Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Cortex-XDR] - fixed issue with xdr-list-risky-users & xdr-list-risky-hosts commands #29076

Merged
merged 3 commits into from Aug 21, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
6 changes: 3 additions & 3 deletions Packs/ApiModules/Scripts/CoreIRApiModule/CoreIRApiModule.py
Expand Up @@ -3891,9 +3891,9 @@ def list_risky_users_or_host_command(client: CoreClient, command: str, args: dic
outputs = client.risk_score_user_or_host(id_).get('reply', {})
except DemistoException as e:
if error_message := enrich_error_message_id_group_role(e=e, type_="id", custom_message=""):
user_not_found_message = f'{id_} was not found'
if user_not_found_message in error_message:
return CommandResults(readable_output=f'The user {user_not_found_message}')
not_found_message = 'was not found'
if not_found_message in error_message:
return CommandResults(readable_output=f'The user {id_} {not_found_message}')
else:
raise DemistoException(error_message)
else:
Expand Down
6 changes: 6 additions & 0 deletions Packs/Core/ReleaseNotes/2_0_8.md
@@ -0,0 +1,6 @@

#### Integrations

##### Investigation & Response

- Fixed an issue where the **core-list-risky-users** and the **core-list-risky-hosts** commands failed when users or hosts with escape characters were provided.
2 changes: 1 addition & 1 deletion Packs/Core/pack_metadata.json
Expand Up @@ -2,7 +2,7 @@
"name": "Core - Investigation and Response",
"description": "Automates incident response",
"support": "xsoar",
"currentVersion": "2.0.7",
"currentVersion": "2.0.8",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
7 changes: 7 additions & 0 deletions Packs/CortexXDR/ReleaseNotes/5_0_9.md
@@ -0,0 +1,7 @@

#### Integrations

##### Palo Alto Networks Cortex XDR - Investigation and Response

- Fixed an issue where the **xdr-list-risky-users** and the **xdr-list-risky-hosts** commands failed when users or hosts with escape characters were provided.

2 changes: 1 addition & 1 deletion Packs/CortexXDR/pack_metadata.json
Expand Up @@ -2,7 +2,7 @@
"name": "Cortex XDR by Palo Alto Networks",
"description": "Automates Cortex XDR incident response, and includes custom Cortex XDR incident views and layouts to aid analyst investigations.",
"support": "xsoar",
"currentVersion": "5.0.8",
"currentVersion": "5.0.9",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down