Skip to content

Commit

Permalink
Enhancement/ciac 10555/ews o365 gcc high support (#34917)
Browse files Browse the repository at this point in the history
* Unittests typo fixes

* Support for different authority cloud environments.

* Support for different authority cloud environments.

* germany EWS endpoint does not exist.

* lint

* readme update

* Implementation fixes

* fix contribution workflow scripts (#34909)

* skipping autopep8 on nightlies (#34903)

* Replace links so they link to master (#34906)

* add EV2 core packs (#34147) (#34217)

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: anas-yousef <[email protected]>

* ReadPDFFileV2 open in binary mode (#34908)

* Added fix

* Added RNs

* Updated docker image

* Fixed RNs

* SentinelOne V2- 3.2.25 - Updating Mappers (#34619) (#34911)

* Updated the mappers and incient fields and type

* enable the labels on mapper

* Updating the mappers, layout

* Adding related incidents tab

* Updated release notes

* Updated the layout

* Updated the layout by adding the move command

* Review comment fixes

* Bumped version

* Fixed new review comments

* Fixed new review comments

* Fixed new review comments

* Fixed new review comments

* demo review comment fixes

* pre-commit fix

* review comment fixes

---------

Co-authored-by: munna-metron <[email protected]>
Co-authored-by: RotemAmit <[email protected]>

* CommonServerPython: truncate `return_error` messages (#34823)

* return_error_message

* pre commit

* CR

* RN

* CR

* ignore

* move constant

* pre commit

* add verbose

* revert to master

* Fix image routing (#34837)

* Fix image routing

* add Yara pack to dependence

* add release notes

* add release notes

* .

* .

* moved lo107 to warning (#34918)

* adding a fix to parsing_user_query (#34816)

* adding a fix to parsing_user_query

* RL + change to *attribute_timestamp*

* removing log

* Update Packs/FeedMISP/ReleaseNotes/1_0_33.md

Co-authored-by: Dan Tavori <[email protected]>

* add test

* fix docker

* add docstring

* fix tests

* cr fix

---------

Co-authored-by: Dan Tavori <[email protected]>

* update to lates exchangelib version in ewsv2, remove pwsh (#34630)

* checking docker 5.0.3

* fix find folders

* added else, catch all exception in tree

* extra thing

* run w latest image

* remove extra except block

* Update Packs/MicrosoftExchangeOnPremise/ReleaseNotes/2_1_7.md

* Update Packs/MicrosoftExchangeOnPremise/ReleaseNotes/2_1_7.md

* Update Packs/MicrosoftExchangeOnPremise/ReleaseNotes/2_1_7.md

* image

* lint

* demisto/py-ews:5.4.1.98082

* try old image

* Revert "try old image"

This reverts commit 23c86eada767c6906a81399961d8e49f7e115e94.

* remove some to test

* Revert "remove some to test"

This reverts commit 9638f86197a642453771abc1442ba8cd85f81f1a.

---------

Co-authored-by: Judah Schwartz <[email protected]>
Co-authored-by: Judah Schwartz <[email protected]>

* fixed an issue where test-module failed with oauth process. (#34871)

* fixed an issue where test-module failed with oauth process.

* reverted

* revert service now

* added handling to servicenow test module

* added rn

* edit

* edit

* added rn

* Update Packs/CommonScripts/ReleaseNotes/1_15_12.md

---------

Co-authored-by: Dean Arbel <[email protected]>

* [Native Image] Update Candidate To `py3-native:8.6.0.98251` (#34767)

* update

* Update Tests/docker_native_image_config.json

* Update Tests/docker_native_image_config.json

* Update Tests/docker_native_image_config.json

* infra

* Update Tests/docker_native_image_config.json

* Update .gitlab/ci/.gitlab-ci.yml

* Update .gitlab/ci/.gitlab-ci.yml

* Update base author image (#34879)

* Update base author image

* fix images

* remove redundant images

* Cisco webex update authentication call to use body instead of url params (#34912)

* cisco webex rename integration context

* change the access token to body

* add ut and rn

* fix import

* fix ut

* docker

* fix RN

* SplunkPy: use expandtoken in mirroring query (#34840)

* use expandtoken

* expand token in mirror

* update docker

* [sane-pdf-reports] - assign markdown server port automatically (#34931)

* [sane-pdf-reports] - assign markdown server port automatically

* bump rn

* rollback changes

* log on which port markdown server started

* pragma cover

* run time error

* pragma

* fix test

* Joe security bug (#34892)

* added logs

* reverted yml

* edit

* fix

* added rn

* updated do

* edit

* added log

* added log

* log rewrite

---------

Co-authored-by: Danny_Fried <[email protected]>

* Digital guardian Bug (#34920)

* fixed parsing events from api

* fix

* added rn

* fix

* fix

* fixes

* fixes

* added rn

* updated do

* pre-commit edits

* Update Packs/DigitalGuardian/ReleaseNotes/1_1_5.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/DigitalGuardian/ReleaseNotes/1_1_5.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixes

* made a change for the unit test

* edit

* added fixes for unittests

* fixed do

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* poetry files (#34926)

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: israelpoli <[email protected]>

* Ys add 'get-machine-by-ip- command (#34814)

* Added new command

* enhance endpoint command

* Readme

* release notes

* pre commit

* pre commit

* fix yml

* format

* rn

* remove the dev

* Build

* fix yml

* fix yml

* generate docs

* test description

* readme

* little fixes

* fixes

* fixes

* fixes

* code review fixes

* fix yml

* format

* remove the dev

* fix yml

* fixes

* /

* code review fixes

* change command's name

* more fixes

* add documentation

* more code review fixes

* more fixes

* Update Packs/MicrosoftDefenderAdvancedThreatProtection/Integrations/MicrosoftDefenderAdvancedThreatProtection/MicrosoftDefenderAdvancedThreatProtection.py

* added 'Dev' to name of integration

* /

* pre commit

* Build effort

* release notes

* rebuild

* fix

---------

Co-authored-by: Jasmine Beilin <[email protected]>
Co-authored-by: yrosenberg <[email protected]>

* Added backslashes handling to drilldown enrichment  (#34811)

* Added backslashes handling to drilldown enrichment

* Added comment + pre commit fixes

* Fixed unit test

* Added a test

* fix test

* Handled splunk variables that were surrounded by quotation marks in the original query

* precommit fixes

* Added RN file

* Fixed Typo

* Removed redundant logs

* Removed unnecessary logs

* Delete unnecessary variable

* delete RN file

* Update the RN files

* Removed reference of checkpoint from readme file (#34964)

* Fixed an issue where test button failed with un informative error. (#34967)

* Fixed an issue where test button failed with un informative error.

* Bumped the docker image

* PrintToParentIncident skip name change (#34979)

* Added skip

* pack-ignore

* BC

* Update Packs/CommonScripts/ReleaseNotes/1_15_13.json

Co-authored-by: dorschw <[email protected]>

* Moved to known words

* Update Packs/CommonScripts/ReleaseNotes/1_15_13.md

Co-authored-by: dorschw <[email protected]>

* Fixed RNs

---------

Co-authored-by: dorschw <[email protected]>

* [CSP] Fixed issue uploading large files (#34921)

* [CSP] Fixed issue uploading large files

* Add 'if files'

* Replace from BaseClient to generic_http_request

* Update Packs/Base/ReleaseNotes/1_34_14.md

Co-authored-by: tkatzir <[email protected]>

* Update Packs/Base/Scripts/CommonServerPython/CommonServerPython.py

Co-authored-by: Binat Ziser <[email protected]>

* Update 1_34_14.md

---------

Co-authored-by: tkatzir <[email protected]>
Co-authored-by: Binat Ziser <[email protected]>

* delete tpb (#34990)

* O365 Security and Compliance Auth Fix (#34896)

* Fixed an issue where the authentication would use a deprecated app id

* Fix alert regression in create email html body script (#34966)

* fix attached email decode

* CreateEmailHtmlBody add support for alert in XSIAM

* fix script

* RN

* Cr fixes

* FIX

* revert

* doc fixes

* conflicts

* [Xsup 38544 ] DisplayHTMLWithImages no default color for background (#34985)

* added white background-color

* docker and rn

* Fix proofpoint widget (#34983)

* proofpoint tap most attcked users widget

* proofpoint tap top clickers widget fix

* added a main function

* RN

* autopep8

* bumped the docker image

* RN

* commit

* fine tune

* pre commit fixes

* Use `demisto/py3-tools` instead of  `demisto/fastapi` for Pydantic (#34255)

* pydantic image and fixes

* use prod image

* RN

* RN

* RN

* bump api-dependent images

* bump pydantic: BoxEventsCollector

* add type hint

* fix

* bump minor versions

* fix dict

* add trailing period

* Bump pack from version Mimecast to 2.4.0.

---------

Co-authored-by: Content Bot <[email protected]>

* fix converting a response to json CoreIRApiModule (#34975)

* fix converting a response to json

* dict not response

* remove UTs

* RN

* final fix

* UT

* edit UT

* UT

* RN

* pre commit

---------

Co-authored-by: yrosenberg <[email protected]>

* move autobump rn to source github_workflow_scripts folder (#34999)

* reverted insecure parameter in OpenCTI (#34913)

* changed insecure

* Update Packs/OpenCTI/ReleaseNotes/1_0_12.json

Co-authored-by: Dean Arbel <[email protected]>

---------

Co-authored-by: Dean Arbel <[email protected]>

* replace IP in AV TPB (#35000)

* Revert "delete tpb (#34990)" (#35002)

This reverts commit 77597abd8a41b7b9dc77443ff0e8f38d9ce8ae7c.

* Get Content Roles from Blob (#34932)

* Get Content Roles from Blob

* Update content_roles.json

* revert content roles changes

* add retrieval from fs as backup

* organize imports

* created const for roles filename

* fix precommit

* use consts for ut class

* use git instead of rel dirs to resolve path to content roles json file

* rm unneeded var when getting blob

* [sane-pdf-reports] - fix issue where large customer logos were not parsed correctly (#34862)

* test

* bla

* [SanePDFReport] - fix large logos

* docker-image

* bump rn

* pre-commit-shit

* docker image

* bump rn

* Update docker image tag (#35005)

* [CortexXDRIR] Adjusted to rely on remote_args.data for closing in mirroring. (#34868)

* added using data and not only delta

* blank line

* rn

* rn

* rn

* Fix Typo of SecureID instead of the correct "SecurID" (#34977)

* Change SecureID to SecurID across all refrences

* Chnage the files and folders names back

* change back the id of the modeling rule.

* Added release notes with breaking changes

* Added text to the breaking changes

* small change to breaking change note

* Modified breaking changes note

* Modified breaking changes note

* Modified breaking changes note

* Update approved_categories.json (#35009)

* Update approved_categories.json

* update in metadata files

* Add screenshot of Lessons Learned playbook (#34969)

* copying all images from readme&description to doc_files folder (#34591)

* adding script

* fixing regex

* fix

* fix

* fixes

* fixs

* edit

* fix script

* fix script after demo

* images

* revert

* remove files

* fixing filename

* fixed files names

* fix name of files

* rremoving links outside github

* Implemented bypassing malformed indicators (#34693)

* Implemented bypassing malformed indicators (#34657)

* Implemented bypassing malformed indicators

* Implemented review fixes

---------

Co-authored-by: Shelly Tzohar <[email protected]>

* Fixed rn

---------

Co-authored-by: cyble-dev <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>
Co-authored-by: sberman <[email protected]>

* Extract hyperlinks from office files (#34671)

* commit

* pre commit fixes

* rn

* bumped by revision

* Update Packs/CommonScripts/ReleaseNotes/1_15_5.md

Co-authored-by: dorschw <[email protected]>

* Update Packs/CommonScripts/Scripts/ExtractHyperlinksFromOfficeFiles/ExtractHyperlinksFromOfficeFiles.py

Co-authored-by: dorschw <[email protected]>

* created a new test file

* known words and update docker

---------

Co-authored-by: dorschw <[email protected]>

* Container Script Null ExecutedCommands (#34681)

* [API Execution Metrics] Added Error Types To The Main Widget (#34676)

* init

* Update 1_6_0.md

* color and new name

* Update Packs/CommonDashboards/ReleaseNotes/1_6_0.md

* color

---------

Co-authored-by: dorschw <[email protected]>

* SentinelOne v2: Fixes sentinelone-disconnect-agent and sentinelone-connect-agent issues. (#34672)

* fix: fix issues with sentinelone-disconnect-agent and sentinelone-connect-agent cmds (#34372)

* keep AgentsAffected

---------

Co-authored-by: chloerongier <[email protected]>
Co-authored-by: Jacob Levy <[email protected]>

* Ciac 9706 (#34701)

* section updated to advance (#34660)

* section updated to advance

* sections fixed

* added release note

* updated rn message

* fixed section

* MISP V3 Test (#34684)

* MISP V3 Test

* MISP V3 Test fixes

* Update MISPV3.yml

* MISP V3 Test add lines to trigger playbook

* MISP V3 Test add lines to trigger playbook

* Update MISP_V3_Test.yml

* fix RNs

* bump docker

* undo misp changes

* undo misp changes

---------

Co-authored-by: dorschw <[email protected]>

* Changes related to the Vectra XDR release 1.0.5 (#34700) (#34702)

Co-authored-by: Crest Data <[email protected]>
Co-authored-by: crestdatasystems <[email protected]>

* Fix for 'Identity Analytics - Alert Handling' playbook (#34696)

* mapping rule output for the 'Number Of Found Related Alerts' alert field needs to be changed from 'NumOfRelatedAlerts' to '${NumOfRelatedAlerts}'.

* RN

* Bump pack from version Core to 3.0.34.

* re-added the inputSections of the playbook

---------

Co-authored-by: Tal <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* Adding Armis logos for the XSIAM ingestion dashboard (#34117) (#34704)

* adding dashboard icons

* adding dashboard icons

* updating version for dashboard icons

* updating version for dashboard icons

Co-authored-by: paulusaltus <[email protected]>

* Fix Incapsula authorization error (#34706)

* Added headers

* fix

* imperva

* revert

* RN

* RN

* validate fixes

* Microsoft defender rebranding (#34692)

* Microsoft Defender XDR rebranding

* RN

* docker

* keywords

* format

* fixed img

* revert form version

* update img

* add svg

* 9835 GitHub feed (#33735)

* squash

* add testes

* fix file name

* fix tests bug

* add tests

* commit

* Revert "commit"

This reverts commit cb7451d18b9edfcc3b809b991ace461ab73c92ce.

* delete unused func

* CR fix issues

* split yara rules with plyara lib

* CR issues

* add secrets-ignore

* commit

* secrets-ignore

* fix raw yara layout

* commit

* change readme

* cr issues

* Treatment of the first commit in the repository

* CR issues

* typing issue

* commit

* doc review issues

* type fix

* undo commit

* delate rubbish

* add tags

* commit

* commit

* add test

* empty commit

* Empty-Commit

* test changes

* rename

* rename fix

* cr issues

* validations issues

* arrange secrets

* testes

---------

Co-authored-by: YuvHayun <[email protected]>

* Remove nightly ok workflow (#34714)

* Implementation of outgoing mirroring  (#34703)

* Implementation of outgoing mirroring  (#34353)

* outgoing mapping init

* additional properties in mappers

* set up mirroring parameters correctly (outgoing)

* implement outgoing mirroring

* fix close test

* add tests for outgoing update

* release notes

* fix release notes

* brecking changes release notes

* remove unnecessary fields in outgoing mapper

* Update Packs/VaronisSaaS/ReleaseNotes/1_0_6.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/ReleaseNotes/1_0_6.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/ReleaseNotes/1_0_6.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/ReleaseNotes/1_0_6.json

Co-authored-by: Sasha Sokolovich <[email protected]>

* Update Packs/VaronisSaaS/IncidentFields/incidentfield-Varonis_SaaS_Close_Reason.json

Co-authored-by: Sasha Sokolovich <[email protected]>

* mirroring close action in xsoar on varonis close alert

* Added post processing script to set the alert status to closed when an incident is closed.

* Update Packs/VaronisSaaS/Integrations/VaronisSaaS/VaronisSaaS.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/ReleaseNotes/1_0_6.json

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/Scripts/varonis_alert_post_processing/README.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/Scripts/varonis_alert_post_processing/README.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/ReleaseNotes/1_0_6.md

Co-authored-by: RotemAmit <[email protected]>

* fix issue with script naming

* fix release notes

* fix release notes

* remove description file for script

* remove exception catching from main

* update read me file for Integration

* Update Packs/VaronisSaaS/Integrations/VaronisSaaS/README.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/Integrations/VaronisSaaS/README.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/VaronisSaaS/Integrations/VaronisSaaS/README.md

Co-authored-by: RotemAmit <[email protected]>

---------

Co-authored-by: bdudnyk-varonis <[email protected]>
Co-authored-by: RotemAmit <[email protected]>
Co-authored-by: Sasha Sokolovich <[email protected]>

* RN

---------

Co-authored-by: vkorenkov-varonis <[email protected]>
Co-authored-by: bdudnyk-varonis <[email protected]>
Co-authored-by: RotemAmit <[email protected]>
Co-authored-by: Sasha Sokolovich <[email protected]>

* updated the docker image (#34725)

* Joe-submission-info command Update (#34694)

* Changed submission info to have a required argument

* updated release notes

* updated README

* added bc note

* added bc

* Fix duo-get-events command (#34734)

* rename push_events param

* update RN

* update RN

* update docker

* SymantecCloudSOC: fix date format error (#34640)

* fix fromat error

* fix date format issue

* fix pre commit

* Update Packs/SymantecCloudSOC/ReleaseNotes/1_0_8.md

Co-authored-by: Dean Arbel <[email protected]>

---------

Co-authored-by: Dean Arbel <[email protected]>

* MicrosoftDefnderForCloud: update documentation (#34724)

* update documentation

* update RN

* CR changes

* Get list row (#34652)

* removed new lines at the end causing index exception

* removed un related file

* improved the test

* update release notes

* update release notes

* Bump pack from version CommonScripts to 1.15.5.

* Bump pack from version CommonScripts to 1.15.6.

* update release notes and bump docker

* commit

* test desc

* changed the folder name to fit our conventions

* change name

* change name

* change name

* change name

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: Koby Meir <[email protected]>

* Qradar delete and cancel searches (#34443)

* add search delete command

* add search cancel command

* cancel query when polling almost get timeout

* add cancel search to fetch

* RN

* Apply suggestions from code review

Co-authored-by: yuvalbenshalom <[email protected]>

* RN

* docker

* remove unnecessary debug logs

---------

Co-authored-by: yuvalbenshalom <[email protected]>

* Infoblox Update (#34730)

* Updated the ParsingRules

* Updated ReleaseNotes

* Updated ReleaseNotes

* Fix unittest in CommonServerPython script (#34653)

* fix CSP test

---------

Co-authored-by: kobymeir <[email protected]>

* XSUP 37940 aruba clearpass (#34732)

* Updated dataset name

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated HPEArubaClearPass_schema

* Updated HPEArubaClearPass_schema

* [Azure Log Analytics] Add High GCC support (#34667)

* Add `Azure Cloud` parameter

* Add `Server URL` parameter

* Add get_azure_cloud argument in Client

* pre-commit

* Build base_url arg using azure_cloud

* Update test file

* Update test file

* Fix suffix string

* Update RN

* format

* Add know words

* [CortexXpanse] - New Xpanse Feed (#34709) (#34755)

* init

* before removing range

* more stuff

* starting unit tests

* unit tests

* final touches

* set defaults

* RN

* fix val

* update RN

* updates

* Apply suggestions from code review



* Apply suggestions from code review



* bump ver and lint

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>

* Update clean_stale_branches.yml (#34759)

* [Integration] - Mattermost V2 (#32423)

* Initial commands

* Added websocket support

* handle threads and dm

* cosmetic changes

* ADDING WEBHOOK TO INTEGRATION

* tests and docs

* yml

* added test and docs

* small changes before demo

* more changes after demo

* added coverage

* rename mattermost

* rename mattermost

* rename test playbook + tests

* delete dup files

* cr and small changes

* cr

* cr

* cr

* readme

* doc review + small fixes

* Added support for script MattermostAskUser

* rn

* doc review

* tpb

* script testplaybook

* docs

* readme

* small changes

* fix test

* Apply suggestions from doc review

Co-authored-by: ShirleyDenkberg <[email protected]>

* Apply suggestions from doc review - yml file

Co-authored-by: ShirleyDenkberg <[email protected]>

* updated docker image, cr

* added tpb to skipped, cr, pre commit

* rn

* updated scripr args, coverage

* debug logs and pre commit

* add support for xsoar_on_prem only

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* MITRE ATT&CK - Save intrusion-sets as threat-actor indicators parameter (#34598)

* Threat-actor update

* RN

* small fix

* RN

* RN

* Update Packs/FeedMitreAttackv2/ReleaseNotes/1_1_38.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update FeedMitreAttackv2.yml

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* add isFetchSamples to slack v3 (#34758)

* add isFetchSamples to slack v3

* rn

* Update XSOAR Engineer Training Docker Image (#34745)

* Update XSOAR Engineer Training Docker Image

* revert changes

* bump docker image

* rm release notes

* readd 1_0_1

* update rn

* fix docker image in rn

* Fixed links to graphics (#34762)

Graphics were not appearing. Fixed links to graphics.

Co-authored-by: Shelly Tzohar <[email protected]>

* Support multiple drilldown searches response  (#34327)

* handled more than one drilldown search

* Change the Submitted condition

* Edited handle submitted notables

* Edited SplunkShowDrilldown script

* Fixed the to_incident function to keep BC

* Present Results by Search Query

* limit results table to a const

* Use time frame of multiple drilldowns

* added query name to the context and layout

* added query name to the layout

* Changed comment wordings

* Removed unnecessary function

* removed unnecessary loop

* parse query name

* Improved layout

* Comments Improvements

* Added docs

* Added the RN file

* fix comment

* Updated the docker image

* pre-commit changes

* Fixed too long lines

* Fixed timeframe test

* Improve readme reference

* fixed drilldown_enrichment function

* Fixed drilldown_enrichment function for unsuccessful enrichments

* Fixed RN

* pre commit fixes

* Removed unnecessary debug message

* failed_to_submit condition change

* added unit tests

* Added Unit Tests

* pre commit fixes

* pre commit fixes

* pre comit more fixes

* pre commit more fixes

* Added unit tests for SplunkShowDrilldown script

* pre commit fixes

* Fixed the Submitted condition

* Improved logs

* pre commit fixes

* fixed explanation

* Added info level log

* Pre commit fixes

* Improved the call to parse a query name

* Update Packs/SplunkPy/Integrations/SplunkPy/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/SplunkPy.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/SplunkPy_description.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/SplunkPy_description.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/SplunkPy_description.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SplunkPy/ReleaseNotes/3_1_28.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Edited the description of 'Number of Events Per Enrichment Type' param

* change info level to error level

* Changed the structure of the drilldown search results

* Pre-commit fixes

* Update Packs/SplunkPy/Integrations/SplunkPy/README.md

Co-authored-by: yuvalbenshalom <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/README.md

Co-authored-by: yuvalbenshalom <[email protected]>

* Update Packs/SplunkPy/Integrations/SplunkPy/SplunkPy.py

Co-authored-by: yuvalbenshalom <[email protected]>

* Removed temp const

* Added BC json to the RN

* Added ids to the unit tests

---------

Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: yuvalbenshalom <[email protected]>

* fix pyEWS TPB (#34742)

* fix pwEWS TPB

* fix timeout

* conf

* not parallel

* [Marketplace Contribution] Akamai WAF - Content Pack Update (#34474) (#34766)

* "contribution update to pack 'Akamai WAF'"

* Update Akamai_WAF.py

* Update Akamai_WAF.py

* Update Akamai_WAF.py

* Update Akamai_WAF.py

* Update Akamai_WAF.py

1. Revert the deletion of the demisto.debug() statements.
2. Revert the following change.
> -    entry_context = []
-    human_readable = []

* fixed a duplication in the README

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml



* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/README.md



* Update Packs/Akamai_WAF/ReleaseNotes/2_0_11.md



* unit tests

* pre-commit updates

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: davistonehub <[email protected]>
Co-authored-by: RotemAmit <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Implement support for other regions (#34774) (#34782)

Co-authored-by: Christian Gutierrez <[email protected]>

* VMware ESXi Parsing Update (#34763)

* Updated ParsingRules

* Updated ParsingRules

* reverted Infoblox

* Updated ReleaseNotes

* Updated ReleaseNotes

* Get Original Email - EWS v2 - test - fix (#34756)

* fix tpb

* not parallel

* Fixes For 'IOC Alert' XSIAM Playbook (#34747)

* Fixes For 'IOC Alert' XSIAM Playbook

* RN

* revert changes of task 83

* Changed the theme in the playbook picture to white.

* add: update octoxlabs (#34645)

* add: update octoxlabs (#34532)

* add: update octoxlabs

* add: new commands in release notes

* change: dockerfile version

---------

Co-authored-by: Kobbi Gal <[email protected]>

* Testing with master sdk

* Testing with master sdk

* Revert changes

* revert poetry.lock

---------

Co-authored-by: ogulcanhero <[email protected]>
Co-authored-by: Kobbi Gal <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>
Co-authored-by: sberman <[email protected]>

* CS Falcon - Reopen incident statuses (#34675)

* added an option to choose in which statuses to reopen the incident

* added reopen statuses to the rest of the incident types

* unit tests update, reopened statuses update in the code, RN

* pre-commit updates

* unit tests

* more unit tests and an update to get_remote_idp_or_mobile_detection_data

* fixed yml

* updated docker image

* cr updates

* more debug logs

* Fix for 'Identity Analytics - Alert Handling' XSIAM playbook (#34777)

* Fix for 'Identity Analytics - Alert Handling' XSIAM playbook

* RN

* Bump pack from version Core to 3.0.36.

---------

Co-authored-by: Content Bot <[email protected]>

* Skip sending Slack Notifications for Tests (#34788)

* Add Conditional for Slack Notifications

* fix conditional

* simplify title prefix

* Bump core packs versions (#34804)

* bump core packs versions

* resolve conflict

* empty-commit

* Deprecate O365 Defender SafeLinks - Single User (#34729)

* Deprecate O365 Defender SafeLinks - Single User

* fix display

* RN

* Fix RN

* back adopt_pack and checkout_contribution scripts (#34796)

* back adopt_pack and checkout_contribution scripts

* add contribution folder for contribution utilities

* added deprecated comment

* Update contribution/README.md

Co-authored-by: RotemAmit <[email protected]>

* comment correction

* fix pre commit

---------

Co-authored-by: RotemAmit <[email protected]>

* [API Execution Metrics] Add Main Widget & Remove Integration Widgets (#34691)

* init

* init

* init

* rn

* EWSO365

* category email

* category email

* revert rn

* Update Packs/CommonDashboards/ReleaseNotes/1_7_0.md

Co-authored-by: dorschw <[email protected]>

* rn and histogram

* Bump pack from version CommonDashboards to 1.7.0.

* Update Packs/CommonDashboards/ReleaseNotes/1_7_0.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: dorschw <[email protected]>
Co-authored-by: Content Bot <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Modeling & parsing rules were added, readme was updated as well (#34784)

* Modeling & parsing rules were added, readme was updated as well

* Modeling & parsing rules were added

* update release notes

* update release notes

* update to versions in yml files

* Update HuaweiNetworkDevices

* ```bash

* update relase notes

---------

Co-authored-by: Eido Epstain <[email protected]>

* Fix links to graphics in Pack Readme (#34783)

* Fix links to graphics in Pack Readme

* Fixed validate

---------

Co-authored-by: Shelly Tzohar <[email protected]>
Co-authored-by: sberman <[email protected]>

* Print to incident and other alert's waroom (#34765)

* Added both scripts

* Added README

* Updated YML

* pre-commit

* RNs

* pack-ignore

* Added docstrings

* Changed fromversion

* Bump pack from version CommonScripts to 1.15.8.

* CR fixes

* Docker upgrade

* Added marketplaces

* Updated pack-ignore

* Updated RNs

* Dummy change

* Revert dummy change

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: Jasmine Beilin <[email protected]>

* [QRadar v3] Metrics (#34485)

* init

* finally

* RN

* dashboard and widget

* fix

* revert

* pre-commit

* Update Packs/QRadar/pack_metadata.json

* rn and readme

* Update Packs/QRadar/Integrations/QRadar_v3/README.md

* Apply suggestions from code review

Co-authored-by: dorschw <[email protected]>

---------

Co-authored-by: dorschw <[email protected]>

* MyToDoTasksWidget: fix broken link (#34768)

* fix broken link

* Bump pack from version CommonWidgets to 1.2.51.

* Update Packs/CommonWidgets/ReleaseNotes/1_2_51.md

Co-authored-by: Dean Arbel <[email protected]>

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: Dean Arbel <[email protected]>

* New Integration: Chronicle Streaming API (#34593) (#34813)

* New Integration: Chronicle Streaming API

* Resolving the PR comments and handled the scenario when continuous time coming from integration context is older for the API

---------

Co-authored-by: Crest Data <[email protected]>
Co-authored-by: crestdatasystems <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>

* special_lucin_char_indicators_from_cache (#34818)

* special_lucin_char_indicators_from_cache

* added some tests

* commit

* RN

* test formating

* Update Packs/CommonScripts/ReleaseNotes/1_15_9.md

Co-authored-by: Dean Arbel <[email protected]>

---------

Co-authored-by: Dean Arbel <[email protected]>

* added validations to validation_config file (#34832)

* del README blank lines (#34772) (#34830)

Co-authored-by: johnnywilkes <[email protected]>

* [MS teams] update URLs (#34833)

* update

* update docker

* Change Forescout Pack Name (#34829)

* Change Forescout Pack Name

* add rn

* fix rn

* fix (#34834)

* deprecate (#34839)

* removed extra args from readmem (#34828)

* removed extra args from readmem

* updated do

* added rn

* reverted do

* updated do

* added rn

* PAN-OS Correlation Logs (#34388)

* init

* remote changes

* remove .keys()

* complete filter

* update last_run complete

* added typing

* refactor

* notations

* refactor

* stub tests

* first tests

* more tests

* done(?)

* unit-test complete

* added logs

* fix entries

* add incident types

* RN

* removed system=true for incidents

* Update 2_1_28.md

* Bump pack from version PAN-OS to 2.1.29.

* fix build issues

* refactor

* refactor

* temp

* working

* pre-commit issues fixed

---------

Co-authored-by: Content Bot <[email protected]>

* [CoretxXDRIR] edited the tooltip (#34838)

* edited the tooltip

* rn

* readme

* removing RM106

* [Azure Log Analytics] Update README.md (#34761)

* Update README.md

* pre-commit

* checkout `.github/workflows/clean_stale_branches.yml` from origin

* Update README.md (#34858) (#34861)

Changed “Servers & Services” to “Instances” and added opening quotation marks to two examples that were missing them.

Co-authored-by: rcookpalo <[email protected]>

* add parameter to Microsoft defender cloud apps event collector (#34764)

* add support for event types

* RN

* add param to README.md

* improve code

* docs

* Update Packs/MicrosoftCloudAppSecurity/ReleaseNotes/2_1_63.md

Co-authored-by: dorschw <[email protected]>

* version

* naming and remove condition

* pre commit

* clarify filters

* Update Packs/MicrosoftCloudAppSecurity/Integrations/MicrosoftDefenderEventCollector/MicrosoftDefenderEventCollector.py

Co-authored-by: dorschw <[email protected]>

* not required

---------

Co-authored-by: dorschw <[email protected]>

* added before query param to Armis event collector (#34738)

* added before query param toarmis event collector

* cr fixes

* fixes

* test fix

* testings

* pre-commit fixes

* pre-commit fixes

* update default time

* Update Packs/Armis/ReleaseNotes/1_1_15.md

Co-authored-by: Judah Schwartz <[email protected]>

* cr fixes

---------

Co-authored-by: Judah Schwartz <[email protected]>

* Adding AdoptionMetricts script to CommonDashboard (#34538)

* fixing bug artifacts from XDR missing

* adding rl

* add rl

* remove debugging

* fix default val

* fix

* Bump pack from version CortexXDR to 6.1.35.

* Bump pack from version CortexXDR to 6.1.36.

* Bump pack from version CortexXDR to 6.1.37.

* cr

* cr fix default values in functions

* fix error

* Update Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.py

Co-authored-by: EyalPintzov <[email protected]>

* fix default

* fix docker

* fix tests

* fix default

* conflict fixes

* pre-commit fixes

* Adding AdoptionMetricts script to CommonDashboard

* fixing dirty commit

* fixing tests

* fix folder name

* Bump pack from version CommonDashboards to 1.5.1.

* Bump pack from version CommonDashboards to 1.6.1.

* check

* fim RM114

* adding note

* check if adding rn113 helps

* Bump pack from version CommonDashboards to 1.6.2.

* fixing doocker

* RN114

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: EyalPintzov <[email protected]>

* Removed username display in the configuration form and kept API key(password) (#34831)

* Removed username display in the configuration form and kept API key(password) (#34748)

* Removed username display in the configuration form and kept just the API key(password).

* Updated SafeBreach Pack/Integration readme and release notes.

* Formatting and Dockerimage update for the SafeBreach integration

* Update SafeBreach.yml

* Update 1_4_3.md

---------

Co-authored-by: Devang Mungara <[email protected]>
Co-authored-by: Jacob Levy <[email protected]>

* Remove redundant password. (#34846)

* Remove redundant password.

* RN.
Format yml.
version update.

* RN

* pre-commit changes

* Update Packs/AWS-SNS/ReleaseNotes/1_0_16.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update README file

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Move misplaced files (InvalidDepthOneFile) (#34845)

* move file

* fixes

* more fixes

* remvoe from config

* Cyberark epm add instance param (#34864)

* Added instance param

* RN

* default to false

* Fix mypy errors

* docs review

* Add ut

* MITRE IDs pack - update scripts dir name (#34817)

* update dir names

* update RN

* New XSIAM Dashboards/Reports (#34686)

* init

* remove images

* add readmes

* remove unneeded files

* Update Packs/XSIAMCompliance_ISO_27001/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/XSIAMCompliance_GDPR/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: cweltPA <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Removed duplicate xdrc section form readme, and removed wrong reference to NPS in the readme (#34865)

* fix arcsight image (#34867)

* fix arcsight image

* bump

* autopep8

* image size

* MapRangeValues - XSUP 38471 (#34863)

* fixed the issue

* added a unit test case

* int(f_value)

* removed and updated debug logs

* rn update

* removed script_info.txt creation (#34880)

* Extract hyperlinks pptx issue (#34876)

* added pptx test

* added functionality for grouped shaped parsing

* RN

* RN

* RN

* dissable error

* Mimecast integration ciac 9090 (#34386)

* add oauth2

* add command mimecast-get-archive-search-logs

* add command mimecast-get-search-logs

* add arg_to_datetime

* add  mimecast-get-view-logs

* add command mimecast-list-account

* pre commit

* add command mimecast-create-block-sender-policy

* add command mimecast-update-block-sender-policy

* add command mimecast-list-policies

* mimecast-list-policies

* fix get_policy_request()

* add command mimecast-create-antispoofing-bypass-policy

* add command mimecast-update-antispoofing-bypass-policy

* add command mimecast-create-webwhiteurl-policy

* add command mimecast-update-webwhiteurl-policies

* add command mimecast-create-address-alteration-policy

* add command

* policyType to not required

* fit type address-alteration

* change for debug

* fix mimecast-get-search-logs

* add argument to mimecast_create_webwhiteurl_policy_command

* add # default value

* fix  get_policy

* fix delete_policy_request

* add UT

* fix mane fn

* add space

* fix conditions

* format

* fix updating_token_oauth2

* boolean

* add readable output for list policies

* fix pagination

* space

* fix conditions

* webwhiteurl delete from YML

* README

* UT

* add to readme

* query_xml to query

* delete get_archive_search_logs_request

* fix pagination

* add UT

* mimecast-get-policy add description

* add outputs to yml

* delete print

* add to description.md

* delete print

* fix description in yml

* add command examples

* add command examples

* add command examples

* fix  description.md

* remove checkbox use_oauth2

* relative time support

* add command to readme

* fix after demo

* cr fix

* update Existing commands in readme

* command_examples

* pagination

* Merger request_with_pagination_api2 with request_with_pagination

* ut

* request_with_pagination

* fix get_archive_search_logs_command

* fix get_archive_search_logs_command

* fix for build

* add UT

* add UT and fix pre commit

* add release notes

* add release notes

* update docker

* update ReleaseNotes

* update ReleaseNotes

* fix for build

* add TestPlaybooks

* add UT

* Merge branch 'master' of github.com:demisto/content into mimecast-integration-ciac-9090

* DR

* fix ReleaseNotes

* add test playbook

* add readme

* fix outputs in yml

* test playbook

* Merge branch master of github.com:demisto/content into mimecast-integration-ciac-9090

* Mimecast Test api 2.0

* Merge branch master of github.com:demisto/content into mimecast-integration-ciac-9090

* Deleting an unnecessary title

* merge

* fix outputs

* add instance_names to conf.json

* add instance_names to conf.json

* fix README

* update docker

* add outputs_prefix

* add description to mimecast-delete-policy

* add instance_names

* Merge branch 'master' of github.com:demisto/content into mimecast-integration-ciac-9090

* fix instance_names

* fix playbook

* format TestPlaybooks

* add log

* add log

* fix CLIENT_SECRET

* add UT

* format

* replace json to md

* CLIENT_ID to str

* client_secret to str

* UT

* instance_names rename

* update conf.json instance_names

* fix test playbook

* added a raise message to the test module

* fix ci

* format

* recovery ci

* fix CLIENT_SECRET

* test_module return 'ok'

* fromversion test playbook

* Return to operation test_module

* update instance_names

* format

* update docker

* CS Falcon -readme update (#34881)

* readme update

* fixed IN101

* pre-commit updates

* added RN

* updated docker image

* fixed pre-commit autopep8 malformed packs (#34884)

* fixed autopep8

* update rn

* update rn

* update rn

* Update Packs/SuspiciousDomainHunting/ReleaseNotes/1_0_2.md

Co-authored-by: dorschw <[email protected]>

---------

Co-authored-by: dorschw <[email protected]>

* YARA script - create relationships for YARA indicators (#34799)

* YARA relationships

* RN

* RN

* ignore words

* Small fix in yml

* docstrings

* RN

* RN

* [ASM] Adding Slack Messages (#34827) (#34883)

* update slack pack

* CASM changed

* update screenshot link

* RN

* skip if unavailable

* slack RN

* Apply suggestions from code review



* add XSIAM ver

* fix validations

* update slack RN

* pack README typo

* update playbook README

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* save artifacts (#34886)

* Prisma logo update (#34512)

* Update images to match branding

* Move GitHub workflow scripts (#34887)

* move check_if_needs_to_fill_contribution_form script to under the .github folder

* delete check_if_needs_to_fill_contribution_form.py script from Utils/github_workflow_scripts/ folder

* move check_if_partner_approved_label_exists script to .github folder with its test file

* delete check_if_partner_approved_label_exists script from Utils folder

* move check_protected_directories script to github folder

* delete check_protected_directories script from Utils folder

* move create_internal_pr to github folder

* delete create_internal_pr from Utils folder

* move handle_external_pr script to github folder

* delete handle_external_pr script from Utils folder and fix UT for check_if_partner_approved_label_test

* delete test_data from Utils folder

* move parse_junit_per_pack to github folder

* move request_contributor_review to github folder and delete it from Utils folder with parse_junit_per_pack script

* move run_secrets_detection_get_playbook_status script to github and delete it from Utils folder

* move run_secrets_detection to github folder and delete it from Utils folder

* move send_slack_message to github folder and delete it from Utils folder

* move sync_contrib_base to github folder and delete it from Utils folder

* move utils_test to github and delete it from Utils folder

* move all scripts under Utils/github_workflow_github folder

* fix

* fix

* Update FireEyeNX.py (#34889)

* Update FireEyeNX.py

* reproduce issue with test + rns

* after fix

* change access to response (#34877)

* change access to response

* return a dict

* fix bug

* RN

* fix UTs

* change RN

* change RN

* RN for packages dependent on the modified API module CoreIRApiModule

* DO

* Update Docker Image To demisto/boto3py3  (#34904)

* Updated Metadata Of Pack SecurityIntelligenceServicesFeed

* Added release notes to pack SecurityIntelligenceServicesFeed

* Packs/SecurityIntelligenceServicesFeed/Integrations/SecurityIntelligenceServicesFeed/SecurityIntelligenceServicesFeed.yml Docker image update

* Updated Metadata Of Pack AWS-SecurityLake

* Added release notes to pack AWS-SecurityLake

* Packs/AWS-SecurityLake/Integrations/AWSSecurityLake/AWSSecurityLake.yml Docker image update

* Updated Metadata Of Pack AWS-AccessAnalyzer

* Added release notes to pack AWS-AccessAnalyzer

* Packs/AWS-AccessAnalyzer/Integrations/AWS-AccessAnalyzer/AWS-AccessAnalyzer.yml Docker image update

* Updated Metadata Of Pack AWS-IAMIdentityCenter

* Added release notes to pack AWS-IAMIdentityCenter

* Packs/AWS-IAMIdentityCenter/Integrations/AWSIAMIdentityCenter/AWSIAMIdentityCenter.yml Docker image update

* Updated Metadata Of Pack AWS-GuardDuty

* Added release notes to pack AWS-GuardDuty

* Packs/AWS-GuardDuty/Integrations/AWSGuardDutyEventCollector/AWSGuardDutyEventCollector.yml Docker image update

* Packs/AWS-GuardDuty/Integrations/AWSGuardDuty/AWSGuardDuty.yml Docker image update

* Updated Metadata Of Pack AWS-EKS

* Added release notes to pack AWS-EKS

* Packs/AWS-EKS/Integrations/AWSEKS/AWSEKS.yml Docker image update

* Updated Metadata Of Pack AWS-SecurityHub

* Added release notes to pack AWS-SecurityHub

* Packs/AWS-SecurityHub/Integrations/AWSSecurityHubEventCollector/AWSSecurityHubEventCollector.yml Docker image update

* Updated Metadata Of Pack Aws-SecretsManager

* Added release notes to pack Aws-SecretsManager

* Packs/Aws-SecretsManager/Integrations/AwsSecretsManager/AwsSecretsManager.yml Docker image update

* Updated Metadata Of Pack AWS-CloudTrail

* Added release notes to pack AWS-CloudTrail

* Packs/AWS-CloudTrail/Integrations/AWS-CloudTrail/AWS-CloudTrail.yml Docker image update

* Update Docker Image To demisto/accessdata  (#34905)

* Updated Metadata Of Pack Exterro

* Added release notes to pack Exterro

* Packs/Exterro/Integrations/Exterro/Exterro.yml Docker image update

* fix contribution workflow scripts (#34909)

* skipping autopep8 on nightlies (#34903)

* Replace links so they link to master (#34906)

* add EV2 core packs (#34147) (#34217)

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: anas-yousef <[email protected]>

* ReadPDFFileV2 open in binary mode (#34908)

* Added fix

* Added RNs

* Updated docker image

* Fixed RNs

* SentinelOne V2- 3.2.25 - Updating Mappers (#34619) (#34911)

* Updated the mappers and incient fields and type

* enable the labels on mapper

* Updating the mappers, layout

* Adding related incidents tab

* Updated release notes

* Updated the layout

* Updated the layout by adding the move command

* Review comment fixes

* Bumped version

* Fixed new review comments

* Fixed new review comments

* Fixed new review comments

* Fixed new review comments

* demo review comment fixes

* pre-commit fix

* review comment fixes

---------

Co-authored-by: munna-metron <[email protected]>
Co-authored-by: RotemAmit <[email protected]>

* CommonServerPython: truncate `return_error` messages (#34823)

* return_error_message

* pre commit

* CR

* RN

* CR

* ignore

* move constant

* pre commit

* add verbose

* revert to master

* Fix image routing (#34837)

* Fix image routing

* add Yara pack to dependence

* add release notes

* add release notes

* .

* .

* moved lo107 to warning (#34918)

* adding a fix to parsing_user_query (#34816)

* adding a fix to parsing_user_query

* RL + change to *attribute_timestamp*

* removing log

* Update Packs/FeedMISP/ReleaseNotes/1_0_33.md

Co-authored-by: Dan Tavori <[email protected]>

* add test

* fix docker

* add docstring

* fix tests

* cr fix

---------

Co-authored-by: Dan Tavori <[email protected]>

* update to lates exchangelib version in ewsv2, remove pwsh (#34630)

* checking docker 5.0.3

* fix find folders

* added else, catch all exception in tree

* extra thing

* run w latest image

* remove extra except block

* Update Packs/MicrosoftExchangeOnPremise/ReleaseNotes/2_1_7.md

* Update Packs/MicrosoftExchangeOnPremise/ReleaseNotes/2_1_7.md

* Update Packs/MicrosoftExchangeOnPremise/ReleaseNotes/2_1_7.md

* image

* lint

* demisto/py-ews:5.4.1.98082

* try old image

* Revert "try old image"

This reverts commit 23c86eada767c6906a81399961d8e49f7e115e94.

* remove some to test

* Revert "remove some to test"

This reverts commit 9638f86197a642453771abc1442ba8cd85f81f1a.

---------

Co-authored-by: Judah Schwartz <[email protected]>
Co-authored-by: Judah Schwartz <[email protected]>

* fixed an issue where test-module failed with oauth process. (#34871)

* fixed an issue where test-module failed with oauth process.

* reverted

* revert service now

* added handling to servicenow test module

* added rn

* edit

* edit

* added rn

* Update Packs/CommonScripts/ReleaseNotes/1_15_12.md

---------

Co-authored-by: Dean Arbel <[email protected]>

* [Native Image] Update Candidate To `py3-native:8.6.0.98251` (#34767)

* update

* Update Tests/docker_native_image_config.json

* Update Tests/docker_native_image_config.json

* Update Tests/docker_native_image_config.json

* infra

* Update Tests/docker_native_image_config.json

* Update .gitlab/ci/.gitlab-ci.yml

* Update .gitlab/ci/.gitlab-ci.yml

* Update base author image (#34879)

* Update base author image

* fix images

* remove redundant images

* Cisco webex update authentication call to use body instead of url params (#34912)

* cisco webex rename integration context

* change the access token to body

* add ut and rn

* fix import

* fix ut

* docker

* fix RN

* SplunkPy: use expandtoken in mirroring query (#34840)

* use expandtoken

* expand token in mirror

* update docker

* [sane-pdf-reports] - assign markdown server port automatically (#34931)

* [sane-pdf-reports] - assign markdown server port automatically

* bump rn

* rollback changes

* log on which port markdown server started

* pragma cover

* run time error

* pragma

* fix test

* Joe security bug (#34892)

* added logs

* reverted yml

* edit

* fix

* added rn

* updated do

* edit

* added log

* added log

* log rewrite

---------

Co-authored-by: Danny_Fried <[email protected]>

* Digital guardian Bug (#34920)

* fixed parsing events from api

* fix

* added rn

* fix

* fix

* fixes

* fixes

* added rn

* updated do

* pre-commit edits

* Update Packs/DigitalGuardian/ReleaseNotes/1_1_5.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/DigitalGuardian/ReleaseNotes/1_1_5.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixes

* made a change for the unit test

* edit

* added fixes for unittests

* fixed do

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* poetry files (#34926)

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: israelpoli <[email protected]>

* Ys add 'get-machine-by-ip- command (#34814)

* Added new command

* enhance endpoint command

* Readme

* release notes

* pre commit

* pre commit

* fix yml

* format

* rn

* remove the dev

* Build

* fix yml

* fix yml

* generate docs

* test description

* readme

* little fixes

* fixes

* fixes

* fixes

* code review fixes

* fix yml

* format

* remove the dev

* fix yml

* fixes

* /

* code review fixes

* change command's name

* more fixes

* add documentation

* more code review fixes

* more fixes

* Update Packs/MicrosoftDefenderAdvancedThreatProtection/Integrations/MicrosoftDefenderAdvancedThreatProtection/MicrosoftDefenderAdvancedThreatProtection.py

* added 'Dev' to name of integration

* /

* pre commit

* Build effort

* release notes

* rebuild

* fix

---------

Co-authored-by: Jasmine Beilin <[email protected]>
Co-authored-by: yrosenberg <[email protected]>

* Added backslashes handling to drilldown enrichment  (#34811)

* Added backslashes handling to drilldown enrichment

* Added comment + pre commit fixes

* Fixed unit test

* Added a test

* fix test

* Handled splunk variables that were surrounded by quotation marks in the original query

* precommit fixes

* Added RN file

* Fixed Typo

* Removed redundant logs

* Removed unnecessary logs

* Delete unnecessary variable

* delete RN file

* Update the RN files

* Removed reference of checkpoint from readme file (#34964)

* Fixed an issue where test button failed with un informative error. (#34967)

* Fixed an issue where test button failed with un informative error.

* Bumped the docker image

* PrintToParentIncident skip name change (#34979)

* Added skip

* pack-ignore

* BC

* Update Packs/CommonScripts/ReleaseNotes/1_15_13.json

Co-authored-by: dorschw <[email protected]>

* Moved to known words

* Update Packs/CommonScripts/ReleaseNotes/1_15_13.md

Co-authored-by: dorschw <[email protected]>

* Fixed RNs

---------

Co-authored-by: dorschw <[email protected]>

* [CSP] Fixed issue uploading large files (#34921)

* [CSP] Fixed issue uploading large files

* Add 'if files'

* Replace from BaseClient to generic_http_request

* Update Packs/Base/ReleaseNotes/1_34_14.md

Co-authored-by: tkatzir <[email protected]>

* Update Packs/Base/Scripts/CommonServerPython/CommonServerPython.py

Co-authored-by: Binat Ziser <[email protected]>

* Update 1_34_14.md

---------

Co-authored-by: tkatzir <[email protected]>
Co-authored-by: Binat Ziser <[email protected]>

* delete tpb (#34990)

* O365 Security and Compliance Auth Fix (#34896)

* Fixed an issue where the authentication would use a deprecated app id

* Fix alert regression in create email html body script (#34966)

* fix attached email decode

* CreateEmailHtmlBody add support for alert in XSIAM

* fix script

* RN

* Cr fixes

* FIX

* revert

* doc fixes

* conflicts

* [Xsup 38544 ] DisplayHTMLWithImages no default color for background (#34985)

* added white background-color

* docker and rn

* Fix proofpoint widget (#34983)

* proofpoint tap most attcked users widget

* proofpoint tap top clickers widget fix

* added a main function

* RN

* autopep8

* bumped the docker image

* RN

* commit

* fine tune

* pre commit fixes

* Use `demisto/py3-tools` instead of  `demisto/fastapi` for Pydantic (#34255)

* pydantic image and fixes

* use prod image

* RN

* RN

* RN

* bump api-dependent images

* bump pydantic: BoxEventsCollector

* add type hint

* fix

* bump minor versions

* fix dict

* add trailing period

* Bump pack from version Mimecast to 2.4.0.

---------

Co-authored-by: Content Bot <[email protected]>

* add more images

* fix dile name

* change name

* change name

---------

Co-authored-by: content-bot <[email protected]>
Co-authored-by: cyble-dev <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>
Co-authored-by: sberman <[email protected]>
Co-authored-by: omerKarkKatz <[email protected]>
Co-authored-by: dorschw <[email protected]>
Co-authored-by: tkatzir <[email protected]>
Co-authored-by: Shmuel Kroizer <[email protected]>
Co-authored-by: chloerongier <[email protected]>
Co-authored-by: Jacob Levy <[email protected]>
Co-authored-by: Edi Katsenelson <[email protected]>
Co-authored-by: yedidyacohenpalo <[email protected]>
Co-authored-by: Sapir Shuker <[email protected]>
Co-authored-by: Crest Data <[email protected]>
Co-authored-by: crestdatasystems <[email protected]>
Co-authored-by: TalNos <[email protected]>
Co-authored-by: Tal <[email protected]>
Co-authored-by: Content Bot <[email protected]>
Co-authored-by: paulusaltus <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: azonenfeld <[email protected]>
Co-authored-by: YuvHayun <[email protected]>
Co-authored-by: vkorenkov-varonis <[email protected]>
Co-authored-by: bdudnyk-varonis <[email protected]>
Co-authored-by: RotemAmit <[email protected]>
Co-authored-by: Sasha Sokolovich <[email protected]>
Co-authored-by: Arad Carmi <[email protected]>
Co-authored-by: Adi Daud <[email protected]>
Co-authored-by: Israel Lappe <[email protected]>
Co-authored-by: Dean Arbel <[email protected]>
Co-authored-by: Koby Meir <[email protected]>
Co-authored-by: JudithB <[email protected]>
Co-authored-by: yuvalbenshalom <[email protected]>
Co-authored-by: eepstain <[email protected]>
Co-authored-by: Yaakov Praisler <[email protected]>
Co-authored-by: kobymeir <[email protected]>
Co-authored-by: samuelFain <[email protected]>
Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Shahaf Ben Yakir <[email protected]>
Co-authored-by: MLainer1 <[email protected]>
Co-authored-by: Dror Avrahami <[email protected]>
Co-authored-by: Yuval Cohen <[email protected]>
Co-authored-by: Kobbi Gal <[email protected]>
Co-authored-by: Shachar Kidor <[email protected]>
Co-authored-by: Tal Carmeli <[email protected]>
Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: davistonehub <[email protected]>
Co-authored-by: Christian Gutierrez <[email protected]>
Co-authored-by: ogulcanhero <[email protected]>
Co-authored-by: israelpoli <[email protected]>
Co-authored-by: sharonfi99 <[email protected]>
Co-authored-by: Eido Epstain <[email protected]>
Co-authored-by: anas-yousef <[email protected]>
Co-authored-by: Jasmine Beilin <[email protected]>
Co-a…
  • Loading branch information
Show file tree
Hide file tree
Showing 76 changed files with 347 additions and 61 deletions.
19 changes: 14 additions & 5 deletions Packs/ApiModules/Scripts/MicrosoftApiModule/MicrosoftApiModule.py
Original file line number Diff line number Diff line change
Expand Up @@ -185,7 +185,8 @@ def __init__(self, # pylint: disable=unused-argument
synapse_analytics_resource_id=None,
attestation_resource_id=None,
portal=None,
keyvault=None):
keyvault=None,
exchange_online=None):
# Attribute names are significant. They are used when storing/retrieving clouds from config
self.management = management
self.resource_manager = resource_manager
Expand All @@ -207,6 +208,7 @@ def __init__(self, # pylint: disable=unused-argument
self.attestation_resource_id = attestation_resource_id
self.portal = portal
self.keyvault = keyvault
self.exchange_online = exchange_online

def has_endpoint_set(self, endpoint_name):
try:
Expand Down Expand Up @@ -304,6 +306,7 @@ def __init__(self,
attestation_resource_id='https://attest.azure.net',
portal='https://portal.azure.com',
keyvault='https://vault.azure.net',
exchange_online='https://outlook.office365.com'
),
suffixes=AzureCloudSuffixes(
storage_endpoint='core.windows.net',
Expand Down Expand Up @@ -343,6 +346,7 @@ def __init__(self,
synapse_analytics_resource_id='https://dev.azuresynapse.usgovcloudapi.net',
portal='https://portal.azure.us',
keyvault='https://vault.usgovcloudapi.net',
exchange_online='https://outlook.office365.com'
),
suffixes=AzureCloudSuffixes(
storage_endpoint='core.usgovcloudapi.net',
Expand Down Expand Up @@ -379,6 +383,7 @@ def __init__(self,
synapse_analytics_resource_id='https://dev.azuresynapse.usgovcloudapi.net',
portal='https://portal.azure.us',
keyvault='https://vault.usgovcloudapi.net',
exchange_online='https://outlook.office365.us'
),
suffixes=AzureCloudSuffixes(
storage_endpoint='core.usgovcloudapi.net',
Expand Down Expand Up @@ -415,6 +420,8 @@ def __init__(self,
synapse_analytics_resource_id='https://dev.azuresynapse.usgovcloudapi.net',
portal='https://portal.azure.us',
keyvault='https://vault.usgovcloudapi.net',
exchange_online='https://outlook-dod.office365.us'

),
suffixes=AzureCloudSuffixes(
storage_endpoint='core.usgovcloudapi.net',
Expand Down Expand Up @@ -447,7 +454,7 @@ def __init__(self,
media_resource_id='https://rest.media.cloudapi.de',
ossrdbms_resource_id='https://ossrdbms-aad.database.cloudapi.de',
portal='https://portal.microsoftazure.de',
keyvault='https://vault.microsoftazure.de'
keyvault='https://vault.microsoftazure.de',
),
suffixes=AzureCloudSuffixes(
storage_endpoint='core.cloudapi.de',
Expand Down Expand Up @@ -481,6 +488,7 @@ def __init__(self,
synapse_analytics_resource_id='https://dev.azuresynapse.azure.cn',
portal='https://portal.azure.cn',
keyvault='https://vault.azure.cn',
exchange_online='https://partner.outlook.cn'
),
suffixes=AzureCloudSuffixes(
storage_endpoint='core.chinacloudapi.cn',
Expand Down Expand Up @@ -684,6 +692,7 @@ def __init__(self, tenant_id: str = '',
command_prefix: The prefix for all integration commands.
"""
self.command_prefix = command_prefix
demisto.debug(f'Initializing MicrosoftClient with: {endpoint=} | {azure_cloud.abbreviation}')
if endpoint != "__NA__":
# Backward compatible.
self.azure_cloud = AZURE_CLOUDS.get(endpoint, AZURE_WORLDWIDE_CLOUD)
Expand Down Expand Up @@ -1496,16 +1505,16 @@ def generate_login_url(client: MicrosoftClient,
f"Missing:{','.join(missing)}")

login_url = urljoin(login_url, f'{client.tenant_id}/oauth2/v2.0/authorize?'
f'response_type=code&scope=offline_access%20{client.scope.replace(" ", "%20")}'
f'&client_id={client.client_id}&redirect_uri={client.redirect_uri}')
f'response_type=code&scope=offline_access%20{client.scope.replace(" ", "%20")}'
f'&client_id={client.client_id}&redirect_uri={client.redirect_uri}')

result_msg = f"""### Authorization instructions
1. Click on the [login URL]({login_url}) to sign in and grant Cortex XSOAR permissions for your Azure Service Management.
You will be automatically redirected to a link with the following structure:
```REDIRECT_URI?code=AUTH_CODE&session_state=SESSION_STATE```
2. Copy the `AUTH_CODE` (without the `code=` prefix, and the `session_state` parameter)
and paste it in your instance configuration under the **Authorization code** parameter.
"""
"""
return CommandResults(readable_output=result_msg)


Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ system: true
scripttarget: 0
dependson: {}
timeout: 0s
dockerimage: demisto/crypto:1.0.0.96042
dockerimage: demisto/crypto:1.0.0.99611
fromversion: 5.0.0
tests:
- No test
6 changes: 6 additions & 0 deletions Packs/AzureActiveDirectory/ReleaseNotes/1_3_25.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Active Directory Identity Protection (Deprecated)

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureActiveDirectory/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"description": "Deprecated. Use Microsoft Graph Identity and Access instead.",
"support": "xsoar",
"hidden": true,
"currentVersion": "1.3.24",
"currentVersion": "1.3.25",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureCompute/ReleaseNotes/1_2_28.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Compute v2

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureCompute/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Compute",
"description": "Create and Manage Azure Virtual Machines",
"support": "xsoar",
"currentVersion": "1.2.27",
"currentVersion": "1.2.28",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureDataExplorer/ReleaseNotes/1_3_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Data Explorer

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureDataExplorer/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Data Explorer",
"description": "Use Azure Data Explorer integration to collect and analyze data inside clusters of Azure Data Explorer and manage search queries.",
"support": "xsoar",
"currentVersion": "1.3.0",
"currentVersion": "1.3.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureDevOps/ReleaseNotes/1_4_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### AzureDevOps

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureDevOps/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "AzureDevOps",
"description": "Create and manage Git repositories in Azure DevOps Services.",
"support": "xsoar",
"currentVersion": "1.4.0",
"currentVersion": "1.4.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureFirewall/ReleaseNotes/1_1_42.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Firewall

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureFirewall/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Firewall",
"description": "Azure Firewall is a cloud-native and intelligent network firewall security service that provides breed threat protection for cloud workloads running in Azure.It's a fully stateful, firewall as a service with built-in high availability and unrestricted cloud scalability.",
"support": "xsoar",
"currentVersion": "1.1.41",
"currentVersion": "1.1.42",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureKeyVault/ReleaseNotes/1_1_46.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Key Vault

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureKeyVault/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Key Vault",
"description": "Use Key Vault to safeguard and manage cryptographic keys and secrets used by cloud applications and services.",
"support": "xsoar",
"currentVersion": "1.1.45",
"currentVersion": "1.1.46",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureKubernetesServices/ReleaseNotes/1_2_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Kubernetes Services

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureKubernetesServices/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Kubernetes Services",
"description": "Deploy and manage containerized applications with a fully managed Kubernetes service.",
"support": "xsoar",
"currentVersion": "1.2.0",
"currentVersion": "1.2.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
1 change: 0 additions & 1 deletion Packs/AzureLogAnalytics/ReleaseNotes/1_1_34.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,5 @@
#### Integrations

##### Azure Log Analytics

- Fixed an issue where instance configuration validation failed when using client credentials flow with a certificate.
- Updated the Docker image to: *demisto/crypto:1.0.0.99611*.
6 changes: 6 additions & 0 deletions Packs/AzureLogAnalytics/ReleaseNotes/1_1_36.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Log Analytics

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureLogAnalytics/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Log Analytics",
"description": "Log Analytics is a service that helps you collect and analyze data generated by resources in your cloud and on-premises environments.",
"support": "xsoar",
"currentVersion": "1.1.35",
"currentVersion": "1.1.36",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureNetworkSecurityGroups/ReleaseNotes/1_2_33.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Network Security Groups

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureNetworkSecurityGroups/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Network Security Groups",
"description": "Azure Network Security Groups are used to filter network traffic to and from Azure resources in an Azure virtual network",
"support": "xsoar",
"currentVersion": "1.2.32",
"currentVersion": "1.2.33",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureResourceGraph/ReleaseNotes/1_0_2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Resource Graph

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureResourceGraph/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Resource Graph",
"description": "Azure Resource Graph is an Azure service designed to extend Azure Resource Management by providing efficient and performant resource exploration with the ability to query at scale across a given set of resources. This pack is primarily used to allow for executing Azure Resource Graph queries.",
"support": "xsoar",
"currentVersion": "1.0.1",
"currentVersion": "1.0.2",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureRiskyUsers/ReleaseNotes/1_1_38.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Risky Users

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureRiskyUsers/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Risky Users",
"description": "Azure Risky Users provides access to all at-risk users and risk detections in Azure AD environment.",
"support": "xsoar",
"currentVersion": "1.1.37",
"currentVersion": "1.1.38",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureSQLManagement/ReleaseNotes/1_2_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure SQL Management

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureSQLManagement/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure SQL Management",
"description": "Microsoft Azure SQL Database is a managed cloud database provided as part of Microsoft Azure",
"support": "xsoar",
"currentVersion": "1.2.0",
"currentVersion": "1.2.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
10 changes: 10 additions & 0 deletions Packs/AzureSecurityCenter/ReleaseNotes/2_0_29.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@

#### Integrations

##### Microsoft Defender for Cloud

- Updated the MicrosoftApiModule with `exchange_online` endpoints.

##### Microsoft Defender for Cloud Event Collector

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureSecurityCenter/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Microsoft Defender for Cloud",
"description": "Unified security management and advanced threat protection across hybrid cloud workloads.",
"support": "xsoar",
"currentVersion": "2.0.28",
"currentVersion": "2.0.29",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureSentinel/ReleaseNotes/1_5_46.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Microsoft Sentinel

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureSentinel/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Microsoft Sentinel",
"description": "Microsoft Sentinel is a cloud-native security information and event manager (SIEM) platform that uses built-in AI to help analyze large volumes of data across an enterprise.",
"support": "xsoar",
"currentVersion": "1.5.45",
"currentVersion": "1.5.46",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureStorage/ReleaseNotes/1_2_28.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Storage Management

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureStorage/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure Storage Management",
"description": "Deploy and manage storage accounts and blob service properties.",
"support": "xsoar",
"currentVersion": "1.2.27",
"currentVersion": "1.2.28",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/AzureWAF/ReleaseNotes/1_2_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Azure Web Application Firewall

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/AzureWAF/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Azure WAF",
"description": "Azure Web Application Firewall is used to detect web related attacks targeting your web servers hosted in azure and allow quick respond to threats",
"support": "xsoar",
"currentVersion": "1.2.0",
"currentVersion": "1.2.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 6 additions & 0 deletions Packs/Microsoft365Defender/ReleaseNotes/4_5_30.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### Microsoft 365 Defender

- Updated the MicrosoftApiModule with `exchange_online` endpoints.
2 changes: 1 addition & 1 deletion Packs/Microsoft365Defender/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Microsoft 365 Defender",
"description": "Microsoft Defender XDR (formerly Microsoft 365 Defender) is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks.",
"support": "xsoar",
"currentVersion": "4.5.29",
"currentVersion": "4.5.30",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Loading

0 comments on commit 0a9f0bb

Please sign in to comment.