Machine Learning

Details
Content
Dependencies
Version History

Help to manage machine learning models in Cortex XSOAR

Machine Learning

Automations

Name	Description
DBotPredictOutOfTheBox	Deprecated. Use DBotPredictOutOfTheBoxV2 instead.
HashIncidentsFields	Hash fields from the incident list. Search for incidents by arguments with an option to hash some of its fields.
DBotPredictIncidentsBatch	Apply a trained ML model on multiple incidents at once, to compare incidents how the incidents were labeled by analysts, to the predictions of the model. This script is aimed to help evaluate a trained model using past incidents.
ExtendQueryBasedOnPhishingLabels	A helper script for the DBot Create Phishing Classifier V2 playbook. This script extends the query based on the phishingLabels argument.
ExportMLModel	Exports an existing ML model to a file.
DBotPredictOutOfTheBoxV2	Predict phishing incidents using the out-of-the-box pre-trained model.
EvaluateMLModllAtProduction	Evaluates an ML model in production.
ImportMLModel	Imports a file that contains an ML model.

Playbooks

Name	Description
DBot Create Phishing Classifier V2	Create a phishing classifier using machine learning techniques, based on email content.
DBot Create Phishing Classifier V2 From File	Create a phishing classifier using machine learning. The classifier is based on incidents files extracted from email content.
DBot Create Phishing Classifier V2 Job	Train the phishing machine learning model. This playbook should be used as job, to run repeatedly, for example every week.

Required Content Packs (2)

Pack Name	Pack By
Common Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (6)

Pack Name	Pack By
Active Directory Query	By: Cortex XSOAR
Remote Access	By: Cortex XSOAR
Slack	By: Cortex XSOAR
MITRE ATT&CK	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Google Maps	By: Cortex XSOAR

PUBLISHER

Cortex

PLATFORMS

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	June 30, 2020
Last Release	January 29, 2023

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Machine Learning