Fwang/hard reset #304

fraankwang · 2023-06-26T19:20:00Z

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

In Progress
Ready
In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

A few sentences describing the overall goals of the pull request's commits.

Screenshots

Paste here any images that will help the reviewer

Minimum version of Cortex XSOAR

6.0.0
6.1.0
6.2.0
6.5.0

Does it break backward compatibility?

Yes
- Further details:
No

Must have

Tests
Documentation

* Change source_user arg to list * Update yml file * Update yml changes to pan-os and panorama * Update release notes * Update 1_17_5.md * Rename 1_17_5.md to 1_17_6.md * Delete 1_17_6.md * Update RN * Add UT for PR changes * Update README.md * Update Packs/PAN-OS/ReleaseNotes/1_17_6.md Co-authored-by: Guy Afik <53861351+GuyAfik@users.noreply.github.com> * Version bump * Update docker image * Update RN --------- Co-authored-by: Guy Afik <53861351+GuyAfik@users.noreply.github.com>

* custom user agent on builds

* Update .devcontainer.json name * Added cofense-report-attachment-payload-list command * Updated context example in report attachment payload list command * Updated docker images in all YML files * Updated release notes --------- Co-authored-by: Crest Data Systems <60967033+crestdatasystems@users.noreply.github.com> Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com> Co-authored-by: michal-dagan <109464765+michal-dagan@users.noreply.github.com>

) * Associate "Action" field to all types * RN

* Align credentials stores part 10 * SumoLogic * Proofpoint Feed * required change * adding tests

* add fetch logs to nightly build fetch integrations * fix QRadar tests * update release notes and docker files * fix expansev2 * rn * fix logs * fix flask8 * added date field to skip incident log * resolve conflict * Bump pack from version QRadar to 2.4.22. --------- Co-authored-by: Content Bot <bot@demisto.com>

* cortexDataLake * update docker * GenericSQL logs * update rn * md-atp logs * update docker * adding time to skip incidents * update docker

* AWS Feed - added support for IPv6 * added tests * cr * tests an rn * validation * rn * cr * di

* Bump sane-pdf-report docker image * Bump pack from version Base to 1.32.11. --------- Co-authored-by: Content Bot <bot@demisto.com>

* fixed file name * RN * RN * Update 3_3_74.md

* update setup poetry * use pip * change Setup Poetry to use Gr1N * change Setup Poetry to use Gr1N in pre commit

https://editorconfig.org/

* bug fix * RN update --------- Co-authored-by: xsoar-bot <xsoar-bot@paloaltonetworks.com>

* fix docs * RN

* fixed a mypy issue * added rn * fix

* Enhancement for modeling rules. * added telephony modeling rule * modified modeling rule * modified shcema file. * Added release notes. * Added release notes. * updated pack metadata release notes.

* "Plug & Enrich" tags and FreeEnrichers pack * Added tags to approved list * Updated and corrected the readme. * Another small fix of a typo in readme * Reverted accidentally removing pack name * Better formatting * Added "Free Enricher" to all "Plug & Fetch" enrichers

* fix type * Add UTs for changed add_reply function * add credential defaults, improve UT --------- Co-authored-by: samuelFain <65926551+samuelFain@users.noreply.github.com>

* Added code for integration of events * Code review Feedback * changes in fetch incident * PR Review change * PR Review change * changes in read me file * Changed read me file based on the review * Changes for playbook and intergration * changes in the read me file * PR changes * changes in image and docker image * change in services in alert * changes for alert * Changes in docker image * Changes for docker image * Update Packs/CybleThreatIntel/Integrations/CybleThreatIntel/CybleThreatIntel.yml * Update Packs/CybleEventsV2/Integrations/CybleEventsV2/CybleEventsV2.yml --------- Co-authored-by: cyble-dev <101622497+cyble-dev@users.noreply.github.com> Co-authored-by: RotemAmit <71597826+RotemAmit@users.noreply.github.com>

…ass (new grid field) (demisto#27352) * Added rank to domain * RN * Update CommonServerPython.py * RN

* SplunkPy - fix uninformative error message when missing timezone in mirroring * Added RNs * Updated readme * CR updates * Update Packs/SplunkPy/ReleaseNotes/3_0_20.md Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> * Updated Docker Image --------- Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com>

…7386) * Zscaler ZIA enhancement: Add IP Destination group commands (demisto#26447) * ZIA Enhancement: IP destination group commands * Included 3 new commands for Zscaler Integration as follows:: - Added zscaler-list-ip-destination-groups - Added zscaler-create-ip-destination-groups - Added zscaler-edit-ip-destination-groups --------- Co-authored-by: rootbid <rootbid@users.noreply.github.com> * ZIA Enhancement: IP destination group commands * Included 2 new commands for Zscaler Integration as follows:: - Added zscaler-list-ip-destination-groups-lite - Added zscaler-delete-ip-destination-groups --------- Author: pallavi-garad <pallavi.garad.77@gmail.com> Co-authored-by: rootbid <rootbid@users.noreply.github.com> * Minor updates and fixes * Update and add documentation links for Zscaler ZIA * Zscaler ZIA Enhancement - Update with requested changes * Update .devcontainer.json name * merge list-ip-destination-groups and lite command * fixed minor issues * update lite argument description --------- Co-authored-by: rootbid <rootbid@users.noreply.github.com> * Update .devcontainer/devcontainer.json Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> * Update as per review comments - Fix exceptions - Use CommandResults - Refactor zscaler-list-ip-destination-groups and zscaler-edit-ip-destination-group commands - Update release notes * Regenerate README after updating Zscaler.yml and unit test bug fixes * Resolve merge conflicts * Fix type annotations and update docker image * Update Packs/Zscaler/ReleaseNotes/1_3_10.md Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> --------- Co-authored-by: Shambo Samanta <samantashambo@gmail.com> Co-authored-by: rootbid <rootbid@users.noreply.github.com> Co-authored-by: pallavi-garad <125474609+pallavi-garad@users.noreply.github.com> Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> --------- Co-authored-by: Deepansh <34774585+rootbid@users.noreply.github.com> Co-authored-by: Shambo Samanta <samantashambo@gmail.com> Co-authored-by: rootbid <rootbid@users.noreply.github.com> Co-authored-by: pallavi-garad <125474609+pallavi-garad@users.noreply.github.com> Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* XSIAM | ForcepointSWG Pack * Added pack files * Added pack-ignore and secrets-ignore * Apply suggestions from code review Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Updated ModelingRules --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: evisochek <72695126+evisochek@users.noreply.github.com>

* Add support for epoch in milliseconds * Update release notes * update conversion to epoch milliseconds * Fix release notes validations * Update release notes * Fix review comments * Update 2_4_24.md

* Created a new playbook to perform YARA scan * Created a new playbook to perform YARA scan * Added pack readme

* Updated Metadata Of Pack CofenseTriage * Added release notes to pack CofenseTriage * Packs/CofenseTriage/Integrations/CofenseTriagev3/CofenseTriagev3.yml Docker image update * Updated Metadata Of Pack SumoLogic_Cloud_SIEM * Added release notes to pack SumoLogic_Cloud_SIEM * Packs/SumoLogic_Cloud_SIEM/Integrations/SumoLogicCloudSIEM/SumoLogicCloudSIEM.yml Docker image update * Updated Metadata Of Pack CiscoUmbrellaReporting * Added release notes to pack CiscoUmbrellaReporting * Packs/CiscoUmbrellaReporting/Integrations/CiscoUmbrellaReporting/CiscoUmbrellaReporting.yml Docker image update * Updated Metadata Of Pack IronscalesEventCollector * Added release notes to pack IronscalesEventCollector * Packs/IronscalesEventCollector/Integrations/IronscalesEventCollector/IronscalesEventCollector.yml Docker image update * Updated Metadata Of Pack TeamViewer * Added release notes to pack TeamViewer * Packs/TeamViewer/Integrations/TeamViewerEventCollector/TeamViewerEventCollector.yml Docker image update * Updated Metadata Of Pack Palo_Alto_Networks_Enterprise_DLP * Added release notes to pack Palo_Alto_Networks_Enterprise_DLP * Packs/Palo_Alto_Networks_Enterprise_DLP/Integrations/Palo_Alto_Networks_Enterprise_DLP/Palo_Alto_Networks_Enterprise_DLP.yml Docker image update * Updated Metadata Of Pack Twitter * Added release notes to pack Twitter * Packs/Twitter/Integrations/Twitterv2/Twitterv2.yml Docker image update * Updated Metadata Of Pack CyberTriage * Added release notes to pack CyberTriage * Packs/CyberTriage/Integrations/CyberTriage/CyberTriage.yml Docker image update * Updated Metadata Of Pack Rapid7_Nexpose * Added release notes to pack Rapid7_Nexpose * Packs/Rapid7_Nexpose/Integrations/Rapid7_Nexpose/Rapid7_Nexpose.yml Docker image update * Updated Metadata Of Pack FortinetFortiwebVM * Added release notes to pack FortinetFortiwebVM * Packs/FortinetFortiwebVM/Integrations/FortinetFortiwebVM/FortinetFortiwebVM.yml Docker image update

* Updated Metadata Of Pack FeedAWS * Added release notes to pack FeedAWS * Packs/FeedAWS/Integrations/FeedAWS/FeedAWS.yml Docker image update

* Updated Metadata Of Pack FeedMalwareBazaar * Added release notes to pack FeedMalwareBazaar * Packs/FeedMalwareBazaar/Integrations/MalwareBazaarFeed/MalwareBazaarFeed.yml Docker image update * Updated Metadata Of Pack FeedGCPWhitelist * Added release notes to pack FeedGCPWhitelist * Packs/FeedGCPWhitelist/Integrations/FeedGoogleIPRanges/FeedGoogleIPRanges.yml Docker image update * Updated Metadata Of Pack AccentureCTI_Feed * Added release notes to pack AccentureCTI_Feed * Packs/AccentureCTI_Feed/Integrations/ACTIIndicatorFeed/ACTIIndicatorFeed.yml Docker image update

* added notes to ms teams readme * fixed notes * updated readme * removed the app studio method * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * Update Packs/MicrosoftTeams/Integrations/MicrosoftTeams/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * removed the app studio method --------- Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Updated Metadata Of Pack ExpanseV2 * Added release notes to pack ExpanseV2 * Packs/ExpanseV2/Integrations/FeedExpanse/FeedExpanse.yml Docker image update * Packs/ExpanseV2/Integrations/ExpanseV2/ExpanseV2.yml Docker image update * Packs/ExpanseV2/Scripts/ExpanseEvidenceDynamicSection/ExpanseEvidenceDynamicSection.yml Docker image update * Packs/ExpanseV2/Scripts/ExpanseAggregateAttributionDevice/ExpanseAggregateAttributionDevice.yml Docker image update * Updated Metadata Of Pack PaloAltoNetworks_IoT * Added release notes to pack PaloAltoNetworks_IoT * Packs/PaloAltoNetworks_IoT/Integrations/PaloAltoNetworks_IoT/PaloAltoNetworks_IoT.yml Docker image update

…isto#27714) * Fixed typo * RN

* Added TIM to marketplacev2 * update RN * excluded incident types * added docs where missing * fix marketplaces field * fix marketplaces field * validation * pack ignore * pack ignore * update RN * pack ignore * pack ignore

* Google align credentials stores - part 25 * fix

* Microsoft Align credentials stores -part 23 * fix lint * RL * fix * fix * fix * fix rl * fix client bug for for Michal's request * fixes

* added mp to layouts * rn

* fix syntax * RN * CC * Update Packs/AzureSecurityCenter/ReleaseNotes/2_0_2.md Co-authored-by: dorschw <81086590+dorschw@users.noreply.github.com> --------- Co-authored-by: dorschw <81086590+dorschw@users.noreply.github.com>

* Add debug logs * Add differentiation between authentication methods * Remove extra debug logs * Update docker image * Update release notes * Add known_words section to .pack-ignore fille * Update Release Notes * Update authentication related UTs

* hide widgets * BC * [known_words] * remove those 2 packs * Update Packs/CommonWidgets/ReleaseNotes/1_2_23.json Co-authored-by: dorschw <81086590+dorschw@users.noreply.github.com> * RN * RN * Update Packs/CommonWidgets/ReleaseNotes/1_2_23.md Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> --------- Co-authored-by: dorschw <81086590+dorschw@users.noreply.github.com> Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com>

* Align credentials stores - part 28 * Empty commit

…isto#27712) * free feed * Free Enrichers * change free feed * Dror fixes

demisto#27722) * Changed the 'key' input value of the 'Get full detection details' task * RN * Added a a period (.) to the end of the RN line * changed RN and YML tests configs * added the 'system: true' to the YML file after it was removed by formatting command

…27600) * [marketplace contributions] - fix issue where support labels are not added * add unit-tests * update comment * update path of test * path cwd * fallback to master in case checkout failed * docstrings improvments * update print string * add prints

* Added missing assert to unit tests, and fixed a unit test * Made changes suggested by ruff

fraankwang · 2023-06-26T19:42:10Z

What I did:

git remote add upstream https://github.com/demisto/content.git
git fetch upstream
git reset --hard upstream/master
git merge -Xours origin/master

samuelFain and others added 30 commits June 9, 2023 16:08

custom user agent on builds (demisto#27284)

2bb078a

* custom user agent on builds

Associate "Action" indicator field to all indicator types (demisto#27321

2088408

) * Associate "Action" field to all types * RN

fix execution metrics in scripts (demisto#27214)

a131a1c

Align credentials stores part 10 (demisto#27221)

49bff92

* Align credentials stores part 10 * SumoLogic * Proofpoint Feed * required change * adding tests

add fetch log part2 (demisto#27196)

4b25818

* cortexDataLake * update docker * GenericSQL logs * update rn * md-atp logs * update docker * adding time to skip incidents * update docker

AWS Feed - added support for IPv6 (demisto#27141)

02eaf89

* AWS Feed - added support for IPv6 * added tests * cr * tests an rn * validation * rn * cr * di

Bump sane-pdf-report docker image (demisto#27318)

b6fd2cf

* Bump sane-pdf-report docker image * Bump pack from version Base to 1.32.11. --------- Co-authored-by: Content Bot <bot@demisto.com>

Fixed file name to be "indicatorfield" (demisto#27342)

05cad2a

* fixed file name * RN * RN * Update 3_3_74.md

Update setup poetry step in pre-commit (demisto#27224)

2e61a04

* update setup poetry * use pip * change Setup Poetry to use Gr1N * change Setup Poetry to use Gr1N in pre commit

adding root .editorconfig file. (demisto#27280)

da38063

https://editorconfig.org/

fixing unbound local variable on search dependencies (demisto#27327)

234717b

update readme file (demisto#27356)

250407a

Core rest api add xsoar hosted (demisto#27355)

8b1c87b

* bug fix * RN update --------- Co-authored-by: xsoar-bot <xsoar-bot@paloaltonetworks.com>

Updated pb to use cve command (demisto#27341)

44951ad

MSGraphTeams fix path in the documentation (demisto#27353)

f17a764

* fix docs * RN

Fix common server python mypy (demisto#27351)

113650c

* fixed a mypy issue * added rn * fix

Marketplace doc-howto (demisto#27349)

5d0bbb1

Duo fields enhancement (demisto#27308)

e477a98

* Enhancement for modeling rules. * added telephony modeling rule * modified modeling rule * modified shcema file. * Added release notes. * Added release notes. * updated pack metadata release notes.

ignore modeling/parsing rules suffix validate (demisto#27373)

b92ff70

Fix RTIR issue (demisto#27360)

40fe9a4

* fix type * Add UTs for changed add_reply function * add credential defaults, improve UT --------- Co-authored-by: samuelFain <65926551+samuelFain@users.noreply.github.com>

CSP - Added Rank class (new grid field) and rank to the Domain cl…

3dabdc2

…ass (new grid field) (demisto#27352) * Added rank to domain * RN * Update CommonServerPython.py * RN

qradar return error with traceback (demisto#27229)

bb75fe3

efelmandar and others added 28 commits June 25, 2023 16:49

Bugfix/XSUP-23391/IBM-QRadar-v3-time-handling-API19 (demisto#27567)

c4d5a07

* Add support for epoch in milliseconds * Update release notes * update conversion to epoch milliseconds * Fix release notes validations * Update release notes * Fix review comments * Update 2_4_24.md

Align credentials stores - part 24 (demisto#27698)

1525947

Created a new playbook to perform YARA scan (demisto#27703)

7957952

* Created a new playbook to perform YARA scan * Created a new playbook to perform YARA scan * Added pack readme

Update Docker Image To demisto/py3-tools (demisto#27706)

bc0da10

* Updated Metadata Of Pack FeedAWS * Added release notes to pack FeedAWS * Packs/FeedAWS/Integrations/FeedAWS/FeedAWS.yml Docker image update

Skip core pack installation in XSIAM (demisto#27692)

41f44fd

Attack Pattern layout typo fix (intrusion-set -> attack pattern) (dem…

41a295c

…isto#27714) * Fixed typo * RN

Add TIM Processing pack to XSIAM (demisto#27653)

a748dda

* Added TIM to marketplacev2 * update RN * excluded incident types * added docs where missing * fix marketplaces field * fix marketplaces field * validation * pack ignore * pack ignore * update RN * pack ignore * pack ignore

Google align credentials stores - part 25 (demisto#27699)

1209327

* Google align credentials stores - part 25 * fix

Microsoft Align credentials stores -part 23 (demisto#27684)

f353620

* Microsoft Align credentials stores -part 23 * fix lint * RL * fix * fix * fix * fix rl * fix client bug for for Michal's request * fixes

Fix test upload flow - alibaba modeling rule ID change (demisto#27656)

54b11de

added mp to tim processing layouts (demisto#27724)

4e71242

* added mp to layouts * rn

fix Test - CrowdStrike Falcon TPB (demisto#27719)

b086d6d

Documentation (demisto#27730)

53763d3

Align credentials stores part 28 (demisto#27727)

49eb517

* Align credentials stores - part 28 * Empty commit

Add documentation to 2 wrapper packs: free feed & free enrichers (dem…

eaf6766

…isto#27712) * free feed * Free Enrichers * change free feed * Dror fixes

update ruff rules (demisto#27732)

2923be8

update Docker (demisto#27737)

0d1cbed

Jira V3 - Added missing assert to unit tests (demisto#27738)

6fa495e

* Added missing assert to unit tests, and fixed a unit test * Made changes suggested by ruff

fix merge conflicts

1be2ac2

fraankwang requested a review from dschuan June 26, 2023 19:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fwang/hard reset #304

Fwang/hard reset #304

fraankwang commented Jun 26, 2023

fraankwang commented Jun 26, 2023

Fwang/hard reset #304

Are you sure you want to change the base?

Fwang/hard reset #304

Conversation

fraankwang commented Jun 26, 2023

Contributing to Cortex XSOAR Content

Status

Related Issues

Description

Screenshots

Minimum version of Cortex XSOAR

Does it break backward compatibility?

Must have

fraankwang commented Jun 26, 2023