MetaDefender Aether by anikobartos · Pull Request #43893 · demisto/content

anikobartos · 2026-04-15T11:56:27Z

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

In Progress
Ready
In Hold - (Reason for hold)

Related Issues

There is no related issue

Description

The new product name is MetaDefender Aether.
(MetaDefender Sandbox → MetaDefender Aether)
Small change: Use the threat-level to determine maliciousness; it’s more reliable than the verdict string.

Must have

Tests
Documentation

relates: https://jira-dc.paloaltonetworks.com/browse/CIAC-16555

CLAassistant · 2026-04-15T11:56:34Z

All committers have signed the CLA.

content-bot · 2026-04-15T11:59:10Z

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

content-bot · 2026-04-15T11:59:12Z

Hi @anikobartos, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

content-bot · 2026-04-15T11:59:14Z

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

@marketplace-ai-reviewer start review - Initiate a full AI code review
@marketplace-ai-reviewer re-review - Incremental review for new commits

…der-Aether

…content into MetaDefender-Aether

…der-Aether

content-bot · 2026-04-26T07:34:57Z

For the Reviewer: Trigger build request has been accepted for this contribution PR.

content-bot · 2026-04-26T07:35:06Z

For the Reviewer: Successfully created a pipeline in GitLab with url: https://gitlab.xdr.pan.local/xdr/cortex-content/content/-/pipelines/8461914

marketplace-ai-reviewer · 2026-04-26T07:41:35Z

🤖 Analysis started. Please wait for results...

content-bot · 2026-04-26T07:44:46Z

Validate summary
The following errors were thrown as a part of this pr: ST111, RM110, BA129, PA114, RN106.
The following errors can be ignored: RM110, BA129.
The following errors cannot be ignored: ST111, PA114, RN106.
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.
The following errors don't run as part of the nightly flow and therefore can be force merged: ST111, BA129, PA114, RN106.

Verdict: PR can be force merged from validate perspective? ❌

marketplace-ai-reviewer · 2026-04-26T08:15:13Z

🤖 AI Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

marketplace-ai-reviewer

🔄 Re-reviewing updates...

Important

To maintain review integrity, threads marked as Resolved without accompanying changes or explanations will be automatically unresolved for further verification.

Hi! Thanks for contributing to the OPSWAT MetaDefender Aether integration. I've left a few notes, primarily regarding the dynamic timeout implementation; using a global variable won't update the @polling_function decorator as intended, and the tests need to verify the actual polling behavior rather than just the variable update. There are also a few minor tweaks needed, such as adding a missing traceback import and using named arguments in the command examples. Let me know if you have any questions!

@kamalq97, @idovandijk, @melamedbn, @anikobartos, @marketplace-ai-reviewer please review and approve the results generated by the AI Reviewer by responding 👍 on this comment.

marketplace-ai-reviewer · 2026-04-26T08:15:11Z

+
+
+def scan_command(client: Client, args: dict[str, Any]):
+    global TIMEOUT


Modifying a global variable here will not affect the timeout parameter of the @polling_function decorator.

marketplace-ai-reviewer · 2026-04-26T08:15:11Z

+    mocker.patch.object(ScheduledCommand, "raise_error_if_not_supported", return_value=None)
+
+    MD_Aether.scan_command(client, {"url": "https://example.com", "timeout": "120"})
+    assert MD_Aether.TIMEOUT == 120


This test verifies the global variable update, but does not test if the polling mechanism actually uses the new timeout.

marketplace-ai-reviewer · 2026-04-26T08:15:11Z

+
+        elif entry_id := args.get("entry_id"):
+            try:
+                file_entry = demisto.getFilePath(entry_id)


Explicitly import the traceback module.

marketplace-ai-reviewer · 2026-04-26T08:15:11Z

+
+@polling_function(
+    name=demisto.command(),
+    timeout=TIMEOUT,


Using a global variable here does not allow dynamic timeouts.

marketplace-ai-reviewer · 2026-04-26T08:15:11Z

+!metadefender-aether-scan-url url="https://www.google.com" timeout="600"
+!metadefender-aether-search-query query=834d1dbfab8330ea5f1844f6e905ed0ac19d1033ee9a9f1122ad2051c56783dc
+!metadefender-aether-search-query https://www.google.com limit=3
+!metadefender-aether-search-query https://www.google.com page=1 page_size=20


Please use named arguments instead of positional arguments for clarity. Also, it looks like the trailing newline was removed entirely; please ensure the file ends with a single newline character.

Suggested change

!metadefender-aether-search-query https://www.google.com page=1 page_size=20

!metadefender-aether-search-query query=https://www.google.com page=1 page_size=20

…der-Aether

github-actions · 2026-04-29T15:11:19Z

Thank you for your contribution. Your external PR has been merged and the changes are now included in an internal PR for further review. The internal PR will be merged to the master branch within 3 business days.

* MetaDefender Aether (#43893) * Add Aether image, pack_metadata, readme * secret and pack ignore * Add Aether pack, refresh test files * test correction. extension to command_examples * Deprecate MetaDefender Sandbox * typos and code clean * add format * ruff format * UP038 correction * lint and test fix * new line at the end of readme * readme format * format integration Readme * playbook fix * add OPSWAT to metadata * grammar corrections * test files correction * grammar corrections * remove duplication and trailing line * add package intro to the beginning of the description file * use contentclient, extend verdict names in search, simplify polling * move out timeout from polling * use fastapi * add more test cases * fix test and remove global timeout change * Update .secrets-ignore --------- Co-authored-by: Aniko Bartos <aniko.bartos@opswat.com> Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>

anikobartos added 11 commits March 31, 2026 17:13

Add Aether image, pack_metadata, readme

4134953

secret and pack ignore

c01c768

Add Aether pack, refresh test files

ffb456d

test correction. extension to command_examples

655e72d

Merge branch 'demisto:master' into MetaDefender-Aether

b940492

Deprecate MetaDefender Sandbox

3de2d38

Merge branch 'demisto:master' into MetaDefender-Aether

5342a95

Merge branch 'demisto:master' into MetaDefender-Aether

3300acd

Merge branch 'demisto:master' into MetaDefender-Aether

237532d

typos and code clean

fa90cf6

Merge branch 'demisto:master' into MetaDefender-Aether

14e4fed

content-bot added Contribution Thank you! Contributions are always welcome! External PR Partner Support Level Indicates that the contribution is for Partner supported pack labels Apr 15, 2026

content-bot changed the base branch from master to contrib/anikobartos_MetaDefender-Aether April 15, 2026 11:58

content-bot assigned kamalq97 Apr 15, 2026

content-bot requested a review from kamalq97 April 15, 2026 11:59

content-bot assigned DeanArbel Apr 15, 2026

content-bot added Partner-Approved Contribution Form Filled Whether contribution form filled or not. Partner labels Apr 15, 2026

anikobartos added 2 commits April 15, 2026 16:38

add format

12144c7

ruff format

eaa4d0f

anikobartos changed the title ~~Meta defender aether~~ MetaDefender Aether Apr 15, 2026

anikobartos added 2 commits April 15, 2026 17:08

UP038 correction

2e62dad

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

df84cb2

…der-Aether

anikobartos added 9 commits April 21, 2026 14:08

use contentclient, extend verdict names in search, simplify polling

a1a4b99

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

a4c648f

…der-Aether

move out timeout from polling

1157195

Merge branch 'MetaDefender-Aether' of https://github.com/anikobartos/…

1f4183e

…content into MetaDefender-Aether

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

997a491

…der-Aether

use fastapi

f2d5485

add more test cases

00e6d79

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

2d04ee2

…der-Aether

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

079367a

…der-Aether

kamalq97 added ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. labels Apr 26, 2026

content-bot removed the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Apr 26, 2026

marketplace-ai-reviewer removed the ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. label Apr 26, 2026

marketplace-ai-reviewer reviewed Apr 26, 2026

View reviewed changes

kamalq97 approved these changes Apr 27, 2026

View reviewed changes

kamalq97 added the supported-modules-approved label Apr 27, 2026

anikobartos added 5 commits April 27, 2026 17:35

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

a8ef77d

…der-Aether

fix test and remove global timeout change

625701c

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

b8684da

…der-Aether

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

3934a6d

…der-Aether

Merge branch 'contrib/anikobartos_MetaDefender-Aether' into MetaDefen…

73abfe0

…der-Aether

kamalq97 merged commit f7325bb into demisto:contrib/anikobartos_MetaDefender-Aether Apr 29, 2026
18 checks passed

content-bot mentioned this pull request Apr 29, 2026

MetaDefender Aether #44101

Merged

5 tasks



		def scan_command(client: Client, args: dict[str, Any]):
		global TIMEOUT

	!metadefender-aether-search-query https://www.google.com page=1 page_size=20
	!metadefender-aether-search-query query=https://www.google.com page=1 page_size=20

Conversation

anikobartos commented Apr 15, 2026 • edited by marketplace-content-sync Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Contributing to Cortex XSOAR Content

Status

Related Issues

Description

Must have

Uh oh!

CLAassistant commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

content-bot commented Apr 15, 2026

Uh oh!

content-bot commented Apr 15, 2026

Uh oh!

content-bot commented Apr 15, 2026

🤖 AI-Powered Code Review Available

Uh oh!

content-bot commented Apr 26, 2026

Uh oh!

content-bot commented Apr 26, 2026

Uh oh!

marketplace-ai-reviewer commented Apr 26, 2026

Uh oh!

content-bot commented Apr 26, 2026

Uh oh!

marketplace-ai-reviewer commented Apr 26, 2026

Uh oh!

marketplace-ai-reviewer left a comment

Choose a reason for hiding this comment

🔄 Re-reviewing updates...

Uh oh!

marketplace-ai-reviewer Apr 26, 2026

Choose a reason for hiding this comment

Uh oh!

marketplace-ai-reviewer Apr 26, 2026

Choose a reason for hiding this comment

Uh oh!

marketplace-ai-reviewer Apr 26, 2026

Choose a reason for hiding this comment

Uh oh!

marketplace-ai-reviewer Apr 26, 2026

Choose a reason for hiding this comment

Uh oh!

marketplace-ai-reviewer Apr 26, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Apr 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

anikobartos commented Apr 15, 2026 •

edited by marketplace-content-sync

Loading

CLAassistant commented Apr 15, 2026 •

edited

Loading