Hi Support Community, Currently I am facing issues to extract file from application/x-7z-compressed format in SOAR. Sequence of steps: 1. Use the get session action from CrowdStrike OAuth API App to pull the file for the specified session and sha256 and add it to the vault. 2. The file format added is "application/x-7z-compressed". 3. I am trying to use "deflate item" action from "Phantom" app to extract the original file but "application/x-7z-compressed" file format is not supported. Any other ways to extract the file rather than using deflate item? Else any different action block within crowdstrike oauth api to pull the file in original format? Also a follow up question, after extracting the file is it possible to convert it into .txt format? System specifications: SOAR version 6.4.1.361 ... View more

Running a clean install on Amazon Linux 2023. Followed the instructions on the install page for the soar-prepare-system command, not running clustered, default options for everything, created the phantom user with no trouble. /opt/splunk-soar is owned by phantom, ran the soar-install command as phantom, got through everything fine until the GitRepos step, hit this error: "INSTALL: GitRepos Configuring default playbook repos Failed to bootstrap playbook repos Install failed." Detailed error logs look kind of ugly, but seeing this: File \"/opt/splunk-soar/usr/python39/lib/python3.9/site-packages/git/cmd.py\", line 1388, in execute", " raise GitCommandError(redacted_command, status, stderr_value, stdout_value)", "git.exc.GitCommandError: Cmd('git') failed due to: exit code(128)", " cmdline: git ls-remote --heads https://github.com/phantomcyber/playbooks", " stderr: 'fatal: unable to access 'https://github.com/phantomcyber/playbooks/': SSL certificate problem: self-signed certificate in certificate chain'"], "time_elapsed_since_start": 6.000021, "time_elapsed_since_operation_start": 4.386305} ... View more

Getting following error while installing SOAR version 6.4.1: KeyError: "Rabbitmq credentials are missing from the database, rabbitmq initialization likely either failed or has not been run. Missing key: 'rabbitmq' " ... View more