Configure Cortex XSOAR to Use PowerShell - Administrator Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Create the PowerShell script you want to run.

In this example, we have created a PowerShell script, called printarg to print an argument.

param([string]$myarg = "")
							Write-Host "This is my argument: " $myarg

1. Zip up the file. In this example, we will call the file script.

Upload the zip file you created in Step 1.

1. Select Settings → Integrations → Agent Tools → Add Tool

2. Add the file.

   You can see the script file contains the PowerShell script.

Create an automation that runs the PowerShell script.

1. Go to the Automation page and upload the script.

   In this example we have created an automation called D2PowerShellEx.

   Important to note:

   command.push("powershell.exe"): Runs the PowerShell.

   command.push("'" + which("printorg.ps1") + "'"): The absolute path of the executable script.

   //+ script/printorg.ps1: Annotation that tells the agent which tools to send to the Windows machine. The name of the zip file (script) and the script name (printarg.ps1).

   For more information about the commands, see D2 Agent Script Commands.

2. Click Save.

Run the automation in the War Room.

To run the automation, you need to install either a D2 Agent or a Shared Agent

For example, type !D2PowerShellEx myarg='success' using=sharedagent-demo