NCSC Cyber Asssessment Framework

Details
Content
Dependencies
Version History

This pack contains an incident type and relevant fields to initiate a self-assessment against the National Cyber Security Centre's Cyber Assessment Framework. All assessment questions are sent via e-mail and the responses also sent via e-mail. The assessments can also be answered within the Cortex XSOAR platform.

Automations

Name	Description
NCSCFieldProtection	This script protects the fields associated with the assessment from accidental modification.
EntryWidgetNCSCResultsA	This script populates results for the dynamic content shown in the incident layout.
NCSCReportDetails_B	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails	This script generates the report details used in the final report. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
EntryWidgetNCSCResultsB	This script populates results for the dynamic content shown in the incident layout.
NCSCReportDetails_D	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_C	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCQuestionPopulate	Populate a list named "NCSC CAF Assessment" with a list of the NCSC Questions.
EntryWidgetNCSCResultsD	This script populates results for the dynamic content shown in the incident layout.
EntryWidgetNCSCResultsC	This script populates results for the dynamic content shown in the incident layout.
NCSCReportOverview	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_A	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCCalculateQuestionsScore	This script calculates the score based on the question and answer responses.

Incident Fields

Name	Description
CAF C Achievement
CAF Overall Result
CAF D Email	Enter the e-mail address of the person responsible for answering questions related to "Minimising the impact of cyber security incidents"
CAF C Status
CAF D Achievement
NCSC Assessment Status
CAF A Achievement
CAF A Result
CAF D Questions
CAF C Result
CAF D Result
CAF D Details
CAF B Details
CAF A Answers
CAF B Email	Enter the e-mail address of the person responsible for answering questions related to "Protecting against cyber-attack"
CAF C Details
CAF D Status
CAF D Result Raw
CAF C Questions
CAF A Questions
CAF A Status
CAF B Status
CAF C Email	Enter the e-mail address of the person responsible for answering questions related to "Detecting cyber security events"
CAF Regulator Email	The e-mail address of the regulator or assessor of this assessment
CAF C Answers
CAF B Result Raw
CAF D Answers
CAF B Questions
CAF B Result
CAF A Result Raw
CAF B Achievement
CAF A Email	Enter the e-mail address of the person responsible for answering questions related to "Managing security risk"
CAF B Answers
CAF C Result Raw
CAF A Details

Incident Types

Name	Description
NCSC CAF Assessment

Layouts

Name	Description
NCSC CAF Assessment

Playbooks

Name	Description
NCSC CAF Assessment	This playbook executes automatically as part of the NCSC Assessment Incident Type. It will send the relevant questions (via e-mail) to each participant and generate the assessment results.

Report

Name	Description
NCSC Assessment	This if the final report generated when all CAF section questions are answered.

Automations

Name	Description
EntryWidgetNCSCResultsA	This script populates results for the dynamic content shown in the incident layout.
EntryWidgetNCSCResultsD	This script populates results for the dynamic content shown in the incident layout.
NCSCQuestionPopulate	Populate a list named "NCSC CAF Assessment" with a list of the NCSC Questions.
EntryWidgetNCSCResultsC	This script populates results for the dynamic content shown in the incident layout.
NCSCReportOverview	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCCalculateQuestionsScore	This script calculates the score based on the question and answer responses.
NCSCReportDetails_A	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCFieldProtection	This script protects the fields associated with the assessment from accidental modification.
NCSCReportDetails_C	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_D	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails	This script generates the report details used in the final report. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
EntryWidgetNCSCResultsB	This script populates results for the dynamic content shown in the incident layout.
NCSCReportDetails_B	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script

Incident Fields

Name	Description
CAF C Answers
CAF C Result Raw
CAF D Details
CAF A Result
CAF A Details
CAF B Result
CAF C Details
CAF B Result Raw
CAF B Answers
CAF Overall Result
CAF C Status
CAF A Answers
CAF D Email	Enter the e-mail address of the person responsible for answering questions related to "Minimising the impact of cyber security incidents"
CAF B Status
CAF A Email	Enter the e-mail address of the person responsible for answering questions related to "Managing security risk"
CAF C Achievement
CAF D Achievement
CAF D Result Raw
CAF A Achievement
CAF C Questions
CAF D Result
CAF D Status
CAF B Achievement
CAF B Questions
CAF C Email	Enter the e-mail address of the person responsible for answering questions related to "Detecting cyber security events"
CAF C Result
CAF Regulator Email	The e-mail address of the regulator or assessor of this assessment
CAF B Details
CAF A Questions
CAF B Email	Enter the e-mail address of the person responsible for answering questions related to "Protecting against cyber-attack"
CAF A Result Raw
NCSC Assessment Status
CAF D Questions
CAF D Answers
CAF A Status

Incident Types

Name	Description
NCSC CAF Assessment

Playbooks

Name	Description
NCSC CAF Assessment	This playbook executes automatically as part of the NCSC Assessment Alert Type. It will send the relevant questions (via e-mail) to each participant and generate the assessment results.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (3)

Pack Name	Pack By
Cortex REST API	By: Cortex XSOAR
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

1.1.10 - R3474673 (May 20, 2025)

Scripts

NCSCReportDetails_A

Metadata and documentation improvements.

EntryWidgetNCSCResultsB

Metadata and documentation improvements.

EntryWidgetNCSCResultsC

Metadata and documentation improvements.

NCSCReportDetails_B

Metadata and documentation improvements.

NCSCCalculateQuestionsScore

Metadata and documentation improvements.

NCSCQuestionPopulate

Metadata and documentation improvements.

EntryWidgetNCSCResultsD

Metadata and documentation improvements.

NCSCReportDetails_D

Metadata and documentation improvements.

NCSCReportOverview

Metadata and documentation improvements.

NCSCReportDetails_C

Metadata and documentation improvements.

EntryWidgetNCSCResultsA

Metadata and documentation improvements.

NCSCReportDetails

Metadata and documentation improvements.

Related pull requests:
- 39143

Download

1.1.9 - R2989425 (March 26, 2025)

NCSC Cyber Asssessment Framework

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.1.8 - 1935630 (January 6, 2025)

Scripts

EntryWidgetNCSCResultsA

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsB

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsC

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsD

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37472

Download

1.1.7 - 1867101 (December 24, 2024)

Scripts

NCSCReportDetails_A

Documentation and metadata improvements.

NCSCReportOverview

Documentation and metadata improvements.

NCSCReportDetails_D

Documentation and metadata improvements.

NCSCReportDetails_C

Documentation and metadata improvements.

NCSCReportDetails

Documentation and metadata improvements.

NCSCReportDetails_B

Documentation and metadata improvements.

Related pull requests:
- 37687

Download

1.1.6 - 1809308 (December 15, 2024)

Scripts

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.1.5 - 1162940 (July 9, 2024)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.1.4 - R5866730 (July 25, 2023)

Scripts

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.3 - R4718798 (March 1, 2023)

Layouts

NCSC CAF Assessment
This item is no longer supported in XSIAM.

Related pull requests:
- 24222

Download

1.1.2 - R4001473 (November 9, 2022)

Scripts

Multiple Scrips Changes:

Added reference to required permissions in automation's description and README.

NCSCReportOverview
NCSCReportDetails
NCSCReportDetails_A
NCSCReportDetails_B
NCSCReportDetails_C
NCSCReportDetails_D

Related pull requests:
- 15868

Download

1.1.1 - 1959372 (November 16, 2021)

Incident Fields

CAF D Status
- Maintenance and stability enhancements.
CAF D Achievement
- Maintenance and stability enhancements.
CAF C Achievement
- Maintenance and stability enhancements.
CAF B Status
- Maintenance and stability enhancements.
CAF A Status
- Maintenance and stability enhancements.
CAF C Status
- Maintenance and stability enhancements.
CAF A Achievement
- Maintenance and stability enhancements.
CAF Overall Result
- Maintenance and stability enhancements.
CAF B Achievement
- Maintenance and stability enhancements.

Download

1.1.0 - 1882648 (November 2, 2021)

Scripts

Breaking Change The following breaking change applies for organizations that implement pre-set roles on their incidents:
DBotRole has been removed from these automations. This change will affect any playbook that is dependent on, or runs, these automations.
These automations will now run using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html

##### NCSCReportDetails_A
##### NCSCReportDetails_B
##### NCSCReportOverview
##### NCSCReportDetails
##### NCSCReportDetails_D
##### NCSCReportDetails_C

Download

1.0.3 - 7772209 (September 25, 2021)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

1.1.10 - R3474673 (May 20, 2025)

Scripts

NCSCReportDetails_A

Metadata and documentation improvements.

EntryWidgetNCSCResultsB

Metadata and documentation improvements.

EntryWidgetNCSCResultsC

Metadata and documentation improvements.

NCSCReportDetails_B

Metadata and documentation improvements.

NCSCCalculateQuestionsScore

Metadata and documentation improvements.

NCSCQuestionPopulate

Metadata and documentation improvements.

EntryWidgetNCSCResultsD

Metadata and documentation improvements.

NCSCReportDetails_D

Metadata and documentation improvements.

NCSCReportOverview

Metadata and documentation improvements.

NCSCReportDetails_C

Metadata and documentation improvements.

EntryWidgetNCSCResultsA

Metadata and documentation improvements.

NCSCReportDetails

Metadata and documentation improvements.

Related pull requests:
- 39143

Download

1.1.9 - R2989425 (March 26, 2025)

NCSC Cyber Asssessment Framework

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.1.8 - 1935630 (January 6, 2025)

Scripts

EntryWidgetNCSCResultsA

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsB

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsC

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsD

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37472

Download

1.1.7 - 1867101 (December 24, 2024)

Scripts

NCSCReportDetails_A

Documentation and metadata improvements.

NCSCReportOverview

Documentation and metadata improvements.

NCSCReportDetails_D

Documentation and metadata improvements.

NCSCReportDetails_C

Documentation and metadata improvements.

NCSCReportDetails

Documentation and metadata improvements.

NCSCReportDetails_B

Documentation and metadata improvements.

Related pull requests:
- 37687

Download

1.1.6 - 1809308 (December 15, 2024)

Scripts

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.1.5 - 1162940 (July 9, 2024)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.1.4 - R5866730 (July 25, 2023)

Scripts

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.3 - R4718798 (March 1, 2023)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 24222

Download

1.1.2 - R4001473 (November 9, 2022)

Scripts

Multiple Scrips Changes:

Added reference to required permissions in automation's description and README.

NCSCReportOverview
NCSCReportDetails
NCSCReportDetails_A
NCSCReportDetails_B
NCSCReportDetails_C
NCSCReportDetails_D

Related pull requests:
- 15868

Download

1.1.1 - 1959372 (November 16, 2021)

Incident Fields

CAF D Status
- Maintenance and stability enhancements.
CAF D Achievement
- Maintenance and stability enhancements.
CAF C Achievement
- Maintenance and stability enhancements.
CAF B Status
- Maintenance and stability enhancements.
CAF A Status
- Maintenance and stability enhancements.
CAF C Status
- Maintenance and stability enhancements.
CAF A Achievement
- Maintenance and stability enhancements.
CAF Overall Result
- Maintenance and stability enhancements.
CAF B Achievement
- Maintenance and stability enhancements.

Download

1.1.0 - 1882648 (November 2, 2021)

Scripts

##### NCSCReportDetails_A
##### NCSCReportDetails_B
##### NCSCReportOverview
##### NCSCReportDetails
##### NCSCReportDetails_D
##### NCSCReportDetails_C

Download

1.0.3 - 7772209 (September 25, 2021)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Supported By	Community
Created	January 27, 2021
Last Release	May 20, 2025

Compliance

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.