Cortex XSIAM Developer Guide

Sub-topics

• Getting Started
  • Design
    • Use Case Design for Cortex XSIAM
    • Development scope
    • Integration design
    • Design best practices
  • Content development environments
    • IDE for script development
    • Set up a local development environment
    • Set up a GitHub Codespace environment
    • Set up a containerized development environment
    • Demisto SDK
    • Visual Studio Code extension
  • Frequently asked questions
• Integrations and scripts
  • Components
    • Integration directory structure
    • Integration metadata YAML file
    • Integration and script parameter types
    • Integration description file
    • Integration Logo Requirements
  • Developing
    • Python code conventions
    • PowerShell
    • General naming conventions
    • Integration Parameters
    • Context and outputs
    • Context standards
    • Generic commands
    • Reputation and DBot score
    • Integration commands
    • Using Docker
  • Advanced topics
    • Fetching credentials
    • Event collector integrations
    • Feed Integrations
    • Long Running Containers
    • Transform Language (DT)
    • Integration cache
    • OpenAPI (Swagger) Codegen
    • Postman code generator
    • Generate Integration Python Code from JSON
    • Generate YAML from Python
    • Scheduled Commands
    • Fetch missing incidents with generic lookback methods
  • Create a sample integration
    • Define sample integration settings
    • Write integration code
    • Test the integration
• Playbooks
  • Add a Playbook to a Content Pack
  • Playbook conventions
  • Generic playbooks
• Lists
• Issues
• Data modeling rules
  • Create data model rules
    • Test Data Model Rules
• Indicators
  • URL extraction
  • Domain extraction
  • Relationships
• Documentation
  • Documentation best practices
  • Content pack metadata file
  • Content pack release notes
  • Content Pack README
  • README files for content entities
  • Images in documentation
  • Videos in documentation
  • Documentation Contributions
• Testing
  • Linting
  • Unit testing
  • Test playbooks
  • Debugging
• Contributing content
  • Contribution requirements
  • File checklist
  • Content pack structure
  • Content pack dependencies
  • Pull request conventions
  • Contribution demo preparation
  • Contribution SLA