Update TAXII2 Server for EDL

[ShirleyDenkberg]

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

• In Progress
• Ready
• In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

A few sentences describing the overall goals of the pull request's commits.

Must have

• Tests
• Documentation

[Ni-Knight]

Just small changes as MD will ignore <something> that are not in inline mode.

[ShahafBenYakir]

let's replace the word demisto with xsoar

[ShahafBenYakir]

• Under command taxii-server-info: The context path TAXIIServer.ServerInfo.description description should end with a period.

[ShahafBenYakir]

The is only one option so we probably need to fix the text

[ShahafBenYakir]

Suggested change

	**For Cortex XSOAR 8**
	1. All your server info can be found by running `!taxii-server-info`, the default API root for you server will usually be - `https://ext-<XSOAR-tenant>.crtx.<region>.paloaltonetworks.com/xsoar/instance/execute/<instance-name>/threatintel/`
	2. You can use the `!taxii-server-list-collections` command in order to get a list of your server's collections and their IDs. You can also do it manually by running `curl https://ext-<XSOAR-tenant>.crtx.<region>.paloaltonetworks.com/xsoar/instance/execute/<instance-name>/threatintel/collections/ | jq .` to get a list of the collections available and on your TAXII server. From the list, copy the correct ID of the collection you want to ingest.
	**For Cortex XSIAM**
	1. All your server info can be found by running `!taxii-server-info`, the default API root for you server will usually be - `https://ext-<XSIAM-tenant>.crtx.<region>.paloaltonetworks.com/xsiam/instance/execute/<instance-name>/threatintel/`
	2. You can use the `!taxii-server-list-collections` command in order to get a list of your server's collections and their IDs. You can also do it manually by running `curl https://ext-<XSIAM-tenant>.crtx.<region>.paloaltonetworks.com/xsiam/instance/execute/<instance-name>/threatintel/collections/ | jq .` to get a list of the collections available and on your TAXII server. From the list, copy the correct ID of the collection you want to ingest.
	**For Cortex XSOAR 8 or XSIAM**
	1. All your server info can be found by running `!taxii-server-info`, the default API root for you server will usually be - `https://ext-<XSOAR-tenant>.crtx.<region>.paloaltonetworks.com/xsoar/instance/execute/<instance-name>/threatintel/`
	2. You can use the `!taxii-server-list-collections` command in order to get a list of your server's collections and their IDs. You can also do it manually by running `curl https://ext-<XSOAR-tenant>.crtx.<region>.paloaltonetworks.com/xsoar/instance/execute/<instance-name>/threatintel/collections/ | jq .` to get a list of the collections available and on your TAXII server. From the list, copy the correct ID of the collection you want to ingest.

[ShahafBenYakir]

Suggested change

	(For Cortex XSOAR 8) Use one of the following options:
	- `https://ext-<XSOAR-tenant>.crtx.<region>.paloaltonetworks.com/xsoar/instance/execute/<instance-name>/<taxii2_api_endpoint>/`
	- `http://<xsoar_address>:<listen_port>/<taxii2_api_endpoint>/`
	(For Cortex XSIAM) Use one of the following options:
	- `https://ext-<XSIAM-tenant>.crtx.<region>.paloaltonetworks.com/xsiam/instance/execute/<instance-name>/<taxii2_api_endpoint>/`
	- `http://<xsoar_address>:<listen_port>/<taxii2_api_endpoint>/`
	(For Cortex XSOAR 8 or XSIAM) Use one of the following options:
	- `https://ext-<tenant>.crtx.<region>.paloaltonetworks.com/xsoar/instance/execute/<instance-name>/<taxii2_api_endpoint>/`
	- `http://<xsoar_address>:<listen_port>/<taxii2_api_endpoint>/`

[ShahafBenYakir]

I think the 2nd option is only supported when running on engine no?

[ShahafBenYakir]

Can have one option for both XSOAR 8 and XSAIM