Skip to content

Flashpoint Release 2.1.0 #40206

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 8, 2025

Conversation

content-bot
Copy link
Collaborator

Original External PR

external pull request

Contributor

@crestdatasystems

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Description

Updated the "Flashpoint Ignite" integration for the following:

  • Added the flashpoint-ignite-indicator-get command to retrieve details for specific indicator of types "url", "domain", "file hash", and "ip" using the indicator ID.
  • Updated the following commands to use the new IOC v2 API:
    • ip
    • domain
    • url
    • file
    • flashpoint-ignite-common-lookup
  • Added support for the following parameters to filter incoming compromised credentials alerts based on password characteristics:
    • Fetch compromised credentials alerts having numbers in password
    • Fetch compromised credentials alerts having minimum length of password
    • Fetch compromised credentials alerts having uppercase in password
    • Fetch compromised credentials alerts having lowercase in password
    • Fetch compromised credentials alerts having symbol in password
  • Fixed an issue where the "ip" command could return a "NoneType" error.
  • Deprecated the filename and email command.

Must have

  • Tests
  • Documentation

* Flashpoint Release 2.1.0

* Fixed ruff and mypy errors

* Updated the docker image.

* Update MITRE ATT&CK tactics field from string to array in test data files

* Removed reference to Docker image update from Flashpoint release notes

* Changes as per suggestion

* Added breaking changes in release note.

* Updated Release Note as per suggested changes

---------

Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com>
@content-bot content-bot added Contribution Thank you! Contributions are always welcome! docs-approved Partner Contribution Form Filled Whether contribution form filled or not. pending-contributor The PR is pending the response of its creator Partner Support Level Indicates that the contribution is for Partner supported pack Internal PR Partner-Approved ready-for-pipeline-running Whether the pr is ready for running the whole pipeline, including testing on SAAS machines labels Jun 8, 2025
@content-bot content-bot requested a review from itssapir June 8, 2025 11:43
Copy link

github-actions bot commented Jun 8, 2025

Coverage

Coverage Report
FileStmtsMissCoverMissing
Packs/Flashpoint/Integrations/Ignite
   Ignite.py11515295%257, 322, 366–372, 448, 498, 506, 629, 633, 635, 641, 645, 647, 650, 693, 696, 788, 983, 1232–1233, 1287, 1289, 1321, 1430, 1543, 1625, 1714, 1729, 1930, 2035, 2138, 2258, 2373, 2594, 2600–2601, 2609, 2647–2648, 2954–2957, 2967, 2979, 2988, 2992
TOTAL11515295% 

Tests Skipped Failures Errors Time
100 0 💤 0 ❌ 0 🔥 4.323s ⏱️

@content-bot
Copy link
Collaborator Author

Validate summary

Verdict: PR can be force merged from validate perspective? ✅

@itssapir itssapir merged commit 8f3be0b into master Jun 8, 2025
56 checks passed
@itssapir itssapir deleted the contrib/crestdatasystems_Flashpoint-Release-210 branch June 8, 2025 14:00
Pinger77 pushed a commit to Pinger77/content that referenced this pull request Jun 12, 2025
* Flashpoint Release 2.1.0

* Fixed ruff and mypy errors

* Updated the docker image.

* Update MITRE ATT&CK tactics field from string to array in test data files

* Removed reference to Docker image update from Flashpoint release notes

* Changes as per suggestion

* Added breaking changes in release note.

* Updated Release Note as per suggested changes

---------

Co-authored-by: Crest Data <60967033+crestdatasystems@users.noreply.github.com>
Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved Internal PR Partner Support Level Indicates that the contribution is for Partner supported pack Partner Partner-Approved pending-contributor The PR is pending the response of its creator ready-for-pipeline-running Whether the pr is ready for running the whole pipeline, including testing on SAAS machines
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants