Poking around and messing around with the Ancient Grain artifacts

[rhermida]

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

• In Progress
• Ready
• In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

A few sentences describing the overall goals of the pull request's commits.

Must have

• Tests
• Documentation

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[content-bot]

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @maimorag will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

[maimorag]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Hi @rhermida ,
Thank you for your contribution!
Please sign the CLA so I can start reviewing your contribution :)

[ssokolovich]

Hey @rhermida, Thanks for your contribution to our Marketplace.
Before we proceed, please sign your CLA so we can proceed forward with this Pull Request.

Adding below my notes on your work:

1. Assuming that the TestMalware pack is indeed a Test of yours. Please mention if that is intentional or by mistake. In case it was added by mistake, please remove it from this PR.
2. Added some comments on your contributed content- please review them. Feel free to mention me or reach out through our DFIR if you have any questions.

Moving forward (after the CLA), I would like to see a demo of this content.

[ssokolovich]

not sure how this link related to the Pack info. Is that intentional?

[ssokolovich]

Your incident type is missing running a playbook. Is that intentional?

[ssokolovich]

Can't find this script in this PR, assuming it was not added yet. right?

[ssokolovich]

Please add some sentences about the pack. It is always helpful to describe the pack's intention.

[ssokolovich]

didn't find this command in our repository - can you please share more details on this?

[maimorag]

Hi @rhermida, we haven’t heard from you in a while.
Do you need any help with the pull request?

Please feel free to reach out to me here or on Slack.
Thanks again for contributing to our repo, hope to hear from you soon.

[maimorag]

Hi @rhermida,
Thank you for your contribution.
I have not received a response from you in the last two weeks, so I will close your PR now.
Please feel free to re-open it when you are available to continue.
Thanks again.