Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -397,7 +397,7 @@ script:
- contextPath: ReversingLabs.a1000_ip_urls
description: A1000 URL-s hosted on an IP address.
type: Unknown
dockerimage: demisto/reversinglabs-sdk-py3:2.0.0.85058
dockerimage: demisto/reversinglabs-sdk-py3:2.0.0.86428
runonce: false
script: '-'
subtype: python3
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 1 addition & 1 deletion Packs/ReversingLabs_A1000/ReleaseNotes/2_3_2.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
#### Integrations
##### ReversingLabs A1000 v2
- Updated the Docker image to: *demisto/reversinglabs-sdk-py3:2.0.0.85058*.
- Updated the Docker image to: *demisto/reversinglabs-sdk-py3:2.0.0.86428*.
- Updated the ***reversinglabs-a1000-list-extracted-files*** command to utilize the *max_results* argument.
8 changes: 7 additions & 1 deletion Packs/ReversingLabs_Titanium_Cloud/.secrets-ignore
Original file line number Diff line number Diff line change
Expand Up @@ -77,4 +77,10 @@ https://ajestudios.com
https://openairmt.org
https://synnexfpt.com
http://winwam.com
https://eclipse.org
https://eclipse.org
142.250.186.36
142.250.27.84
142.250.186.110
142.250.186.131
34.104.35.123
142.250.181.227
45,339 changes: 45,339 additions & 0 deletions ...eversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/README.md

Large diffs are not rendered by default.

Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
Expand Up @@ -926,7 +926,8 @@ def detonate_sample_command():
response = da.detonate_sample(sample_sha1=sha1, platform=platform)
except Exception as e:
if hasattr(e, "response_object"):
return_error(f"status code: {e.response_object.status_code}, message: {e.response_object.text}")
return_error(f"status code: {e.response_object.status_code}, "
f"message: {e.response_object.text}") # type: ignore[attr-defined]

return_error(str(e))

Expand Down Expand Up @@ -967,7 +968,8 @@ def sample_dynamic_analysis_results_command():
)
except Exception as e:
if hasattr(e, "response_object"):
return_error(f"status code: {e.response_object.status_code}, message: {e.response_object.text}")
return_error(f"status code: {e.response_object.status_code}, "
f"message: {e.response_object.text}") # type: ignore[attr-defined]

return_error(str(e))

Expand Down Expand Up @@ -1034,7 +1036,8 @@ def detonate_url_command():
response = da.detonate_url(url_string=url, platform=platform)
except Exception as e:
if hasattr(e, "response_object"):
return_error(f"status code: {e.response_object.status_code}, message: {e.response_object.text}")
return_error(f"status code: {e.response_object.status_code}, "
f"message: {e.response_object.text}") # type: ignore[attr-defined]

return_error(str(e))

Expand All @@ -1048,7 +1051,7 @@ def detonate_url_output(response_json, url):
report_base = response_json.get("rl", {})

markdown = f"""## ReversingLabs submit URL {url} for Dynamic Analysis\n **Status**: {report_base.get("status")}
**Requested UR**: {report_base.get("url")}
**Requested URL**: {report_base.get("url")}
**URL SHA1**: {report_base.get("sha1")}
**URL BASE64**: {report_base.get("url_base64")}
**Analysis ID**: {report_base.get("analysis_id")}
Expand Down Expand Up @@ -1081,28 +1084,37 @@ def url_dynamic_analysis_results_command():

except Exception as e:
if hasattr(e, "response_object"):
return_error(f"status code: {e.response_object.status_code}, message: {e.response_object.text}")
return_error(f"status code: {e.response_object.status_code}, "
f"message: {e.response_object.text}") # type: ignore[attr-defined]

return_error(str(e))

response_json = response.json()
results, file_results = url_dynamic_analysis_results_output(response_json=response_json, passed_url=url)
results, file_results = url_dynamic_analysis_results_output(
response_json=response_json,
passed_url=url,
passed_sha1=sha1
)

return_results([results, file_results])


def url_dynamic_analysis_results_output(response_json, passed_url=None):
def url_dynamic_analysis_results_output(response_json, passed_url=None, passed_sha1=None):
url = response_json.get("rl", {}).get("report", {}).get("url", passed_url)
sha1 = response_json.get("rl", {}).get("report", {}).get("sha1", passed_sha1)
classification = response_json.get("rl", {}).get("report", {}).get("classification")
url_base64 = response_json.get("rl", {}).get("report", {}).get("url_base54")
sha1 = response_json.get("rl", {}).get("report", {}).get("sha1")
last_analysis = response_json.get("rl", {}).get("report", {}).get("last_analysis")

markdown = f"""## ReversingLabs URL Dynamic Analysis output for URL {url}\n **Classification**: {classification}
**URL SHA1**: {sha1}
**URL BASE64**: {url_base64}
**Last analysis**: {last_analysis}\n ### Full report is returned as JSON in a downloadable file
"""
markdown = f"## ReversingLabs URL Dynamic Analysis output for URL\n **Classification**: {classification}\n"

if last_analysis:
markdown = markdown + f"**Last analysis**: {last_analysis}\n"

if url:
markdown = markdown + f"**Requested URL**: {url}\n"

if sha1:
markdown = markdown + f"**URL SHA1**: {sha1}"

d_bot_score = classification_to_score(classification.upper())

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -794,7 +794,7 @@ script:
- contextPath: ReversingLabs.network_reputation_overrides_list
description: Network reputation overrides list.
type: Unknown
dockerimage: demisto/reversinglabs-sdk-py3:2.0.0.85058
dockerimage: demisto/reversinglabs-sdk-py3:2.0.0.86428
runonce: false
script: '-'
subtype: python3
Expand Down
Binary file not shown.
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
url_latest_analyses_feed_output, url_analyses_feed_from_date_output, yara_ruleset_output, yara_retro_actions_output, \
format_proxy, domain_report_output, domain_downloaded_files_output, domain_urls_output, domain_to_ip_output, \
domain_related_domains_output, ip_report_output, ip_downloaded_files_output, ip_urls_output, ip_to_domain_output, \
network_reputation_output, detonate_url_output, create_da_object, url_dynamic_analysis_results_output
network_reputation_output, detonate_url_output
import demistomock as demisto
import pytest

Expand Down Expand Up @@ -329,13 +329,6 @@ def test_network_reputation_output():
assert result.to_context() == test_context









def test_detonate_sample_output():
test_report = load_json("test_data/detonate_sample.json")
test_context = load_json("test_data/detonate_sample_context.json")
Expand Down
2 changes: 1 addition & 1 deletion Packs/ReversingLabs_Titanium_Cloud/ReleaseNotes/2_5_0.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#### Integrations
##### ReversingLabs TitaniumCloud v2
- Updated the Docker image to: *demisto/reversinglabs-sdk-py3:2.0.0.85058*.
- Updated the Docker image to: *demisto/reversinglabs-sdk-py3:2.0.0.86428*.


- Updated the ***reversinglabs-titaniumcloud-submit-for-dynamic-analysis*** command:
Expand Down