Skip to main content

XSOAR Lab Updates

Manage Cortex XSOAR updates

XSOAR Lab Updates

Main Use-Case

Send weekly notifications of new packs to a dedicated Slack channel.

What does this pack do?

We update on new packs once every week.
New packs are being retrieved from the public index by the "created" field, along with other fields from the pack marketplace metadata.

We use a XSOAR list (NewPacksNotifierLastRun) to cache last run times. In each playbook run the last run time is retrieved from the list, and in the end of the run, being set to the updated last run time.

Slack message is built, showing the 10 "top" packs in full preview and all others as a list.
For each pack in full preview we show:

  • author
  • support
  • description
  • price / "FREE"
  • [name](xsoar.pan.dev link)

Pack Contents

  • BuildSlackBlocksFromIndex Script - calculate the new packs from the last run and build the corresponding Slack message.
  • NewPacksNotifier Playbook - The playbook maintains the last run times of the script and executes it. Recommended to configure a job to run this playbook.

Integrations Used

  • Slack V2

PUBLISHER

XSOAR Lab

INFO

Supported ByCommunity
CreatedMay 12, 2021
Last ReleaseMay 31, 2021

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.