External DocumentationTo learn more, visit the Cortex XDR documentation.
Actions
Execute Python Script
Initiate a new endpoint script execution action using provided snippet code.

Preview this Workflow on desktop
Was this page helpful?
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
| Parameter | Description |
|---|---|
| Code | The script to be run on the endpoint. |
| Endpoint | The endpoint in which the script will be run. Select the endpoint’s hostname or manually type its ID. |
| Incident ID | String representing the incident ID. When included in the request, the Isolate Endpoints action will appear in the Cortex XDR Incident View Timeline tab. |
| Timeout | The timeout in seconds for this execution. |
{
"reply": {
"action_id": "<action ID>",
"endpoints_count": 21
}
}
Was this page helpful?