From 39ff3d829c31578adcfde33e67fb3135bd976146 Mon Sep 17 00:00:00 2001 From: msever Date: Fri, 18 Apr 2025 14:46:17 +0200 Subject: [PATCH 1/5] Add isArray: true --- .../ReversingLabsTitaniumCloudv2.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml b/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml index 9067e94e66f8..df321c647b46 100644 --- a/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml +++ b/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml @@ -60,6 +60,7 @@ script: default: true description: List of file hashes. required: true + isArray: true outputs: - contextPath: File.MD5 description: Bad hash found. @@ -104,6 +105,7 @@ script: description: List of URLs. default: true required: true + isArray: true outputs: - contextPath: URL.Data description: The URL. @@ -136,6 +138,7 @@ script: description: List of IP addresses. default: true required: true + isArray: true outputs: - contextPath: IP.Address description: The IP address. @@ -165,6 +168,7 @@ script: description: List of domain names. default: true required: true + isArray: true outputs: - contextPath: Domain.Name description: The domain name. From 7a4a27efd2692b87ebbbe8f7928f79f93e0586b2 Mon Sep 17 00:00:00 2001 From: msever Date: Fri, 18 Apr 2025 14:46:25 +0200 Subject: [PATCH 2/5] Add the contributors file --- Packs/ReversingLabs_Titanium_Cloud/CONTRIBUTORS.json | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 Packs/ReversingLabs_Titanium_Cloud/CONTRIBUTORS.json diff --git a/Packs/ReversingLabs_Titanium_Cloud/CONTRIBUTORS.json b/Packs/ReversingLabs_Titanium_Cloud/CONTRIBUTORS.json new file mode 100644 index 000000000000..a79327c204f1 --- /dev/null +++ b/Packs/ReversingLabs_Titanium_Cloud/CONTRIBUTORS.json @@ -0,0 +1,3 @@ +[ + "Mislav Sever" +] \ No newline at end of file From 9196c0540310adb29f845856c79e73d63017515b Mon Sep 17 00:00:00 2001 From: msever Date: Mon, 28 Apr 2025 14:09:12 +0200 Subject: [PATCH 3/5] Update release notes --- Packs/ReversingLabs_Titanium_Cloud/ReleaseNotes/2_7_0.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Packs/ReversingLabs_Titanium_Cloud/ReleaseNotes/2_7_0.md b/Packs/ReversingLabs_Titanium_Cloud/ReleaseNotes/2_7_0.md index 8142bf944864..dc21a7fc1980 100644 --- a/Packs/ReversingLabs_Titanium_Cloud/ReleaseNotes/2_7_0.md +++ b/Packs/ReversingLabs_Titanium_Cloud/ReleaseNotes/2_7_0.md @@ -1,6 +1,6 @@ #### Integrations ##### ReversingLabs TitaniumCloud v2 -- Updated the Docker image to: *demisto/reversinglabs-sdk-py3:2.0.0.86428*. +- Updated the Docker image to: *demisto/reversinglabs-sdk-py3:2.0.0.3030542*. Added new commands: - ***file*** From 5a5b88ad987553026a697a841119f2de9d9e0f53 Mon Sep 17 00:00:00 2001 From: msever Date: Mon, 28 Apr 2025 14:37:12 +0200 Subject: [PATCH 4/5] Add config section order --- .../ReversingLabsTitaniumCloudv2.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml b/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml index 0d45146baf25..cfd8991f296f 100644 --- a/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml +++ b/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml @@ -1,4 +1,7 @@ category: Data Enrichment & Threat Intelligence +sectionOrder: + - Connect + - Collect commonfields: id: ReversingLabs TitaniumCloud v2 version: -1 @@ -8,10 +11,12 @@ configuration: name: base required: true type: 0 + section: Connect - display: Credentials name: credentials required: true type: 9 + section: Connect - defaultvalue: C - Fairly reliable display: Reliability name: reliability @@ -25,29 +30,40 @@ configuration: - F - Reliability cannot be judged type: 15 required: false + section: Collect - defaultvalue: "false" display: Verify certificates name: verify_certs type: 8 required: false + section: Connect + advanced: true - display: HTTP proxy address with the protocol and port number name: http_proxy type: 0 required: false + section: Connect + advanced: true - display: HTTP proxy username name: http_credentials displaypassword: HTTP proxy password required: false type: 9 + section: Connect + advanced: true - display: HTTPS proxy address with the protocol and port number name: https_proxy type: 0 required: false + section: Connect + advanced: true - display: HTTPS proxy username name: https_credentials displaypassword: HTTPS proxy password required: false type: 9 + section: Connect + advanced: true description: ReversingLabs TitaniumCloud provides threat analysis data from various ReversingLabs cloud services. display: ReversingLabs TitaniumCloud v2 name: ReversingLabs TitaniumCloud v2 From b212a39e0171e110d6e05e4c3350c5966bd64178 Mon Sep 17 00:00:00 2001 From: msever Date: Mon, 28 Apr 2025 14:40:50 +0200 Subject: [PATCH 5/5] Update YAML return types --- .../ReversingLabsTitaniumCloudv2.yml | 60 +++++++++---------- 1 file changed, 30 insertions(+), 30 deletions(-) diff --git a/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml b/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml index cfd8991f296f..62a7e1e2f25c 100644 --- a/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml +++ b/Packs/ReversingLabs_Titanium_Cloud/Integrations/ReversingLabsTitaniumCloudv2/ReversingLabsTitaniumCloudv2.yml @@ -83,10 +83,10 @@ script: type: String - contextPath: File.SHA1 description: Bad hash SHA1. - type: Unknown + type: String - contextPath: File.SHA256 description: Bad hash SHA256. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -125,7 +125,7 @@ script: outputs: - contextPath: URL.Data description: The URL. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -158,7 +158,7 @@ script: outputs: - contextPath: IP.Address description: The IP address. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -188,7 +188,7 @@ script: outputs: - contextPath: Domain.Name description: The domain name. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -217,13 +217,13 @@ script: outputs: - contextPath: File.MD5 description: Bad hash found. - type: Unknown + type: String - contextPath: File.SHA1 description: Bad hash SHA1. - type: Unknown + type: String - contextPath: File.SHA256 description: Bad hash SHA256. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -249,13 +249,13 @@ script: outputs: - contextPath: File.MD5 description: Bad hash found. - type: Unknown + type: String - contextPath: File.SHA1 description: Bad hash SHA1. - type: Unknown + type: String - contextPath: File.SHA256 description: Bad hash SHA256. - type: Unknown + type: String - contextPath: ReversingLabs.av_scanners description: The AV scanners. type: Unknown @@ -269,13 +269,13 @@ script: outputs: - contextPath: File.MD5 description: Bad hash found. - type: Unknown + type: String - contextPath: File.SHA1 description: Bad hash SHA1. - type: Unknown + type: String - contextPath: File.SHA256 description: Bad hash SHA256. - type: Unknown + type: String - contextPath: ReversingLabs.file_analysis description: The file analysis. type: Unknown @@ -303,13 +303,13 @@ script: outputs: - contextPath: File.SHA1 description: File SHA1. - type: Unknown + type: String - contextPath: File.SHA256 description: File SHA256. - type: Unknown + type: String - contextPath: File.MD5 description: File MD5. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -335,16 +335,16 @@ script: outputs: - contextPath: IP.Address description: IP address. - type: Unknown + type: String - contextPath: Domain.Name description: Domain name. - type: Unknown + type: String - contextPath: URL.Data description: The URL. - type: Unknown + type: String - contextPath: Email.To description: Destination email address. - type: Unknown + type: String - contextPath: ReversingLabs.uri_statistics description: The URI statistics. type: Unknown @@ -416,7 +416,7 @@ script: outputs: - contextPath: URL.Data description: The URL. - type: Unknown + type: String - contextPath: DBotScore.Score description: The actual score. type: Number @@ -592,16 +592,16 @@ script: outputs: - contextPath: ReversingLabs.create_yara_ruleset description: The YARA ruleset. - type: Unknown + type: String - contextPath: ReversingLabs.delete_yara_ruleset description: The YARA ruleset. - type: Unknown + type: String - contextPath: ReversingLabs.get_yara_ruleset_info description: The YARA ruleset. - type: Unknown + type: String - contextPath: ReversingLabs.get_yara_ruleset_text description: The YARA ruleset. - type: Unknown + type: String - name: reversinglabs-titaniumcloud-yara-matches-feed description: Returns a recordset of YARA ruleset matches in the specified time range. arguments: @@ -637,16 +637,16 @@ script: outputs: - contextPath: ReversingLabs.enable_yara_retro description: The YARA retro hunt. - type: Unknown + type: String - contextPath: ReversingLabs.start_yara_retro description: The YARA retro hunt. - type: Unknown + type: String - contextPath: ReversingLabs.check_yara_retro_status description: The YARA retro hunt. - type: Unknown + type: String - contextPath: ReversingLabs.cancel_yara_retro description: The YARA retro hunt. - type: Unknown + type: String - name: reversinglabs-titaniumcloud-yara-retro-matches-feed description: Returns a recordset of YARA ruleset matches in the specified time range. arguments: