MS-ISAC

Details
Content
Dependencies
Version History

Download With Dependencies

This content pack's purpose is to integrate with the MS-ISAC private API to fetch MS-ISAC events and alert details.

Pack Contributors:

Vinamra Bhatnagar
Mike Eldridge

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Pack Contributors:

Vinamra Bhatnagar
Mike Eldridge

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Integrations

Name	Description
MS-ISAC (Community Contribution)	This API queries alerts and alert data from the MS-ISAC API to enrich and query alerts from the platform.

Integrations

Name	Description
MS-ISAC (Community Contribution)	This API queries alerts and alert data from the MS-ISAC API to enrich and query alerts from the platform.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

1.1.1 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.1.0 - R5469292 (October 20, 2025)

Integrations

MS-ISAC

Updated integration to work with MSISAC API v1.2.
breaking Changes: Updated the fetch-incidents command to use the new version of the API. The event fields returned from the API have changed.
Added support for msisac-get-alert command that retrieves alert data by its id.
Added support for msisac-retrieve-cases command to retrieve msisac cases.
Deprecated the msisac-get-event command. Use msisac-get-alert instead.
Deprecated the msisac-retrieve-events command. Use msisac-retrieve-cases instead.

Related pull requests:
- 40539
- 40679

Download

1.0.7 - 3980324 (June 26, 2025)

Integrations

MS-ISAC

Updated the MS-ISAC integration command fetch-incidents to support fetching albert event stream data.

Related pull requests:
- 40316
- 40367

Download

1.0.6 - 3960766 (June 24, 2025)

Integrations

MS-ISAC

Added error handling in the MS-ISAC integration to format the html output received from the api.
Updated the msisac-retrieve-events command to handle when no results are returned from the api.

Related pull requests:
- 40321
- 40351

Download

1.0.5 - 3880452 (June 19, 2025)

Integrations

MS-ISAC

Added support for fetch-incidents to periodically fetch albert events.
Updated the API key instance parameter to support the use of credential objects.
Updated the Docker image to: demisto/python3:3.12.8.3720084.

Related pull requests:
- 40230
- 40312

Download

1.0.4 - R3444919 (May 18, 2025)

Integrations

MS-ISAC

Metadata and documentation improvements.

Related pull requests:
- 39025

Download

1.0.3 - R2989425 (March 26, 2025)

Integrations

MS-ISAC

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.0.2 - R1741355 (December 3, 2024)

Integrations

MS-ISAC

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.1.1 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.1.0 - R5469292 (October 20, 2025)

Integrations

MS-ISAC

Updated integration to work with MSISAC API v1.2.
breaking Changes: Updated the fetch-incidents command to use the new version of the API. The event fields returned from the API have changed.
Added support for msisac-get-alert command that retrieves alert data by its id.
Added support for msisac-retrieve-cases command to retrieve msisac cases.
Deprecated the msisac-get-event command. Use msisac-get-alert instead.
Deprecated the msisac-retrieve-events command. Use msisac-retrieve-cases instead.

Related pull requests:
- 40539
- 40679

Download

1.0.7 - 3980324 (June 26, 2025)

Integrations

MS-ISAC

Updated the MS-ISAC integration command fetch-incidents to support fetching albert event stream data.

Related pull requests:
- 40316
- 40367

Download

1.0.6 - 3960766 (June 24, 2025)

Integrations

MS-ISAC

Added error handling in the MS-ISAC integration to format the html output received from the api.
Updated the msisac-retrieve-events command to handle when no results are returned from the api.

Related pull requests:
- 40321
- 40351

Download

1.0.5 - 3880452 (June 19, 2025)

Integrations

MS-ISAC

Added support for fetch-incidents to periodically fetch albert events.
Updated the API key instance parameter to support the use of credential objects.
Updated the Docker image to: demisto/python3:3.12.8.3720084.

Related pull requests:
- 40230
- 40312

Download

1.0.4 - R3444919 (May 18, 2025)

Integrations

MS-ISAC

Metadata and documentation improvements.

Related pull requests:
- 39025

Download

1.0.3 - R2989425 (March 26, 2025)

Integrations

MS-ISAC

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.0.2 - R1741355 (December 3, 2024)

Integrations

MS-ISAC

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Supported By	Community
Created	December 19, 2021
Last Release	October 29, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.