docker image to: demisto/python3:3.10.4.30607.

GetTasksWithSections

Improved implementation by removing a dependency on the integration instance. This script may now be used independently.
Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19483

Download

1.2.7 - 3118515 (June 19, 2022)

Scripts

SetIRProceduresMarkdown

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.4.30607.

GetTasksWithSections

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19507

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 15, 2020
Last Release	July 3, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.