demisto · melamedbn · Jul 13, 2023 · Jul 11, 2023 · Jul 11, 2023 · Jul 11, 2023
diff --git a/Packs/CloudIncidentResponse/.pack-ignore b/Packs/CloudIncidentResponse/.pack-ignore
@@ -23,4 +23,10 @@ ignore=GR101
 ignore=RM108
 
 [file:incidentfield-Is_VPN_IP_Address.json]
-ignore=IF113
+ignore=IF113
+
+[file:playbook-XCloud_Cryptomining_-_Set_Verdict.yml]
+ignore=BA101
+
+[file:playbook-XCloud_Cryptomining.yml]
+ignore=BA101
diff --git a/...ner-Cortex_XDR_-_XCLOUD_Cryptomining.json → ...ner-Cortex_XDR_-_XCLOUD_Cryptomining.json b/...ner-Cortex_XDR_-_XCLOUD_Cryptomining.json → ...ner-Cortex_XDR_-_XCLOUD_Cryptomining.json
@@ -1491,5 +1491,6 @@
     "system": false,
     "version": -1,
     "fromVersion": "6.5.0",
+    "marketplaces": ["xsoar"],
     "description": ""
 }
diff --git a/...ybook-Cortex_XDR_-_Cloud_Cryptomining.yml → ...ybook-Cortex_XDR_-_Cloud_Cryptomining.yml b/...ybook-Cortex_XDR_-_Cloud_Cryptomining.yml → ...ybook-Cortex_XDR_-_Cloud_Cryptomining.yml
@@ -1166,4 +1166,5 @@ inputs:
 outputs: []
 tests:
 - No tests (auto formatted)
+marketplaces: ["xsoar"]
 fromversion: 6.5.0
diff --git a/...DR_-_Cloud_Cryptomining_-_Set_Verdict.yml → ...DR_-_Cloud_Cryptomining_-_Set_Verdict.yml b/...DR_-_Cloud_Cryptomining_-_Set_Verdict.yml → ...DR_-_Cloud_Cryptomining_-_Set_Verdict.yml
@@ -499,4 +499,5 @@ outputs:
 quiet: true
 tests:
 - No tests (auto formatted)
+marketplaces: ["xsoar"]
 fromversion: 6.5.0
diff --git a/...loud_Cryptomining_-_Set_Verdict_README.md → ...loud_Cryptomining_-_Set_Verdict_README.md b/...loud_Cryptomining_-_Set_Verdict_README.md → ...loud_Cryptomining_-_Set_Verdict_README.md
diff --git a/...Cortex_XDR_-_Cloud_Cryptomining_README.md → ...Cortex_XDR_-_Cloud_Cryptomining_README.md b/...Cortex_XDR_-_Cloud_Cryptomining_README.md → ...Cortex_XDR_-_Cloud_Cryptomining_README.md
diff --git a/...laybook-Cortex_XDR_-_Cloud_Enrichment.yml → ...laybook-Cortex_XDR_-_Cloud_Enrichment.yml b/...laybook-Cortex_XDR_-_Cloud_Enrichment.yml → ...laybook-Cortex_XDR_-_Cloud_Enrichment.yml
@@ -986,4 +986,5 @@ outputs:
   type: unknown
 tests:
 - No tests (auto formatted)
+marketplaces: ["xsoar"]
 fromversion: 6.5.0
diff --git a/...k-Cortex_XDR_-_Cloud_Enrichment_README.md → ...k-Cortex_XDR_-_Cloud_Enrichment_README.md b/...k-Cortex_XDR_-_Cloud_Enrichment_README.md → ...k-Cortex_XDR_-_Cloud_Enrichment_README.md
diff --git a/...ooks/playbook-XCloud_Alert_Enrichment.yml → ...ooks/playbook-XCloud_Alert_Enrichment.yml b/...ooks/playbook-XCloud_Alert_Enrichment.yml → ...ooks/playbook-XCloud_Alert_Enrichment.yml
@@ -532,6 +532,5 @@ outputs:
   type: unknown
 tests:
 - No tests (auto formatted)
-marketplaces:
-- marketplacev2
+marketplaces: ["marketplacev2"]
 fromversion: 6.6.0
diff --git a/...laybook-XCloud_Alert_Enrichment_README.md → ...laybook-XCloud_Alert_Enrichment_README.md b/...laybook-XCloud_Alert_Enrichment_README.md → ...laybook-XCloud_Alert_Enrichment_README.md
diff --git a/...laybooks/playbook-XCloud_Cryptomining.yml → ...laybooks/playbook-XCloud_Cryptomining.yml b/...laybooks/playbook-XCloud_Cryptomining.yml → ...laybooks/playbook-XCloud_Cryptomining.yml
diff --git a/...ook-XCloud_Cryptomining_-_Set_Verdict.yml → ...ook-XCloud_Cryptomining_-_Set_Verdict.yml b/...ook-XCloud_Cryptomining_-_Set_Verdict.yml → ...ook-XCloud_Cryptomining_-_Set_Verdict.yml
diff --git a/...loud_Cryptomining_-_Set_Verdict_README.md → ...loud_Cryptomining_-_Set_Verdict_README.md b/...loud_Cryptomining_-_Set_Verdict_README.md → ...loud_Cryptomining_-_Set_Verdict_README.md
diff --git a/...ks/playbook-XCloud_Cryptomining_README.md → ...ks/playbook-XCloud_Cryptomining_README.md b/...ks/playbook-XCloud_Cryptomining_README.md → ...ks/playbook-XCloud_Cryptomining_README.md
diff --git a/Packs/CloudIncidentResponse/ReleaseNotes/1_0_4.md b/Packs/CloudIncidentResponse/ReleaseNotes/1_0_4.md
@@ -0,0 +1,34 @@
+
+#### Playbooks
+
+##### New: Cortex XDR - Cloud Enrichment
+
+- Moved the playbook from the Cortex XDR pack to the Cloud Incident Response pack.
+
+##### New: Cortex XDR - XCloud Cryptojacking
+
+- Moved the playbook from the Cortex XDR pack to the Cloud Incident Response pack.
+
+##### New: Cortex XDR - XCloud Cryptojacking - Set Verdict
+
+- Moved the playbook from the Cortex XDR pack to the Cloud Incident Response pack.
+
+##### XCloud Cryptojacking
+
+- Moved the playbook from the Core pack to the Cloud Incident Response pack.
+##### XCloud Alert Enrichment
+
+- Moved the playbook from the Core pack to the Cloud Incident Response pack.
+##### XCloud Cryptojacking - Set Verdict
+
+- Moved the playbook from the Core pack to the Cloud Incident Response pack.
+
+#### Triggers Recommendations
+
+**XCloud Cryptojacking**
+
+#### Layouts
+
+##### New: Cortex XDR - XCLOUD Cryptojacking
+
+- Moved the playbook from the Cortex XDR pack to the Cloud Incident Response pack.
diff --git a/...ggers/Trigger_-_XCloud_Cryptojacking.json → ...ggers/Trigger_-_XCloud_Cryptojacking.json b/...ggers/Trigger_-_XCloud_Cryptojacking.json → ...ggers/Trigger_-_XCloud_Cryptojacking.json
diff --git a/...files/Cortex_XDR_-_Cloud_Cryptomining.png → ...files/Cortex_XDR_-_Cloud_Cryptomining.png b/...files/Cortex_XDR_-_Cloud_Cryptomining.png → ...files/Cortex_XDR_-_Cloud_Cryptomining.png
diff --git a/...c_files/Cortex_XDR_-_Cloud_Enrichment.png → ...c_files/Cortex_XDR_-_Cloud_Enrichment.png b/...c_files/Cortex_XDR_-_Cloud_Enrichment.png → ...c_files/Cortex_XDR_-_Cloud_Enrichment.png
diff --git a/...rtex_XDR_-_Cryptomining_-_Set_Verdict.png → ...rtex_XDR_-_Cryptomining_-_Set_Verdict.png b/...rtex_XDR_-_Cryptomining_-_Set_Verdict.png → ...rtex_XDR_-_Cryptomining_-_Set_Verdict.png
diff --git a/...ore/doc_files/XCloud_Alert_Enrichment.png → ...nse/doc_files/XCloud_Alert_Enrichment.png b/...ore/doc_files/XCloud_Alert_Enrichment.png → ...nse/doc_files/XCloud_Alert_Enrichment.png
diff --git a/Packs/Core/doc_files/XCloud_Cryptomining.png → ...esponse/doc_files/XCloud_Cryptomining.png b/Packs/Core/doc_files/XCloud_Cryptomining.png → ...esponse/doc_files/XCloud_Cryptomining.png
diff --git a/...les/XCloud_Cryptomining_-_Set_Verdict.png → ...les/XCloud_Cryptomining_-_Set_Verdict.png b/...les/XCloud_Cryptomining_-_Set_Verdict.png → ...les/XCloud_Cryptomining_-_Set_Verdict.png
diff --git a/Packs/CloudIncidentResponse/pack_metadata.json b/Packs/CloudIncidentResponse/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Cloud Incident Response",
     "description": "This content Pack helps you automate collection, investigation, and remediation of incidents related to cloud infrastructure activities in AWS, Azure, and GCP.",
     "support": "xsoar",
-    "currentVersion": "1.0.3",
+    "currentVersion": "1.0.4",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/Core/ReleaseNotes/2_0_0.json b/Packs/Core/ReleaseNotes/2_0_0.json
@@ -0,0 +1 @@
+{"breakingChanges":true,"breakingChangesNotes":"**Important Note**:The following playbooks have been moved to the 'Cloud Incident Response' pack. The 'Cloud Incident Resopnse' pack will be installed as a dependency of the 'Core' pack."}
diff --git a/Packs/Core/ReleaseNotes/2_0_0.md b/Packs/Core/ReleaseNotes/2_0_0.md
@@ -0,0 +1,3 @@
+##### Core
+
+- **Important Note**: The following playbooks: **XCloud Cryptojacking**, **XCloud Cryptojacking - Set Verdict** and **XCloud Alert Enrichment**, and the **XCloud Cryptojacking trigger** have been moved to the 'Cloud Incident Response' pack. The 'Cloud Incident Response' pack will be installed as a dependency of the 'Core' pack.
diff --git a/Packs/Core/pack_metadata.json b/Packs/Core/pack_metadata.json
@@ -2,13 +2,19 @@
     "name": "Core - Investigation and Response",
     "description": "Automates incident response",
     "support": "xsoar",
-    "currentVersion": "1.4.4",
+    "currentVersion": "2.0.0",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",
     "categories": [
         "Endpoint"
     ],
+    "dependencies": {
+        "CloudIncidentResponse": {
+            "mandatory": true,
+            "display_name": "Cloud Incident Response"
+        }
+    },
     "excludedDependencies": [
         "Dropbox"
     ],

diff --git a/Packs/CortexXDR/ReleaseNotes/5_0_0.json b/Packs/CortexXDR/ReleaseNotes/5_0_0.json
@@ -0,0 +1 @@
+{"breakingChanges":true,"breakingChangesNotes":"**Important Note**: The following playbooks: **Cortex XDR - Cloud Cryptojacking**, **Cortex XDR - Cloud Cryptojacking - Set Verdict** and **XCortex XDR - Cloud Enrichment**, and the **Cortex XDR - Cloud Cryptojacking layout** have been moved to the 'Cloud Incident Response' pack. The 'Cloud Incident Response' pack will be installed as a dependency of the 'Cortex XDR' pack."}
diff --git a/Packs/CortexXDR/ReleaseNotes/5_0_0.md b/Packs/CortexXDR/ReleaseNotes/5_0_0.md
@@ -0,0 +1,3 @@
+##### CortexXDR
+
+- **Important Note**: The following playbooks: **Cortex XDR - Cloud Cryptojacking**, **Cortex XDR - Cloud Cryptojacking - Set Verdict** and **XCortex XDR - Cloud Enrichment**, and the **Cortex XDR - Cloud Cryptojacking layout** have been moved to the 'Cloud Incident Response' pack. The 'Cloud Incident Response' pack will be installed as a dependency of the 'Cortex XDR' pack.
diff --git a/Packs/CortexXDR/pack_metadata.json b/Packs/CortexXDR/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Cortex XDR by Palo Alto Networks",
     "description": "Automates Cortex XDR incident response, and includes custom Cortex XDR incident views and layouts to aid analyst investigations.",
     "support": "xsoar",
-    "currentVersion": "4.11.8",
+    "currentVersion": "5.0.0",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",
@@ -70,6 +70,10 @@
         "Jira": {
             "mandatory": false,
             "display_name": "Atlassian Jira"
+        },
+        "CloudIncidentResponse": {
+            "mandatory": true,
+            "display_name": "Cloud Incident Response"
         }
     },
     "marketplaces": [