About chrivand

chrivand · 04-02-2024

Try out the brand new Playbook Editor and Assignment Rules features in Cisco XDR that were released last week! Labs: https://developer.cisco.com/learning/tracks/cisco-xdr/cisco-xdr-automation/ (specifically the Response Playbook labs) Docs: https://d...

chrivand · 02-28-2024

Please use this forum for any questions you may have about the Cisco XDR APIs, the Private Intelligence Store (CTIA), Automation Workflows and any other Cisco XDR developer related topics. There are no wrong questions, only those you haven't asked! ...

chrivand · 11-15-2023

Great news, we have brand-new content available for you to learn more about Cisco XDR and it's APIs and other developer focussed information: Developer site: https://developer.cisco.com/cisco-xdr/Developer API docs: https://developer.cisco.com/docs/c...

chrivand · 01-13-2023

Hi SecureX developer community! Just before the holiday break there was a new SX release with some cool new user facing features: https://docs.securex.security.cisco.com/Orchestration-Help/Content/sxo-release-notes.html Ability to Duplicate Workf...

chrivand · 05-22-2018

Hi All,I have found that currently vMotion is stated in the config guide as being supported. Is that correct? In a previous post that was closed I could read that this was not supported yet.http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/instal...

chrivand · 01-15-2024

Hi there, I am not sure if this developer forum is the best place to ask such a question. I would recommend to reach out to your Cisco Security account representative and request a demo for Cisco XDR and maybe even a trial account if possible. In sho...

chrivand · 05-09-2023

hi! I did some asking around and please check out these 2 WFs (courtesy of Sudhir Desai): { "workflow": { "unique_name": "definition_workflow_025JZ5L701VPZ4lXLAzAIimGPbT6InsMmk5", "name": "Duo API POST Parameters Encoder", "title": "Duo...

chrivand · 05-04-2023

it sounds to me like you don't need that Pyhton block at all, as you can just format the payload directly in the HTTP request activity. that being said are you sure you are exporting the script variable correctly? why are you not exporting the variab...

chrivand · 07-21-2022

hi @DevLop , just to chime in here as well on top of the great comments from @ross : There is a Splunk module for SecureX that allows you to do enrichment in SecureX Threat Response investigations. When you search for certain observables, it will als...

Re: SecureX MSSP bulk user add · 07-07-2022

hi @DevLop , correct unfortunately there is no option yet to manage child tenants as one. Currently you will need to do this per tenant separately. The API's will be your friend here, as you can automate almost everything in SecureX with it. Just use...

Member Since	‎12-14-2015 11:47 PM
Date Last Visited	‎04-12-2024 12:48 AM
Posts	29
Total Helpful Votes Received	33

User Statistics

User Activity

New feature in Cisco XDR: Response Playbooks and Assignment Rules

Welcome the Cisco XDR Developer Community!

New DevNet materials for Cisco XDR!

New SXO features: Duplicate Workflows and Automatic Target Creation

vMotion support for ISE

Re: Benchmark with SecureX

Re: SecureX HTTP Request fails with encoded parameter in body

Re: SecureX HTTP Request fails with encoded parameter in body

Re: SecureX and SIEM Architecture

Re: SecureX MSSP bulk user add