Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Marketplace Contribution] Recorded Future Identity - Content Pack Update #30246

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
dd0f2eb
"contribution update to pack "Recorded Future Identity""
xsoar-bot Oct 17, 2023
87b1663
Update Packs/IdentityRecordedFuture/ReleaseNotes/1_2_0.md
NicCas Oct 18, 2023
19841fb
Update Packs/IdentityRecordedFuture/Integrations/IdentityRecordedFutu…
NicCas Oct 18, 2023
c4c27a0
Merge branch 'contrib/xsoar-contrib_NicCas-contrib-IdentityRecordedFu…
NicCas Oct 18, 2023
583e26c
Update Packs/IdentityRecordedFuture/Integrations/IdentityRecordedFutu…
NicCas Oct 20, 2023
a41f7b0
Update Packs/IdentityRecordedFuture/Integrations/IdentityRecordedFutu…
NicCas Oct 20, 2023
5a2c7b9
Added credential backwards compatibility
NicCas Oct 20, 2023
0ddd493
Merge branch 'contrib/xsoar-contrib_NicCas-contrib-IdentityRecordedFu…
NicCas Oct 20, 2023
4dc9cb7
Update IdentityRecordedFuture.yml
NicCas Oct 20, 2023
5dea24a
Changed parameter name from 'token' to 'credential'
NicCas Oct 20, 2023
68ebeec
Uses new 'credential' parameter for api token
NicCas Oct 20, 2023
c797299
Update Packs/IdentityRecordedFuture/Integrations/IdentityRecordedFutu…
NicCas Oct 23, 2023
91b32ec
Update Packs/IdentityRecordedFuture/Integrations/IdentityRecordedFutu…
NicCas Oct 23, 2023
9bb9a13
Merge branch 'contrib/xsoar-contrib_NicCas-contrib-IdentityRecordedFu…
NicCas Oct 23, 2023
696bbc1
Fixed formatting and updated docker image
NicCas Oct 24, 2023
0bbd219
Merge branch 'contrib/xsoar-contrib_NicCas-contrib-IdentityRecordedFu…
NicCas Oct 24, 2023
d072db7
Updated docker image
NicCas Oct 24, 2023
6980ee8
Merge branch 'contrib/xsoar-contrib_NicCas-contrib-IdentityRecordedFu…
NicCas Oct 24, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
import demistomock as demisto # noqa: F401
from CommonServerPython import * # noqa: F401

"""Recorded Future Identity Integration for Demisto."""
from typing import Dict, Any, Union, Optional
import requests
Expand Down Expand Up @@ -125,10 +126,13 @@ def main() -> None:
base_url = demisto_params.get("server_url", "").rstrip("/")
verify_ssl = not demisto_params.get("unsecure", False)
proxy = demisto_params.get("proxy", False)
# If user has not set password properties we will get empty string but client require empty list
api_token = demisto_params.get("credential", {}).get("password") or demisto_params.get("token")
if not api_token:
return_error('Please provide a valid API token')

# If user has not set password properties we will get empty string but client require empty list
headers = {
"X-RFToken": demisto_params["token"],
"X-RFToken": api_token,
"X-RF-User-Agent": f"xsoar-identity/{__version__} rfclient (Cortex_XSOAR_"
f'{demisto.demistoVersion()["version"]})',
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,6 @@ commonfields:
name: Recorded Future Identity
display: Recorded Future Identity
category: Data Enrichment & Threat Intelligence
image:
description: Recorded Future Identity Integration that provides access to Recorded Future Identity module data.
configuration:
- display: Server URL (e.g., https://api.recordedfuture.com/gw/xsoar-identity)
Expand All @@ -15,7 +14,13 @@ configuration:
- display: API Token
name: token
type: 4
required: true
required: false
hidden: true
- displaypassword: API Token
name: credential
type: 9
required: false
hiddenusername: true
- display: Trust any certificate (not secure)
name: unsecure
defaultvalue: "false"
Expand Down Expand Up @@ -54,19 +59,19 @@ configuration:
required: true
additionalinfo: List of domains.
script:
script: '-'
script: ''
type: python
subtype: python3
dockerimage: demisto/python3:3.10.13.72123
dockerimage: demisto/python3:3.10.13.78960
commands:
- name: recordedfuture-identity-search
description: Search for identities in Recorded Future Identity Dataset
description: Search for identities in Recorded Future Identity Dataset.
arguments:
- name: latest-downloaded
defaultValue: "All time"
description: Time period for last downloaded time.(e.g. "7 days ago", "Three months ago", "Last Year", "All time")
description: Time period for last downloaded time (e.g. "7 days ago", "Three months ago", "Last Year", "All time").
- name: domains
description: Domains list separated by comma. (e.g. norsegods.online, norsegods.online ). If not specified, domains from app instance will be used.
description: Domains list separated by comma (e.g. norsegods.online, norsegods.online ). If not specified, domains from app instance will be used.
- name: domain-type
description: Type of identities to search for (Authorization or Email). If not specified use All.
auto: PREDEFINED
Expand Down Expand Up @@ -108,12 +113,12 @@ script:
arguments:
- name: identities
required: true
description: Identities for the lookup separated by comma.(e.g. "09719@norsegods.online, 1000739@norsegods.online").
description: Identities for the lookup separated by comma (e.g. "09719@norsegods.online, 1000739@norsegods.online").
- name: domains
description: Domains list separated by comma. (e.g. norsegods.online, norsegods.online )
description: Domains list separated by comma (e.g. norsegods.online, norsegods.online).
- name: first-downloaded
defaultValue: "All time"
description: Time period for first downloaded time.(e.g. "7 days ago", "Three months ago", "Last Year", "All time")
description: Time period for first downloaded time (e.g. "7 days ago", "Three months ago", "Last Year", "All time").
outputs:
- contextPath: RecordedFuture.Credentials.Identities.identity.subjects
description: Identity value.
Expand Down Expand Up @@ -170,7 +175,7 @@ script:
description: Exposed secret hash value.
type: String
- contextPath: RecordedFuture.Credentials.Identities.credentials.exposed_secret.effectively_clear
description: Exposed secret clear or not
description: Exposed secret clear or not.
type: Boolean
- contextPath: RecordedFuture.Credentials.Identities.credentials.exposed_secret.details.properties
description: Exposed secret properties.
Expand Down
7 changes: 7 additions & 0 deletions Packs/IdentityRecordedFuture/ReleaseNotes/1_2_0.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@

#### Integrations

##### Recorded Future Identity

- Added the credential support for API token.
- Updated the Docker image to: *demisto/python3:3.10.13.78960*.
2 changes: 1 addition & 1 deletion Packs/IdentityRecordedFuture/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Recorded Future Identity",
"description": "Recorded Future App for Identity",
"support": "partner",
"currentVersion": "1.1.4",
"currentVersion": "1.2.0",
"author": "Recorded Future",
"url": "https://www.recordedfuture.com/integrations/",
"email": "support@recordedfuture.com",
Expand Down