Azure Feed

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

Azure.CloudIPs Feed Integration.

Configure AzureFeed on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for AzureFeed.

  3. Click Add instance to create and configure a new integration instance.

    ParameterDescriptionRequired
    feedFetch indicatorsFalse
    feedReputationIndicator ReputationFalse
    feedReliabilitySource ReliabilityTrue
    tlp_colorTraffic Light Protocol ColorFalse
    feedExpirationPolicyFalse
    feedExpirationIntervalFalse
    feedFetchIntervalFeed Fetch IntervalFalse
    feedBypassExclusionListBypass exclusion listFalse
    regionsRegionsTrue
    servicesServicesTrue
    feedTagsTagsFalse
    insecureTrust any certificate (not secure)False
    proxyUse system proxy settingsFalse
    polling_timeoutRequest TimeoutFalse
  4. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

azure-get-indicators#


Gets indicators from the feed.

Base Command#

azure-get-indicators

Input#

Argument NameDescriptionRequired
limitThe maximum number of indicators to return. The default value is 10. Default is 10.Optional

Context Output#

There is no context output for this command.

Command Example#

!azure-get-indicators

Human Readable Output#

Indicators from Azure Feed:#

valuetype
20.37.158.0/23CIDR
20.37.194.0/24CIDR
20.39.13.0/26CIDR