Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ZeroFox Integration #27969

Merged
merged 16 commits into from
Aug 13, 2023
Merged

Commits on Jul 10, 2023

  1. Add command to modify notes in a specific alert (#2)

    The command updates the notes field of an alert with the text given and
    the YML file is updated with the args and output of the new command.
    Also the test file is updated to pass when the demisto cli runs.
    
    Ref: ZFE-70122
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    cdf62b7 View commit details
    Browse the repository at this point in the history
  2. Sort imports and add zerofox-submit-threat command

    Sort imports to avoid the use of wildcard imports, and include submit_threat command
    following integration requirements in
    
    ZFE-70221
    DNRRomero authored and figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    aae2c2e View commit details
    Browse the repository at this point in the history
  3. Add offending content url to alert responses

    It adds the offending content url to list-alerts and get-alert
    commands. Also refactor some code to create the readable output for
    the response of alerts
    
    Ref: ZFE-70122
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    a88bd59 View commit details
    Browse the repository at this point in the history
  4. Add CTI feed lookup commands

    Adds commands for lookup into
    * compromised domains
    * compromised emails
    * malicious ips
    * hashes associated to malware
    * found exploits
    
    As per issue ZFE-70223
    DNRRomero authored and figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    6ace4c0 View commit details
    Browse the repository at this point in the history
  5. Add commands to sync alerts from zf to xsoar

    It adds the commands:
    - get-modified-remote-data: to get modified alerts from ZeroFox API
    periodically
    - get-remote-data: to get the alert from the previous command and its
    modifications to update the incident in xsoar
    
    Also, it adds the config required to sync in the YML file and adds to
    the alert some fields to run the mirroring.
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    967ce5c View commit details
    Browse the repository at this point in the history
  6. Add release notes and update integration version

    It fixes the problem with the mirroring feature.
    It also adds the mapping file of the integration to map all fields
    required for the mirroring feature.
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    f3fb8f7 View commit details
    Browse the repository at this point in the history
  7. Improve code presentation according to XSOARs guidelines

    Improve code by replacing return_output for return_results, as well as adding client class
    DNRRomero authored and figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    587148c View commit details
    Browse the repository at this point in the history
  8. Add release notes and update integration version

    It fixes the problem with the mirroring feature.
    It also adds the mapping file of the integration to map all fields
    required for the mirroring feature.
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    8243c21 View commit details
    Browse the repository at this point in the history
  9. Refactor to follow XSOAR Guidelines

    It also adds tests to the commands implemented.
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    6d0ed29 View commit details
    Browse the repository at this point in the history
  10. Configuration menu
    Copy the full SHA
    511e647 View commit details
    Browse the repository at this point in the history
  11. Change data test's folder name

    It also obscures the possible secrets in test data
    and fixes types annotations
    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    658d5f7 View commit details
    Browse the repository at this point in the history
  12. Update testing email data

    figarrido committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    d32bbd7 View commit details
    Browse the repository at this point in the history

Commits on Jul 25, 2023

  1. Update docker tag, python type hints and docstrings

    - It fixes functions that modified dictionaries instead of
    creating copies.
    
    - It raises an error if command it is not implemented
    
    - It changes the fetch-incidents way to manage pages
    
    - It updates the release notes
    
    - It adds the author image
    figarrido committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    7b888de View commit details
    Browse the repository at this point in the history

Commits on Aug 2, 2023

  1. Add description in main Readme file

    It also deletes innecessary extra realease notes and changes the
    date format in the fetch incidents function so milliseconds are
    considered
    figarrido committed Aug 2, 2023
    Configuration menu
    Copy the full SHA
    d9a5bc2 View commit details
    Browse the repository at this point in the history

Commits on Aug 10, 2023

  1. Fix zf api call

    * Fix list alerts call with offset instead of pages
    
    * Add integration instructions to get your creds
    figarrido authored Aug 10, 2023
    Configuration menu
    Copy the full SHA
    c0a335c View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2023

  1. Configuration menu
    Copy the full SHA
    d8319cb View commit details
    Browse the repository at this point in the history