Cloud Incident Response pack and Cloud Token Theft playbook (demisto#…

…27331)

* new pack for Cloud Incident Response playbooks

* new pack for Cloud Incident Response playbooks

* updates common playbooks RN

* updates common playbooks RN

* Added scripts

* Added trigger

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CommonPlaybooks/Playbooks/playbook-Cloud_Enrichment_-_Generic_README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CommonPlaybooks/Playbooks/playbook-Cloud_Enrichment_-_Generic_README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CommonPlaybooks/ReleaseNotes/2_3_74.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CommonPlaybooks/ReleaseNotes/2_3_74.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Token_Theft_-_Set_Verdict.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence_README.md

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Threat_Hunting_-_Persistence.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Token_Theft_-_Set_Verdict.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Token_Theft_-_Set_Verdict.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* Update Packs/CloudIncidentResponse/Playbooks/playbook-Cloud_Token_Theft_-_Set_Verdict.yml

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

* fixes the Hunting Results section in the layout

* Added the pack and scripts readme

* updates pack meta-data

* Review fixes

* PBs screenshot

* removes quiet mode

* removes quiet mode

* fixes shared sub-playbooks.

* inputs validation

* fixes tasks description

* Added playbook outputs

* update RN and PBs description

* changes to MP2 only

* new script

* review fixes

* update RN

* fix typo

* updates the readme png links

* unit test and fixes

* fix layout

* added pack ignore for the dynamic sections unit tests

* secrets

* fixes

* fixes

* pack ignore

* fixes

* docker image version

* fix flake errors

* remove trigger due to sdk bug

* added unit test

* fix unit test coverage

* fix unit test coverage

---------

Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>

Packs/CloudIncidentResponse/.pack-ignore

@@ -0,0 +1,23 @@
+[file:displayCloudIndicators.yml]
+ignore=BA124
+
+[file:EntryWidgetRegionNameXCLOUD.yml]
+ignore=BA124
+
+[file:EntryWidgetResourceTypeXCLOUD.yml]
+ignore=BA124
+
+[file:XCloudIdentitiesWidget.yml]
+ignore=BA124
+
+[file:XCloudProviderWidget.yml]
+ignore=BA124
+
+[file:XCloudRelatedAlertsWidget.yml]
+ignore=BA124
+
+[file:Trigger_-_Cloud_Token_Theft_Response.json]
+ignore=GR101
+
+[file:README.md]
+ignore=RM108

Packs/CloudIncidentResponse/.secrets-ignore

@@ -0,0 +1,2 @@
+10.128.0.6
+::1111