Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Xsup 39381 joesecurity file value #35408

Merged
merged 8 commits into from
Jul 14, 2024
Merged

Xsup 39381 joesecurity file value #35408

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
65b7056
Changed indicator to be sha256
ShahafBenYakir Jul 11, 2024
3fe0558
fixed ut
ShahafBenYakir Jul 11, 2024
da3545a
added rn
ShahafBenYakir Jul 11, 2024
8e4c8a0
Bumped docker
ShahafBenYakir Jul 14, 2024
a6db0ea
Merge remote-tracking branch 'origin/master' into XSUP-39381_Joesecur…
ShahafBenYakir Jul 14, 2024
196dadd
Bumped RN
ShahafBenYakir Jul 14, 2024
dcc3c1e
Bumped dicker
ShahafBenYakir Jul 14, 2024
2f81cd8
Update Packs/JoeSecurity/ReleaseNotes/1_1_23.md
ShahafBenYakir Jul 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Packs/JoeSecurity/Integrations/JoeSecurityV2/JoeSecurityV2.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -280,7 +280,7 @@ def build_file_object(client: Client, analysis: Dict[str, Any], analyses: List[D
score, description = max(
[indicator_calculate_score(entry.get('detection', '')) for entry in analyses if entry.get('sha256') == sha256],
key=lambda tup: tup[1]) # Find the max dbot score between all the analysis results.
dbot_score = Common.DBotScore(indicator=file_name, integration_name='JoeSecurityV2',
dbot_score = Common.DBotScore(indicator=sha256, integration_name='JoeSecurityV2',
indicator_type=DBotScoreType.FILE,
reliability=DBotScoreReliability.get_dbot_score_reliability_from_str(
client.reliability), score=score, malicious_description=description)
Expand Down
2 changes: 1 addition & 1 deletion Packs/JoeSecurity/Integrations/JoeSecurityV2/JoeSecurityV2.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1263,7 +1263,7 @@ script:
script: '-'
type: python
subtype: python3
dockerimage: demisto/vendors-sdk:1.0.0.98422
dockerimage: demisto/vendors-sdk:1.0.0.103334
fromversion: 6.8.0
tests:
- testplaybook-JoeSecuirtyV2
6 changes: 3 additions & 3 deletions Packs/JoeSecurity/Integrations/JoeSecurityV2/test_data/list_analysis_expected_output.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,21 +2,21 @@
"DBotScore": [
{
"Type": "file",
"Indicator": "1.pdf",
"Indicator": "1111111111111111111111111111111111111111111111111111111111111111",
"Reliability": "C - Fairly reliable",
"Score": 1,
"Vendor": "JoeSecurityV2"
},
{
"Type": "file",
"Indicator": "2.png",
"Indicator": "2222222222222222222222222222222222222222222222222222222222222222",
"Reliability": "C - Fairly reliable",
"Score": 2,
"Vendor": "JoeSecurityV2"
},
{
"Type": "file",
"Indicator": "3.pdf",
"Indicator": "3333333333333333333333333333333333333333333333333333333333333333",
"Reliability": "C - Fairly reliable",
"Score": 3,
"Vendor": "JoeSecurityV2"
Expand Down
7 changes: 7 additions & 0 deletions Packs/JoeSecurity/ReleaseNotes/1_1_23.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@

#### Integrations

##### Joe Security v2
- Updated the Docker image to: *demisto/vendors-sdk:1.0.0.103334*.

Fixed an issue where the *DBotScore.Indicator* output of the ***file*** command contained the file name instead of the file's SHA256.
2 changes: 1 addition & 1 deletion Packs/JoeSecurity/pack_metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Joe Security",
"description": "Sandbox Cloud",
"support": "xsoar",
"currentVersion": "1.1.22",
"currentVersion": "1.1.23",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Loading