-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
IBM HA - add "haIntegrationEventID" to multiple integrations #38846
Merged
YuvHayun
merged 38 commits into
master
from
IBM_HA_add_haIntegrationEventID_to_multiple_integrations
Mar 25, 2025
Merged
IBM HA - add "haIntegrationEventID" to multiple integrations #38846
YuvHayun
merged 38 commits into
master
from
IBM_HA_add_haIntegrationEventID_to_multiple_integrations
Mar 25, 2025
+74
−15
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
...ityVerify/ParsingRules/IBM_Security_Verify_ParsingRules/IBM_Security_Verify_ParsingRules.yml
Show resolved
Hide resolved
Packs/Akamai_SIEM/ParsingRules/Akamai_WAF_ParsingRules/Akamai_WAF_ParsingRules.xif
Show resolved
Hide resolved
cfdf854
to
3e10df4
Compare
This PR was automatically updated by a GitHub Action
To stop automatic version bumps, add the |
This PR was automatically updated by a GitHub Action
To stop automatic version bumps, add the |
131a300
to
7cbb331
Compare
JudahSchwartz
approved these changes
Mar 23, 2025
This PR was automatically updated by a GitHub Action
To stop automatic version bumps, add the |
fd23522
to
feeff54
Compare
8f686ea
to
caf0f03
Compare
Validate summary Verdict: PR can be force merged from validate perspective? ✅ |
omerKarkKatz
pushed a commit
that referenced
this pull request
Mar 25, 2025
* add haIntegrationEventID key to qradar incidents * added rn * fixes * in progress * reverts & preperation * tests fixes * added haIntegrationEventID to more itnegrations * added rns * fixes * fixes * added sections to uptycs * work in progress, save before testing * working windows integration * done all 9 integrations * added rns * fix proof point * fix unit test * validations fixes * validations fixes * reverts * update uptycs contacts * update rns * update rns * revert ms atp * reverts * reverts * updated docker * fixed empty offset issue * added rn * reverts
inbalapt1
pushed a commit
to xsoar-contrib/content
that referenced
this pull request
Mar 26, 2025
…#38846) * add haIntegrationEventID key to qradar incidents * added rn * fixes * in progress * reverts & preperation * tests fixes * added haIntegrationEventID to more itnegrations * added rns * fixes * fixes * added sections to uptycs * work in progress, save before testing * working windows integration * done all 9 integrations * added rns * fix proof point * fix unit test * validations fixes * validations fixes * reverts * update uptycs contacts * update rns * update rns * revert ms atp * reverts * reverts * updated docker * fixed empty offset issue * added rn * reverts
DeanArbel
added a commit
that referenced
this pull request
Mar 27, 2025
…39230) * "contribution update to pack 'Microsoft Sentinel'" * Revert unwanted changes * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> * Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> * Revert unwanted changes part 2 * Aligned tests to the input type change * update release notes * fix unittest * Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> * fix * Added a note to the readme regarding the debugger panel (#39243) * CRTX-133204-Trellix_ePO-fix (#39248) * changed metadata file * added release notes * added release notes --------- Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) * Added the validate-validation-config-file hook to content (#39260) * Added the validate-validation-config-file hook to content * fixes * fix validations * Automation research releases (#39270) * new playbook - First Azure AD PowerShell operation for a user (#39159) * new playbook * RN * description fixed * added ignore * Bump pack from version CortexResponseAndRemediation to 1.1.25. * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * task description * position fix * fix for old link to documentation * continue on error * fix * skip if * fix * fix * added issilent: true --------- Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Automation Research Release - 1 (#39269) * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) --------- Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> --------- Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> * add codeowner (#39272) * [GenericPolling] Update docs (#39250) * RN * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * edit readme file (#39196) * edit readme file * documentation after tech writing fixes * fix to soft break (line break) * improve images resolution * change permission list to bullet style * [Code owners] Update ContentManagement with talzich (#39284) * Platform content support merge gateway (#39268) * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * fix json * limit common scripts * fix Core layouts * fix Core layouts --------- Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com> Co-authored-by: darbel <darbel@paloaltonetworks.com> * IBM HA - add "haIntegrationEventID" to multiple integrations (#38846) * add haIntegrationEventID key to qradar incidents * added rn * fixes * in progress * reverts & preperation * tests fixes * added haIntegrationEventID to more itnegrations * added rns * fixes * fixes * added sections to uptycs * work in progress, save before testing * working windows integration * done all 9 integrations * added rns * fix proof point * fix unit test * validations fixes * validations fixes * reverts * update uptycs contacts * update rns * update rns * revert ms atp * reverts * reverts * updated docker * fixed empty offset issue * added rn * reverts * Add ICDM Integration (#38982) (#39283) * Add ICDM Integration * Fix Formatting and Pipeline errors * Update Sections * Minor changes and refactors to address Review comments * Fix Unit test for network indicator * do not use deprecated method utcnow() * Fix context path and format readable output of Protection Commands * Update Readme * Fix version info in Readme Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com> * Box Quick Update (#39267) * Updated README and pack_metadata * Updated README * Update Packs/Box/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Box/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Box/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Box/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * [Trellix_ePO] Remove MP xsoar (#39296) * hide pack (#39290) (#39294) Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> * CortexCoreIR: added `quick actions` commands (#38663) * added prettynames placeholder * added quickaction * update prettypredefined * capital prettyPredefined * update prettypredefined * JUST FOR TEST SDK FIX * correct prettypredefined * test script * uuse sdk from branch * added supportedModules * adding the wrapper commands * remove "platform" properties from script * revert poetry changes * remove quick action from the orig command * correct the name of quick actions * fix wrong * update CoreIR integration with IA related & py code * PM changes * restore pack_metadata * replace placeholders * run ruff format after merge master * added RN * fix alert * update the RN --------- Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com> * drop CortexVulnerabilityManagement from platform (#39299) * Nivbs/ciac 13013 quick actions (#38979) * Added first draft for Quick action: Create Issue in Jira * Added first draft for Quick action: Create ServiceNow Ticket * Fixing Items in JIRA quick action * Adding Corrects Fields in Open Service Now Ticket * Quick Action Slack Integration * Quick Action MSFT Teams Integration * re-format the ${issue} syntax after clarifications * Adding Platform to pack_metadata.json * Updating pack_metadata.json for all Packs, according to platform-content-support * update supportsquickactions to higher scope adding hidden to relevant quiack-action cmds * Update slack to slackV3 * Remove deprecated arguments from JIRA cmd * Update default Value in Jira * Update Docker images versions * Update Release notes for quick actions Packs * Adding supports quick action for slack V3 * Change order of pre-defined options * Change defaultValue to predefined * Change pretty name for short_description in ServiceNowv2.yml * Remove prettyname for non required params * Update JiraV3.yml according to design changes * Update MicrosoftTeams.yml according to design changes * Update SlackV3.yml according to design changes * Update ServiceNowv2.yml according to design changes * Change from issue to alert keyword * Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType * After Server fix - change from alert to issue keyword * Update Packs/Slack/ReleaseNotes/3_5_11.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Slack/ReleaseNotes/3_5_11.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/ServiceNow/ReleaseNotes/2_7_8.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/Jira/ReleaseNotes/3_2_16.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update release note file name * Update description after pre commit notes * Create 3_5_12.md * Update Descriptions and params after product meeting * Revert "Create 3_5_12.md" This reverts commit 348e186. * Because of ST failed - update description in commands * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com> * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- Co-authored-by: darbel <darbel@paloaltonetworks.com> * fix json * limit common scripts * Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions" This reverts commit 78e897c, reversing changes made to d2885a5. * Update release notes before pre commit * Update release notes before pre commit * Update current version in pack_metadata.json * Applying changes to adjust pre-commit tests * Making sure that send slack message and send teams message dont run as one action * Updating SlackV3_test.py to support new version * Revert docker changes in slack and teams because of build not supporting new versions * Revert slack test changes becuase docker versions were not updated * Remove Unnecessary description in Teams --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com> Co-authored-by: darbel <darbel@paloaltonetworks.com> Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com> Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com> * Fix validate content tpb (#39297) * Increase timeout * fix tpb yml * FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086) * first commit * add rn * add tests- urls are from api * Bump pack from version CommonScripts to 1.19.34. * improve code * Bump pack from version ApiModules to 2.2.43. * add rn * fix docker * fix code * fix pre-commit * fix pre-commit * fix pre-commit * fix pre-commit * fix test * Bump pack from version CommonScripts to 1.19.35. * fix test * fix test playbook * fix warnings * fix warnings * fix warnings * fix warnings --------- Co-authored-by: Content Bot <bot@demisto.com> * Modified readme file - Proofpoint TAP (#39289) * Modified readme file * Update Packs/ProofpointTAP/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Improve handling of command execution timeout using timed thread in QualysV2 (#39074) * Updated Silverfort Pack README (#38764) (#39304) * Updated Silverfort README * Updated based on ilaredo's feedback * Trigger build workflow Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com> * Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291) * fix for customer issue * FeedDomainTools Release v1.0.1 (#39280) (#39305) * Add release notes * Removed release notes * Add domain discovery feed. * Added domainrdap feeds * Add test cases for domainrdap feeds * Revert hardcoded indicator type * Remove unnecessary comment * Update README * Update release notes Co-authored-by: Bri <133698148+briluza@users.noreply.github.com> * Fix upload flow core packs validation (#39306) * update the RN * empty * Intense sso failures fix (#39301) * Change 90 days to 1 day * Change 90 days to 1 day * RN --------- Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com> Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com> Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com> Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com> Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com> Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com> Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com> Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com> Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com> Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com> Co-authored-by: darbel <darbel@paloaltonetworks.com> Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com> Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com> Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com> Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com> Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com> Co-authored-by: Bri <133698148+briluza@users.noreply.github.com> Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com> Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
inbalapt1
added a commit
that referenced
this pull request
Mar 30, 2025
…39230) (#39322) * "contribution update to pack 'Microsoft Sentinel'" * Revert unwanted changes * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml * Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml * Revert unwanted changes part 2 * Aligned tests to the input type change * update release notes * fix unittest * Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md * fix * Added a note to the readme regarding the debugger panel (#39243) * CRTX-133204-Trellix_ePO-fix (#39248) * changed metadata file * added release notes * added release notes --------- * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) * Added the validate-validation-config-file hook to content (#39260) * Added the validate-validation-config-file hook to content * fixes * fix validations * Automation research releases (#39270) * new playbook - First Azure AD PowerShell operation for a user (#39159) * new playbook * RN * description fixed * added ignore * Bump pack from version CortexResponseAndRemediation to 1.1.25. * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * task description * position fix * fix for old link to documentation * continue on error * fix * skip if * fix * fix * added issilent: true --------- * Automation Research Release - 1 (#39269) * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) --------- --------- * add codeowner (#39272) * [GenericPolling] Update docs (#39250) * RN * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md --------- * edit readme file (#39196) * edit readme file * documentation after tech writing fixes * fix to soft break (line break) * improve images resolution * change permission list to bullet style * [Code owners] Update ContentManagement with talzich (#39284) * Platform content support merge gateway (#39268) * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- * fix json * limit common scripts * fix Core layouts * fix Core layouts --------- * IBM HA - add "haIntegrationEventID" to multiple integrations (#38846) * add haIntegrationEventID key to qradar incidents * added rn * fixes * in progress * reverts & preperation * tests fixes * added haIntegrationEventID to more itnegrations * added rns * fixes * fixes * added sections to uptycs * work in progress, save before testing * working windows integration * done all 9 integrations * added rns * fix proof point * fix unit test * validations fixes * validations fixes * reverts * update uptycs contacts * update rns * update rns * revert ms atp * reverts * reverts * updated docker * fixed empty offset issue * added rn * reverts * Add ICDM Integration (#38982) (#39283) * Add ICDM Integration * Fix Formatting and Pipeline errors * Update Sections * Minor changes and refactors to address Review comments * Fix Unit test for network indicator * do not use deprecated method utcnow() * Fix context path and format readable output of Protection Commands * Update Readme * Fix version info in Readme * Box Quick Update (#39267) * Updated README and pack_metadata * Updated README * Update Packs/Box/README.md * Update Packs/Box/README.md * Update Packs/Box/README.md * Update Packs/Box/README.md --------- * [Trellix_ePO] Remove MP xsoar (#39296) * hide pack (#39290) (#39294) * CortexCoreIR: added `quick actions` commands (#38663) * added prettynames placeholder * added quickaction * update prettypredefined * capital prettyPredefined * update prettypredefined * JUST FOR TEST SDK FIX * correct prettypredefined * test script * uuse sdk from branch * added supportedModules * adding the wrapper commands * remove "platform" properties from script * revert poetry changes * remove quick action from the orig command * correct the name of quick actions * fix wrong * update CoreIR integration with IA related & py code * PM changes * restore pack_metadata * replace placeholders * run ruff format after merge master * added RN * fix alert * update the RN --------- * drop CortexVulnerabilityManagement from platform (#39299) * Nivbs/ciac 13013 quick actions (#38979) * Added first draft for Quick action: Create Issue in Jira * Added first draft for Quick action: Create ServiceNow Ticket * Fixing Items in JIRA quick action * Adding Corrects Fields in Open Service Now Ticket * Quick Action Slack Integration * Quick Action MSFT Teams Integration * re-format the ${issue} syntax after clarifications * Adding Platform to pack_metadata.json * Updating pack_metadata.json for all Packs, according to platform-content-support * update supportsquickactions to higher scope adding hidden to relevant quiack-action cmds * Update slack to slackV3 * Remove deprecated arguments from JIRA cmd * Update default Value in Jira * Update Docker images versions * Update Release notes for quick actions Packs * Adding supports quick action for slack V3 * Change order of pre-defined options * Change defaultValue to predefined * Change pretty name for short_description in ServiceNowv2.yml * Remove prettyname for non required params * Update JiraV3.yml according to design changes * Update MicrosoftTeams.yml according to design changes * Update SlackV3.yml according to design changes * Update ServiceNowv2.yml according to design changes * Change from issue to alert keyword * Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType * After Server fix - change from alert to issue keyword * Update Packs/Slack/ReleaseNotes/3_5_11.md * Update Packs/Slack/ReleaseNotes/3_5_11.md * Update Packs/ServiceNow/ReleaseNotes/2_7_8.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml * Update Packs/Jira/ReleaseNotes/3_2_16.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Apply suggestions from code review * Update release note file name * Update description after pre commit notes * Create 3_5_12.md * Update Descriptions and params after product meeting * Revert "Create 3_5_12.md" This reverts commit 348e186. * Because of ST failed - update description in commands * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- * fix json * limit common scripts * Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions" This reverts commit 78e897c, reversing changes made to d2885a5. * Update release notes before pre commit * Update release notes before pre commit * Update current version in pack_metadata.json * Applying changes to adjust pre-commit tests * Making sure that send slack message and send teams message dont run as one action * Updating SlackV3_test.py to support new version * Revert docker changes in slack and teams because of build not supporting new versions * Revert slack test changes becuase docker versions were not updated * Remove Unnecessary description in Teams --------- * Fix validate content tpb (#39297) * Increase timeout * fix tpb yml * FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086) * first commit * add rn * add tests- urls are from api * Bump pack from version CommonScripts to 1.19.34. * improve code * Bump pack from version ApiModules to 2.2.43. * add rn * fix docker * fix code * fix pre-commit * fix pre-commit * fix pre-commit * fix pre-commit * fix test * Bump pack from version CommonScripts to 1.19.35. * fix test * fix test playbook * fix warnings * fix warnings * fix warnings * fix warnings --------- * Modified readme file - Proofpoint TAP (#39289) * Modified readme file * Update Packs/ProofpointTAP/README.md --------- * Improve handling of command execution timeout using timed thread in QualysV2 (#39074) * Updated Silverfort Pack README (#38764) (#39304) * Updated Silverfort README * Updated based on ilaredo's feedback * Trigger build workflow * Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291) * fix for customer issue * FeedDomainTools Release v1.0.1 (#39280) (#39305) * Add release notes * Removed release notes * Add domain discovery feed. * Added domainrdap feeds * Add test cases for domainrdap feeds * Revert hardcoded indicator type * Remove unnecessary comment * Update README * Update release notes * Fix upload flow core packs validation (#39306) * update the RN * empty * Intense sso failures fix (#39301) * Change 90 days to 1 day * Change 90 days to 1 day * RN --------- Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com> Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com> Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com> Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com> Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com> Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com> Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com> Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com> Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com> Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com> Co-authored-by: darbel <darbel@paloaltonetworks.com> Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com> Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com> Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com> Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com> Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com> Co-authored-by: Bri <133698148+briluza@users.noreply.github.com> Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com> Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
akshotiamit-pa
pushed a commit
that referenced
this pull request
Mar 31, 2025
…39230) (#39322) * "contribution update to pack 'Microsoft Sentinel'" * Revert unwanted changes * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml * Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml * Revert unwanted changes part 2 * Aligned tests to the input type change * update release notes * fix unittest * Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md * fix * Added a note to the readme regarding the debugger panel (#39243) * CRTX-133204-Trellix_ePO-fix (#39248) * changed metadata file * added release notes * added release notes --------- * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) * Added the validate-validation-config-file hook to content (#39260) * Added the validate-validation-config-file hook to content * fixes * fix validations * Automation research releases (#39270) * new playbook - First Azure AD PowerShell operation for a user (#39159) * new playbook * RN * description fixed * added ignore * Bump pack from version CortexResponseAndRemediation to 1.1.25. * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * task description * position fix * fix for old link to documentation * continue on error * fix * skip if * fix * fix * added issilent: true --------- * Automation Research Release - 1 (#39269) * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) --------- --------- * add codeowner (#39272) * [GenericPolling] Update docs (#39250) * RN * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md --------- * edit readme file (#39196) * edit readme file * documentation after tech writing fixes * fix to soft break (line break) * improve images resolution * change permission list to bullet style * [Code owners] Update ContentManagement with talzich (#39284) * Platform content support merge gateway (#39268) * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- * fix json * limit common scripts * fix Core layouts * fix Core layouts --------- * IBM HA - add "haIntegrationEventID" to multiple integrations (#38846) * add haIntegrationEventID key to qradar incidents * added rn * fixes * in progress * reverts & preperation * tests fixes * added haIntegrationEventID to more itnegrations * added rns * fixes * fixes * added sections to uptycs * work in progress, save before testing * working windows integration * done all 9 integrations * added rns * fix proof point * fix unit test * validations fixes * validations fixes * reverts * update uptycs contacts * update rns * update rns * revert ms atp * reverts * reverts * updated docker * fixed empty offset issue * added rn * reverts * Add ICDM Integration (#38982) (#39283) * Add ICDM Integration * Fix Formatting and Pipeline errors * Update Sections * Minor changes and refactors to address Review comments * Fix Unit test for network indicator * do not use deprecated method utcnow() * Fix context path and format readable output of Protection Commands * Update Readme * Fix version info in Readme * Box Quick Update (#39267) * Updated README and pack_metadata * Updated README * Update Packs/Box/README.md * Update Packs/Box/README.md * Update Packs/Box/README.md * Update Packs/Box/README.md --------- * [Trellix_ePO] Remove MP xsoar (#39296) * hide pack (#39290) (#39294) * CortexCoreIR: added `quick actions` commands (#38663) * added prettynames placeholder * added quickaction * update prettypredefined * capital prettyPredefined * update prettypredefined * JUST FOR TEST SDK FIX * correct prettypredefined * test script * uuse sdk from branch * added supportedModules * adding the wrapper commands * remove "platform" properties from script * revert poetry changes * remove quick action from the orig command * correct the name of quick actions * fix wrong * update CoreIR integration with IA related & py code * PM changes * restore pack_metadata * replace placeholders * run ruff format after merge master * added RN * fix alert * update the RN --------- * drop CortexVulnerabilityManagement from platform (#39299) * Nivbs/ciac 13013 quick actions (#38979) * Added first draft for Quick action: Create Issue in Jira * Added first draft for Quick action: Create ServiceNow Ticket * Fixing Items in JIRA quick action * Adding Corrects Fields in Open Service Now Ticket * Quick Action Slack Integration * Quick Action MSFT Teams Integration * re-format the ${issue} syntax after clarifications * Adding Platform to pack_metadata.json * Updating pack_metadata.json for all Packs, according to platform-content-support * update supportsquickactions to higher scope adding hidden to relevant quiack-action cmds * Update slack to slackV3 * Remove deprecated arguments from JIRA cmd * Update default Value in Jira * Update Docker images versions * Update Release notes for quick actions Packs * Adding supports quick action for slack V3 * Change order of pre-defined options * Change defaultValue to predefined * Change pretty name for short_description in ServiceNowv2.yml * Remove prettyname for non required params * Update JiraV3.yml according to design changes * Update MicrosoftTeams.yml according to design changes * Update SlackV3.yml according to design changes * Update ServiceNowv2.yml according to design changes * Change from issue to alert keyword * Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType * After Server fix - change from alert to issue keyword * Update Packs/Slack/ReleaseNotes/3_5_11.md * Update Packs/Slack/ReleaseNotes/3_5_11.md * Update Packs/ServiceNow/ReleaseNotes/2_7_8.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml * Update Packs/Jira/ReleaseNotes/3_2_16.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Apply suggestions from code review * Update release note file name * Update description after pre commit notes * Create 3_5_12.md * Update Descriptions and params after product meeting * Revert "Create 3_5_12.md" This reverts commit 348e186. * Because of ST failed - update description in commands * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- * fix json * limit common scripts * Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions" This reverts commit 78e897c, reversing changes made to d2885a5. * Update release notes before pre commit * Update release notes before pre commit * Update current version in pack_metadata.json * Applying changes to adjust pre-commit tests * Making sure that send slack message and send teams message dont run as one action * Updating SlackV3_test.py to support new version * Revert docker changes in slack and teams because of build not supporting new versions * Revert slack test changes becuase docker versions were not updated * Remove Unnecessary description in Teams --------- * Fix validate content tpb (#39297) * Increase timeout * fix tpb yml * FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086) * first commit * add rn * add tests- urls are from api * Bump pack from version CommonScripts to 1.19.34. * improve code * Bump pack from version ApiModules to 2.2.43. * add rn * fix docker * fix code * fix pre-commit * fix pre-commit * fix pre-commit * fix pre-commit * fix test * Bump pack from version CommonScripts to 1.19.35. * fix test * fix test playbook * fix warnings * fix warnings * fix warnings * fix warnings --------- * Modified readme file - Proofpoint TAP (#39289) * Modified readme file * Update Packs/ProofpointTAP/README.md --------- * Improve handling of command execution timeout using timed thread in QualysV2 (#39074) * Updated Silverfort Pack README (#38764) (#39304) * Updated Silverfort README * Updated based on ilaredo's feedback * Trigger build workflow * Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291) * fix for customer issue * FeedDomainTools Release v1.0.1 (#39280) (#39305) * Add release notes * Removed release notes * Add domain discovery feed. * Added domainrdap feeds * Add test cases for domainrdap feeds * Revert hardcoded indicator type * Remove unnecessary comment * Update README * Update release notes * Fix upload flow core packs validation (#39306) * update the RN * empty * Intense sso failures fix (#39301) * Change 90 days to 1 day * Change 90 days to 1 day * RN --------- Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com> Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com> Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com> Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com> Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com> Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com> Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com> Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com> Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com> Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com> Co-authored-by: darbel <darbel@paloaltonetworks.com> Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com> Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com> Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com> Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com> Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com> Co-authored-by: Bri <133698148+briluza@users.noreply.github.com> Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com> Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
oatias
pushed a commit
that referenced
this pull request
Apr 1, 2025
…39230) (#39322) * "contribution update to pack 'Microsoft Sentinel'" * Revert unwanted changes * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml * Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md * Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml * Revert unwanted changes part 2 * Aligned tests to the input type change * update release notes * fix unittest * Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md * fix * Added a note to the readme regarding the debugger panel (#39243) * CRTX-133204-Trellix_ePO-fix (#39248) * changed metadata file * added release notes * added release notes --------- * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) * Added the validate-validation-config-file hook to content (#39260) * Added the validate-validation-config-file hook to content * fixes * fix validations * Automation research releases (#39270) * new playbook - First Azure AD PowerShell operation for a user (#39159) * new playbook * RN * description fixed * added ignore * Bump pack from version CortexResponseAndRemediation to 1.1.25. * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml * task description * position fix * fix for old link to documentation * continue on error * fix * skip if * fix * fix * added issilent: true --------- * Automation Research Release - 1 (#39269) * fix: get mapping fields function does not except any arguments (#38786) (#39261) * fix: get mapping fields function does not except any arguments * feat: add Bryan van der Net to CONTRIBUTORS.json * fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections * fix: update Docker image version for SentinelOne V2 integration * docs: update Docker image version in release notes for SentinelOne V2 integration * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * Update Packs/SentinelOne/ReleaseNotes/3_2_37.md * Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml * style: pr still showing changes on the release notes * Bump version and generate release notes * revert: revert config changes * chore: bump version and update release notes * style: undo random formatting changes --------- * Modeling rules modification - CRTX-151278 (#39103) * Modified modeling rule after the modification of the integration * Fixed schema file * Added release note and modified modeling rule * Pack's version update * Update Packs/qualys/ReleaseNotes/3_2_4.md * Modified modeling rule * Bump pack from version qualys to 3.2.5. * Added xdm.event.type to assets events * Added tag * Fixed schema file * Fixed schema file --------- * Update Pan-OS playbook for supporting version 11 (#39249) * added itamar (#39265) --------- --------- * add codeowner (#39272) * [GenericPolling] Update docs (#39250) * RN * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md * Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md --------- * edit readme file (#39196) * edit readme file * documentation after tech writing fixes * fix to soft break (line break) * improve images resolution * change permission list to bullet style * [Code owners] Update ContentManagement with talzich (#39284) * Platform content support merge gateway (#39268) * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- * fix json * limit common scripts * fix Core layouts * fix Core layouts --------- * IBM HA - add "haIntegrationEventID" to multiple integrations (#38846) * add haIntegrationEventID key to qradar incidents * added rn * fixes * in progress * reverts & preperation * tests fixes * added haIntegrationEventID to more itnegrations * added rns * fixes * fixes * added sections to uptycs * work in progress, save before testing * working windows integration * done all 9 integrations * added rns * fix proof point * fix unit test * validations fixes * validations fixes * reverts * update uptycs contacts * update rns * update rns * revert ms atp * reverts * reverts * updated docker * fixed empty offset issue * added rn * reverts * Add ICDM Integration (#38982) (#39283) * Add ICDM Integration * Fix Formatting and Pipeline errors * Update Sections * Minor changes and refactors to address Review comments * Fix Unit test for network indicator * do not use deprecated method utcnow() * Fix context path and format readable output of Protection Commands * Update Readme * Fix version info in Readme * Box Quick Update (#39267) * Updated README and pack_metadata * Updated README * Update Packs/Box/README.md * Update Packs/Box/README.md * Update Packs/Box/README.md * Update Packs/Box/README.md --------- * [Trellix_ePO] Remove MP xsoar (#39296) * hide pack (#39290) (#39294) * CortexCoreIR: added `quick actions` commands (#38663) * added prettynames placeholder * added quickaction * update prettypredefined * capital prettyPredefined * update prettypredefined * JUST FOR TEST SDK FIX * correct prettypredefined * test script * uuse sdk from branch * added supportedModules * adding the wrapper commands * remove "platform" properties from script * revert poetry changes * remove quick action from the orig command * correct the name of quick actions * fix wrong * update CoreIR integration with IA related & py code * PM changes * restore pack_metadata * replace placeholders * run ruff format after merge master * added RN * fix alert * update the RN --------- * drop CortexVulnerabilityManagement from platform (#39299) * Nivbs/ciac 13013 quick actions (#38979) * Added first draft for Quick action: Create Issue in Jira * Added first draft for Quick action: Create ServiceNow Ticket * Fixing Items in JIRA quick action * Adding Corrects Fields in Open Service Now Ticket * Quick Action Slack Integration * Quick Action MSFT Teams Integration * re-format the ${issue} syntax after clarifications * Adding Platform to pack_metadata.json * Updating pack_metadata.json for all Packs, according to platform-content-support * update supportsquickactions to higher scope adding hidden to relevant quiack-action cmds * Update slack to slackV3 * Remove deprecated arguments from JIRA cmd * Update default Value in Jira * Update Docker images versions * Update Release notes for quick actions Packs * Adding supports quick action for slack V3 * Change order of pre-defined options * Change defaultValue to predefined * Change pretty name for short_description in ServiceNowv2.yml * Remove prettyname for non required params * Update JiraV3.yml according to design changes * Update MicrosoftTeams.yml according to design changes * Update SlackV3.yml according to design changes * Update ServiceNowv2.yml according to design changes * Change from issue to alert keyword * Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType * After Server fix - change from alert to issue keyword * Update Packs/Slack/ReleaseNotes/3_5_11.md * Update Packs/Slack/ReleaseNotes/3_5_11.md * Update Packs/ServiceNow/ReleaseNotes/2_7_8.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml * Update Packs/Jira/Integrations/JiraV3/JiraV3.yml * Update Packs/Jira/ReleaseNotes/3_2_16.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md * Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml * Apply suggestions from code review * Update release note file name * Update description after pre commit notes * Create 3_5_12.md * Update Descriptions and params after product meeting * Revert "Create 3_5_12.md" This reverts commit 348e186. * Because of ST failed - update description in commands * batch_1 (#39162) * Adopt 'platform' MP to content packs #2 (#39163) * batch_2 * revert incorrect changes * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #3 (#39164) * batch_3 * remove identity_threat --------- * batch_4 (#39165) * Adopt 'platform' MP to content packs #6 (#39167) * batch_6 * revert incorrect changes * batch_7 (#39168) * Adopt 'platform' MP to content packs #8 (#39169) * batch_8 * revert incorrect changes * Update Packs/CommonScripts/pack_metadata.json --------- * Adopt 'platform' MP to content packs #9 (#39170) * batch_9 * revert quick actions * revert incorrect changes * revert incorrect changes * batch_5 (#39232) * batch_10 (#39171) * batch_11 (#39172) * Adopt 'platform' MP to content packs #12 (#39173) * batch_12 * revert incorrect changes * batch_13 (#39174) * Adopt 'platform' MP to content packs #14 (#39175) * batch_14 * revert incorrect changes * Adopt 'platform' MP to content packs #15 (#39176) * batch_15 * Update Packs/FiltersAndTransformers/pack_metadata.json --------- * batch_16 (#39177) * batch_17 (#39178) * Adopt 'platform' MP to content packs #18 (#39179) * batch_18 * revert incorrect changes * Adopt 'platform' MP to content packs #19 (#39180) * batch_19 * Update Packs/Jira/pack_metadata.json --------- * batch_20 (#39181) * Adopt 'platform' MP to content packs #21 (#39182) * batch_21 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #22 (#39183) * batch_22 * revert incorrect changes * Update Packs/Office365AndAzureAuditLog/pack_metadata.json --------- * batch_24 (#39185) * Adopt 'platform' MP to content packs #25 (#39186) * batch_25 * Update Packs/PingIdentity/pack_metadata.json * Update Packs/PrismaAccess/pack_metadata.json --------- * Adopt 'platform' MP to content packs #26 (#39187) * batch_26 * revert incorrect changes * Adopt 'platform' MP to content packs #27 (#39188) * batch_27 * revert incorrect changes * Adopt 'platform' MP to content packs #28 (#39189) * batch_28 * revert incorrect changes * remove identity_threat --------- * Adopt 'platform' MP to content packs #29 (#39190) * batch_29 * revert incorrect changes * Update Packs/Slack/pack_metadata.json --------- * batch_30 (#39191) * batch_31 (#39192) * Adopt 'platform' MP to content packs #32 (#39193) * batch_32 * Update Packs/Workday/pack_metadata.json --------- * batch_33 (#39194) * Adopt 'platform' MP to content packs #23 (#39184) * batch_23 * revert incorrect changes * remove identity_threat --------- * fix json * limit common scripts * Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions" This reverts commit 78e897c, reversing changes made to d2885a5. * Update release notes before pre commit * Update release notes before pre commit * Update current version in pack_metadata.json * Applying changes to adjust pre-commit tests * Making sure that send slack message and send teams message dont run as one action * Updating SlackV3_test.py to support new version * Revert docker changes in slack and teams because of build not supporting new versions * Revert slack test changes becuase docker versions were not updated * Remove Unnecessary description in Teams --------- * Fix validate content tpb (#39297) * Increase timeout * fix tpb yml * FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086) * first commit * add rn * add tests- urls are from api * Bump pack from version CommonScripts to 1.19.34. * improve code * Bump pack from version ApiModules to 2.2.43. * add rn * fix docker * fix code * fix pre-commit * fix pre-commit * fix pre-commit * fix pre-commit * fix test * Bump pack from version CommonScripts to 1.19.35. * fix test * fix test playbook * fix warnings * fix warnings * fix warnings * fix warnings --------- * Modified readme file - Proofpoint TAP (#39289) * Modified readme file * Update Packs/ProofpointTAP/README.md --------- * Improve handling of command execution timeout using timed thread in QualysV2 (#39074) * Updated Silverfort Pack README (#38764) (#39304) * Updated Silverfort README * Updated based on ilaredo's feedback * Trigger build workflow * Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291) * fix for customer issue * FeedDomainTools Release v1.0.1 (#39280) (#39305) * Add release notes * Removed release notes * Add domain discovery feed. * Added domainrdap feeds * Add test cases for domainrdap feeds * Revert hardcoded indicator type * Remove unnecessary comment * Update README * Update release notes * Fix upload flow core packs validation (#39306) * update the RN * empty * Intense sso failures fix (#39301) * Change 90 days to 1 day * Change 90 days to 1 day * RN --------- Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com> Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com> Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com> Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com> Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com> Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com> Co-authored-by: Jelle Hol <jellehol93@gmail.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com> Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com> Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com> Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com> Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com> Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com> Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com> Co-authored-by: darbel <darbel@paloaltonetworks.com> Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com> Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com> Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com> Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com> Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com> Co-authored-by: Bri <133698148+briluza@users.noreply.github.com> Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com> Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Contributing to Cortex XSOAR Content
Make sure to register your contribution by filling the contribution registration form
The Pull Request will be reviewed only after the contribution registration form is filled.
Status
Related Issues
fixes: CIAC-12990
Description
A few sentences describing the overall goals of the pull request's commits.
Must have