Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Google Threat Intelligence] Add curated commands and improve polling commands #111

Closed
wants to merge 369 commits into from
Closed
Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
369 commits
Select commit Hold shift + click to select a range
464ecc6
Update release note
pabloperezj Jun 19, 2024
7f2325d
Cisco webex update authentication call to use body instead of url par…
MosheEichler Jun 19, 2024
10664b5
SplunkPy: use expandtoken in mirroring query (#34840)
ilappe Jun 19, 2024
22397ad
[sane-pdf-reports] - assign markdown server port automatically (#34931)
GuyAfik Jun 19, 2024
1845b00
Joe security bug (#34892)
merit-maita Jun 19, 2024
043480d
Digital guardian Bug (#34920)
merit-maita Jun 19, 2024
a8628ef
poetry files (#34926)
samuelFain Jun 20, 2024
fa56ca8
Ys add 'get-machine-by-ip- command (#34814)
YaelShamai Jun 20, 2024
108afed
Added backslashes handling to drilldown enrichment (#34811)
ShacharKidor Jun 20, 2024
80abdae
Removed reference of checkpoint from readme file (#34964)
yasta5 Jun 20, 2024
a9d259e
Fixed an issue where test button failed with un informative error. (#…
omerKarkKatz Jun 20, 2024
39b9daa
PrintToParentIncident skip name change (#34979)
anas-yousef Jun 20, 2024
7ca796f
[CSP] Fixed issue uploading large files (#34921)
mmhw Jun 20, 2024
77597ab
delete tpb (#34990)
sapirshuker Jun 20, 2024
063a1c0
O365 Security and Compliance Auth Fix (#34896)
amshamah419 Jun 20, 2024
bcc615b
Fix alert regression in create email html body script (#34966)
MosheEichler Jun 21, 2024
415b306
[Xsup 38544 ] DisplayHTMLWithImages no default color for background (…
bziser Jun 21, 2024
f3966f3
Fix proofpoint widget (#34983)
omerKarkKatz Jun 22, 2024
1d17d33
Use `demisto/py3-tools` instead of `demisto/fastapi` for Pydantic (#…
dorschw Jun 23, 2024
4f55928
fix converting a response to json CoreIRApiModule (#34975)
rshunim Jun 23, 2024
b22a720
move autobump rn to source github_workflow_scripts folder (#34999)
israelpoli Jun 23, 2024
fca6c4a
reverted insecure parameter in OpenCTI (#34913)
yucohen Jun 23, 2024
676fb17
replace IP in AV TPB (#35000)
dorschw Jun 23, 2024
8118664
Revert "delete tpb (#34990)" (#35002)
sapirshuker Jun 23, 2024
ae2d22f
Get Content Roles from Blob (#34932)
kgal-pan Jun 23, 2024
a5d0089
[sane-pdf-reports] - fix issue where large customer logos were not pa…
GuyAfik Jun 23, 2024
7cc9c1a
Update docker image tag (#35005)
samuelFain Jun 23, 2024
98aaa97
[CortexXDRIR] Adjusted to rely on remote_args.data for closing in mir…
bziser Jun 23, 2024
006aa37
Fix Typo of SecureID instead of the correct "SecurID" (#34977)
yasta5 Jun 23, 2024
587654c
Update approved_categories.json (#35009)
dantavori Jun 23, 2024
751f181
Add screenshot of Lessons Learned playbook (#34969)
ShirleyDenkberg Jun 23, 2024
88109ef
copying all images from readme&description to doc_files folder (#34591)
maimorag Jun 23, 2024
ef8ba93
Csc new pack (#34608)
noydavidi Jun 24, 2024
4f89781
Update Docker Image To demisto/mlurlphishing (#35026)
content-bot Jun 24, 2024
e1f0c49
Use Content Roles in Internal PR (#35029)
kgal-pan Jun 24, 2024
2ecd464
Update playbook-NIST_-_Lessons_Learned_README.md (#35015)
ShirleyDenkberg Jun 24, 2024
12a9cae
Update Docker Image To demisto/crypto (#35023)
content-bot Jun 24, 2024
30df2e6
Fix for 'NGFW Internal Scan' playbook (#34776)
TalNos Jun 24, 2024
020b55d
AzureRiskyUsers v1.1.36 - azure-risky-users-list extension (#34654) (…
content-bot Jun 24, 2024
8187bf8
CISOMetrics dashboard - set marketplace to xsoar_on_prem (#34986)
adi88d Jun 24, 2024
76b4da5
[Marketplace Contribution] System Diagnostics and Health Check - Cont…
content-bot Jun 24, 2024
f2eed4a
My Threat Landscape dashboard - Update the indicators query (#35011)
adi88d Jun 24, 2024
fc05862
[Cortex XDR - XQL Query Engine] Updated not use Integration Context (…
mmhw Jun 24, 2024
e957d44
Fixes for 'Possible External RDP Brute-Force - Set Verdict' XSIAM pla…
TalNos Jun 24, 2024
706d653
Update Docker Image To demisto/ldap (#35019)
content-bot Jun 24, 2024
51905e5
Update content codeowners files (#35039)
samuelFain Jun 24, 2024
943a5d4
Upgrade Jira version (#34897)
yaakovpraisler Jun 24, 2024
a253562
updating the content oncall tagging by jeeves (#35049)
kobymeir Jun 24, 2024
7dc3aa3
Add more inputs to GridFieldSetup (#35016) (#35046)
content-bot Jun 24, 2024
81e706f
updating the content oncall tagging by jeeves (#35051)
kobymeir Jun 24, 2024
42ffdb2
Arcanna.ai v1.2 commands update (#35040)
content-bot Jun 25, 2024
50750bd
Add error catch to AwsEC2SyncAccounts (#32477)
jlevypaloalto Jun 25, 2024
76d23c9
Updating Pack Categories (#35043)
nkanon Jun 25, 2024
2f5d66d
fix (#35055)
michal-dagan Jun 25, 2024
9f612a6
change fetch incidents log and reimplement mirroring (#134) (#35057)
content-bot Jun 25, 2024
205e5a1
Ews fetch fix image (#34116)
tcarmeli1 Jun 25, 2024
de3aab2
fix sentinelone-get-threats cmd (#34988) (#35041)
RotemAmit Jun 25, 2024
ea06ef6
Test Playbook for 'Impossible Traveler - Enrichment' (#34744)
TalNos Jun 25, 2024
3809df5
fix the events duplication problem (#34824)
omerKarkKatz Jun 25, 2024
e08a0b5
Update Pre Commit autopep8 Repo (#35013)
AradCarmi Jun 25, 2024
da0d2bb
Test Playbook for 'Identity Analytics - Alert Handling' (#34698)
TalNos Jun 25, 2024
8a4f32d
Netmiko (#35044)
content-bot Jun 25, 2024
554a08a
Hide parameter xsiam (#34731)
rshunim Jun 25, 2024
9170a0a
use EWS to send mail (#35065)
dorschw Jun 26, 2024
83e17c8
update indicators query (#35066)
adi88d Jun 26, 2024
11db617
Fixes For 'Get entity alerts by MITRE tactics' XSIAM Playbook (#34545)
TalNos Jun 26, 2024
a0c274a
Azure data explorer client credentials (#35010)
noydavidi Jun 26, 2024
b852166
remove zipfile from native ignore (#35056)
talzich Jun 26, 2024
db97784
[Marketplace Contribution] Microsoft Exchange Online - Content Pack U…
content-bot Jun 26, 2024
b6976ac
Fix ews docker (#35070)
tcarmeli1 Jun 26, 2024
6570200
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_2 …
samuelFain Jun 26, 2024
03a34e7
[Marketplace Contribution] PAN-OS Policy Optimizer (beta) - Content P…
content-bot Jun 26, 2024
6de783c
Cscdomain manager description (#35058)
noydavidi Jun 26, 2024
5b9a799
run xdr (#35035)
tcarmeli1 Jun 26, 2024
c33a940
Domaintools Enterprise pack v1.1.6 (#35062) (#35082)
content-bot Jun 26, 2024
c8ba18b
Fix Akamai duplicated & missing events issue (#34810)
YuvHayun Jun 26, 2024
63c88b1
[ReadQRCode] Fix pipe output (#34579)
jlevypaloalto Jun 26, 2024
3eee441
Fix for 'cortex xdr - endpoint investigation' test playbook (#34984)
TalNos Jun 26, 2024
2d583e2
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_4 …
samuelFain Jun 27, 2024
c767af5
ReversingLabs A1000 and TiScale (#35086)
content-bot Jun 27, 2024
f63590d
Panorama: fix a bug in the fetch_incidents (#35059)
ilappe Jun 27, 2024
3f7b532
fix validat params (#35071)
ilappe Jun 27, 2024
1d9944f
pb fix (#35085)
Ni-Knight Jun 27, 2024
7a27430
fix folder path (#35079)
maimorag Jun 27, 2024
637a638
[pack][identityrecordedfuture][v2.0.0] (#34534) (#35092)
content-bot Jun 27, 2024
f1ea2a6
RN- removing invalid header(content item doesn't exist) (#35084)
maimorag Jun 27, 2024
4f23a5c
remove (#35036)
shmuel44 Jun 27, 2024
e0ae02f
Update contribution team. (#35097)
thefrieddan1 Jun 27, 2024
fe6be57
add value (#35098)
BEAdi Jun 27, 2024
f7c17a4
Added ignore (#35100)
Shellyber Jun 27, 2024
cdaba20
Fix for 'Impossible Traveler Response' XSIAM playbook (#35067)
TalNos Jun 27, 2024
31d3663
Ciphertrust integration (#34989)
mayyagoldman Jun 27, 2024
87e5812
remove (#35072)
shmuel44 Jun 27, 2024
2535c2a
Bump sane reports (#35105)
JudahSchwartz Jun 29, 2024
1ce2cbb
Changed on call dev names (#35099)
ShacharKidor Jun 30, 2024
883b050
remove (#35080)
shmuel44 Jun 30, 2024
f12c8d0
add EWS v2 to commands (#35094)
tcarmeli1 Jun 30, 2024
507e4cd
rephrase (#35119)
BEAdi Jun 30, 2024
2b32a94
update polling message (#34925) (#35120)
content-bot Jun 30, 2024
d36b819
Feature/checkpoint harmony endpoint (#35118)
content-bot Jun 30, 2024
c3447c6
Test Playbook for 'IOC Alert' (#34770)
TalNos Jun 30, 2024
6032558
[Hey] Improve `header` Argument (#35117)
shmuel44 Jun 30, 2024
1168f4c
CS falcon list files add limitation docs (#35090)
MosheEichler Jun 30, 2024
03d6540
Fix for 'Local Analysis alert Investigation' XSIAM playbook (#35073)
TalNos Jun 30, 2024
acd3def
remove (#35122)
shmuel44 Jun 30, 2024
4c72f94
HPE Switch Modeling (#34878)
cweltPA Jun 30, 2024
947f046
CIAC-10123 Cisco Catalyst Modeling Enhancement (#34802)
cweltPA Jun 30, 2024
5612960
created Darktrace ASM integration (#33639) (#35124)
content-bot Jun 30, 2024
ff11abd
init (#35110)
jlevypaloalto Jun 30, 2024
f9ef94a
poetry files (#35131)
content-bot Jul 1, 2024
688a45f
Fix AWS-EC2 Timeout (#34710)
jlevypaloalto Jul 1, 2024
cb92f0a
Added xsoar-supported and deprecation filters to download_packs (#35089)
JasBeilin Jul 1, 2024
a0ad264
[CSP] Revert PR 34921 (#35132)
mmhw Jul 1, 2024
429e80a
EXPANDR-9733 - AWS Patching (#35108)
content-bot Jul 1, 2024
fad1000
Fix cisco commands (#34550)
adi88d Jul 1, 2024
ae82386
10878 xpanse cortex xdr (#34933)
maimorag Jul 1, 2024
7fe0785
rasterize frameStoppedLoading (#34666)
tkatzir Jul 1, 2024
2f091ba
remove (#35129)
shmuel44 Jul 1, 2024
b1f06ab
avoid collect draft prs in autobump (#35153)
israelpoli Jul 1, 2024
b9c2304
raising an error when suddenDeath chosen in incremental feed (#35142)
maimorag Jul 1, 2024
e798cd6
TeamCymru adoption start (#35109) (#35155)
content-bot Jul 1, 2024
4271c0e
remove policy rule install command from integration (#35150)
content-bot Jul 1, 2024
2a8e173
Yc/rapid7/ciac 9577 (#34490)
yedidyacohenpalo Jul 1, 2024
0ed38d3
Mail Listener v2 - Fix fetch (#34820)
adi88d Jul 1, 2024
7b50006
[CSP] Increasing timeout for generic_http_request to 60 seconds (#35149)
mmhw Jul 1, 2024
e95249c
Update Docker Image To demisto/py3-tools (#35022)
content-bot Jul 1, 2024
b999425
Add Mattermost Pack to all marketplaces (#35028)
MLainer1 Jul 2, 2024
6503122
[CortexXDRIR] Updated the descriptions for the lte_creation_time and …
bziser Jul 2, 2024
a3a7b29
[AUD] bump demisto/chromium (#35164)
samuelFain Jul 2, 2024
90165e5
Ciac 4934 jira service management (#34860)
talzich Jul 2, 2024
04576b4
fix o365 docker bc (#35156)
tcarmeli1 Jul 2, 2024
7d86249
Fix issue when finding reviewer and reviewer already finished the rev…
edik24 Jul 2, 2024
d883830
CTF Packs - Removed XSOAR on-prem Marketplace (#35159)
ShacharKidor Jul 2, 2024
5ff9da8
[CortexXpanse] - EXPANDR 9482 - Update Cortex Xpanse Integration Comm…
content-bot Jul 2, 2024
e929720
Get incident by query small fix (#35176)
Shellyber Jul 2, 2024
cead76c
[XSUP-39029] fix unhandled error (#35167)
dantavori Jul 2, 2024
151d71b
[Marketplace Contribution] FTP (#34659) (#35177)
content-bot Jul 2, 2024
7558703
Revert "CTF Packs - Removed XSOAR on-prem Marketplace (#35159)" (#35187)
ShacharKidor Jul 2, 2024
18f6d1a
ExtractIndicators add outputs (#35179)
MosheEichler Jul 2, 2024
cb4c316
Align dbot output context path and unignore IN124 (#35045)
YuvHayun Jul 2, 2024
88979d2
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_7 …
samuelFain Jul 2, 2024
5f6d8c5
[Native Image & IntezerV2] (#35077)
shmuel44 Jul 2, 2024
c34a2a4
Revert "[Marketplace Contribution] FTP (#34659) (#35177)" (#35199)
dantavori Jul 2, 2024
07e9cc7
Ciac 10544 rasterize handle regression regarding integration option p…
ilaredo Jul 3, 2024
a155379
Added external last updated time incident field to the commontypes (#…
omerKarkKatz Jul 3, 2024
ed3259d
HPE switch marketplace (#35201)
Shellyber Jul 3, 2024
f7a577d
Revert "Revert "[Marketplace Contribution] FTP"" (#35200)
dantavori Jul 3, 2024
2c16264
Update PaloAltoNetworks_Cortex_XDR_Incident_Sync_README.md (#35181)
ShirleyDenkberg Jul 3, 2024
c3dfbfb
[SplunkPy] Update the README Troubleshooting (#35208)
mmhw Jul 3, 2024
39bb1d1
Align dbot output context path and IN124 problematic packs (#35136)
YuvHayun Jul 3, 2024
87545fc
fix ComonServerPython docstring (#35197)
MosheEichler Jul 3, 2024
0c88e41
Prevent changing infra files (#35209)
dorschw Jul 3, 2024
4c95c40
demisto class for all (#35211)
dantavori Jul 3, 2024
da40b83
New pack for CVE-2024-6387 (#35220)
melamedbn Jul 3, 2024
74b69ce
Fix roles in common playbooks data collection task (#35133)
ssokolovich Jul 3, 2024
b9c3ae1
Recorded Future Intelligence Cloud CIAC - 10390 (#35030)
ellopez777 Jul 4, 2024
59f298c
fixed test pb (#35221)
omerKarkKatz Jul 4, 2024
f24da5b
Switch netutils (#34874)
JudahSchwartz Jul 4, 2024
90b8c0e
updated the classifier and layout of the qradar integration (#35222)
omerKarkKatz Jul 4, 2024
6bf2c68
improved implementation of IsIncidentPartOfCampaign (#33954)
dantavori Jul 4, 2024
27c8913
Zerofox/add cac data (#35227)
content-bot Jul 4, 2024
1cdf9a8
Fixed CortexCoreIR http_request (#35206)
maimorag Jul 4, 2024
6579794
Azure SQL Management - Client Credentials (#35175)
noydavidi Jul 4, 2024
858bacc
Azure waf client credentials (#35182)
noydavidi Jul 4, 2024
0f2baeb
Update integration logo (#35112) (#35225)
content-bot Jul 4, 2024
26da499
Azure devops client credentials (#35034)
noydavidi Jul 4, 2024
43efec8
SplunkPy:get drilldown search in correct format (#35162)
ilappe Jul 4, 2024
c510750
[MicrosoftAzureStorageApiModule] fixed token to start with '?' (#35223)
bziser Jul 4, 2024
f41cecb
[Auto Update Docker] AUD-demisto/bump-demisto-xsoar-tools (#35232)
samuelFain Jul 4, 2024
ead9fad
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_8 …
samuelFain Jul 4, 2024
4197ab8
Removing exclusion (#35253)
JasBeilin Jul 4, 2024
09fd8fc
Arcanna ai 1.2.1 bugfix (#35255) (#35260)
content-bot Jul 5, 2024
a3b14f4
Fetch assets is stuck on an expired export uuid (#34437)
merit-maita Jul 5, 2024
961c595
Add Feed Integration
pabloperezj Jul 5, 2024
876d92b
Lint
pabloperezj Jul 5, 2024
1754fb8
Install And Archive Python Library script (#33742)
melamedbn Jul 5, 2024
bb0ef25
Malicious Pod Response (#35269)
melamedbn Jul 6, 2024
19d69be
poetry files (#35263)
content-bot Jul 7, 2024
19105e7
Ia servicenow (#35160)
inbalapt1 Jul 7, 2024
9d7bec6
[PAN-OS Policy Optimizer] (#34936)
shmuel44 Jul 7, 2024
a0963a1
XSUP-38911/ArcSight/FixErrorMsg (#35210)
AradCarmi Jul 7, 2024
7f54137
XSUP-39128/OpsGenieV3/get_on_call_start_date_fix (#35219)
AradCarmi Jul 7, 2024
2ec7352
CTF Packs - Removed XSOAR on-prem Marketplace (#35189)
ShacharKidor Jul 7, 2024
1d5b41a
Azure Kubernetes Services client credentials flow (#35161)
noydavidi Jul 7, 2024
643252e
Updated README (#35271)
eepstain Jul 7, 2024
1df622f
Defang Added (#35278)
content-bot Jul 7, 2024
0840a69
DemistoRESTAPI: added logs (#35277)
ilappe Jul 7, 2024
2ff45cf
CRTX-120855/ GitHub Event Collector (#35284)
RotemAmit Jul 7, 2024
227359f
Demisto class for most (#35283)
dantavori Jul 7, 2024
14c121c
Update CrowdStrikeFalcon.yml (#34916)
ShirleyDenkberg Jul 8, 2024
9f4e66a
Fix 3.11 issues (#33951)
dorschw Jul 8, 2024
9266689
Ys cb eedr update version (#34757)
YaelShamai Jul 8, 2024
27e9341
Fix multi-tenant auth issue in S&CV2 (#35289)
amshamah419 Jul 8, 2024
73e8978
[Demisto Lock] Upgrade polling logic (#35196)
samuelFain Jul 8, 2024
4327552
Ia zimperium v2 (#35102)
inbalapt1 Jul 8, 2024
82067c1
DBotGroupXDRIncidents - set marketplace to xsoar_on_prem (#35130)
adi88d Jul 8, 2024
2b0c20c
Update Packs/GoogleThreatIntelligence/Integrations/CategorizedFeeds/C…
pabloperezj Jul 8, 2024
c43e97b
Update Packs/GoogleThreatIntelligence/Integrations/CategorizedFeeds/C…
pabloperezj Jul 8, 2024
7338711
Update Packs/GoogleThreatIntelligence/Integrations/CategorizedFeeds/C…
pabloperezj Jul 8, 2024
de52c38
Update Packs/GoogleThreatIntelligence/Integrations/CategorizedFeeds/R…
pabloperezj Jul 8, 2024
ec7c64f
Update Packs/GoogleThreatIntelligence/Integrations/CategorizedFeeds/R…
pabloperezj Jul 8, 2024
0cd4953
Fixed an issue on XSOAR 6 ExportAuditLogsToFile (#35280)
MosheEichler Jul 8, 2024
18e75cb
Include feed type in table
pabloperezj Jul 8, 2024
dde8cc1
Incremental feed
pabloperezj Jul 8, 2024
238b27d
checking ignore rm108 (#35291)
maimorag Jul 8, 2024
badd3d2
XSUP-39103/JiraV3/Fix_Incoming_Comments (#35285)
AradCarmi Jul 8, 2024
99a2c96
Delete feed integration
pabloperezj Jul 8, 2024
130d296
added sort to the verify endpoint id (#35293)
omerKarkKatz Jul 8, 2024
468bb4e
reduced the timeout configured for Test Playbook - Cortex XDR - Retri…
TalNos Jul 8, 2024
774ab7a
reduced the timeout configured for Test Playbook - Cortex XDR Malware…
TalNos Jul 8, 2024
70683a2
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_6 …
samuelFain Jul 8, 2024
7617692
Increased Account Enrichment - Generic v2.1 - Test memory_threshold (…
omerKarkKatz Jul 8, 2024
2b0cf5f
Domaintools irisdetect v1.0.14 (#35261) (#35312)
content-bot Jul 8, 2024
fc3b955
custom close reason support (#35038)
barryyosi-panw Jul 9, 2024
01db570
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_9 …
samuelFain Jul 9, 2024
5bf00f3
type annotation fix (#35317)
barryyosi-panw Jul 9, 2024
f8f46bc
revert pack version bump
DeanArbel Jul 9, 2024
a32c19b
BmcITSM- fix duplicate incidents (#35192)
maimorag Jul 9, 2024
3424dc6
[CortexXpanse] Option to add tags to assets (#35111) (#35316)
content-bot Jul 9, 2024
83dce3e
Anomali bug (#35060)
merit-maita Jul 9, 2024
acc9aa7
Aws waf regions (#35276)
merit-maita Jul 9, 2024
fdab825
Fix Fetch-Alerts Microsoft Defender for Cloud Apps (#35083)
rshunim Jul 9, 2024
d4705bd
Bump google-cloud-compute from 1.19.0 to 1.19.1 (#35314)
dependabot[bot] Jul 9, 2024
403b6b0
Skip python2 not support csp test (#35328)
barryyosi-panw Jul 9, 2024
0d35fb1
[ASM] EXPANDR-9733 Cortex ASM Patching files (#35114) (#35332)
content-bot Jul 9, 2024
3edbc9d
fix-ews-get-attachment (#35315)
tcarmeli1 Jul 9, 2024
c1fdf1d
Fix for XSOAR automation insights dashboard (#35292)
karinafishman Jul 9, 2024
44e43f9
Fix modify edl playbook (#35338)
YuvHayun Jul 10, 2024
e7df527
Zimperuim_v2_playbook (#35259)
OmriItzhak Jul 10, 2024
20830b1
Fix misslocated images (#35339)
YuvHayun Jul 10, 2024
ddbe8e4
update contribution team members. (#35330)
thefrieddan1 Jul 10, 2024
dff92a4
Update 1_34_26.md (#35343)
dantavori Jul 10, 2024
aeecb7b
Update Packs/GoogleThreatIntelligence/ReleaseNotes/1_0_1.md
pabloperezj Jul 10, 2024
89c7bac
Update Packs/GoogleThreatIntelligence/ReleaseNotes/1_0_1.md
pabloperezj Jul 10, 2024
321769f
Update Packs/GoogleThreatIntelligence/ReleaseNotes/1_0_1.md
pabloperezj Jul 10, 2024
07a565a
ipv6 regex fix (#35279)
Ni-Knight Jul 10, 2024
5c70e20
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_5 …
samuelFain Jul 10, 2024
0f8234c
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_10…
samuelFain Jul 10, 2024
663cbf8
Tenable fetch bug (#35327)
merit-maita Jul 10, 2024
1c80267
Ciac 9706 (#34564)
edik24 Jul 10, 2024
f307932
[CoreRESTApi] Fix httpMultipart loop (#35265)
jlevypaloalto Jul 10, 2024
e795a04
[Auto Update Docker] AUD-demisto/auto_update_docker_staging_branch_11…
samuelFain Jul 10, 2024
19d0df1
increased the memo for EWS Public Folders Test (#35320)
omerKarkKatz Jul 10, 2024
1286e52
Update yml
pabloperezj Jul 10, 2024
2d87a6c
CIAC-10305 Fortinet Fortigate XDM Modeling Enhancement (#35311)
cweltPA Jul 10, 2024
79c4857
Merge branch 'contrib/VirusTotal_gti_assessment_polling_commands' int…
pabloperezj Jul 11, 2024
ed40460
Update Packs/GoogleThreatIntelligence/ReleaseNotes/1_0_1.md
pabloperezj Jul 11, 2024
ecec7f0
Update Packs/GoogleThreatIntelligence/Integrations/GoogleThreatIntell…
pabloperezj Jul 11, 2024
ef729a2
Update Packs/GoogleThreatIntelligence/Integrations/GoogleThreatIntell…
pabloperezj Jul 11, 2024
75ad3e2
Update Packs/GoogleThreatIntelligence/Integrations/GoogleThreatIntell…
pabloperezj Jul 11, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -1943,7 +1943,12 @@ def upload_file(client: Client, args: dict, private: bool = False) -> List[Comma
return results


def file_scan_and_get_analysis(client: Client, args: dict):
def file_scan_and_get_analysis(
client: Client,
score_calculator: ScoreCalculator,
args: dict,
file_relationships: str
):
"""Calls to file-scan and gti-analysis-get."""
interval = int(args.get('interval_in_seconds', 60))
extended = argToBoolean(args.get('extended_data', False))
Expand All @@ -1960,6 +1965,9 @@ def file_scan_and_get_analysis(client: Client, args: dict):
args={
'entryID': args.get('entryID'),
'id': outputs.get('vtScanID'),
'file': outputs.get(
f'{INTEGRATION_ENTRY_CONTEXT}.Submission(val.id && val.id === obj.id)',
{}).get('SHA256'),
'interval_in_seconds': interval,
'extended_data': extended,
},
Expand All @@ -1973,13 +1981,14 @@ def file_scan_and_get_analysis(client: Client, args: dict):
if not isinstance(outputs, dict):
raise DemistoException('outputs is expected to be a dict')
if outputs.get('data', {}).get('attributes', {}).get('status') == 'completed':
return command_result
return file_command(client, score_calculator, args, file_relationships)
scheduled_command = ScheduledCommand(
command=f'{COMMAND_PREFIX}-file-scan-and-analysis-get',
next_run_in_seconds=interval,
args={
'entryID': args.get('entryID'),
'id': outputs.get('id'),
'file': args.get('file'),
'interval_in_seconds': interval,
'extended_data': extended,
},
Expand Down Expand Up @@ -2033,7 +2042,12 @@ def private_file_scan_and_get_analysis(client: Client, args: dict):
return CommandResults(scheduled_command=scheduled_command)


def url_scan_and_get_analysis(client: Client, args: dict):
def url_scan_and_get_analysis(
client: Client,
score_calculator: ScoreCalculator,
args: dict,
url_relationships: str
):
"""Calls to url-scan and gti-analysis-get."""
interval = int(args.get('interval_in_seconds', 60))
extended = argToBoolean(args.get('extended_data', False))
Expand Down Expand Up @@ -2062,7 +2076,7 @@ def url_scan_and_get_analysis(client: Client, args: dict):
if not isinstance(outputs, dict):
raise DemistoException('outputs is expected to be a dict')
if outputs.get('data', {}).get('attributes', {}).get('status') == 'completed':
return command_result
return url_command(client, score_calculator, args, url_relationships)
scheduled_command = ScheduledCommand(
command=f'{COMMAND_PREFIX}-url-scan-and-analysis-get',
next_run_in_seconds=interval,
Expand Down Expand Up @@ -2695,11 +2709,11 @@ def main(params: dict, args: dict, command: str):
elif command == f'{COMMAND_PREFIX}-assessment-get':
results = get_assessment_command(client, score_calculator, args)
elif command == f'{COMMAND_PREFIX}-file-scan-and-analysis-get':
results = file_scan_and_get_analysis(client, args)
results = file_scan_and_get_analysis(client, score_calculator, args, file_relationships)
elif command == f'{COMMAND_PREFIX}-private-file-scan-and-analysis-get':
results = private_file_scan_and_get_analysis(client, args)
elif command == f'{COMMAND_PREFIX}-url-scan-and-analysis-get':
results = url_scan_and_get_analysis(client, args)
results = url_scan_and_get_analysis(client, score_calculator, args, url_relationships)
else:
raise NotImplementedError(f'Command {command} not implemented')
return_results(results)
Expand Down
Loading
Loading