Skip to content

Commit

Permalink
Feature/cyberint enhancement (#31252)
Browse files Browse the repository at this point in the history
* Feature/cyberint enhancement (#30493)

* Update Docker Image To demisto/py3-tools  (#25523)

* Updated Metadata Of Pack FeedAWS

* Added release notes to pack FeedAWS

* Packs/FeedAWS/Integrations/FeedAWS/FeedAWS.yml Docker image update

* update Cyberint Pack

* update release note and incidentfields

* update CommonType release note

* update CommonType relesenotes

* update CommonType relese notes

* update CyberInt Related entity name

* update release notes

* add new incident field: Alert Data

* foramt alert_data

* update CyberInt Related Entity name to avoid validation errors

* reset the CyberInt Related Entity name

* update incident field name

* Update 3_3_93.md

* pre commit update docker

* added known words

* fixed the RN

* known words

---------

Co-authored-by: TalGumi <101499620+TalGumi@users.noreply.github.com>
Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com>
Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com>
  • Loading branch information
4 people committed Dec 4, 2023
1 parent 718362d commit de0a187
Show file tree
Hide file tree
Showing 21 changed files with 2,663 additions and 2,003 deletions.
1 change: 1 addition & 0 deletions Packs/CommonTypes/.pack-ignore
Original file line number Diff line number Diff line change
Expand Up @@ -326,3 +326,4 @@ mailto
Misconfiguration
CloudTrail
ThreatCommand
Cyberint
Original file line number Diff line number Diff line change
Expand Up @@ -33,11 +33,12 @@
"Rapid7 ThreatCommand Alert",
"Prisma Cloud - VM Alert Prioritization",
"FreshworksFreshservice Ticket",
"FreshworksFreshservice Release Request",
"FreshworksFreshservice Problem Request",
"FreshworksFreshservice Change Request",
"FreshworksFreshservice Release Request",
"FreshworksFreshservice Problem Request",
"FreshworksFreshservice Change Request",
"Graph Security Alert",
"CrowdStrike Falcon IDP Detection"
"CrowdStrike Falcon IDP Detection",
"Cyberint Incident"
],
"breachScript": "",
"caseInsensitive": true,
Expand Down Expand Up @@ -81,4 +82,4 @@
"validationRegex": "",
"version": -1,
"fromVersion": "6.0.0"
}
}
4 changes: 4 additions & 0 deletions Packs/CommonTypes/ReleaseNotes/3_3_94.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@

#### Incident Fields
Added the **Cyberint** incident type to the following incident fields:
- **Last Update Time**
4 changes: 2 additions & 2 deletions Packs/CommonTypes/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Common Types",
"description": "This Content Pack will get you up and running in no-time and provide you with the most commonly used incident & indicator fields and types.",
"support": "xsoar",
"currentVersion": "3.3.93",
"currentVersion": "3.3.94",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down Expand Up @@ -56,4 +56,4 @@
"marketplacev2",
"xpanse"
]
}
}
5 changes: 5 additions & 0 deletions Packs/Cyberint/.pack-ignore
Original file line number Diff line number Diff line change
Expand Up @@ -10,3 +10,8 @@ ignore=IF100
[file:incidentfield-Cyberint_CyberInt_Vulnerable_CName_Record.json]
ignore=BA116

[known_words]
Cyberint



38 changes: 19 additions & 19 deletions Packs/Cyberint/Classifiers/classifier-Cyberint.json
Original file line number Diff line number Diff line change
@@ -1,20 +1,20 @@
{
"description": "Cyberint Classifier",
"fromVersion": "6.0.0",
"id": "Cyberint - Classifier",
"name": "Cyberint - Classifier",
"keyTypeMap": {
"acknowledged": "Cyberint Incident",
"closed": "Cyberint Incident",
"open": "Cyberint Incident"
},
"propagationLabels": [
"all"
],
"transformer": {
"complex": null,
"simple": "status"
},
"type": "classification",
"version": -1
{
"description": "Cyberint Classifier",
"fromVersion": "6.0.0",
"id": "Cyberint - Classifier",
"name": "Cyberint - Classifier",
"keyTypeMap": {
"acknowledged": "Cyberint Incident",
"closed": "Cyberint Incident",
"open": "Cyberint Incident"
},
"propagationLabels": [
"all"
],
"transformer": {
"complex": null,
"simple": "status"
},
"type": "classification",
"version": -1
}

0 comments on commit de0a187

Please sign in to comment.