Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IBM HA - add "haIntegrationEventID" to multiple integrations #38846

Merged

Conversation

YuvHayun
Copy link
Contributor

@YuvHayun YuvHayun commented Mar 3, 2025

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

fixes: CIAC-12990

Description

A few sentences describing the overall goals of the pull request's commits.

Must have

  • Tests
  • Documentation

@YuvHayun YuvHayun requested a review from jbabazadeh as a code owner March 3, 2025 07:02
@YuvHayun YuvHayun changed the title Ibm ha add ha integration event id to multiple integrations IBM HA - add "haIntegrationEventID" to multiple integrations Mar 3, 2025
Copy link

github-actions bot commented Mar 3, 2025

Coverage

Coverage Report
FileStmtsMissCoverMissing
Packs/Akamai_SIEM/Integrations/Akamai_SIEM
   Akamai_SIEM.py3003987%149–150, 185, 189–191, 219–221, 251, 351–354, 434, 565–566, 632–634, 653, 657, 720, 729, 742–743, 762–768, 791–792, 817–819, 833
Packs/QRadar/Integrations/QRadar_v3
   QRadar_v3.py169836378%448–449, 489, 504–505, 507–510, 512–518, 522–526, 530–533, 543, 559–560, 563–564, 573–576, 584, 592–595, 604–607, 615, 624–627, 636, 644, 660, 666, 680–683, 692, 705, 713, 720–722, 729–732, 740, 743–745, 760, 763–770, 780, 786, 794, 807, 819, 827, 835, 843, 845, 853–854, 856, 864, 871, 897, 911, 930, 937, 944, 955–956, 967–969, 1010, 1012, 1014, 1016, 1024, 1029, 1035, 1050, 1113, 1129, 1131–1142, 1186, 1257, 1259, 1262, 1387–1389, 1411–1413, 1433–1435, 1455–1457, 1480–1482, 1534–1536, 1544–1545, 1623, 1674, 1805–1807, 1809, 1811, 1823, 1826–1827, 1829–1830, 1832, 1847, 1876, 1905, 1938, 1940, 1942, 1945, 1947, 1949, 1998–2000, 2003–2004, 2062, 2108–2119, 2121–2122, 2133–2134, 2188, 2233–2239, 2241–2242, 2244, 2246–2247, 2328–2330, 2346, 2348–2352, 2354, 2423, 2425, 2482–2483, 2515, 2588–2610, 2626, 2628–2632, 2635–2636, 2709, 2716–2721, 2891, 2971, 2990, 2996, 3098, 3101, 3106–3110, 3112, 3119–3120, 3171, 3174, 3176, 3199, 3230, 3272–3276, 3413, 3417–3420, 3646, 3648, 3683, 3686, 3745–3747, 3760, 3802, 3839, 3873, 3878, 3884, 3973–3975, 3977–3981, 3995, 3999–4000, 4084–4087, 4101–4102, 4133–4134, 4147, 4357, 4399, 4402–4404, 4410, 4412, 4414, 4428, 4456–4457, 4492, 4532, 4534, 4536, 4741, 4888–4890, 4893–4894, 4899–4900, 4903–4905, 4908, 5034–5039, 5047–5049, 5081–5082, 5092–5095
Packs/Uptycs/Integrations/Uptycs
   Uptycs.py137934974%25, 27, 29, 31, 67–68, 76–77, 83–85, 87–88, 90–91, 93, 107, 115, 135, 137, 150, 162, 169, 172, 177, 180, 192, 195–200, 203–204, 207–208, 211–212, 215–216, 240–241, 252–253, 259–260, 267, 330, 381, 385, 445, 448, 451, 629–631, 713–715, 801–803, 888–890, 958–960, 1043–1045, 1123–1125, 1192–1194, 1251–1257, 1259–1262, 1264, 1278, 1283, 1285, 1287–1288, 1293, 1297–1298, 1302, 1304, 1314, 1326–1328, 1337–1340, 1342–1343, 1409–1412, 1415, 1418, 1420, 1424–1426, 1428, 1547, 1594–1596, 1598–1607, 1609–1612, 1614, 1616–1617, 1621, 1625–1626, 1628–1629, 1631–1634, 1636, 1646, 1712, 1823, 1965, 2019–2020, 2022–2023, 2029, 2031, 2034, 2038–2039, 2041, 2048, 2111–2114, 2121, 2127, 2139, 2153–2154, 2184–2185, 2187, 2197, 2201–2203, 2206, 2211, 2221, 2283, 2291–2294, 2306–2307, 2341–2342, 2344, 2346–2349, 2351, 2356–2358, 2360, 2362–2363, 2365, 2367–2376, 2378, 2380, 2382, 2385, 2393–2395, 2397, 2399, 2407, 2409–2410, 2422, 2424, 2426, 2491, 2572, 2632, 2664, 2666, 2708, 2737, 2766, 2814–2816, 2818–2819, 2821–2822, 2824–2825, 2827–2828, 2830–2831, 2833–2834, 2836–2837, 2839–2840, 2842–2843, 2845–2846, 2848–2849, 2851–2852, 2854–2855, 2857–2858, 2860–2861, 2863–2864, 2866–2867, 2869–2870, 2872–2873, 2875–2876, 2878–2879, 2881–2882, 2884–2885, 2887–2888, 2890–2891, 2893–2894, 2896–2897, 2899–2900, 2902–2903, 2905–2906, 2908–2909, 2911–2912, 2914–2915, 2917–2918, 2920–2921, 2923–2924, 2926–2927, 2929–2930, 2932, 2934–2936, 2938–2940, 2942–2943, 2945–2946, 2948–2949, 2951–2952, 2954–2955, 2957–2958, 2960–2961, 2963–2964, 2966–2967, 2969–2971, 2973
TOTAL337775177% 

Tests Skipped Failures Errors Time
308 0 💤 0 ❌ 0 🔥 19.165s ⏱️

@YuvHayun YuvHayun requested a review from JudahSchwartz March 3, 2025 12:47
@YuvHayun YuvHayun force-pushed the IBM_HA_add_haIntegrationEventID_to_multiple_integrations branch from cfdf854 to 3e10df4 Compare March 16, 2025 09:26
@content-bot
Copy link
Collaborator

This PR was automatically updated by a GitHub Action

  • MicrosoftGraphSecurity pack version was bumped to 2.2.25.
  • ProofpointTAP pack version was bumped to 1.2.18.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

@content-bot
Copy link
Collaborator

This PR was automatically updated by a GitHub Action

  • Akamai_SIEM pack version was bumped to 1.2.5.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

@YuvHayun YuvHayun force-pushed the IBM_HA_add_haIntegrationEventID_to_multiple_integrations branch from 131a300 to 7cbb331 Compare March 23, 2025 06:54
@content-bot
Copy link
Collaborator

This PR was automatically updated by a GitHub Action

  • Akamai_SIEM pack version was bumped to 1.2.6.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

@YuvHayun YuvHayun force-pushed the IBM_HA_add_haIntegrationEventID_to_multiple_integrations branch from fd23522 to feeff54 Compare March 23, 2025 12:53
@YuvHayun YuvHayun force-pushed the IBM_HA_add_haIntegrationEventID_to_multiple_integrations branch from 8f686ea to caf0f03 Compare March 25, 2025 07:45
@content-bot
Copy link
Collaborator

Validate summary

Verdict: PR can be force merged from validate perspective? ✅

@YuvHayun YuvHayun merged commit 05ab878 into master Mar 25, 2025
17 checks passed
@YuvHayun YuvHayun deleted the IBM_HA_add_haIntegrationEventID_to_multiple_integrations branch March 25, 2025 09:51
omerKarkKatz pushed a commit that referenced this pull request Mar 25, 2025
* add haIntegrationEventID key to qradar incidents

* added rn

* fixes

* in progress

* reverts & preperation

* tests fixes

* added haIntegrationEventID to more itnegrations

* added rns

* fixes

* fixes

* added sections to uptycs

* work in progress, save before testing

* working windows integration

* done all 9 integrations

* added rns

* fix proof point

* fix unit test

* validations fixes

* validations fixes

* reverts

* update uptycs contacts

* update rns

* update rns

* revert ms atp

* reverts

* reverts

* updated docker

* fixed empty offset issue

* added rn

* reverts
inbalapt1 pushed a commit to xsoar-contrib/content that referenced this pull request Mar 26, 2025
…#38846)

* add haIntegrationEventID key to qradar incidents

* added rn

* fixes

* in progress

* reverts & preperation

* tests fixes

* added haIntegrationEventID to more itnegrations

* added rns

* fixes

* fixes

* added sections to uptycs

* work in progress, save before testing

* working windows integration

* done all 9 integrations

* added rns

* fix proof point

* fix unit test

* validations fixes

* validations fixes

* reverts

* update uptycs contacts

* update rns

* update rns

* revert ms atp

* reverts

* reverts

* updated docker

* fixed empty offset issue

* added rn

* reverts
DeanArbel added a commit that referenced this pull request Mar 27, 2025
…39230)

* "contribution update to pack 'Microsoft Sentinel'"

* Revert unwanted changes

* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml

Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>

* Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md

Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>

* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml

Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>

* Revert unwanted changes part 2

* Aligned tests to the input type change

* update release notes

* fix unittest

* Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md

Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>

* fix

* Added a note to the readme regarding the debugger panel (#39243)

* CRTX-133204-Trellix_ePO-fix (#39248)

* changed metadata file

* added release notes

* added release notes

---------

Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com>

* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------

Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>

* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>

* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

* Added the validate-validation-config-file hook to content (#39260)

* Added the validate-validation-config-file hook to content

* fixes

* fix validations

* Automation research releases (#39270)

* new playbook - First Azure AD PowerShell operation for a user (#39159)

* new playbook

* RN

* description fixed

* added ignore

* Bump pack from version CortexResponseAndRemediation to 1.1.25.

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* task description

* position fix

* fix for old link to documentation

* continue on error

* fix

* skip if

* fix

* fix

* added issilent: true

---------

Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Automation Research Release - 1 (#39269)

* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------

Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>

* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>

* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

---------

Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com>
Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>
Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com>
Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com>

---------

Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com>
Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>
Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com>
Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com>
Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com>

* add codeowner (#39272)

* [GenericPolling] Update docs (#39250)

* RN

* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md

Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com>

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com>

* edit readme file (#39196)

* edit readme file

* documentation after tech writing fixes

* fix to soft break (line break)

* improve images resolution

* change permission list to bullet style

* [Code owners] Update ContentManagement with talzich (#39284)

* Platform content support merge gateway (#39268)

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* fix json

* limit common scripts

* fix Core layouts

* fix Core layouts

---------

Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com>
Co-authored-by: darbel <darbel@paloaltonetworks.com>

* IBM HA - add "haIntegrationEventID" to multiple integrations (#38846)

* add haIntegrationEventID key to qradar incidents

* added rn

* fixes

* in progress

* reverts & preperation

* tests fixes

* added haIntegrationEventID to more itnegrations

* added rns

* fixes

* fixes

* added sections to uptycs

* work in progress, save before testing

* working windows integration

* done all 9 integrations

* added rns

* fix proof point

* fix unit test

* validations fixes

* validations fixes

* reverts

* update uptycs contacts

* update rns

* update rns

* revert ms atp

* reverts

* reverts

* updated docker

* fixed empty offset issue

* added rn

* reverts

* Add ICDM Integration (#38982) (#39283)

* Add ICDM Integration

* Fix Formatting and Pipeline errors

* Update Sections

* Minor changes and refactors to address Review comments

* Fix Unit test for network indicator

* do not use deprecated method utcnow()

* Fix context path and format readable output of Protection Commands

* Update Readme

* Fix version info in Readme

Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com>

* Box Quick Update (#39267)

* Updated README and pack_metadata

* Updated README

* Update Packs/Box/README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Box/README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Box/README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Box/README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* [Trellix_ePO] Remove MP xsoar (#39296)

* hide pack (#39290) (#39294)

Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>

* CortexCoreIR: added `quick actions` commands (#38663)

* added prettynames placeholder

* added quickaction

* update prettypredefined

* capital prettyPredefined

* update prettypredefined

* JUST FOR TEST SDK FIX

* correct prettypredefined

* test script

* uuse sdk from branch

* added supportedModules

* adding the wrapper commands

* remove "platform" properties from script

* revert poetry changes

* remove quick action from the orig command

* correct the name of quick actions

* fix wrong

* update CoreIR integration with IA related & py code

* PM changes

* restore pack_metadata

* replace placeholders

* run ruff format after merge master

* added RN

* fix alert

* update the RN

---------

Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com>

* drop CortexVulnerabilityManagement from platform (#39299)

* Nivbs/ciac 13013 quick actions (#38979)

* Added first draft for Quick action: Create Issue in Jira

* Added first draft for Quick action: Create ServiceNow Ticket

* Fixing Items in JIRA quick action

* Adding Corrects Fields in Open Service Now Ticket

* Quick Action Slack Integration

* Quick Action MSFT Teams Integration

* re-format the ${issue} syntax after clarifications

* Adding Platform to pack_metadata.json

* Updating pack_metadata.json for all Packs, according to platform-content-support

* update supportsquickactions to higher scope
adding hidden to relevant quiack-action cmds

* Update slack to slackV3

* Remove deprecated arguments from JIRA cmd

* Update default Value in Jira

* Update Docker images versions

* Update Release notes for quick actions Packs

* Adding supports quick action for slack V3

* Change order of pre-defined options

* Change defaultValue to predefined

* Change pretty name for short_description in ServiceNowv2.yml

* Remove prettyname for non required params

* Update JiraV3.yml according to design changes

* Update MicrosoftTeams.yml according to design changes

* Update SlackV3.yml according to design changes

* Update ServiceNowv2.yml according to design changes

* Change from issue to alert keyword

* Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType

* After Server fix - change from alert to issue keyword

* Update Packs/Slack/ReleaseNotes/3_5_11.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Slack/ReleaseNotes/3_5_11.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/ServiceNow/ReleaseNotes/2_7_8.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/Jira/ReleaseNotes/3_2_16.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update release note file name

* Update description after pre commit notes

* Create 3_5_12.md

* Update Descriptions and params after product meeting

* Revert "Create 3_5_12.md"

This reverts commit 348e186.

* Because of ST failed - update description in commands

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------

Co-authored-by: Dean Arbel <darbel@paloaltonetworks.com>

* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------

Co-authored-by: darbel <darbel@paloaltonetworks.com>

* fix json

* limit common scripts

* Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions"

This reverts commit 78e897c, reversing
changes made to d2885a5.

* Update release notes before pre commit

* Update release notes before pre commit

* Update current version in pack_metadata.json

* Applying changes to adjust pre-commit tests

* Making sure that send slack message and send teams message dont run as one action

* Updating SlackV3_test.py to support new version

* Revert docker changes in slack and teams because of build not supporting new versions

* Revert slack test changes becuase docker versions were not updated

* Remove Unnecessary description in Teams

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com>
Co-authored-by: darbel <darbel@paloaltonetworks.com>
Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com>
Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com>

* Fix validate content tpb (#39297)

* Increase timeout

* fix tpb yml

* FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086)

* first commit

* add rn

* add tests- urls are from api

* Bump pack from version CommonScripts to 1.19.34.

* improve code

* Bump pack from version ApiModules to 2.2.43.

* add rn

* fix docker

* fix code

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix test

* Bump pack from version CommonScripts to 1.19.35.

* fix test

* fix test playbook

* fix warnings

* fix warnings

* fix warnings

* fix warnings

---------

Co-authored-by: Content Bot <bot@demisto.com>

* Modified readme file - Proofpoint TAP (#39289)

* Modified readme file

* Update Packs/ProofpointTAP/README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Improve handling of command execution timeout using timed thread in QualysV2 (#39074)

* Updated Silverfort Pack README (#38764) (#39304)

* Updated Silverfort README

* Updated based on ilaredo's feedback

* Trigger build workflow

Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com>

* Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291)

* fix for customer issue

* FeedDomainTools Release v1.0.1 (#39280) (#39305)

* Add release notes

* Removed release notes

* Add domain discovery feed.

* Added domainrdap feeds

* Add test cases for domainrdap feeds

* Revert hardcoded indicator type

* Remove unnecessary comment

* Update README

* Update release notes

Co-authored-by: Bri <133698148+briluza@users.noreply.github.com>

* Fix upload flow core packs validation (#39306)

* update the RN

* empty

* Intense sso failures fix (#39301)

* Change 90 days to 1 day

* Change 90 days to 1 day

* RN

---------

Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com>
Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com>
Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com>
Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com>
Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com>
Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com>
Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>
Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com>
Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com>
Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com>
Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com>
Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com>
Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com>
Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com>
Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com>
Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com>
Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com>
Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com>
Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com>
Co-authored-by: darbel <darbel@paloaltonetworks.com>
Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com>
Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com>
Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com>
Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com>
Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com>
Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com>
Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>
Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com>
Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
Co-authored-by: Bri <133698148+briluza@users.noreply.github.com>
Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com>
Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
inbalapt1 added a commit that referenced this pull request Mar 30, 2025
…39230) (#39322)

* "contribution update to pack 'Microsoft Sentinel'"

* Revert unwanted changes

* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml



* Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md



* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml



* Revert unwanted changes part 2

* Aligned tests to the input type change

* update release notes

* fix unittest

* Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md



* fix

* Added a note to the readme regarding the debugger panel (#39243)

* CRTX-133204-Trellix_ePO-fix (#39248)

* changed metadata file

* added release notes

* added release notes

---------



* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------





* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md



* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------




* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

* Added the validate-validation-config-file hook to content (#39260)

* Added the validate-validation-config-file hook to content

* fixes

* fix validations

* Automation research releases (#39270)

* new playbook - First Azure AD PowerShell operation for a user (#39159)

* new playbook

* RN

* description fixed

* added ignore

* Bump pack from version CortexResponseAndRemediation to 1.1.25.

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* task description

* position fix

* fix for old link to documentation

* continue on error

* fix

* skip if

* fix

* fix

* added issilent: true

---------





* Automation Research Release - 1 (#39269)

* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------





* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md



* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------




* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

---------











---------













* add codeowner (#39272)

* [GenericPolling] Update docs (#39250)

* RN

* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md



* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md



---------




* edit readme file (#39196)

* edit readme file

* documentation after tech writing fixes

* fix to soft break (line break)

* improve images resolution

* change permission list to bullet style

* [Code owners] Update ContentManagement with talzich (#39284)

* Platform content support merge gateway (#39268)

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------



* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------



* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------



* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------



* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------



* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------



* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------



* fix json

* limit common scripts

* fix Core layouts

* fix Core layouts

---------




* IBM HA - add "haIntegrationEventID" to multiple integrations (#38846)

* add haIntegrationEventID key to qradar incidents

* added rn

* fixes

* in progress

* reverts & preperation

* tests fixes

* added haIntegrationEventID to more itnegrations

* added rns

* fixes

* fixes

* added sections to uptycs

* work in progress, save before testing

* working windows integration

* done all 9 integrations

* added rns

* fix proof point

* fix unit test

* validations fixes

* validations fixes

* reverts

* update uptycs contacts

* update rns

* update rns

* revert ms atp

* reverts

* reverts

* updated docker

* fixed empty offset issue

* added rn

* reverts

* Add ICDM Integration (#38982) (#39283)

* Add ICDM Integration

* Fix Formatting and Pipeline errors

* Update Sections

* Minor changes and refactors to address Review comments

* Fix Unit test for network indicator

* do not use deprecated method utcnow()

* Fix context path and format readable output of Protection Commands

* Update Readme

* Fix version info in Readme



* Box Quick Update (#39267)

* Updated README and pack_metadata

* Updated README

* Update Packs/Box/README.md



* Update Packs/Box/README.md



* Update Packs/Box/README.md



* Update Packs/Box/README.md



---------



* [Trellix_ePO] Remove MP xsoar (#39296)

* hide pack (#39290) (#39294)



* CortexCoreIR: added `quick actions` commands (#38663)

* added prettynames placeholder

* added quickaction

* update prettypredefined

* capital prettyPredefined

* update prettypredefined

* JUST FOR TEST SDK FIX

* correct prettypredefined

* test script

* uuse sdk from branch

* added supportedModules

* adding the wrapper commands

* remove "platform" properties from script

* revert poetry changes

* remove quick action from the orig command

* correct the name of quick actions

* fix wrong

* update CoreIR integration with IA related & py code

* PM changes

* restore pack_metadata

* replace placeholders

* run ruff format after merge master

* added RN

* fix alert

* update the RN

---------



* drop CortexVulnerabilityManagement from platform (#39299)

* Nivbs/ciac 13013 quick actions (#38979)

* Added first draft for Quick action: Create Issue in Jira

* Added first draft for Quick action: Create ServiceNow Ticket

* Fixing Items in JIRA quick action

* Adding Corrects Fields in Open Service Now Ticket

* Quick Action Slack Integration

* Quick Action MSFT Teams Integration

* re-format the ${issue} syntax after clarifications

* Adding Platform to pack_metadata.json

* Updating pack_metadata.json for all Packs, according to platform-content-support

* update supportsquickactions to higher scope
adding hidden to relevant quiack-action cmds

* Update slack to slackV3

* Remove deprecated arguments from JIRA cmd

* Update default Value in Jira

* Update Docker images versions

* Update Release notes for quick actions Packs

* Adding supports quick action for slack V3

* Change order of pre-defined options

* Change defaultValue to predefined

* Change pretty name for short_description in ServiceNowv2.yml

* Remove prettyname for non required params

* Update JiraV3.yml according to design changes

* Update MicrosoftTeams.yml according to design changes

* Update SlackV3.yml according to design changes

* Update ServiceNowv2.yml according to design changes

* Change from issue to alert keyword

* Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType

* After Server fix - change from alert to issue keyword

* Update Packs/Slack/ReleaseNotes/3_5_11.md



* Update Packs/Slack/ReleaseNotes/3_5_11.md



* Update Packs/ServiceNow/ReleaseNotes/2_7_8.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml



* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml



* Update Packs/Jira/ReleaseNotes/3_2_16.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Apply suggestions from code review



* Update release note file name

* Update description after pre commit notes

* Create 3_5_12.md

* Update Descriptions and params after product meeting

* Revert "Create 3_5_12.md"

This reverts commit 348e186.

* Because of ST failed - update description in commands

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------



* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------



* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------



* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------



* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------



* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------



* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------



* fix json

* limit common scripts

* Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions"

This reverts commit 78e897c, reversing
changes made to d2885a5.

* Update release notes before pre commit

* Update release notes before pre commit

* Update current version in pack_metadata.json

* Applying changes to adjust pre-commit tests

* Making sure that send slack message and send teams message dont run as one action

* Updating SlackV3_test.py to support new version

* Revert docker changes in slack and teams because of build not supporting new versions

* Revert slack test changes becuase docker versions were not updated

* Remove Unnecessary description in Teams

---------







* Fix validate content tpb (#39297)

* Increase timeout

* fix tpb yml

* FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086)

* first commit

* add rn

* add tests- urls are from api

* Bump pack from version CommonScripts to 1.19.34.

* improve code

* Bump pack from version ApiModules to 2.2.43.

* add rn

* fix docker

* fix code

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix test

* Bump pack from version CommonScripts to 1.19.35.

* fix test

* fix test playbook

* fix warnings

* fix warnings

* fix warnings

* fix warnings

---------



* Modified readme file - Proofpoint TAP (#39289)

* Modified readme file

* Update Packs/ProofpointTAP/README.md



---------



* Improve handling of command execution timeout using timed thread in QualysV2 (#39074)

* Updated Silverfort Pack README (#38764) (#39304)

* Updated Silverfort README

* Updated based on ilaredo's feedback

* Trigger build workflow



* Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291)

* fix for customer issue

* FeedDomainTools Release v1.0.1 (#39280) (#39305)

* Add release notes

* Removed release notes

* Add domain discovery feed.

* Added domainrdap feeds

* Add test cases for domainrdap feeds

* Revert hardcoded indicator type

* Remove unnecessary comment

* Update README

* Update release notes



* Fix upload flow core packs validation (#39306)

* update the RN

* empty

* Intense sso failures fix (#39301)

* Change 90 days to 1 day

* Change 90 days to 1 day

* RN

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com>
Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com>
Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com>
Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com>
Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com>
Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>
Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com>
Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com>
Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com>
Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com>
Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com>
Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com>
Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com>
Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com>
Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com>
Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com>
Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com>
Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com>
Co-authored-by: darbel <darbel@paloaltonetworks.com>
Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com>
Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com>
Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com>
Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com>
Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com>
Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com>
Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>
Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com>
Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
Co-authored-by: Bri <133698148+briluza@users.noreply.github.com>
Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com>
Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
akshotiamit-pa pushed a commit that referenced this pull request Mar 31, 2025
…39230) (#39322)

* "contribution update to pack 'Microsoft Sentinel'"

* Revert unwanted changes

* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml



* Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md



* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml



* Revert unwanted changes part 2

* Aligned tests to the input type change

* update release notes

* fix unittest

* Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md



* fix

* Added a note to the readme regarding the debugger panel (#39243)

* CRTX-133204-Trellix_ePO-fix (#39248)

* changed metadata file

* added release notes

* added release notes

---------



* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------





* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md



* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------




* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

* Added the validate-validation-config-file hook to content (#39260)

* Added the validate-validation-config-file hook to content

* fixes

* fix validations

* Automation research releases (#39270)

* new playbook - First Azure AD PowerShell operation for a user (#39159)

* new playbook

* RN

* description fixed

* added ignore

* Bump pack from version CortexResponseAndRemediation to 1.1.25.

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* task description

* position fix

* fix for old link to documentation

* continue on error

* fix

* skip if

* fix

* fix

* added issilent: true

---------





* Automation Research Release - 1 (#39269)

* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------





* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md



* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------




* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

---------











---------













* add codeowner (#39272)

* [GenericPolling] Update docs (#39250)

* RN

* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md



* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md



---------




* edit readme file (#39196)

* edit readme file

* documentation after tech writing fixes

* fix to soft break (line break)

* improve images resolution

* change permission list to bullet style

* [Code owners] Update ContentManagement with talzich (#39284)

* Platform content support merge gateway (#39268)

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------



* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------



* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------



* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------



* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------



* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------



* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------



* fix json

* limit common scripts

* fix Core layouts

* fix Core layouts

---------




* IBM HA - add "haIntegrationEventID" to multiple integrations (#38846)

* add haIntegrationEventID key to qradar incidents

* added rn

* fixes

* in progress

* reverts & preperation

* tests fixes

* added haIntegrationEventID to more itnegrations

* added rns

* fixes

* fixes

* added sections to uptycs

* work in progress, save before testing

* working windows integration

* done all 9 integrations

* added rns

* fix proof point

* fix unit test

* validations fixes

* validations fixes

* reverts

* update uptycs contacts

* update rns

* update rns

* revert ms atp

* reverts

* reverts

* updated docker

* fixed empty offset issue

* added rn

* reverts

* Add ICDM Integration (#38982) (#39283)

* Add ICDM Integration

* Fix Formatting and Pipeline errors

* Update Sections

* Minor changes and refactors to address Review comments

* Fix Unit test for network indicator

* do not use deprecated method utcnow()

* Fix context path and format readable output of Protection Commands

* Update Readme

* Fix version info in Readme



* Box Quick Update (#39267)

* Updated README and pack_metadata

* Updated README

* Update Packs/Box/README.md



* Update Packs/Box/README.md



* Update Packs/Box/README.md



* Update Packs/Box/README.md



---------



* [Trellix_ePO] Remove MP xsoar (#39296)

* hide pack (#39290) (#39294)



* CortexCoreIR: added `quick actions` commands (#38663)

* added prettynames placeholder

* added quickaction

* update prettypredefined

* capital prettyPredefined

* update prettypredefined

* JUST FOR TEST SDK FIX

* correct prettypredefined

* test script

* uuse sdk from branch

* added supportedModules

* adding the wrapper commands

* remove "platform" properties from script

* revert poetry changes

* remove quick action from the orig command

* correct the name of quick actions

* fix wrong

* update CoreIR integration with IA related & py code

* PM changes

* restore pack_metadata

* replace placeholders

* run ruff format after merge master

* added RN

* fix alert

* update the RN

---------



* drop CortexVulnerabilityManagement from platform (#39299)

* Nivbs/ciac 13013 quick actions (#38979)

* Added first draft for Quick action: Create Issue in Jira

* Added first draft for Quick action: Create ServiceNow Ticket

* Fixing Items in JIRA quick action

* Adding Corrects Fields in Open Service Now Ticket

* Quick Action Slack Integration

* Quick Action MSFT Teams Integration

* re-format the ${issue} syntax after clarifications

* Adding Platform to pack_metadata.json

* Updating pack_metadata.json for all Packs, according to platform-content-support

* update supportsquickactions to higher scope
adding hidden to relevant quiack-action cmds

* Update slack to slackV3

* Remove deprecated arguments from JIRA cmd

* Update default Value in Jira

* Update Docker images versions

* Update Release notes for quick actions Packs

* Adding supports quick action for slack V3

* Change order of pre-defined options

* Change defaultValue to predefined

* Change pretty name for short_description in ServiceNowv2.yml

* Remove prettyname for non required params

* Update JiraV3.yml according to design changes

* Update MicrosoftTeams.yml according to design changes

* Update SlackV3.yml according to design changes

* Update ServiceNowv2.yml according to design changes

* Change from issue to alert keyword

* Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType

* After Server fix - change from alert to issue keyword

* Update Packs/Slack/ReleaseNotes/3_5_11.md



* Update Packs/Slack/ReleaseNotes/3_5_11.md



* Update Packs/ServiceNow/ReleaseNotes/2_7_8.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml



* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml



* Update Packs/Jira/ReleaseNotes/3_2_16.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Apply suggestions from code review



* Update release note file name

* Update description after pre commit notes

* Create 3_5_12.md

* Update Descriptions and params after product meeting

* Revert "Create 3_5_12.md"

This reverts commit 348e186.

* Because of ST failed - update description in commands

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------



* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------



* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------



* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------



* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------



* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------



* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------



* fix json

* limit common scripts

* Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions"

This reverts commit 78e897c, reversing
changes made to d2885a5.

* Update release notes before pre commit

* Update release notes before pre commit

* Update current version in pack_metadata.json

* Applying changes to adjust pre-commit tests

* Making sure that send slack message and send teams message dont run as one action

* Updating SlackV3_test.py to support new version

* Revert docker changes in slack and teams because of build not supporting new versions

* Revert slack test changes becuase docker versions were not updated

* Remove Unnecessary description in Teams

---------







* Fix validate content tpb (#39297)

* Increase timeout

* fix tpb yml

* FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086)

* first commit

* add rn

* add tests- urls are from api

* Bump pack from version CommonScripts to 1.19.34.

* improve code

* Bump pack from version ApiModules to 2.2.43.

* add rn

* fix docker

* fix code

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix test

* Bump pack from version CommonScripts to 1.19.35.

* fix test

* fix test playbook

* fix warnings

* fix warnings

* fix warnings

* fix warnings

---------



* Modified readme file - Proofpoint TAP (#39289)

* Modified readme file

* Update Packs/ProofpointTAP/README.md



---------



* Improve handling of command execution timeout using timed thread in QualysV2 (#39074)

* Updated Silverfort Pack README (#38764) (#39304)

* Updated Silverfort README

* Updated based on ilaredo's feedback

* Trigger build workflow



* Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291)

* fix for customer issue

* FeedDomainTools Release v1.0.1 (#39280) (#39305)

* Add release notes

* Removed release notes

* Add domain discovery feed.

* Added domainrdap feeds

* Add test cases for domainrdap feeds

* Revert hardcoded indicator type

* Remove unnecessary comment

* Update README

* Update release notes



* Fix upload flow core packs validation (#39306)

* update the RN

* empty

* Intense sso failures fix (#39301)

* Change 90 days to 1 day

* Change 90 days to 1 day

* RN

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com>
Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com>
Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com>
Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com>
Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com>
Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>
Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com>
Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com>
Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com>
Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com>
Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com>
Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com>
Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com>
Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com>
Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com>
Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com>
Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com>
Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com>
Co-authored-by: darbel <darbel@paloaltonetworks.com>
Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com>
Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com>
Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com>
Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com>
Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com>
Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com>
Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>
Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com>
Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
Co-authored-by: Bri <133698148+briluza@users.noreply.github.com>
Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com>
Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
oatias pushed a commit that referenced this pull request Apr 1, 2025
…39230) (#39322)

* "contribution update to pack 'Microsoft Sentinel'"

* Revert unwanted changes

* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml



* Update Packs/AzureSentinel/Integrations/AzureSentinel/README.md



* Update Packs/AzureSentinel/Integrations/AzureSentinel/AzureSentinel.yml



* Revert unwanted changes part 2

* Aligned tests to the input type change

* update release notes

* fix unittest

* Update Packs/AzureSentinel/ReleaseNotes/1_5_60.md



* fix

* Added a note to the readme regarding the debugger panel (#39243)

* CRTX-133204-Trellix_ePO-fix (#39248)

* changed metadata file

* added release notes

* added release notes

---------



* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------





* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md



* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------




* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

* Added the validate-validation-config-file hook to content (#39260)

* Added the validate-validation-config-file hook to content

* fixes

* fix validations

* Automation research releases (#39270)

* new playbook - First Azure AD PowerShell operation for a user (#39159)

* new playbook

* RN

* description fixed

* added ignore

* Bump pack from version CortexResponseAndRemediation to 1.1.25.

* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* Update Packs/CortexResponseAndRemediation/Playbooks/silent-playbook-First_Azure_AD_PowerShell_operation_for_a_user.yml



* task description

* position fix

* fix for old link to documentation

* continue on error

* fix

* skip if

* fix

* fix

* added issilent: true

---------





* Automation Research Release - 1 (#39269)

* fix: get mapping fields function does not except any arguments (#38786) (#39261)

* fix: get mapping fields function does not except any arguments

* feat: add Bryan van der Net to CONTRIBUTORS.json

* fix: update SentinelOne V2 integration to resolve mapping fields error and enhance configuration sections

* fix: update Docker image version for SentinelOne V2 integration

* docs: update Docker image version in release notes for SentinelOne V2 integration

* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* Update Packs/SentinelOne/ReleaseNotes/3_2_37.md



* Update Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.yml



* style: pr still showing changes on the release notes

* Bump version and generate release notes



* revert: revert config changes

* chore: bump version and update release notes

* style: undo random formatting changes

---------





* Modeling rules modification - CRTX-151278 (#39103)

* Modified modeling rule after the modification of the integration

* Fixed schema file

* Added release note and modified modeling rule

* Pack's version update

* Update Packs/qualys/ReleaseNotes/3_2_4.md



* Modified modeling rule

* Bump pack from version qualys to 3.2.5.

* Added xdm.event.type to assets events

* Added tag

* Fixed schema file

* Fixed schema file

---------




* Update Pan-OS playbook for supporting version 11 (#39249)

* added itamar (#39265)

---------











---------













* add codeowner (#39272)

* [GenericPolling] Update docs (#39250)

* RN

* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md



* Update Packs/CommonPlaybooks/ReleaseNotes/2_6_55.md



---------




* edit readme file (#39196)

* edit readme file

* documentation after tech writing fixes

* fix to soft break (line break)

* improve images resolution

* change permission list to bullet style

* [Code owners] Update ContentManagement with talzich (#39284)

* Platform content support merge gateway (#39268)

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------



* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------



* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------



* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------



* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------



* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------



* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------



* fix json

* limit common scripts

* fix Core layouts

* fix Core layouts

---------




* IBM HA - add "haIntegrationEventID" to multiple integrations (#38846)

* add haIntegrationEventID key to qradar incidents

* added rn

* fixes

* in progress

* reverts & preperation

* tests fixes

* added haIntegrationEventID to more itnegrations

* added rns

* fixes

* fixes

* added sections to uptycs

* work in progress, save before testing

* working windows integration

* done all 9 integrations

* added rns

* fix proof point

* fix unit test

* validations fixes

* validations fixes

* reverts

* update uptycs contacts

* update rns

* update rns

* revert ms atp

* reverts

* reverts

* updated docker

* fixed empty offset issue

* added rn

* reverts

* Add ICDM Integration (#38982) (#39283)

* Add ICDM Integration

* Fix Formatting and Pipeline errors

* Update Sections

* Minor changes and refactors to address Review comments

* Fix Unit test for network indicator

* do not use deprecated method utcnow()

* Fix context path and format readable output of Protection Commands

* Update Readme

* Fix version info in Readme



* Box Quick Update (#39267)

* Updated README and pack_metadata

* Updated README

* Update Packs/Box/README.md



* Update Packs/Box/README.md



* Update Packs/Box/README.md



* Update Packs/Box/README.md



---------



* [Trellix_ePO] Remove MP xsoar (#39296)

* hide pack (#39290) (#39294)



* CortexCoreIR: added `quick actions` commands (#38663)

* added prettynames placeholder

* added quickaction

* update prettypredefined

* capital prettyPredefined

* update prettypredefined

* JUST FOR TEST SDK FIX

* correct prettypredefined

* test script

* uuse sdk from branch

* added supportedModules

* adding the wrapper commands

* remove "platform" properties from script

* revert poetry changes

* remove quick action from the orig command

* correct the name of quick actions

* fix wrong

* update CoreIR integration with IA related & py code

* PM changes

* restore pack_metadata

* replace placeholders

* run ruff format after merge master

* added RN

* fix alert

* update the RN

---------



* drop CortexVulnerabilityManagement from platform (#39299)

* Nivbs/ciac 13013 quick actions (#38979)

* Added first draft for Quick action: Create Issue in Jira

* Added first draft for Quick action: Create ServiceNow Ticket

* Fixing Items in JIRA quick action

* Adding Corrects Fields in Open Service Now Ticket

* Quick Action Slack Integration

* Quick Action MSFT Teams Integration

* re-format the ${issue} syntax after clarifications

* Adding Platform to pack_metadata.json

* Updating pack_metadata.json for all Packs, according to platform-content-support

* update supportsquickactions to higher scope
adding hidden to relevant quiack-action cmds

* Update slack to slackV3

* Remove deprecated arguments from JIRA cmd

* Update default Value in Jira

* Update Docker images versions

* Update Release notes for quick actions Packs

* Adding supports quick action for slack V3

* Change order of pre-defined options

* Change defaultValue to predefined

* Change pretty name for short_description in ServiceNowv2.yml

* Remove prettyname for non required params

* Update JiraV3.yml according to design changes

* Update MicrosoftTeams.yml according to design changes

* Update SlackV3.yml according to design changes

* Update ServiceNowv2.yml according to design changes

* Change from issue to alert keyword

* Fixes After demo: Remove user option from teams and slack. Remove defaultValue from Servicenow TicketType

* After Server fix - change from alert to issue keyword

* Update Packs/Slack/ReleaseNotes/3_5_11.md



* Update Packs/Slack/ReleaseNotes/3_5_11.md



* Update Packs/ServiceNow/ReleaseNotes/2_7_8.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml



* Update Packs/Jira/Integrations/JiraV3/JiraV3.yml



* Update Packs/Jira/ReleaseNotes/3_2_16.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/MicrosoftTeams/ReleaseNotes/1_5_17.md



* Update Packs/ServiceNow/Integrations/ServiceNowv2/ServiceNowv2.yml



* Apply suggestions from code review



* Update release note file name

* Update description after pre commit notes

* Create 3_5_12.md

* Update Descriptions and params after product meeting

* Revert "Create 3_5_12.md"

This reverts commit 348e186.

* Because of ST failed - update description in commands

* batch_1 (#39162)

* Adopt 'platform' MP to content packs #2 (#39163)

* batch_2

* revert incorrect changes

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #3 (#39164)

* batch_3

* remove identity_threat

---------



* batch_4 (#39165)

* Adopt 'platform' MP to content packs #6 (#39167)

* batch_6

* revert incorrect changes

* batch_7 (#39168)

* Adopt 'platform' MP to content packs #8 (#39169)

* batch_8

* revert incorrect changes

* Update Packs/CommonScripts/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #9 (#39170)

* batch_9

* revert quick actions

* revert incorrect changes

* revert incorrect changes

* batch_5 (#39232)

* batch_10 (#39171)

* batch_11 (#39172)

* Adopt 'platform' MP to content packs #12 (#39173)

* batch_12

* revert incorrect changes

* batch_13 (#39174)

* Adopt 'platform' MP to content packs #14 (#39175)

* batch_14

* revert incorrect changes

* Adopt 'platform' MP to content packs #15 (#39176)

* batch_15

* Update Packs/FiltersAndTransformers/pack_metadata.json

---------



* batch_16 (#39177)

* batch_17 (#39178)

* Adopt 'platform' MP to content packs #18 (#39179)

* batch_18

* revert incorrect changes

* Adopt 'platform' MP to content packs #19 (#39180)

* batch_19

* Update Packs/Jira/pack_metadata.json

---------



* batch_20 (#39181)

* Adopt 'platform' MP to content packs #21 (#39182)

* batch_21

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #22 (#39183)

* batch_22

* revert incorrect changes

* Update Packs/Office365AndAzureAuditLog/pack_metadata.json

---------



* batch_24 (#39185)

* Adopt 'platform' MP to content packs #25 (#39186)

* batch_25

* Update Packs/PingIdentity/pack_metadata.json

* Update Packs/PrismaAccess/pack_metadata.json

---------



* Adopt 'platform' MP to content packs #26 (#39187)

* batch_26

* revert incorrect changes

* Adopt 'platform' MP to content packs #27 (#39188)

* batch_27

* revert incorrect changes

* Adopt 'platform' MP to content packs #28 (#39189)

* batch_28

* revert incorrect changes

* remove identity_threat

---------



* Adopt 'platform' MP to content packs #29 (#39190)

* batch_29

* revert incorrect changes

* Update Packs/Slack/pack_metadata.json

---------



* batch_30 (#39191)

* batch_31 (#39192)

* Adopt 'platform' MP to content packs #32 (#39193)

* batch_32

* Update Packs/Workday/pack_metadata.json

---------



* batch_33 (#39194)

* Adopt 'platform' MP to content packs #23 (#39184)

* batch_23

* revert incorrect changes

* remove identity_threat

---------



* fix json

* limit common scripts

* Revert "Merge branch 'test-platform-mp' into nivbs/CIAC-13013_Quick_Actions"

This reverts commit 78e897c, reversing
changes made to d2885a5.

* Update release notes before pre commit

* Update release notes before pre commit

* Update current version in pack_metadata.json

* Applying changes to adjust pre-commit tests

* Making sure that send slack message and send teams message dont run as one action

* Updating SlackV3_test.py to support new version

* Revert docker changes in slack and teams because of build not supporting new versions

* Revert slack test changes becuase docker versions were not updated

* Remove Unnecessary description in Teams

---------







* Fix validate content tpb (#39297)

* Increase timeout

* fix tpb yml

* FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3 (#39086)

* first commit

* add rn

* add tests- urls are from api

* Bump pack from version CommonScripts to 1.19.34.

* improve code

* Bump pack from version ApiModules to 2.2.43.

* add rn

* fix docker

* fix code

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix pre-commit

* fix test

* Bump pack from version CommonScripts to 1.19.35.

* fix test

* fix test playbook

* fix warnings

* fix warnings

* fix warnings

* fix warnings

---------



* Modified readme file - Proofpoint TAP (#39289)

* Modified readme file

* Update Packs/ProofpointTAP/README.md



---------



* Improve handling of command execution timeout using timed thread in QualysV2 (#39074)

* Updated Silverfort Pack README (#38764) (#39304)

* Updated Silverfort README

* Updated based on ilaredo's feedback

* Trigger build workflow



* Fix for list of techniques in InvestigationDetailedSummaryToTable (#39291)

* fix for customer issue

* FeedDomainTools Release v1.0.1 (#39280) (#39305)

* Add release notes

* Removed release notes

* Add domain discovery feed.

* Added domainrdap feeds

* Add test cases for domainrdap feeds

* Revert hardcoded indicator type

* Remove unnecessary comment

* Update README

* Update release notes



* Fix upload flow core packs validation (#39306)

* update the RN

* empty

* Intense sso failures fix (#39301)

* Change 90 days to 1 day

* Change 90 days to 1 day

* RN

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: ROCCO <rocco.mercante@intesasanpaolo.com>
Co-authored-by: ispRM <99743409+ispRM@users.noreply.github.com>
Co-authored-by: inbalapt1 <164751454+inbalapt1@users.noreply.github.com>
Co-authored-by: iapt@paloaltonetworks.com <iapt@paloaltonetworks.com>
Co-authored-by: Shachar Kidor <82749224+ShacharKidor@users.noreply.github.com>
Co-authored-by: sdaniel6 <sdaniel@paloaltonetworks.com>
Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com>
Co-authored-by: bryanster <45668775+bryanster@users.noreply.github.com>
Co-authored-by: Jelle Hol <jellehol93@gmail.com>
Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Content Bot <bot@demisto.com>
Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com>
Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com>
Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com>
Co-authored-by: Daniel Rezvani <drezvani@paloaltonetworks.com>
Co-authored-by: Karina Fishman <147307864+karinafishman@users.noreply.github.com>
Co-authored-by: Adi Peretz <130285835+AdiPeret@users.noreply.github.com>
Co-authored-by: Jacob Levy <129657918+jlevypaloalto@users.noreply.github.com>
Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com>
Co-authored-by: lironcohen272 <lircohen@paloaltonetworks.com>
Co-authored-by: Menachem Weinfeld <90556466+mmhw@users.noreply.github.com>
Co-authored-by: barryyosi-panw <158817412+barryyosi-panw@users.noreply.github.com>
Co-authored-by: Israel Lappe <79846863+ilappe@users.noreply.github.com>
Co-authored-by: darbel <darbel@paloaltonetworks.com>
Co-authored-by: rundssoar <139948408+rundssoar@users.noreply.github.com>
Co-authored-by: eepstain <116078117+eepstain@users.noreply.github.com>
Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com>
Co-authored-by: barryyosi-panw <byosilevich@paloaltonetworks.com>
Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com>
Co-authored-by: Tal Carmeli <158452762+tcarmeli1@users.noreply.github.com>
Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>
Co-authored-by: Frank Gasparovic <Frank.Gasparovic@Gmail.com>
Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
Co-authored-by: Bri <133698148+briluza@users.noreply.github.com>
Co-authored-by: Tomer Haimof <81556849+tomer-pan@users.noreply.github.com>
Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants