About chrivand

chrivand · 04-02-2024

Try out the brand new Playbook Editor and Assignment Rules features in Cisco XDR that were released last week! Labs: https://developer.cisco.com/learning/tracks/cisco-xdr/cisco-xdr-automation/ (specifically the Response Playbook labs) Docs: https://d...

chrivand · 02-28-2024

Please use this forum for any questions you may have about the Cisco XDR APIs, the Private Intelligence Store (CTIA), Automation Workflows and any other Cisco XDR developer related topics. There are no wrong questions, only those you haven't asked! ...

chrivand · 11-15-2023

Great news, we have brand-new content available for you to learn more about Cisco XDR and it's APIs and other developer focussed information: Developer site: https://developer.cisco.com/cisco-xdr/Developer API docs: https://developer.cisco.com/docs/c...

chrivand · 01-13-2023

Hi SecureX developer community! Just before the holiday break there was a new SX release with some cool new user facing features: https://docs.securex.security.cisco.com/Orchestration-Help/Content/sxo-release-notes.html Ability to Duplicate Workf...

chrivand · 05-22-2018

Hi All,I have found that currently vMotion is stated in the config guide as being supported. Is that correct? In a previous post that was closed I could read that this was not supported yet.http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/instal...

chrivand · 06-11-2026

to add: if something is NOT marked as production, the idea is that it means it is in development still. we actually use production-ready as filter for a variety of use cases, like Agentic tool calls etc.

chrivand · 06-11-2026

hello! thanks for the feedback, we may add more things in the future, but for now the best you can do is use the Git integration. this allows you to backup and revert to workflows: https://docs.xdr.security.cisco.com/Content/Automate/github-repos.htm...

chrivand · 06-11-2026

hi, this is not possible due to lack of APIs on Secure Endpoint side. they have considered it, but do not agree with the full scan method, so I doubt it will be added soon. this being said, you can use XDR (or the CSE APIs directly) to move an endpoi...

chrivand · 06-09-2026

this is not yet possible, but on the roadmap. the way to do it now is using a scheduled query. there are multiple workflows in Exchange right now that does this trick, for example: https://connect.xdr.security.cisco.com/automation/installable/workflo...

chrivand · 01-29-2025

hi @Arthur Dent , you can do 2 things to use script variables, and I agree that we can better document that here: https://docs.xdr.security.cisco.com/Content/Automate/activities-python-execute-python-script.html. I will make sure we update that secti...

Member Since	‎12-14-2015 11:47 PM
Date Last Visited	‎06-11-2026 01:55 AM
Posts	35
Total Helpful Votes Received	37

User Statistics

User Activity

New feature in Cisco XDR: Response Playbooks and Assignment Rules

Welcome the Cisco XDR Developer Community!

New DevNet materials for Cisco XDR!

New SXO features: Duplicate Workflows and Automatic Target Creation

vMotion support for ISE

Re: Versioning and Production for Workflows

Re: Versioning and Production for Workflows

Re: XDR Initial Response - Secure Endpoint Scan

Re: XDR Automation Rule targeting Detections

Re: How to use Python Query arguments in workflow script