Skip to main content

Developer Tools

Details
Content
Dependencies
Version History

Download With Dependencies

Basic tools for content development.

Developer Tools Pack

Basic tools for content development, mostly for internal use.

Developer Tools Pack

Basic tools for content development, mostly for internal use.

Automations

Name	Description
SetContext	Deprecated. No available replacement. Sets key/value pair in incident's context.
Hey	Use rakyll/hey to test a web application with a load of requests.
VerifyIntegrationHealth	Checks for existing errors in a given integration.
FetchFromInstance	Execute FetchIncident for a given instance
WaitAndCompleteTask	Wait and complete tasks by given status. Used for test playbooks.
VerifyHumanReadableContains	Verify given entry contains a string
StringContains	Deprecated. No available replacement. Checks whether substring is within string. Returns - yes - string contains substring. no - string does not contain substring. If stringSeperator is provided, the substring will be split using the separator, and each item will be checked. If one of the items will be found in the string, the srcipt will return yes. This script is deprecated. The StringContainsArray filter implements the exact functionality.
WhileLoop	Deprecated. No available replacement. While loop is utility script, to do while loops on specific commands or scripts, it will allow you to loop over until some condition is fulfilled (${keyToWatch} == value). Please make sure timeout of the script also sufficient for the loop.
VerifyContext	Deprecated. Use playbook filters instead. Verifies path in context - Verifies path existence - If matching object is an array - verify fields exists in each of the objects in the array - If matching object is not an array - verify fields exists in matching object - if 'expectedValue' is given - ensure that the given value is equal to the context path
VerifyContextFields	Deprecated. Use playbook filters instead. Verify fields are in context.
VerifyEnoughIncidents	Check whether a given query returns enough incidents.
VerifyObjectFieldsList	Verifies that a given object includes all the given fields.
VerifyEnoughIndicators	Returns, whether there're, are enough indicators in the system.
GetServerInfo	Get version and URL of current XSOAR server.
GetInstanceName	Given an integration name, returns the instance name.
CompareIndicators	Find the differences between two indicators lists.

Dashboards

Name	Description
Metrics Test Cases Validation

Indicator Fields

Name	Description
Developer Tools param1
Developer Tools param2

Integrations

Name	Description
XSOAR Powershell Testing (Community Contribution)	Powershell Integration for testing that Powershell support is working as expected.
APIMetricsValidation (Community Contribution)	This integration runs through all scenarios as defined in the API Metrics expected results guide.
CustomIndicatorDemo (Community Contribution)	This is a demo integration that demonstrates the usage of the CustomIndicator helper class.
Create-Mock-Feed-Relationships (Community Contribution)	Mock Feed.
Create Test Incidents (Community Contribution)	CreateIncidents fetches custom incidents that are created manually.

Indicator Types

Name	Description
MyCustomIndicator

Automations

Name	Description
VerifyIntegrationHealth	Checks for existing errors in a given integration.
WaitAndCompleteTask	Wait and complete tasks by given status. Used for test playbooks.
VerifyHumanReadableContains	Verify given entry contains a string
VerifyContext	Deprecated. Use playbook filters instead. Verifies path in context - Verifies path existence - If matching object is an array - verify fields exists in each of the objects in the array - If matching object is not an array - verify fields exists in matching object - if 'expectedValue' is given - ensure that the given value is equal to the context path
StringContains	Deprecated. No available replacement. Checks whether substring is within string. Returns - yes - string contains substring. no - string does not contain substring. If stringSeperator is provided, the substring will be split using the separator, and each item will be checked. If one of the items will be found in the string, the srcipt will return yes. This script is deprecated. The StringContainsArray filter implements the exact functionality.
Hey	Use rakyll/hey to test a web application with a load of requests.
VerifyEnoughIncidents	Check whether a given query returns enough incidents.
VerifyEnoughAlerts	Check whether a given query returns enough alerts.
FetchFromInstance	Execute FetchIncident for a given instance
CompareIndicators	Find the differences between two indicators lists.
SetContext	Deprecated. No available replacement. Sets key/value pair in incident's context.
GetInstanceName	Given an integration name, returns the instance name.
VerifyObjectFieldsList	Verifies that a given object includes all the given fields.
VerifyEnoughIndicators	Returns, whether there're, are enough indicators in the system.
VerifyContextFields	Deprecated. Use playbook filters instead. Verify fields are in context.
WhileLoop	Deprecated. No available replacement. While loop is utility script, to do while loops on specific commands or scripts, it will allow you to loop over until some condition is fulfilled (${keyToWatch} == value). Please make sure timeout of the script also sufficient for the loop.
GetServerInfo	Get version and URL of current XSOAR server.

Indicator Fields

Name	Description
Developer Tools param1
Developer Tools param2

Integrations

Name	Description
Create Test Incidents (Community Contribution)	CreateIncidents fetches custom incidents that are created manually.
XSOAR Powershell Testing (Community Contribution)	Powershell Integration for testing that Powershell support is working as expected.
CustomIndicatorDemo (Community Contribution)	This is a demo integration that demonstrates the usage of the CustomIndicator helper class.
Create-Mock-Feed-Relationships (Community Contribution)	Mock Feed.
APIMetricsValidation (Community Contribution)	This integration runs through all scenarios as defined in the API Metrics expected results guide.

Indicator Types

Name	Description
MyCustomIndicator

Required Content Packs (5)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Common Types	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
GenericSQL	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (5)

Pack Name	Pack By
Cortex REST API	By: Cortex XSOAR
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Common Types	By: Cortex XSOAR
GenericSQL	By: Cortex XSOAR

1.3.30 - 3042633 (April 2, 2025)

Integrations

Create-Mock-Feed-Relationships

Metadata and documentation improvements.

APIMetricsValidation

Metadata and documentation improvements.

Create Test Incidents

Metadata and documentation improvements.

CustomIndicatorDemo

Metadata and documentation improvements.

Scripts

VerifyEnoughIndicators

Metadata and documentation improvements.

CompareIndicators

Metadata and documentation improvements.

VerifyObjectFieldsList

Metadata and documentation improvements.

FetchFromInstance

Metadata and documentation improvements.

GetInstanceName

Metadata and documentation improvements.

WaitAndCompleteTask

Metadata and documentation improvements.

VerifyEnoughIncidents

Metadata and documentation improvements.

GetServerInfo

Metadata and documentation improvements.

VerifyIntegrationHealth

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

1.3.29 - R2988527 (March 26, 2025)

Integrations

Create-Mock-Feed-Relationships

Updated the Docker image to: demisto/feed-performance-test:1.0.117321.

Related pull requests:
- 38288
- 38283
- 38281
- 38280
- 38279
- 38278
- 38276
- 38275
- 38274
- 38272
- 38271
- 38273
- 38277
- 38282

Download

1.3.28 - R2040490 (January 22, 2025)

Scripts

CompareIndicators

Updated the Docker image to: demisto/netutils:1.0.0.118055.

Related pull requests:
- 38238
- 38235
- 38222
- 38223
- 38224
- 38225
- 38226
- 38227
- 38228
- 38230
- 38231
- 38232
- 38233
- 38234
- 38229

Download

1.3.27 - 1996610 (January 15, 2025)

Integrations

Create Test Incidents

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37732

Download

1.3.26 - 1928124 (January 5, 2025)

Integrations

XSOAR Powershell Testing

Updated the Docker image to: demisto/powershell-ubuntu:7.4.6.116823.

Related pull requests:
- 37789
- 37773
- 37772
- 37774
- 37771

Download

1.3.25 - 1809308 (December 15, 2024)

Scripts

FetchFromInstance

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyEnoughIndicators

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyObjectFieldsList

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyEnoughIncidents

Updated the Docker image to: demisto/python3:3.11.10.115186.

GetInstanceName

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.3.24 - 1748140 (December 4, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.11.10.115186.

Scripts

GetServerInfo

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyIntegrationHealth

Updated the Docker image to: demisto/python3:3.11.10.115186.

WaitAndCompleteTask

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37528
- 37524
- 37525
- 37526
- 37527

Download

1.3.23 - R1681986 (November 21, 2024)

Integrations

CustomIndicatorDemo

Updated the Docker image to: demisto/python3:3.11.10.116439.

APIMetricsValidation

Updated the Docker image to: demisto/python3:3.11.10.116439.

Related pull requests:
- 37271

Download

1.3.22 - R1387547 (September 15, 2024)

Integrations

Create-Mock-Feed-Relationships

Removed When removed from the feed option from Indicator Expiration Method
Updated the Docker image to: demisto/feed-performance-test:1.0.103518.

Related pull requests:
- 35873

Download

1.3.21 - 1282807 (August 18, 2024)

Integrations

Create-Mock-Feed-Relationships

Removed When removed from the feed option from Indicator Expiration Method

Scripts

Hey

Deprecated. No available replacement.

Related pull requests:
- 35873
- 35919
- 35920
- 35901

Download

1.3.20 - R1274118 (August 14, 2024)

Scripts

Hey

Updated the Docker image to: demisto/rakyll-hey:1.0.0.103237.

Related pull requests:
- 35766

Download

1.3.19 - R1218660 (July 28, 2024)

Integrations

Create-Mock-Feed-Relationships

Updated the Docker image to: demisto/feed-performance-test:1.0.103518.

Related pull requests:
- 35423

Download

1.3.18 - 1162940 (July 9, 2024)

Scripts

VerifyObjectFieldsList

Updated the Docker image to: demisto/python3:3.10.14.100715.

FetchFromInstance

Updated the Docker image to: demisto/python3:3.10.14.100715.

VerifyEnoughIncidents

Updated the Docker image to: demisto/python3:3.10.14.100715.

GetInstanceName

Updated the Docker image to: demisto/python3:3.10.14.100715.

VerifyEnoughIndicators

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.3.17 - 1149551 (July 4, 2024)

Integrations

Create-Mock-Feed-Relationships

Updated the Docker image to: demisto/feed-performance-test:1.0.99137.

Related pull requests:
- 35231
- 35205
- 35204
- 35203

Download

1.3.16 - 1135833 (June 30, 2024)

Scripts

Hey

Fixed an issue where the script failed when passing a value containing spaces to the headers argument.
Updated the Docker image to: demisto/rakyll-hey:1.0.0.98212.

Related pull requests:
- 35117

Download

1.3.15 - R1094962 (June 16, 2024)

Scripts

GetServerInfo

Updated to work with XSOAR version 6.9.

Related pull requests:
- 34398

Download

1.3.14 - 1011309 (May 12, 2024)

Scripts

New: GetServerInfo

New: Get version and URL of current Cortex XSOAR server.

Related pull requests:
- 34291

Download

1.3.13 - R931860 (April 3, 2024)

Integrations

Create Test Incidents

Fixed an issue where attachments were not created as files in the create-test-incident-from-raw-json command.
Updated the Docker image to: demisto/python3:3.10.14.90585.

Related pull requests:
- 33303

Download

1.3.12 - 865088 (March 3, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.88772.

Related pull requests:
- 33184

Download

1.3.11 - 823153 (February 12, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.87159.

Related pull requests:
- 32837

Download

1.3.10 - 798475 (February 1, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32533

Download

1.3.9 - 757686 (January 11, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32061

Download

1.3.8 - 7216131 (December 20, 2023)

Scripts

VerifyIntegrationHealth

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31388

Download

1.3.7 - 7209615 (December 19, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31550

Download

1.3.6 - 7153835 (December 13, 2023)

Scripts

CompareIndicators

Updated the Docker image to: demisto/netutils:1.0.0.83404.

Related pull requests:
- 31428

Download

1.3.5 - 7149458 (December 13, 2023)

Scripts

WaitAndCompleteTask

Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31427

Download

1.3.4 - 7122577 (December 10, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.82980.

Related pull requests:
- 31371

Download

1.3.3 - 7066068 (December 4, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.82076.

Related pull requests:
- 31286

Download

1.3.2 - 7029664 (November 30, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.81631.

Related pull requests:
- 31214

Download

1.3.0 - 7001088 (November 27, 2023)

Developer Tools

Changed the pack support level to community.

Related pull requests:
- 31110

Download

1.2.59 - 6877054 (November 13, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.80014.
Added the new command create-test-incident-from-raw-json.

Related pull requests:
- 30702

Download

1.3.30 - 3042633 (April 2, 2025)

Integrations

Create-Mock-Feed-Relationships

Metadata and documentation improvements.

APIMetricsValidation

Metadata and documentation improvements.

Create Test Incidents

Metadata and documentation improvements.

CustomIndicatorDemo

Metadata and documentation improvements.

Scripts

VerifyEnoughIndicators

Metadata and documentation improvements.

CompareIndicators

Metadata and documentation improvements.

VerifyObjectFieldsList

Metadata and documentation improvements.

FetchFromInstance

Metadata and documentation improvements.

GetInstanceName

Metadata and documentation improvements.

WaitAndCompleteTask

Metadata and documentation improvements.

VerifyEnoughIncidents

Metadata and documentation improvements.

GetServerInfo

Metadata and documentation improvements.

VerifyIntegrationHealth

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

1.3.29 - R2988527 (March 26, 2025)

Integrations

Create-Mock-Feed-Relationships

Updated the Docker image to: demisto/feed-performance-test:1.0.117321.

Related pull requests:
- 38288
- 38283
- 38281
- 38280
- 38279
- 38278
- 38276
- 38275
- 38274
- 38272
- 38271
- 38273
- 38277
- 38282

Download

1.3.28 - R2040490 (January 22, 2025)

Scripts

CompareIndicators

Updated the Docker image to: demisto/netutils:1.0.0.118055.

Related pull requests:
- 38238
- 38235
- 38222
- 38223
- 38224
- 38225
- 38226
- 38227
- 38228
- 38230
- 38231
- 38232
- 38233
- 38234
- 38229

Download

1.3.27 - 1996610 (January 15, 2025)

Integrations

Create Test Incidents

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37732

Download

1.3.26 - 1928124 (January 5, 2025)

Integrations

XSOAR Powershell Testing

Updated the Docker image to: demisto/powershell-ubuntu:7.4.6.116823.

Related pull requests:
- 37789
- 37773
- 37772
- 37774
- 37771

Download

1.3.25 - 1809308 (December 15, 2024)

Scripts

FetchFromInstance

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyEnoughIndicators

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyObjectFieldsList

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyEnoughIncidents

Updated the Docker image to: demisto/python3:3.11.10.115186.

GetInstanceName

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.3.24 - 1748140 (December 4, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.11.10.115186.

Scripts

GetServerInfo

Updated the Docker image to: demisto/python3:3.11.10.115186.

VerifyIntegrationHealth

Updated the Docker image to: demisto/python3:3.11.10.115186.

WaitAndCompleteTask

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37528
- 37524
- 37525
- 37526
- 37527

Download

1.3.23 - R1681986 (November 21, 2024)

Integrations

CustomIndicatorDemo

Updated the Docker image to: demisto/python3:3.11.10.116439.

APIMetricsValidation

Updated the Docker image to: demisto/python3:3.11.10.116439.

Related pull requests:
- 37271

Download

1.3.22 - R1387547 (September 15, 2024)

Integrations

Create-Mock-Feed-Relationships

Removed When removed from the feed option from Indicator Expiration Method
Updated the Docker image to: demisto/feed-performance-test:1.0.103518.

Related pull requests:
- 35873

Download

1.3.21 - 1282807 (August 18, 2024)

Integrations

Create-Mock-Feed-Relationships

Removed When removed from the feed option from Indicator Expiration Method

Scripts

Hey

Deprecated. No available replacement.

Related pull requests:
- 35919
- 35873
- 35920
- 35901

Download

1.3.20 - R1275748 (August 15, 2024)

Scripts

Hey

Updated the Docker image to: demisto/rakyll-hey:1.0.0.103237.

Related pull requests:
- 35766

Download

1.3.19 - R1218660 (July 28, 2024)

Integrations

Create-Mock-Feed-Relationships

Updated the Docker image to: demisto/feed-performance-test:1.0.103518.

Related pull requests:
- 35423

Download

1.3.18 - 1162940 (July 9, 2024)

Scripts

VerifyObjectFieldsList

Updated the Docker image to: demisto/python3:3.10.14.100715.

FetchFromInstance

Updated the Docker image to: demisto/python3:3.10.14.100715.

VerifyEnoughIncidents

Updated the Docker image to: demisto/python3:3.10.14.100715.

GetInstanceName

Updated the Docker image to: demisto/python3:3.10.14.100715.

VerifyEnoughIndicators

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.3.17 - 1149551 (July 4, 2024)

Integrations

Create-Mock-Feed-Relationships

Updated the Docker image to: demisto/feed-performance-test:1.0.99137.

Related pull requests:
- 35231
- 35205
- 35204
- 35203

Download

1.3.16 - 1135833 (June 30, 2024)

Scripts

Hey

Fixed an issue where the script failed when passing a value containing spaces to the headers argument.
Updated the Docker image to: demisto/rakyll-hey:1.0.0.98212.

Related pull requests:
- 35117

Download

1.3.15 - R1094962 (June 16, 2024)

Scripts

GetServerInfo

Updated to work with XSOAR version 6.9.

Related pull requests:
- 34398

Download

1.3.14 - 1011309 (May 12, 2024)

Scripts

New: GetServerInfo

New: Get version and URL of current Cortex XSOAR server.

Related pull requests:
- 34291

Download

1.3.13 - R933455 (April 3, 2024)

Integrations

Create Test Incidents

Fixed an issue where attachments were not created as files in the create-test-incident-from-raw-json command.
Updated the Docker image to: demisto/python3:3.10.14.90585.

Related pull requests:
- 33303

Download

1.3.12 - 865088 (March 3, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.88772.

Related pull requests:
- 33184

Download

1.3.11 - 821588 (February 12, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.87159.

Related pull requests:
- 32837

Download

1.3.10 - 797274 (January 31, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32533

Download

1.3.9 - 757686 (January 11, 2024)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32061

Download

1.3.8 - 7216131 (December 20, 2023)

Scripts

VerifyIntegrationHealth

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31388

Download

1.3.7 - 7209615 (December 19, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31550

Download

1.3.6 - 7153835 (December 13, 2023)

Scripts

CompareIndicators

Updated the Docker image to: demisto/netutils:1.0.0.83404.

Related pull requests:
- 31428

Download

1.3.5 - 7149458 (December 13, 2023)

Scripts

WaitAndCompleteTask

Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31427

Download

1.3.4 - 7122577 (December 10, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.82980.

Related pull requests:
- 31371

Download

1.3.3 - 7066068 (December 4, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.82076.

Related pull requests:
- 31286

Download

1.3.2 - 7029664 (November 30, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.81631.

Related pull requests:
- 31214

Download

1.3.0 - 7001088 (November 27, 2023)

Developer Tools

Changed the pack support level to community.

Related pull requests:
- 31110

Download

1.2.59 - 6877054 (November 13, 2023)

Integrations

Create Test Incidents

Updated the Docker image to: demisto/python3:3.10.13.80014.
Added the new command create-test-incident-from-raw-json.

Related pull requests:
- 30702

Download

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Supported By	Community
Created	July 20, 2020
Last Release	April 2, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

APIMetricsValidation

Create Test Incidents

Create-Mock-Feed-Relationships

CustomIndicatorDemo

XSOAR Powershell Testing

Core REST API

Demisto REST API (Deprecated)

Generic SQL

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.