Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EXPANDR-8024: Additional Azure Remediation Bug Fix and Improvements #33039

Conversation

johnnywilkes
Copy link
Contributor

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

https://jira-dc.paloaltonetworks.com/browse/EXPANDR-8024
https://jira-dc.paloaltonetworks.com/browse/EXPANDR-8187
https://jira-dc.paloaltonetworks.com/browse/EXPANDR-8180

Description

  • Added the instance_name optional playbook input to allow user to specify Azure Network Security Groups integration instance to use.
  • Added the RemediationAllowRanges optional playbook input to allow user to specify IPv4 network ranges to be used as source addresses for the remediation-allow-port-<port#>-<tcp|udp> Azure NSG rule to be created.
  • Fixed an issue with not being able to detect all offending rules.

Must have

  • Tests
  • Documentation

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Xsoar Support Level Indicates that the contribution is for XSOAR supported pack labels Feb 20, 2024
@content-bot content-bot changed the base branch from master to contrib/PaloAltoNetworks_Azure-EXPANDR-8024 February 20, 2024 23:48
@johnnywilkes
Copy link
Contributor Author

@ShirleyDenkberg , can you please review?

@johnnywilkes
Copy link
Contributor Author

@merit-maita , shared a demo video with you on drive

@JudahSchwartz
Copy link
Contributor

@johnnywilkes please share with @moishce

@ShirleyDenkberg
Copy link
Contributor

@moishce Doc review completed.

@johnnywilkes
Copy link
Contributor Author

@johnnywilkes please share with @moishce

@moishce , I shared demo video with you via drive

johnnywilkes and others added 2 commits February 21, 2024 08:28
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
@@ -828,6 +840,8 @@ tasks:
applyIfEmpty: {}
defaultValue: {}
operator: SetIfEmpty
using:
simple: ${inputs.instance_name}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
simple: ${inputs.instance_name}
simple: ${inputs.InstanceName}

You might want to change it to title case like the other inputs.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

@moishce moishce left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @johnnywilkes ,
Thank you for your contribution!
Good work :)

Just one small note

@melamedbn, do you want to go over it?

@moishce moishce merged commit 5351a7b into demisto:contrib/PaloAltoNetworks_Azure-EXPANDR-8024 Feb 26, 2024
19 of 21 checks passed
Copy link

Thank you for your contribution. Your external PR has been merged and the changes are now included in an internal PR for further review. The internal PR will be merged to the master branch within 3 business days.

moishce added a commit that referenced this pull request Feb 28, 2024
…33039) (#33112)

* update play

* RN

* Apply suggestions from code review



* update input name

---------

Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Moshe Galitzky <112559840+moishce@users.noreply.github.com>
rundssoar pushed a commit to rundssoar/content that referenced this pull request Feb 28, 2024
…emisto#33039) (demisto#33112)

* update play

* RN

* Apply suggestions from code review



* update input name

---------

Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Moshe Galitzky <112559840+moishce@users.noreply.github.com>
maimorag pushed a commit that referenced this pull request Feb 28, 2024
…33039) (#33112)

* update play

* RN

* Apply suggestions from code review



* update input name

---------

Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com>
Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com>
Co-authored-by: Moshe Galitzky <112559840+moishce@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Community Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved External PR Security Review Xsoar Support Level Indicates that the contribution is for XSOAR supported pack
Projects
None yet
6 participants