Machine Learning
Help to manage machine learning models in Cortex.
Machine Learning
- Details
- Content
- Dependencies
- Version History
Help to manage machine learning models in Cortex XSOAR
Automations
| Name | Description |
|---|---|
| ExtendQueryBasedOnPhishingLabels | A helper script for the DBot Create Phishing Classifier V2 playbook. This script extends the query based on the phishingLabels argument. |
DBotPredictOutOfTheBox | Deprecated. Use DBotPredictOutOfTheBoxV2 instead. |
| HashIncidentsFields | Hash fields from the incident list. |
| DBotPredictIncidentsBatch | Apply a trained ML model on multiple incidents at once, to compare incidents how the incidents were labeled by analysts, to the predictions of the model. This script is aimed to help evaluate a trained model using past incidents. |
| EvaluateMLModllAtProduction | Evaluates an ML model in production. |
| DBotPredictOutOfTheBoxV2 | Predict phishing incidents using the out-of-the-box pre-trained model. |
| ImportMLModel | Imports a file that contains an ML model. |
| ExportMLModel | Exports an existing ML model to a file. |
Playbooks
| Name | Description |
|---|---|
| DBot Create Phishing Classifier V2 | Create a phishing classifier using machine learning techniques, based on email content. |
DBot Create Phishing Classifier V2 From File | Create a phishing classifier using machine learning. The classifier is based on incidents files extracted from email content. |
| DBot Create Phishing Classifier V2 Job | Train the phishing machine learning model. This playbook should be used as job, to run repeatedly, for example every week. |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (3)
| Pack Name | Pack By |
|---|---|
| Common Scripts | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
1.4.16 - 1718057 (November 28, 2024)
- 37407
- 37402
- 37403
- 37405
- 37406
- 37404
Download
Scripts
ExportMLModel
- Updated the Docker image to: demisto/python3:3.11.10.115186.
ImportMLModel
- Updated the Docker image to: demisto/python3:3.11.10.115186.
HashIncidentsFields
- Updated the Docker image to: demisto/python3:3.11.10.115186.
ExtendQueryBasedOnPhishingLabels
- Updated the Docker image to: demisto/python3:3.11.10.115186.
- 37407
- 37402
- 37403
- 37405
- 37406
- 37404
Download
1.4.11 - 1169083 (July 11, 2024)
1.4.9 - 752611 (January 9, 2024)
1.4.8 - 6035467 (August 13, 2023)
1.4.6 - 5731243 (July 10, 2023)
1.4.5 - R5692327 (July 5, 2023)
1.4.4 - R4718798 (March 1, 2023)
- 23844
Download
Scripts
ExtendQueryBasedOnPhishingLabels
- Fixed an issue where custom labels resulted in an error.
- Updated the Docker image to: demisto/python3:3.10.9.46032.
EvaluateMLModllAtProduction
- Fixed an issue where custom labels resulted in an error.
- Updated the Docker image to: demisto/ml:1.0.0.45981.
DBotPredictIncidentsBatch
- Fixed an issue where custom labels resulted in an error.
- Updated the Docker image to: demisto/ml:1.0.0.45981.
- 23844
Download
1.4.1 - 2745974 (April 12, 2022)
Scripts
HashIncidentsFields
- Updated the Docker image to: demisto/python3:3.10.4.27798.
- Fixed lint issues.
1.4.0 - 2419785 (February 15, 2022)
Playbooks
DBot Create Phishing Classifier V2
Improved memory usage while fetching incidents for training.
Scripts
New: ExtendQueryBasedOnPhishingLabels
A helper script for the DBot Create Phishing Classifier V2 playbook. This script extends the query based on the phishingLabels argument. (Available from Cortex XSOAR 5.0.0).
1.3.7 - R2238421 (January 11, 2022)
Scripts
HashIncidentsFields
- Updated the Docker image to: demisto/python3:3.9.8.24399.
PUBLISHER
PLATFORMS
Cortex XSOAR
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | June 30, 2020 | |
| Last Release | December 2, 2024 |