Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mandiant Threat Intelligence - Use Local Filtering #29851

Merged
merged 2 commits into from Sep 27, 2023

Conversation

content-bot
Copy link
Collaborator

Original External PR

external pull request

Contributor

@chrishultin

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

Use local filtering in MATI integration in order to ensure that updates to indicator information are retrieved, even if they no longer fit the "search" criteria in use. (e.g. an indicator is created as "malicious", but is later marked as "benign". Previous versions would ignore the "benign" update)

Must have

  • Tests
  • Documentation

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
@content-bot content-bot added Contribution Thank you! Contributions are always welcome! Partner ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. Contribution Form Filled Whether contribution form filled or not. Partner Support Level Indicates that the contribution is for Partner supported pack Internal PR Partner-Approved labels Sep 26, 2023
@MichaelYochpaz MichaelYochpaz merged commit 6b0499a into master Sep 27, 2023
17 of 18 checks passed
@MichaelYochpaz MichaelYochpaz deleted the contrib/chrishultin_mati_local_filter branch September 27, 2023 11:47
maimorag pushed a commit to LanskoyGIB/content that referenced this pull request Sep 28, 2023
* Mandiant Threat Intelligence - Use Local Filtering (demisto#29724)

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>

* Update Docker version

---------

Co-authored-by: Christopher Hultin <chrishultin@google.com>
Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
wolyslager pushed a commit to wolyslager/content that referenced this pull request Sep 29, 2023
* Mandiant Threat Intelligence - Use Local Filtering (demisto#29724)

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>

* Update Docker version

---------

Co-authored-by: Christopher Hultin <chrishultin@google.com>
Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
wolyslager pushed a commit to wolyslager/content that referenced this pull request Oct 2, 2023
* Mandiant Threat Intelligence - Use Local Filtering (demisto#29724)

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>

* Update Docker version

---------

Co-authored-by: Christopher Hultin <chrishultin@google.com>
Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
xsoar-bot pushed a commit to xsoar-contrib/content that referenced this pull request Oct 5, 2023
* Mandiant Threat Intelligence - Use Local Filtering (demisto#29724)

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>

* Update Docker version

---------

Co-authored-by: Christopher Hultin <chrishultin@google.com>
Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
tkatzir pushed a commit that referenced this pull request Dec 20, 2023
* Mandiant Threat Intelligence - Use Local Filtering (#29724)

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>

* Update Docker version

---------

Co-authored-by: Christopher Hultin <chrishultin@google.com>
Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
sapirshuker pushed a commit that referenced this pull request Dec 21, 2023
* Mandiant Threat Intelligence - Use Local Filtering (#29724)

* Using local filtering to ensure that data doesn't become orphaned

* Bump docker version

* add missing periods

* release notes

* Addressing feedback

* Missing space

---------

Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>

* Update Docker version

---------

Co-authored-by: Christopher Hultin <chrishultin@google.com>
Co-authored-by: Michael Yochpaz <8832013+MichaelYochpaz@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved Internal PR Partner Support Level Indicates that the contribution is for Partner supported pack Partner Partner-Approved ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR.
Projects
None yet
4 participants