RecordedFutureV3 pack updates by recordedfuture-dev · Pull Request #43634 · demisto/content

recordedfuture-dev · 2026-03-23T23:47:15Z

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

In Progress
Ready
In Hold - (Reason for hold)

Related Issues

Description

Recorded Future Alerts

Added the rf-alert-lookup command to retrieve full Classic Alert and Playbook Alert details.
Improved rf-alert-images to fail early with a clear error when run from the Playground War Room instead of an incident War Room.

Must have

Tests
Documentation

relates: https://jira-dc.paloaltonetworks.com/browse/CIAC-16362

…mmand when running outside of incident context.

content-bot · 2026-03-23T23:48:52Z

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

content-bot · 2026-03-23T23:48:53Z

Hi @recordedfuture-dev, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

content-bot · 2026-03-23T23:48:55Z

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

@marketplace-ai-reviewer start review - Initiate a full AI code review
@marketplace-ai-reviewer re-review - Incremental review for new commits

…26_03' into recordedfuturev3_pack_updates_2026_03

marketplace-ai-reviewer · 2026-03-25T15:31:01Z

🤖 Analysis started. Please wait for results...

content-bot · 2026-03-25T15:35:37Z

For the Reviewer: Trigger build request has been accepted for this contribution PR.

content-bot · 2026-03-25T15:35:46Z

For the Reviewer: Successfully created a pipeline in GitLab with url: https://gitlab.xdr.pan.local/xdr/cortex-content/content/-/pipelines/7897191

content-bot · 2026-03-25T15:43:23Z

Validate summary
The following errors were thrown as a part of this pr: RM110.
The following errors can be ignored: RM110.
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.

Verdict: PR can be force merged from validate perspective? ❌

marketplace-ai-reviewer · 2026-03-25T15:58:22Z

🤖 AI Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

marketplace-ai-reviewer

Thanks for contributing to the Recorded Future integration! I've reviewed your PR and have a few suggestions to help polish the new alert lookup functionality.

Please make sure to wrap the command response in a CommandResults object, add the missing unit tests for the new command, and update the YML outputs and README to match our formatting standards.

Let me know if you have any questions!

@kamalq97 please review and approve the results generated by the AI Reviewer by responding 👍 on this comment.

MosheEichler

Hi @recordedfuture-dev,
Thank you for your contribution!
Good work :)

Please go overt the review comments and fix them

Please feel free to reach out to me with any questions - I'm available here or on slack :)
Thanks again

…ient to have clear typing. Add test for rf-alert-lookup. Address formatting issues.

…26_03' into recordedfuturev3_pack_updates_2026_03

recordedfuture-dev · 2026-04-01T21:41:43Z

Hi there, @MosheEichler !

I've addressed all the comments (either updated the code, or explained my reasoning in the replies)

Please take a look!

Thank you!

…26_03' into recordedfuturev3_pack_updates_2026_03

aommm · 2026-04-13T07:24:52Z

Hi @MosheEichler, could you take a look at this?

…26_03' into recordedfuturev3_pack_updates_2026_03

MosheEichler · 2026-04-19T13:10:43Z

Hi @aommm, @recordedfuture-dev the code looks good!

We're ready for a demo. Please check this page, and let me know when you're available for one over DFIR.
Feel free also to send me a recording of a demo.

aommm · 2026-04-21T08:43:11Z

Hi @MosheEichler, I've sent you a demo video over slack. Please let me know if you require anything further!

github-actions · 2026-04-23T08:16:17Z

Thank you for your contribution. Your external PR has been merged and the changes are now included in an internal PR for further review. The internal PR will be merged to the master branch within 3 business days.

* [Pack][RecordedFutureV3] Improve error handling of rf-alert-images command when running outside of incident context. * [Pack][RecordedFutureV3] Add rf-alert-lookup command * [Pack][RecordedFutureV3] Fix ruff. * [Pack:RecordedFutureV3][Integration:RecordedFutureAlerts] Refactor client to have clear typing. Add test for rf-alert-lookup. Address formatting issues. --------- Co-authored-by: Dmytro B <dmytro.branitskyi__contractor@recordedfuture.com> Co-authored-by: Niklas Logren <niklas@niklaslogren.com>

recordedfuture-dev and others added 2 commits March 23, 2026 23:38

[Pack][RecordedFutureV3] Improve error handling of rf-alert-images co…

a7d9a97

…mmand when running outside of incident context.

[Pack][RecordedFutureV3] Add rf-alert-lookup command

22a1082

content-bot added Contribution Thank you! Contributions are always welcome! External PR Partner Support Level Indicates that the contribution is for Partner supported pack labels Mar 23, 2026

content-bot changed the base branch from master to contrib/recordedfuture_recordedfuturev3_pack_updates_2026_03 March 23, 2026 23:48

content-bot assigned kamalq97 Mar 23, 2026

content-bot requested a review from kamalq97 March 23, 2026 23:48

content-bot assigned DeanArbel Mar 23, 2026

content-bot added Partner-Approved Contribution Form Filled Whether contribution form filled or not. Partner labels Mar 23, 2026

recordedfuture-dev added 2 commits March 24, 2026 01:53

[Pack][RecordedFutureV3] Fix ruff.

581bcba

Merge branch 'contrib/recordedfuture_recordedfuturev3_pack_updates_20…

39301c1

…26_03' into recordedfuturev3_pack_updates_2026_03

MosheEichler added ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. docs-approved ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. labels Mar 25, 2026

marketplace-ai-reviewer removed the ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. label Mar 25, 2026

content-bot removed the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Mar 25, 2026

marketplace-ai-reviewer reviewed Mar 25, 2026

View reviewed changes

MosheEichler requested changes Mar 26, 2026

View reviewed changes

[Pack:RecordedFutureV3][Integration:RecordedFutureAlerts] Refactor cl…

d3e535f

…ient to have clear typing. Add test for rf-alert-lookup. Address formatting issues.

Merge branch 'contrib/recordedfuture_recordedfuturev3_pack_updates_20…

3b12695

…26_03' into recordedfuturev3_pack_updates_2026_03

Merge branch 'contrib/recordedfuture_recordedfuturev3_pack_updates_20…

c4fdce3

…26_03' into recordedfuturev3_pack_updates_2026_03

Merge branch 'contrib/recordedfuture_recordedfuturev3_pack_updates_20…

2a539f2

…26_03' into recordedfuturev3_pack_updates_2026_03

MosheEichler approved these changes Apr 19, 2026

View reviewed changes

MosheEichler merged commit 65d84fa into demisto:contrib/recordedfuture_recordedfuturev3_pack_updates_2026_03 Apr 23, 2026
18 checks passed

content-bot mentioned this pull request Apr 23, 2026

RecordedFutureV3 pack updates #43989

Merged

5 tasks

Conversation

recordedfuture-dev commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Contributing to Cortex XSOAR Content

Status

Related Issues

Description

Recorded Future Alerts

Must have

Uh oh!

content-bot commented Mar 23, 2026

Uh oh!

content-bot commented Mar 23, 2026

Uh oh!

content-bot commented Mar 23, 2026

🤖 AI-Powered Code Review Available

Uh oh!

marketplace-ai-reviewer commented Mar 25, 2026

Uh oh!

content-bot commented Mar 25, 2026

Uh oh!

content-bot commented Mar 25, 2026

Uh oh!

content-bot commented Mar 25, 2026

Uh oh!

marketplace-ai-reviewer commented Mar 25, 2026

Uh oh!

marketplace-ai-reviewer left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

MosheEichler left a comment

Choose a reason for hiding this comment

Uh oh!

recordedfuture-dev commented Apr 1, 2026

Uh oh!

aommm commented Apr 13, 2026

Uh oh!

MosheEichler commented Apr 19, 2026

Uh oh!

aommm commented Apr 21, 2026

Uh oh!

Uh oh!

github-actions Bot commented Apr 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

recordedfuture-dev commented Mar 23, 2026 •

edited

Loading