Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cloud Token Theft - XSOAR Version #27808

Merged
merged 44 commits into from Jul 6, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
44 commits
Select commit Hold shift + click to select a range
476c79d
new content
melamedbn Jun 29, 2023
d73fdd7
update RN
melamedbn Jun 29, 2023
6450904
Added mapping for RelatedCampaign and RelatedAttackPatterns
melamedbn Jun 29, 2023
14a0976
Added mapping for RelatedCampaign and RelatedAttackPatterns
melamedbn Jun 29, 2023
d4b7d19
update RN
melamedbn Jun 29, 2023
d194c40
update RN
melamedbn Jun 29, 2023
748daac
fixes to layout file
melamedbn Jun 29, 2023
a40e3a8
fixes to layout file
melamedbn Jun 29, 2023
04567d1
change field name
melamedbn Jul 2, 2023
27bc373
update docs and layout
melamedbn Jul 2, 2023
1596a3e
fixes the incident field name
melamedbn Jul 2, 2023
a240704
fixes the incident field name
melamedbn Jul 2, 2023
1a1437e
pack readme update
melamedbn Jul 2, 2023
035b2d7
Apply suggestions from code review
melamedbn Jul 2, 2023
d5c7d76
Update Packs/CloudIncidentResponse/Playbooks/playbook-Cortex_XDR_-_XC…
melamedbn Jul 2, 2023
2bd5594
Apply suggestions from code review
melamedbn Jul 2, 2023
0fa7709
fixes
melamedbn Jul 2, 2023
b9e46a3
Merge remote-tracking branch 'origin/CloudTokenTheft4XSOAR' into Clou…
melamedbn Jul 2, 2023
97021d1
fixes
melamedbn Jul 2, 2023
a5a7573
playbook fixes
melamedbn Jul 2, 2023
ddd8762
playbook fixes
melamedbn Jul 3, 2023
ed0f7a1
playbook fixes
melamedbn Jul 3, 2023
a64a632
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 3, 2023
ecd368e
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 3, 2023
814e285
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 4, 2023
f87c581
update RN
melamedbn Jul 4, 2023
22ebd84
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 4, 2023
5b631f9
validation check
melamedbn Jul 4, 2023
a197f50
format incident field Referenced Resource ID
melamedbn Jul 4, 2023
adaff8a
format incident field Cloud Operation Type
melamedbn Jul 4, 2023
d892ccb
update RN
melamedbn Jul 4, 2023
f9071c0
fix fields
melamedbn Jul 4, 2023
ec21f68
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 4, 2023
1c766aa
fix fields
melamedbn Jul 4, 2023
94b9780
fix fields
melamedbn Jul 4, 2023
56e41ce
fix fields - added marketplaces
melamedbn Jul 5, 2023
47fada1
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 5, 2023
93697d9
update RN
melamedbn Jul 5, 2023
9afb260
fix typo
melamedbn Jul 5, 2023
7c99b26
fix typo and update RN
melamedbn Jul 5, 2023
000140d
removed unused fields from the layout
melamedbn Jul 5, 2023
e0eb044
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 5, 2023
023b5dc
removed unused fields from the layout
melamedbn Jul 6, 2023
7674d94
Merge remote-tracking branch 'origin/master' into CloudTokenTheft4XSOAR
melamedbn Jul 6, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Expand Up @@ -478,7 +478,7 @@
"minH": 1,
"moved": false,
"name": "Malicious or Suspicious Indicators",
"query": "reputation:Benign OR reputation:Suspicious OR reputation:Malicious",
"query": "reputation:Suspicious OR reputation:Malicious",
"queryType": "input",
"static": false,
"type": "indicators",
Expand Down Expand Up @@ -571,7 +571,7 @@
"minH": 1,
"moved": false,
"name": "Cloud Indicators",
"query": "99900222-7570-4e56-8fa6-1206e76be060",
"query": "displayCloudIndicators",
"queryType": "script",
"static": false,
"type": "dynamic",
Expand Down Expand Up @@ -1404,5 +1404,6 @@
"system": false,
"version": -1,
"fromVersion": "6.8.0",
"marketplaces": ["marketplacev2"],
"description": ""
}
Expand Up @@ -607,4 +607,5 @@ outputs:
quiet: false
tests:
- No tests (auto formatted)
marketplaces: ["marketplacev2"]
fromversion: 6.8.0
Expand Up @@ -2065,4 +2065,5 @@ inputs:
outputs: []
tests:
- No tests (auto formatted)
marketplaces: ["marketplacev2"]
fromversion: 6.8.0