reversinglabs · MislavReversingLabs · Apr 30, 2025 · Apr 18, 2025 · Apr 18, 2025 · Apr 20, 2025
diff --git a/.pre-commit-config_template.yaml b/.pre-commit-config_template.yaml
@@ -18,6 +18,7 @@ repos:
   - id: check-added-large-files
     args: ['--maxkb=5120', --enforce-all]
     skip:nightly: true
+    exclude: Integrations/.*/README.md|Scripts/.*/README.md
   - id: check-case-conflict
 - repo: https://github.com/python-poetry/poetry
   rev: 1.8.2

diff --git a/Config/core_packs_platform_list.json b/Config/core_packs_platform_list.json
@@ -24,6 +24,8 @@
         {
             "id": "CommonPlaybooks",
             "supportedModules": [
+                "C3",
+                "X0",
                 "X1",
                 "X3",
                 "X5",
@@ -54,6 +56,7 @@
         {
             "id": "Core",
             "supportedModules": [
+                "C1",
                 "C3",
                 "X0",
                 "X1",
@@ -215,6 +218,8 @@
         {
             "id": "rasterize",
             "supportedModules": [
+                "C3",
+                "X0",
                 "X1",
                 "X3",
                 "X5",
@@ -224,6 +229,8 @@
         {
             "id": "CortexResponseAndRemediation",
             "supportedModules": [
+                "C3",
+                "X0",
                 "X1",
                 "X3",
                 "X5",

diff --git a/Packs/AWS-ACM/Integrations/AWS-ACM/AWS-ACM.py b/Packs/AWS-ACM/Integrations/AWS-ACM/AWS-ACM.py
@@ -1,11 +1,13 @@
 import demistomock as demisto
 from CommonServerPython import *
+
 from CommonServerUserPython import *
 
 """IMPORTS"""
-import re
 import json
-from datetime import datetime, date
+import re
+from datetime import date, datetime
+
 import urllib3.util
 
 # Disable insecure warnings
@@ -14,7 +16,7 @@
 
 def parse_tag_field(tags_str):
     tags = []
-    regex = re.compile(r"key=([\w\d_:.-]+),value=([ /\w\d@_,.*-]+)", flags=re.I)
+    regex = re.compile(r"key=([\w\d_:.-]+),value=([ /\w\d@_,.*-]+)", flags=re.IGNORECASE)
     for f in tags_str.split(";"):
         match = regex.match(f)
         if match is None:
@@ -27,7 +29,7 @@ def parse_tag_field(tags_str):
 
 def parse_subnet_mappings(subnets_str):
     subnets = []
-    regex = re.compile(r"subnetid=([\w\d_:.-]+),allocationid=([ /\w\d@_,.*-]+)", flags=re.I)
+    regex = re.compile(r"subnetid=([\w\d_:.-]+),allocationid=([ /\w\d@_,.*-]+)", flags=re.IGNORECASE)
     for f in subnets_str.split(";"):
         match = regex.match(f)
         if match is None:
@@ -260,7 +262,7 @@ def main():
 
     except Exception as e:
         LOG(str(e))
-        return_error(f"Error has occurred in the AWS ACM Integration: {type(e)}\n {str(e)}")
+        return_error(f"Error has occurred in the AWS ACM Integration: {type(e)}\n {e!s}")
 
 
 from AWSApiModule import *  # noqa: E402

diff --git a/Packs/AWS-ACM/ReleaseNotes/1_1_42.md b/Packs/AWS-ACM/ReleaseNotes/1_1_42.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### AWS - ACM
+
+- Metadata and documentation improvements.
diff --git a/Packs/AWS-ACM/pack_metadata.json b/Packs/AWS-ACM/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "AWS - ACM",
     "description": "Amazon Web Services Certificate Manager Service (acm)",
     "support": "xsoar",
-    "currentVersion": "1.1.41",
+    "currentVersion": "1.1.42",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/AWS-Athena/Integrations/AWS-Athena/AWS-Athena.py b/Packs/AWS-Athena/Integrations/AWS-Athena/AWS-Athena.py
@@ -1,8 +1,9 @@
+from datetime import datetime
+
 import demistomock as demisto
 from CommonServerPython import *
-from CommonServerUserPython import *
 
-from datetime import datetime
+from CommonServerUserPython import *
 
 AWS_SERVICE_NAME = "athena"
 QUERY_DATA_OUTPUTS_KEY = "Query"

diff --git a/Packs/AWS-Athena/ReleaseNotes/2_0_7.md b/Packs/AWS-Athena/ReleaseNotes/2_0_7.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### AWS - Athena
+
+- Metadata and documentation improvements.
diff --git a/Packs/AWS-Athena/pack_metadata.json b/Packs/AWS-Athena/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "AWS - Athena",
     "description": "Amazon Web Services Athena",
     "support": "xsoar",
-    "currentVersion": "2.0.6",
+    "currentVersion": "2.0.7",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/AWS-IAM/Playbooks/playbook-AWS_IAM_-_User_enrichment.yml b/Packs/AWS-IAM/Playbooks/playbook-AWS_IAM_-_User_enrichment.yml
@@ -45,8 +45,7 @@ tasks:
       id: 6375c9c5-a24c-4469-8b62-21f382d3d5a5
       version: -1
       name: AWS IAM - Get user information
-      description: Retrieves information about the specified IAM user, including the
-        user's creation date, path, unique ID, and ARN.
+      description: Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
       script: AWS - IAM|||aws-iam-get-user
       type: regular
       iscommand: true
@@ -81,8 +80,7 @@ tasks:
       id: 05067a56-0350-4f75-8075-85ccd9c98f0c
       version: -1
       name: 'AWS IAM -  List user access keys   '
-      description: Returns information about the access key IDs associated with the
-        specified IAM user.
+      description: Returns information about the access key IDs associated with the specified IAM user.
       script: AWS - IAM|||aws-iam-list-access-keys-for-user
       type: regular
       iscommand: true
@@ -166,17 +164,20 @@ outputs:
 - contextPath: AWS.IAM.Users.Path
   description: The path to the user.
 - contextPath: AWS.IAM.Users.PasswordLastUsed
-  description: The date and time,  when the user's password was last used to sign
-    in to an AWS website.
+  description: The date and time,  when the user's password was last used to sign in to an AWS website.
 - contextPath: AWS.IAM.Users.AccessKeys.AccessKeyId
   description: The ID for this access key.
 - contextPath: AWS.IAM.Users.AccessKeys.Status
-  description: The status of the access key. Active means the key is valid for API
-    calls; Inactive means it is not.
+  description: The status of the access key. Active means the key is valid for API calls; Inactive means it is not.
 - contextPath: AWS.IAM.Users.AccessKeys.CreateDate
   description: The date when the access key was created.
 - contextPath: AWS.IAM.Users.AccessKeys.UserName
   description: The name of the IAM user that the key is associated with.
 tests:
 - No tests
 fromversion: 5.5.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
diff --git a/Packs/AWS-IAM/pack_metadata.json b/Packs/AWS-IAM/pack_metadata.json
@@ -20,6 +20,8 @@
         "platform"
     ],
     "supportedModules": [
+        "C3",        
+        "X0",
         "X1",
         "X3",
         "X5",

diff --git a/Packs/AWS-IAMIdentityCenter/Integrations/AWSIAMIdentityCenter/AWSIAMIdentityCenter.py b/Packs/AWS-IAMIdentityCenter/Integrations/AWSIAMIdentityCenter/AWSIAMIdentityCenter.py
@@ -1,7 +1,6 @@
 import demistomock as demisto  # noqa: F401
-from CommonServerPython import *  # noqa: F401
-
 from AWSApiModule import *
+from CommonServerPython import *  # noqa: F401
 
 """ CONSTANTS """
 
@@ -698,7 +697,7 @@ def main():  # pragma: no cover
     # Log exceptions and return errors
     except Exception as e:
         demisto.info(str(e))
-        return_error(f"Failed to execute {command} command.\nError:\n{str(e)}")
+        return_error(f"Failed to execute {command} command.\nError:\n{e!s}")
 
 
 if __name__ in ("__builtin__", "builtins", "__main__"):

diff --git a/Packs/AWS-IAMIdentityCenter/Integrations/AWSIAMIdentityCenter/AWSIAMIdentityCenter_test.py b/Packs/AWS-IAMIdentityCenter/Integrations/AWSIAMIdentityCenter/AWSIAMIdentityCenter_test.py
@@ -1,4 +1,5 @@
 import importlib
+
 import demistomock as demisto
 import pytest
 

diff --git a/Packs/AWS-IAMIdentityCenter/ReleaseNotes/1_0_9.md b/Packs/AWS-IAMIdentityCenter/ReleaseNotes/1_0_9.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### AWS - IAM Identity Center
+
+- Metadata and documentation improvements.
diff --git a/Packs/AWS-IAMIdentityCenter/pack_metadata.json b/Packs/AWS-IAMIdentityCenter/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "AWS - IAM Identity Center",
     "description": "AWS IAM Identity Center\n\nWith AWS IAM Identity Center (successor to AWS Single Sign-On), you can manage sign-in security for your workforce identities, also known as workforce users. IAM Identity Center provides one place where you can create or connect workforce users and manage their access centrally across all their AWS accounts and applications. IAM Identity Center is the recommended approach for workforce authentication and authorization in AWS, for organizations of any size and type.",
     "support": "xsoar",
-    "currentVersion": "1.0.8",
+    "currentVersion": "1.0.9",
     "author": "Cortex XSOAR",
     "url": "",
     "email": "",

diff --git a/Packs/AWS-ILM/Integrations/AWSILM/AWSILM.py b/Packs/AWS-ILM/Integrations/AWSILM/AWSILM.py
@@ -1,7 +1,8 @@
-import demistomock as demisto
-from CommonServerPython import *
 import traceback
+
+import demistomock as demisto
 import urllib3
+from CommonServerPython import *
 from requests import Response
 
 # Disable insecure warnings

diff --git a/Packs/AWS-ILM/Integrations/AWSILM/AWSILM_test.py b/Packs/AWS-ILM/Integrations/AWSILM/AWSILM_test.py
@@ -1,7 +1,6 @@
 import pytest
 import requests_mock
-from AWSILM import Client, main, get_group_command, create_group_command, update_group_command, delete_group_command
-
+from AWSILM import Client, create_group_command, delete_group_command, get_group_command, main, update_group_command
 from IAMApiModule import *
 
 userUri = "/scim/v2/Users/"

diff --git a/Packs/AWS-ILM/ReleaseNotes/1_0_29.md b/Packs/AWS-ILM/ReleaseNotes/1_0_29.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### AWS - IAM (user lifecycle management)
+
+- Metadata and documentation improvements.
diff --git a/Packs/AWS-ILM/pack_metadata.json b/Packs/AWS-ILM/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "AWS-ILM",
     "description": "IAM Integration for AWS-ILM. This pack handles user account auto-provisioning",
     "support": "xsoar",
-    "currentVersion": "1.0.28",
+    "currentVersion": "1.0.29",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/AWS-S3/Integrations/AWS-S3/AWS-S3.py b/Packs/AWS-S3/Integrations/AWS-S3/AWS-S3.py
@@ -1,12 +1,13 @@
-import demistomock as demisto
-from CommonServerPython import *
 import io
-import math
 import json
-from datetime import datetime, date
+import math
+from datetime import date, datetime
+from http import HTTPStatus
+
+import demistomock as demisto
 import urllib3.util
 from AWSApiModule import *  # noqa: E402
-from http import HTTPStatus
+from CommonServerPython import *
 
 # Disable insecure warnings
 urllib3.disable_warnings()
@@ -394,7 +395,7 @@ def main():  # pragma: no cover
             raise NotImplementedError(f"{command} command is not implemented.")
 
     except Exception as e:
-        return_error(f"Failed to execute {command} command.\nError:\n{str(e)}")
+        return_error(f"Failed to execute {command} command.\nError:\n{e!s}")
 
 
 if __name__ in ("__builtin__", "builtins", "__main__"):

diff --git a/Packs/AWS-S3/Integrations/AWS-S3/AWS-S3_test.py b/Packs/AWS-S3/Integrations/AWS-S3/AWS-S3_test.py
@@ -1,8 +1,8 @@
+import importlib
 import json
+from http import HTTPStatus
 
 import pytest
-import importlib
-from http import HTTPStatus
 
 AWS_S3 = importlib.import_module("AWS-S3")
 

diff --git a/Packs/AWS-S3/ReleaseNotes/1_2_31.md b/Packs/AWS-S3/ReleaseNotes/1_2_31.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### AWS - S3
+
+- Metadata and documentation improvements.
diff --git a/Packs/AWS-S3/pack_metadata.json b/Packs/AWS-S3/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "AWS - S3",
     "description": "Amazon Web Services Simple Storage Service (S3)",
     "support": "xsoar",
-    "currentVersion": "1.2.30",
+    "currentVersion": "1.2.31",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/AWS-SNS-Listener/Integrations/AWSSNSListener/AWSSNSListener.yml b/Packs/AWS-SNS-Listener/Integrations/AWSSNSListener/AWSSNSListener.yml
@@ -61,7 +61,7 @@ display: AWS-SNS-Listener
 name: AWS-SNS-Listener
 script:
   commands: []
-  dockerimage: demisto/fastapi:0.115.5.117397
+  dockerimage: demisto/fastapi:0.115.12.3243695
   longRunning: true
   longRunningPort: true
   script: '-'

diff --git a/Packs/AWS-SNS-Listener/ReleaseNotes/1_0_10.md b/Packs/AWS-SNS-Listener/ReleaseNotes/1_0_10.md
@@ -0,0 +1,7 @@
+
+#### Integrations
+
+##### AWS-SNS-Listener
+
+- Updated the Docker image to: *demisto/fastapi:0.115.12.3243695*.
+
diff --git a/Packs/AWS-SNS-Listener/pack_metadata.json b/Packs/AWS-SNS-Listener/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "AWS-SNS-Listener",
     "description": "A long running AWS SNS Listener service that can subscribe to an SNS topic and create incidents from the messages received.",
     "support": "xsoar",
-    "currentVersion": "1.0.9",
+    "currentVersion": "1.0.10",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/AWS-SecurityLake/Integrations/AWSSecurityLake/AWSSecurityLake.py b/Packs/AWS-SecurityLake/Integrations/AWSSecurityLake/AWSSecurityLake.py
@@ -1,8 +1,9 @@
+from datetime import datetime
+
 import demistomock as demisto
 from CommonServerPython import *
-from CommonServerUserPython import *
 
-from datetime import datetime
+from CommonServerUserPython import *
 
 AWS_SERVICE_NAME = "athena"
 AWS_SERVICE_NAME_LAKE = "securitylake"

diff --git a/Packs/AWS-SecurityLake/Integrations/AWSSecurityLake/AWSSecurityLake_test.py b/Packs/AWS-SecurityLake/Integrations/AWSSecurityLake/AWSSecurityLake_test.py
@@ -1,8 +1,9 @@
-import pytest
 import importlib
 import json
 from pathlib import Path
 
+import pytest
+
 AWSSecurityLake = importlib.import_module("AWSSecurityLake")
 
 

diff --git a/Packs/AWS-SecurityLake/ReleaseNotes/1_0_14.md b/Packs/AWS-SecurityLake/ReleaseNotes/1_0_14.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### Amazon Security Lake
+
+- Metadata and documentation improvements.
diff --git a/Packs/AWS-SecurityLake/pack_metadata.json b/Packs/AWS-SecurityLake/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Amazon - Security Lake",
     "description": "Amazon Security Lake is a fully managed security data lake service.",
     "support": "xsoar",
-    "currentVersion": "1.0.13",
+    "currentVersion": "1.0.14",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/AbuseDB/pack_metadata.json b/Packs/AbuseDB/pack_metadata.json
@@ -23,6 +23,8 @@
         "platform"
     ],
     "supportedModules": [
+        "C3",
+        "X0",
         "X1",
         "X3",
         "X5",

diff --git a/Packs/AccentureCTI_Feed/Integrations/ACTIIndicatorFeed/ACTIIndicatorFeed.py b/Packs/AccentureCTI_Feed/Integrations/ACTIIndicatorFeed/ACTIIndicatorFeed.py
@@ -156,7 +156,7 @@ def main():  # pragma: no cover
 
         feed_main(params, "ACTI Indicator Feed", "acti")
     except Exception as e:
-        return_error(f'Failed to execute {demisto.command()} command. Error: {str(e)}')
+        return_error(f"Failed to execute {demisto.command()} command. Error: {e!s}")
 
 
 if __name__ in ("__main__", "__builtin__", "builtins"):
-Original file line number
+Diff line change
@@ Expand Up / @@ -20,6 +20,8 @@ @@
             "platform"
         ],
         "supportedModules": [
+            "C3",
+            "X0",
             "X1",
             "X3",
             "X5",
@@ Expand Down @@