Joe Security

Details
Content
Dependencies
Version History

Sandbox Cloud

Integrations

Name	Description
Joe Security v2	Access the full set of possibilities the JoeSandbox Cloud provides via the RESTful Web API v2.
Joe Security (Deprecated)	Deprecated. Use Joe Security v2 instead.

Playbooks

Name	Description
Detonate File From URL - JoeSecurity	Deprecated. Use the joe-submit-sample command instead.
Detonate File - JoeSecurity V2	The Detonate File using Joe Sandbox Process is designed to streamline and enhance the security assessment of files. This automated system accepts a user-submitted file, sends it for in-depth analysis using Joe Sandbox technology, and returns comprehensive results as attachments to the user. The process is designed to be swift, efficient, and secure, providing users with valuable insights into potential threats and vulnerabilities within their files.
Detonate File - JoeSecurity	Deprecated. Use the joe-submit-sample command instead.
Detonate and Analyze File - JoeSecurity	Deprecated. Use the joe-submit-sample command instead.
Detonate URL - JoeSecurity	Deprecated. Use the joe-submit-url command instead.

Widgets

Name	Description
API Call Results for Joe Security

Integrations

Name	Description
Joe Security v2	Access the full set of possibilities the JoeSandbox Cloud provides via the RESTful Web API v2.
Joe Security (Deprecated)	Deprecated. Use Joe Security v2 instead.

Playbooks

Name	Description
Detonate and Analyze File - JoeSecurity	Deprecated. Use the joe-submit-sample command instead.
Detonate File From URL - JoeSecurity	Deprecated. Use the joe-submit-sample command instead.
Detonate URL - JoeSecurity	Deprecated. Use the joe-submit-url command instead.
Detonate File - JoeSecurity	Deprecated. Use the joe-submit-sample command instead.
Detonate File - JoeSecurity V2	The Detonate File using Joe Sandbox Process is designed to streamline and enhance the security assessment of files. This automated system accepts a user-submitted file, sends it for in-depth analysis using Joe Sandbox technology, and returns comprehensive results as attachments to the user. The process is designed to be swift, efficient, and secure, providing users with valuable insights into potential threats and vulnerabilities within their files.

Required Content Packs (3)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Playbooks	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (5)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Playbooks	By: Cortex XSOAR
Rasterize	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR

1.1.29 - 3985329 (June 26, 2025)

Integrations

Joe Security v2

Added the interval_in_seconds argument in the joe-submit-sample command.

Download

1.1.28 - R3980324 (June 26, 2025)

Integrations

Joe Security v2

Updated the polling request interval timeout to 45 seconds for optimal server performance for both joe-submit-url and joe-submit-sample commands.

Related pull requests:
- 40102

Download

1.1.27 - R3534539 (May 25, 2025)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.3242986.

Related pull requests:
- 39725

Download

1.1.26 - 3042633 (April 2, 2025)

Integrations

Joe Security v2

Metadata and documentation improvements.

Related pull requests:
- 39131

Download

1.1.25 - R2988527 (March 26, 2025)

Joe Security

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.1.24 - R2040490 (January 22, 2025)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.115493.

Related pull requests:
- 37118
- 37114

Download

1.1.23 - 1175817 (July 14, 2024)

Integrations

Joe Security v2

Fixed an issue where the DBotScore.Indicator output of the file command contained the file name instead of the file's SHA256.

Updated the Docker image to: demisto/vendors-sdk:1.0.0.103334.

Related pull requests:
- 35408

Download

1.1.22 - 1106228 (June 19, 2024)

Integrations

Joe Security v2

Fixed an issue where proxy settings were not handled properly.
Updated the Docker image to 1.0.0.98422.

Related pull requests:
- 34892

Download

1.1.21 - 1072918 (June 5, 2024)

Integrations

Joe Security v2

Breaking Change: The submission_ids argument is now required when using the command *joe-submission-info.

Related pull requests:
- 34694

Download

1.1.20 - 881200 (March 10, 2024)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.89427.

Related pull requests:
- 32981

Download

1.1.19 - 851225 (February 25, 2024)

Integrations

Joe Security v2

Fixed an issue where comments argument was not passed correctly in the joe-submit-sample command.

Related pull requests:
- 32819

Download

1.1.18 - 831507 (February 15, 2024)

Integrations

Joe Security v2

The export_to_jbxview parameter is deprecated and is no longer used.
Added support for On-Premise Servers.
Added the file_name parameter to the joe-submit-sample command to allow providing the original filename in submissions.
Updated the Docker image to: demisto/vendors-sdk:1.0.0.87491.

Related pull requests:
- 31674
- 32888

Download

1.1.17 - 7209615 (December 19, 2023)

Playbooks

Detonate File - JoeSecurity V2

Added new file types to the supported files task.
Updated the timeout parameter from 10 minutes to 15 minutes.

Related pull requests:
- 31479

Download

1.1.16 - 6944614 (November 20, 2023)

Playbooks

Detonate File - JoeSecurity V2

Added a task to verify that the uploaded file types are supported by the vendor.
Deleted unused Interval input.

Related pull requests:
- 30864

Download

1.1.15 - 6521786 (October 5, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.76365.
Fixed an issue where joe-submit-url and joe-submit-sample failed to return the partial result in polling.

Related pull requests:
- 30033

Download

1.1.14 - 6453502 (September 28, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.74116.

Related pull requests:
- 29575

Download

1.1.13 - 6389447 (September 21, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.73481.
Maintenance and stability enhancements.
Fixed an issue where joe-submit-url and joe-submit-sample set the submission_id in the context during polling.
Updated the Docker image to: demisto/joe-security:1.0.0.73481.

Related pull requests:
- 29715

Download

1.1.11 - 5976562 (August 7, 2023)

Integrations

Joe Security v2

Documentation and metadata improvements.

Related pull requests:
- 28670

Download

1.1.10 - R5866730 (July 25, 2023)

Playbooks

New: Detonate URL - JoeSecurity

Updated the playbook to use the new command with built-in polling.

Related pull requests:
- 25787

Download

1.1.9 - R5692327 (July 5, 2023)

Playbooks

New: Detonate File - JoeSecurity V2

The Detonate File playbook is using Joe Sandbox Process is designed to streamline and enhance the security assessment of files. This automated system accepts a user-submitted file, sends it for in-depth analysis using Joe Sandbox technology, and returns comprehensive results as attachments to the user. The process is designed to be swift, efficient, and secure, providing users with valuable insights into potential threats and vulnerabilities within their files.

Related pull requests:
- 25996

Download

1.1.8 - 4771215 (March 8, 2023)

Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.7 - R4718798 (March 1, 2023)

Integrations

Joe Security (Deprecated)

Deprecated. Use Joe Security v2 instead.

Related pull requests:
- 24765

Download

1.1.6 - R4646022 (February 19, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.46413.

Related pull requests:
- 24247

Download

1.1.5 - 4410080 (January 17, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.44820.

Related pull requests:
- 23877

Download

1.1.4 - 4293048 (December 28, 2022)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.42210.

Related pull requests:
- 23345

Download

1.1.3 - 4206093 (December 12, 2022)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.40752.

Related pull requests:
- 22969

Download

1.1.2 - 4105702 (November 26, 2022)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.38269.

Related pull requests:
- 22498

Download

1.1.1 - 3994332 (November 8, 2022)

Integrations

Joe Security v2

Updated proxy handling.
Fixed url command output.

Playbooks

Detonate File - JoeSecurity

Deprecated. Use the joe-submit-sample command instead.

Detonate and Analyze File - JoeSecurity

Deprecated. Use the joe-submit-sample command instead.

Detonate File From URL - JoeSecurity

Deprecated. Use the joe-submit-sample command instead.

Detonate URL - JoeSecurity

Deprecated. Use the joe-submit-url command instead.

Related pull requests:
- 21948

Download

1.1.0 - 3943002 (October 30, 2022)

Playbooks

New: Detonate and Analyze File - JoeSecurity

Detonates one or more files using the Joe Security - Joe Sandbox integration.
Returns relevant reports to the War Room and file reputations to the context data.
All file types are supported. (Available from Cortex XSOAR 6.5.0).

Related pull requests:
- 20940

Download

1.0.12 - 3940849 (October 30, 2022)

Integrations

New: Joe Security v2

Access the full set of possibilities the Joe Sandbox Cloud provides via the RESTful Web API v2. (Available from Cortex XSOAR 6.8.0).
Recommend viewing the README in order to migrate to Joe Security V2.
Added support for API Execution Metric reporting for Cortex XSOAR server versions 6.8.0 and above.

Related pull requests:
- 20900

Download

1.1.29 - 3985329 (June 26, 2025)

Integrations

Joe Security v2

Added the interval_in_seconds argument in the joe-submit-sample command.

Download

1.1.28 - R3980324 (June 26, 2025)

Integrations

Joe Security v2

Updated the polling request interval timeout to 45 seconds for optimal server performance for both joe-submit-url and joe-submit-sample commands.

Related pull requests:
- 40102

Download

1.1.27 - R3534539 (May 25, 2025)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.3242986.

Related pull requests:
- 39725

Download

1.1.26 - 3042633 (April 2, 2025)

Integrations

Joe Security v2

Metadata and documentation improvements.

Related pull requests:
- 39131

Download

1.1.25 - R2988527 (March 26, 2025)

Joe Security

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.1.24 - R2040490 (January 22, 2025)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.115493.

Related pull requests:
- 37118
- 37114

Download

1.1.23 - 1175817 (July 14, 2024)

Integrations

Joe Security v2

Fixed an issue where the DBotScore.Indicator output of the file command contained the file name instead of the file's SHA256.

Updated the Docker image to: demisto/vendors-sdk:1.0.0.103334.

Related pull requests:
- 35408

Download

1.1.22 - 1106228 (June 19, 2024)

Integrations

Joe Security v2

Fixed an issue where proxy settings were not handled properly.
Updated the Docker image to 1.0.0.98422.

Related pull requests:
- 34892

Download

1.1.21 - 1072918 (June 5, 2024)

Integrations

Joe Security v2

Breaking Change: The submission_ids argument is now required when using the command *joe-submission-info.

Related pull requests:
- 34694

Download

1.1.20 - 881200 (March 10, 2024)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.89427.

Related pull requests:
- 32981

Download

1.1.19 - 851225 (February 25, 2024)

Integrations

Joe Security v2

Fixed an issue where comments argument was not passed correctly in the joe-submit-sample command.

Related pull requests:
- 32819

Download

1.1.18 - 831507 (February 15, 2024)

Integrations

Joe Security v2

The export_to_jbxview parameter is deprecated and is no longer used.
Added support for On-Premise Servers.
Added the file_name parameter to the joe-submit-sample command to allow providing the original filename in submissions.
Updated the Docker image to: demisto/vendors-sdk:1.0.0.87491.

Related pull requests:
- 31674
- 32888

Download

1.1.17 - 7209615 (December 19, 2023)

Playbooks

Detonate File - JoeSecurity V2

Added new file types to the supported files task.
Updated the timeout parameter from 10 minutes to 15 minutes.

Related pull requests:
- 31479

Download

1.1.16 - 6944614 (November 20, 2023)

Playbooks

Detonate File - JoeSecurity V2

Added a task to verify that the uploaded file types are supported by the vendor.
Deleted unused Interval input.

Related pull requests:
- 30864

Download

1.1.15 - 6521786 (October 5, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.76365.
Fixed an issue where joe-submit-url and joe-submit-sample failed to return the partial result in polling.

Related pull requests:
- 30033

Download

1.1.14 - 6453502 (September 28, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/vendors-sdk:1.0.0.74116.

Related pull requests:
- 29575

Download

1.1.13 - 6389447 (September 21, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.73481.
Maintenance and stability enhancements.
Fixed an issue where joe-submit-url and joe-submit-sample set the submission_id in the context during polling.
Updated the Docker image to: demisto/joe-security:1.0.0.73481.

Related pull requests:
- 29715

Download

1.1.11 - 5976562 (August 7, 2023)

Integrations

Joe Security v2

Documentation and metadata improvements.

Related pull requests:
- 28670

Download

1.1.10 - R5866730 (July 25, 2023)

Playbooks

New: Detonate URL - JoeSecurity

Updated the playbook to use the new command with built-in polling.

Related pull requests:
- 25787

Download

1.1.9 - R5170573 (May 2, 2023)

Playbooks

New: Detonate File - JoeSecurity V2

The Detonate File playbook is using Joe Sandbox Process is designed to streamline and enhance the security assessment of files. This automated system accepts a user-submitted file, sends it for in-depth analysis using Joe Sandbox technology, and returns comprehensive results as attachments to the user. The process is designed to be swift, efficient, and secure, providing users with valuable insights into potential threats and vulnerabilities within their files.

Related pull requests:
- 25996

Download

1.1.8 - 4771215 (March 8, 2023)

Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.7 - R4718798 (March 1, 2023)

Integrations

Joe Security (Deprecated)

Deprecated. Use Joe Security v2 instead.

Related pull requests:
- 24765

Download

1.1.6 - R4646022 (February 19, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.46413.

Related pull requests:
- 24247

Download

1.1.5 - 4410080 (January 17, 2023)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.44820.

Related pull requests:
- 23877

Download

1.1.4 - 4293048 (December 28, 2022)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.42210.

Related pull requests:
- 23345

Download

1.1.3 - 4206093 (December 12, 2022)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.40752.

Related pull requests:
- 22969

Download

1.1.2 - 4105702 (November 26, 2022)

Integrations

Joe Security v2

Updated the Docker image to: demisto/joe-security:1.0.0.38269.

Related pull requests:
- 22498

Download

1.1.1 - 3994332 (November 8, 2022)

Integrations

Joe Security v2

Updated proxy handling.
Fixed url command output.

Playbooks

Detonate File - JoeSecurity

Deprecated. Use the joe-submit-sample command instead.

Detonate and Analyze File - JoeSecurity

Deprecated. Use the joe-submit-sample command instead.

Detonate File From URL - JoeSecurity

Deprecated. Use the joe-submit-sample command instead.

Detonate URL - JoeSecurity

Deprecated. Use the joe-submit-url command instead.

Related pull requests:
- 21948

Download

1.1.0 - 3943002 (October 30, 2022)

Playbooks

New: Detonate and Analyze File - JoeSecurity

Detonates one or more files using the Joe Security - Joe Sandbox integration.
Returns relevant reports to the War Room and file reputations to the context data.
All file types are supported. (Available from Cortex XSOAR 6.5.0).

Related pull requests:
- 20940

Download

1.0.12 - 3940849 (October 30, 2022)

Integrations

New: Joe Security v2

Access the full set of possibilities the Joe Sandbox Cloud provides via the RESTful Web API v2. (Available from Cortex XSOAR 6.8.0).
Recommend viewing the README in order to migrate to Joe Security V2.
Added support for API Execution Metric reporting for Cortex XSOAR server versions 6.8.0 and above.

Related pull requests:
- 20900

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 9, 2020
Last Release	June 26, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.