Pack Contributors:
- Eric Partington
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
Threat Vault by Palo Alto Networks
- Details
- Content
- Dependencies
- Version History
Use the Palo Alto Networks Threat Vault to research the latest threats (vulnerabilities/exploits, viruses, and spyware) that Palo Alto Networks next-generation firewalls can detect and prevent.
Pack Contributors:
- Eric Partington
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
Automations
| Name | Description |
|---|---|
| SetThreatVaultIncidentMarkdownRepresentation | This automation takes several Incident fields from the Threat Vault incident context and displays them as markdown in the layout. |
Classifiers
| Name | Description |
|---|---|
Threat Vault classifier | |
Threat Vault |
Incident Fields
| Name | Description |
|---|---|
Threat Vault by Palo Alto Networks Applications | |
Threat Vault by Palo Alto Networks Spyware | |
Threat Vault by Palo Alto Networks decoders | |
Threat Vault by Palo Alto Networks Vulnerability | |
Threat Vault by Palo Alto Networks file type | |
Threat Vault by Palo Alto Networks Release Version | |
Threat Vault by Palo Alto Networks release notes | |
Threat Vault by Palo Alto Networks data correlation | |
Threat Vault by Palo Alto Networks Content Version |
Incident Types
| Name | Description |
|---|---|
Threat Vault Release notes |
Integrations
| Name | Description |
|---|---|
| Palo Alto Networks Threat Vault v2 | Use the Palo Alto Networks Threat Vault to research the latest threats (vulnerabilities/exploits, viruses, and spyware) that Palo Alto Networks next-generation firewalls can detect and prevent. |
| Palo Alto Networks Threat Vault (Deprecated) | Deprecated. Use Threat Vault v2 instead. |
Layouts
| Name | Description |
|---|---|
Threat Vault |
Playbooks
| Name | Description |
|---|---|
| PANW Threat Vault - Signature Search | Deprecated. No available replacement. |
Automations
| Name | Description |
|---|---|
| SetThreatVaultIncidentMarkdownRepresentation | This automation takes several Incident fields from the Threat Vault incident context and displays them as markdown in the layout. |
Classifiers
| Name | Description |
|---|---|
Threat Vault classifier | |
Threat Vault |
Incident Fields
| Name | Description |
|---|---|
Threat Vault by Palo Alto Networks Vulnerability | |
Threat Vault by Palo Alto Networks decoders | |
Threat Vault by Palo Alto Networks Release Version | |
Threat Vault by Palo Alto Networks Content Version | |
Threat Vault by Palo Alto Networks Spyware | |
Threat Vault by Palo Alto Networks data correlation | |
Threat Vault by Palo Alto Networks file type | |
Threat Vault by Palo Alto Networks Applications | |
Threat Vault by Palo Alto Networks release notes |
Incident Types
| Name | Description |
|---|---|
Threat Vault Release notes |
Integrations
| Name | Description |
|---|---|
| Palo Alto Networks Threat Vault v2 | Use the Palo Alto Networks Threat Vault to research the latest threats (vulnerabilities/exploits, viruses, and spyware) that Palo Alto Networks next-generation firewalls can detect and prevent. |
| Palo Alto Networks Threat Vault (Deprecated) | Deprecated. Use Threat Vault v2 instead. |
Playbooks
| Name | Description |
|---|---|
| PANW Threat Vault - Signature Search | Deprecated. No available replacement. |
Required Content Packs (3)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Playbooks | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (6)
| Pack Name | Pack By |
|---|---|
| Cortex REST API | By: Cortex XSOAR |
| Common Playbooks | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
| Rasterize | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
2.0.7 - R5692327 (July 5, 2023)
2.0.6 - 5235737 (May 10, 2023)
- 26433
- 26075
Download
Integrations
Palo Alto Networks Threat Vault v2
- Updated the Docker image to: demisto/crypto:1.0.0.58095.
- Added 2 commands:
- threatvault-atp-batch-report-get: fetches Advanced Threat Prevention (ATP) reports from the ATP cloud service.
- threatvault-atp-report-pcap-get: fetches Advanced Threat Prevention (ATP) PCAP from the ATP cloud service.
Scripts
SetThreatVaultIncidentMarkdownRepresentation
- Updated the Docker image to: demisto/python3:3.10.11.57890.
- 26433
- 26075
Download
2.0.1 - 4290509 (December 27, 2022)
- 23250
Download
Incident Types
- Threat Vault Release notes
Added the Threat vault layout as the default layout for this incident type.
Integrations
Palo Alto Networks Threat Vault v2
- Fixed an issue where an exception was raised when the API response returned
not found. - Fixed an issue where fetch-incidents did not fetch incidents properly.
- 23250
Download
2.0.0 - 4247670 (December 19, 2022)
- 21872
Download
Classifiers
New: Threat Vault classifier
- Added a new Threat Vault classifier.
Incident Fields
- Threat Vault by Palo Alto Networks Applications
- Threat Vault by Palo Alto Networks Content Version
- Threat Vault by Palo Alto Networks Release Version
- Threat Vault by Palo Alto Networks Spyware
- Threat Vault by Palo Alto Networks Vulnerability
- Threat Vault by Palo Alto Networks data correlation
- Threat Vault by Palo Alto Networks decoders
- Threat Vault by Palo Alto Networks file type
- Threat Vault by Palo Alto Networks release notes
Incident Types
- Threat Vault Release notes
Integrations
New: Palo Alto Networks Threat Vault v2
Added the new integration. Use the Palo Alto Networks Threat Vault to research the latest threats (vulnerabilities/exploits, viruses, and spyware) that Palo Alto Networks next-generation firewalls can detect and prevent.
Layouts
- New: Threat Vault
- Added a new Threat Vault layout showing Release Notes and more information.
Mappers
New: Threat Vault
- Added a new Threat Vault mapper.
Scripts
New: SetThreatVaultIncidentMarkdownRepresentation
- Added the new script. This automation takes several Incident fields from the Threat Vault incident context and displays them as markdown in the layout.
- 21872
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | November 11, 2020 | |
| Last Release | October 8, 2024 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
