Skip to content

Gravityzone#44933

Merged
kamalq97 merged 37 commits into
demisto:contrib/ansimionescu-bd_gravityzonefrom
ansimionescu-bd:gravityzone
Jul 5, 2026
Merged

Gravityzone#44933
kamalq97 merged 37 commits into
demisto:contrib/ansimionescu-bd_gravityzonefrom
ansimionescu-bd:gravityzone

Conversation

@ansimionescu-bd

@ansimionescu-bd ansimionescu-bd commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Description

Added new commands to the GravityZone integration: gz-endpoint-create-memory-dump command, which initiates a memory dump on the specified endpoint, the gz-endpoint-memory-dump-status command, which verifies the status of a task initiated via gz-endpoint-create-memory-dump and the gz-endpoint-users-loggedin command, which retrieves details of all active user sessions on a specific managed endpoint.

Must have

  • Tests
  • Documentation

relates: https://jira-dc.paloaltonetworks.com/browse/CIAC-17220

ansimionescu-bd and others added 30 commits May 22, 2026 12:31
@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Partner Support Level Indicates that the contribution is for Partner supported pack labels Jul 2, 2026
@content-bot content-bot changed the base branch from master to contrib/ansimionescu-bd_gravityzone July 2, 2026 08:42
@content-bot content-bot requested a review from kamalq97 July 2, 2026 08:43
@content-bot

Copy link
Copy Markdown
Contributor

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot

Copy link
Copy Markdown
Contributor

Hi @ansimionescu-bd, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

@content-bot

Copy link
Copy Markdown
Contributor

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

  • @marketplace-ai-reviewer start review - Initiate a full AI code review
  • @marketplace-ai-reviewer re-review - Incremental review for new commits

@content-bot content-bot added Partner-Approved Contribution Form Filled Whether contribution form filled or not. Partner labels Jul 2, 2026
@kamalq97 kamalq97 added ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. labels Jul 2, 2026
@content-bot

Copy link
Copy Markdown
Contributor

For the Reviewer: Trigger build request has been accepted for this contribution PR.

@content-bot

Copy link
Copy Markdown
Contributor

For the Reviewer: Successfully created a pipeline in GitLab with url: https://gitlab.xdr.pan.local/xdr/cortex-content/content/-/pipelines/10676628

@content-bot content-bot removed the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Jul 2, 2026
@marketplace-ai-reviewer marketplace-ai-reviewer removed the ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. label Jul 2, 2026
@marketplace-ai-reviewer

Copy link
Copy Markdown
Contributor

🤖 Analysis started. Please wait for results...

@content-bot

Copy link
Copy Markdown
Contributor

Validate summary
The following errors were thrown as a part of this pr: BA129, RM110.
The following errors can be ignored: BA129, RM110.
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.
The following errors don't run as part of the nightly flow and therefore can be force merged: BA129.

Verdict: PR can be force merged from validate perspective? ❌

@marketplace-ai-reviewer

Copy link
Copy Markdown
Contributor
🤖 AI Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

@marketplace-ai-reviewer marketplace-ai-reviewer left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi there, thanks for your contribution to the GravityZone integration! I've reviewed the PR and noted a few adjustments needed for security, error handling, and documentation. Please ensure @logger decorators are removed from functions handling sensitive credentials, use safe dictionary access (like .get() or []) to prevent TypeErrors, and update the YAML/README to follow XSOAR formatting standards. Great work overall—just remember to bump the minor version in the release notes and avoid hardcoded IDs in the test playbook!

Additionally, please address the following file-level notes:

  • Packs/GravityZone/Integrations/GravityZone/GravityZone.yml: Please ensure that the README.md file is updated to document the new commands (gz-endpoint-users-loggedin, gz-endpoint-create-memory-dump, gz-endpoint-memory-dump-status) and their outputs. XSOAR guidelines require the README to be synchronized with YML changes.
  • Packs/GravityZone/ReleaseNotes/1_0_2.md: The version bump should be a minor bump rather than a revision (patch) bump.

@kamalq97 please review and approve the results generated by the AI Reviewer by responding 👍 on this comment.

Comment thread Packs/GravityZone/Integrations/GravityZone/GravityZone.py
Comment thread Packs/GravityZone/Integrations/GravityZone/GravityZone.py Outdated
Comment thread Packs/GravityZone/Integrations/GravityZone/GravityZone.py Outdated
Comment thread Packs/GravityZone/Integrations/GravityZone/GravityZone.py Outdated
Comment thread Packs/GravityZone/Integrations/GravityZone/README.md Outdated
Comment thread Packs/GravityZone/ReleaseNotes/1_0_2.md Outdated
Comment thread Packs/GravityZone/ReleaseNotes/1_0_2.md Outdated
Comment thread Packs/GravityZone/ReleaseNotes/1_0_2.md Outdated
Comment thread Packs/GravityZone/ReleaseNotes/1_0_2.md Outdated
@kamalq97 kamalq97 merged commit 0197d27 into demisto:contrib/ansimionescu-bd_gravityzone Jul 5, 2026
19 checks passed
@content-bot content-bot mentioned this pull request Jul 5, 2026
5 tasks
@github-actions

github-actions Bot commented Jul 5, 2026

Copy link
Copy Markdown

Thank you for your contribution. Your external PR has been merged and the changes are now included in one or more internal PRs for further review.

Note

Contributions containing XSIAM content (Modeling Rules, Parsing Rules, Correlation Rules, or Dashboards) are subject to an additional review process and may take longer to be merged to master.

kamalq97 added a commit that referenced this pull request Jul 5, 2026
* Gravityzone (#44933)

* Added gz-endpoint-users-loggedin command

* Fixed replacement of entire GravityZone.Endpoint object

* Added gz-endpoint-create-memory-dump command.

* Fixed replacement of entire GravityZone.Endpoint object

* Updated gz-endpoint-create-memory-dump command with more fields as response and in context.

* gz-endpoint-create-memory-dump command response updated to be similar with get task status response.

* Playbook test updated.

* Playbook elements positions updated.

* Updated documentation and release notes

* Updated documentation for gz-endpoint-create-memory-dump command

* Increase polling timeout for memory dump.

* Polling option added for memory dump commands.

* Descriptions updated for memory dump commands. Also memory dump status command changed as standard command.

* Test data added for memory dump status command.

* Output updated for memory dump status command and type checking for task types.

* Fixed tests and updated release notes

* Return error response when task has no type

* Updated README

* Tests added for none task type.

* Updated README

* Playbook GravityZone updated with all memory dump commands.

* Command examples updated.

* If invalid endpoint id provided, display specific error.

* Fixed duration for gz-endpoint-create-memory-dump command

* Revert "Fixed duration for gz-endpoint-create-memory-dump command"

This reverts commit 7088c4b.

* Updated note

* Fixed incident status mapping

* Updated documentation, release notes, texts

* Updated documentation

* Applied code review suggestions

* Changed command format to bold italic

---------

Co-authored-by: ilazar-bd <ilazar@bitdefender.com>

* Update .pack-ignore

---------

Co-authored-by: ansimionescu-bd <ansimionescu@bitdefender.com>
Co-authored-by: ilazar-bd <ilazar@bitdefender.com>
Co-authored-by: Kamal Qarain <kqarain@paloaltonetworks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved External PR Partner Support Level Indicates that the contribution is for Partner supported pack Partner Partner-Approved

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants