Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Marketplace Contribution] Recorded Future Attack Surface Intelligence - Content Pack Update #30474

Conversation

xsoar-bot
Copy link
Contributor

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Contributor

@NicCas

Video Link

Short demo video of the Pack usage. Speeds up the review. Optional but recommended. Use a video sharing service such as Google Drive or YouTube.

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Partner Support Level Indicates that the contribution is for Partner supported pack labels Oct 26, 2023
@content-bot content-bot changed the base branch from master to contrib/xsoar-contrib_NicCas-contrib-RecordedFutureASI October 26, 2023 16:28
@content-bot
Copy link
Collaborator

Thank you for your contribution. Your generosity and caring are unrivaled! Rest assured - our content wizard @sapirshuker will very shortly look over your proposed changes.
For your convenience, here is a link to the contributions SLAs document.

Copy link
Contributor

@sapirshuker sapirshuker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for your contribution!
Good work :)
Please see my comments
You can add the fixes / changes by using the resubmit option resubmit-a-content-pack, or by using GitHub Codespaces - GitHub Codespaces documentation

@@ -3,7 +3,7 @@
"prevName": "Recorded Future ASI",
"description": "Helps you take risk prioritization to the next level by helping you identify the biggest weaknesses within your attack surface.",
"support": "partner",
"currentVersion": "2.0.9",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not really a big change, please change the version to 2.0.10. (in the release note and in the pack metadata.json)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Completed!

isfetch: true
subtype: python3
runonce: false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please revert

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Completed!

fromversion: 6.5.0
tests:
- No tests (auto formatted)
defaultmapperin: Recorded Future ASI - Incoming Mapper
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please revert

Packs/RecordedFutureASI/ReleaseNotes/2_1_0.md Outdated Show resolved Hide resolved
NicCas and others added 10 commits October 30, 2023 08:16
Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
…dFutureASI.py

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
…dFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
…dFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
…dFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
…dFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
return_error('Please provide a valid API token')
project_id = params.get("credential_projectid", {}).get("password") or params.get("project_id")
if not project_id:
return_error('Please provide a valid Project ID')

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please make the credentials entry one entry in the credentials vault where the project_id is the username and the apikey is the password. While still allowing the old way of authenticating where both project_id and apikey is a secret. Reach out in slack @NicCas if you have any questions

@sapirshuker sapirshuker self-requested a review November 5, 2023 12:44
Copy link
Contributor

@sapirshuker sapirshuker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @NicCas , the code looks good!

We're ready for a demo. Please check this page, and let me know when you're available for one over DFIR.

@sapirshuker sapirshuker added pending-demo Demo pending pending-contributor The PR is pending the response of its creator labels Nov 5, 2023
…-RecordedFutureASI' of github.com:xsoar-contrib/content into pr/xsoar-bot/30474
@sapirshuker sapirshuker added the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Nov 9, 2023
@content-bot
Copy link
Collaborator

content-bot commented Nov 9, 2023

For the Reviewer: Successfully created a pipeline in Gitlab with url: https://code.pan.run/xsoar/content/-/pipelines/6841074

@sapirshuker sapirshuker added ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. and removed ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. labels Nov 9, 2023
@sapirshuker sapirshuker self-requested a review November 9, 2023 15:20
@sapirshuker sapirshuker merged commit 630ff18 into demisto:contrib/xsoar-contrib_NicCas-contrib-RecordedFutureASI Nov 9, 2023
27 of 29 checks passed
sapirshuker added a commit that referenced this pull request Nov 12, 2023
…e - Content Pack Update (#30780)

* [Marketplace Contribution] Recorded Future Attack Surface Intelligence - Content Pack Update (#30474)

* "contribution update to pack "Recorded Future Attack Surface Intelligence""

* Added 'hidden: true' to encrypted

* Added periods to match formatting requirements

* Update Packs/RecordedFutureASI/ReleaseNotes/2_1_0.md

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.py

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Updated version number

* Added 'defaultmapperin' back

* Rename 2_1_0.md to 2.0.10.md

* Made suggested formatting changes

* Combined credentials into one, updated docker image

Combined credentials into a single username/password 
Updated docker image

* Updated to single credential

* Changed username to identifier

* fixed param username/password

* Switched API Key to only credential

* Now supports project_id as type 4 and api_key as solo type 9 parameter

* add tests,change readme

* revert runonce: false on yml

* fix tests

* Update README.md

* remove Incidents Fetch Interval

* Update 2.0.10.md

* Update 2.0.10.md

* Update pack_metadata.json

* Update pack_metadata.json

* metadata

* Update docker image

* Update docker image

* rename RN from 2.0.10 to 2_0_10

---------

Co-authored-by: Nicole Casartelli <npcasartelli@gmail.com>
Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
Co-authored-by: sapirshuker <sshuker@paloaltonetworks.com>

* fix imports

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: Nicole Casartelli <npcasartelli@gmail.com>
Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
Co-authored-by: sapirshuker <sshuker@paloaltonetworks.com>
sapirshuker added a commit that referenced this pull request Dec 21, 2023
…e - Content Pack Update (#30780)

* [Marketplace Contribution] Recorded Future Attack Surface Intelligence - Content Pack Update (#30474)

* "contribution update to pack "Recorded Future Attack Surface Intelligence""

* Added 'hidden: true' to encrypted

* Added periods to match formatting requirements

* Update Packs/RecordedFutureASI/ReleaseNotes/2_1_0.md

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.py

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Update Packs/RecordedFutureASI/Integrations/RecordedFutureASI/RecordedFutureASI.yml

Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>

* Updated version number

* Added 'defaultmapperin' back

* Rename 2_1_0.md to 2.0.10.md

* Made suggested formatting changes

* Combined credentials into one, updated docker image

Combined credentials into a single username/password 
Updated docker image

* Updated to single credential

* Changed username to identifier

* fixed param username/password

* Switched API Key to only credential

* Now supports project_id as type 4 and api_key as solo type 9 parameter

* add tests,change readme

* revert runonce: false on yml

* fix tests

* Update README.md

* remove Incidents Fetch Interval

* Update 2.0.10.md

* Update 2.0.10.md

* Update pack_metadata.json

* Update pack_metadata.json

* metadata

* Update docker image

* Update docker image

* rename RN from 2.0.10 to 2_0_10

---------

Co-authored-by: Nicole Casartelli <npcasartelli@gmail.com>
Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
Co-authored-by: sapirshuker <sshuker@paloaltonetworks.com>

* fix imports

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: Nicole Casartelli <npcasartelli@gmail.com>
Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com>
Co-authored-by: sapirshuker <sshuker@paloaltonetworks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Contribution Thank you! Contributions are always welcome! External PR Partner Support Level Indicates that the contribution is for Partner supported pack Partner-Approved pending-contributor The PR is pending the response of its creator pending-demo Demo pending post-demo ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR.
Projects
None yet
5 participants