Machine Learning

Details
Content
Version History

Help to manage machine learning models in Cortex XSOAR

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	June 30, 2020
Last Release	May 2, 2021

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Playbooks

Name	Description
DBot Create Phishing Classifier V2	Create a phishing classifier using machine learning technique, based on email content.
DBot Create Phishing Classifier V2 From File	Create a phishing classifier using machine learning. The classifier is based on incidents files extracted from email content.
DBot Create Phishing Classifier V2 Job	Train the phishing machine learning model. This playbook should be used as job, to run repeatedly, for example every week.

Automations

Name	Description
DBotPredictIncidentsBatch	Apply a trained ML model on multiple incidents at once, to compare incidents how the incidents were labeled by analysts, to the predictions of the model. This script is aimed to help evaluate a trained model using past incidents.
DBotPredictOutOfTheBox	Predict phishing incidents using the out-of-the-box pre-trained model.
DBotPredictOutOfTheBoxV2	Predict phishing incidents using the out-of-the-box pre-trained model.
EvaluateMLModllAtProduction	Evaluates an ML model in production.
ExportMLModel	Exports an existing ML model to a file.
HashIncidentsFields	Hash fields from the incident list. Search for incidents by arguments with an option to hash some of its fields.
ImportMLModel	Imports a file that contains an ML model.

Machine Learning

Machine Learning 1.2.8 356353

Machine Learning

PUBLISHER

INFO

DISCLAIMER

Scripts

DBotPredictIncidentsBatch

Scripts

DBotPredictOutOfTheBoxV2

Scripts

New: DBotPredictIncidentsBatch

Scripts

DBotPredictOutOfTheBoxV2

Scripts

New: DBotPredictOutOfTheBoxV2

Scripts

ImportMLModel

Scripts

EvaluateMLModllAtProduction

Scripts

HashIncidentsFields

Scripts

DBotPredictOutOfTheBox

Scripts

HashIncidentsFields

Scripts

EvaluateMLModllAtProduction

Scripts

HashIncidentsFields