Nebula and Cortex XSOAR integration guide

Palo Alto Networks Cortex™ XSOAR is a security ticketing system and automation engine for security workflows. Nebula integrates with Cortex XSOAR which allows you to manually issue commands to your Nebula endpoints, or use Playbooks to automate actions normally performed through the Nebula platform. From the Cortex XSOAR console, you can scan and remediate endpoints, gather endpoint data, isolate infected endpoints from your network, and perform other actions. Click one of the links to view the topic.

Getting started

• Requirements
• Configure integration

Commands

• Overview
  • Scan
  • Isolate
  • List endpoints
  • List endpoint info
  • Get scan detections
  • Get job status
  • Suspicious activity actions
  • Get suspicious activities

Playbooks

• Add Nebula Playbooks