Cortex REST API

Details
Content
Dependencies
Version History

Use Demisto REST APIs

Automations

Name	Description
DemistoLinkIncidents	Link two or more incidents
DemistoCreateList	Create a new list
DemistoUploadFileV2	Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room.
DemistoUploadFile	Deprecated. Use DemistoUploadFileV2 instead.
DemistoSendInvite	Send invitation to join Demisto
DemistoUploadFileToIncident	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this incident to the specified incident. The file is uploaded as an attachment to the specified incident’s Summary page, and recorded as an entry in the War Room.
SetIRProceduresMarkdown	Creates markdown tables based on information from the GetTasksWithSection command.
DemistoLogsBundle	Gets Demisto Log Bundle to war room
GetTasksWithSections	Groups all tasks for a specific incident according to the task headers (titles).
DemistoGetIncidentTasksByState	Get all tasks for specific incident by the given state.
DemistoLeaveAllInvestigations	Leaves all investigations that the user is part of (clears out the incidents in the left pane). Incidents that the user owns will remain in the left pane. Requires Demisto REST API integration to be configured for the server.

Integrations

Name	Description
Demisto REST API	Use Demisto REST APIs
Core REST API	Use Core REST APIs

Automations

Name	Description
DemistoLinkIncidents	Link two or more incidents
DemistoCreateList	Create a new list
DemistoUploadFileV2	Copies a file from this incident to the specified incident. The file is recorded as an entry in the specified incident’s War Room.
DemistoUploadFile	Deprecated. Use DemistoUploadFileV2 instead.
DemistoSendInvite	Send invitation to join Demisto
DemistoUploadFileToIncident	Deprecated. Use the DemistoUploadFileV2 script instead. Copies a file from this incident to the specified incident. The file is uploaded as an attachment to the specified incident’s Summary page, and recorded as an entry in the War Room.
SetIRProceduresMarkdown	Creates markdown tables based on information from the GetTasksWithSection command.
DemistoLogsBundle	Gets Demisto Log Bundle to war room
GetTasksWithSections	Groups all tasks for a specific incident according to the task headers (titles).
DemistoGetIncidentTasksByState	Get all tasks for specific incident by the given state.
DemistoLeaveAllInvestigations	Leaves all investigations that the user is part of (clears out the incidents in the left pane). Incidents that the user owns will remain in the left pane. Requires Demisto REST API integration to be configured for the server.

Integrations

Name	Description
Demisto REST API	Use Demisto REST APIs
Core REST API	Use Core REST APIs

Pack Name	Pack By
Base	By: Cortex XSOAR

1.3.1 - R3670044 (September 16, 2022)

Integrations

New: Core REST API

Use Core REST APIs (Available for Cortex XSIAM).

Scripts

DemistoUploadFileV2

Updated the Docker image to: demisto/python3:3.10.6.33415.

Related pull requests:
- 17638

Download

1.3.0 - 3134111 (June 22, 2022)

Scripts

SetIRProceduresMarkdown

Improved implementation by removing a dependency on the integration instance. This script may now be used independently.
Updated the Docker image to: demisto/python3:3.10.4.30607.

GetTasksWithSections

Improved implementation by removing a dependency on the integration instance. This script may now be used independently.
Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19483

Download

1.2.7 - 3118515 (June 19, 2022)

Scripts

SetIRProceduresMarkdown

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.4.30607.

GetTasksWithSections

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19507

Download

1.2.6 - 3006310 (May 30, 2022)

Integrations

Demisto REST API

Added the fields argument to the demisto-delete-incidents command. Use this argument to get only relevant fields.

Related pull requests:
- 19221

Download

1.2.5 - 2507216 (March 3, 2022)

Scripts

DemistoUploadFileV2

Added the target argument to set the file target as a war room entry or an incident attachment. Default is "war room entry".

Download

1.2.4 - 2475198 (February 25, 2022)

Integrations

Demisto REST API

Enhanced the API Key integration parameter to support credentials fetching object.

Download

1.2.3 - 2183875 (December 30, 2021)

Integrations

Demisto REST API

Fixed an issue where the demisto-api-post command failed to execute.

Download

1.2.2 - R2164121 (December 26, 2021)

Integrations

Demisto REST API

Fixed an issue where the demisto-api-multipart command did not send the request body properly.

Scripts

DemistoUploadFileToIncident

Deprecated. Use the DemistoUploadFileV2 script instead.

Download

1.2.1 - 1999336 (November 23, 2021)

Integrations

Demisto REST API

Fixed an issue where the demisto-api-multipart command did not send the request body properly.

Download

1.2.0 - 1882648 (November 2, 2021)

Scripts

New: GetTasksWithSections

Retrieves incident task data and groups tasks by task headers (titles) in Task Details and Context Data. (Available from Cortex XSOAR 6.0.0).

New: SetIRProceduresMarkdown

Creates the following four markdown tables in Task Details based on information from the GetTasksWithSection command (Available from Cortex XSOAR 6.0.0).
- Threat Hunting
- Mitigation
- Remediation
- Eradication

Download

1.1.7 - 7740378 (September 23, 2021)

Scripts

DemistoUploadFileV2

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

1.1.6 - 7567740 (September 12, 2021)

Scripts

DemistoUploadFileToIncident

Updated the Docker image to: demisto/python:2.7.18.24066.

Download

1.1.5 - 398245 (July 15, 2021)

Scripts

DemistoUploadFileToIncident

Updated the Docker image to: demisto/python:2.7.18.20958.

Download

1.1.4 - 388541 (June 22, 2021)

Scripts

DemistoUploadFileV2

Upgraded the Docker image to: demisto/python3:3.9.5.21272.

Download

1.1.3 - 379915 (June 7, 2021)

Scripts

DemistoUploadFile

Documentation and metadata improvements.

Download

1.1.2 - R264879 (November 9, 2020)

Integrations

Demisto REST API

Maintenance and stability enhancements.

Download

1.1.1 - R124496 (September 23, 2020)

Scripts

DemistoUploadFile

Maintenance and stability enhancements

Download

1.1.0 - 65315 (July 15, 2020)

Scripts

DemistoUploadFile
Deprecated the DemistoUploadFile script. Please use DemistoUploadFileV2 instead.

Download

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 15, 2020
Last Release	September 16, 2022

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.