Skip to content

Commit

Permalink
Domain Tools Iris Detect (demisto#27920)
Browse files Browse the repository at this point in the history 
* Domain Tools Iris Detect (demisto#27230)

* initial commit

* Update README.md

updated with extended description

* Attended comments from XSOAR review

* modified isArray to true

* implemente demo's suggestions

* modified test cases

* fixed validation issues

* fix form_version and field validation issues

* rename the incidentFields json file

* changed name as suggested

---------

Co-authored-by: Dan Nunes <82976465+dnunes-domaintools@users.noreply.github.com>

* fixed fromversion in the integration yml

---------

Co-authored-by: Rambatla Venkat Rao <68921481+RamboV@users.noreply.github.com>
Co-authored-by: Dan Nunes <82976465+dnunes-domaintools@users.noreply.github.com>
Co-authored-by: RotemAmit <ramit@paloaltonetworks.com>
  • Loading branch information
@content-bot @RamboV
@dnunes-domaintools @RotemAmit @xsoar-bot
4 people authored and xsoar-bot committed Jul 26, 2023
1 parent a504182 commit 3a423d0
Show file tree
Hide file tree
Showing 58 changed files with 10,320 additions and 0 deletions.
2 changes: 2 additions & 0 deletions Packs/DomainToolsIrisDetect/.pack-ignore
View file
@@ -0,0 +1,2 @@
[file:DomainToolsIrisDetect.yml]
ignore=IN124
5 changes: 5 additions & 0 deletions Packs/DomainToolsIrisDetect/.secrets-ignore
View file
@@ -0,0 +1,5 @@
user@example.com
christinadianedummystore.com
1.1.1.1
https://www.dummy.com
https://www.dummy.com/whois/results.aspx?domain=dummy.com
Binary file added Packs/DomainToolsIrisDetect/Author_image.png
View file
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
20 changes: 20 additions & 0 deletions ...inToolsIrisDetect/Classifiers/classifier-DomainTools_Iris_Detect-incident_classifier.json
View file
@@ -0,0 +1,20 @@
{
"description": "DomainTools Iris Detect - Classifier",
"feed": false,
"id": "DomainTools Iris Detect - Classifier",
"keyTypeMap": {
"blocked": "DomainTools Iris Detect Blocked Domains",
"new": "DomainTools Iris Detect New Domains",
"watched": "DomainTools Iris Detect Changed Domains"
},
"name": "DomainTools Iris Detect - Classifier",
"propagationLabels": [
"all"
],
"transformer": {
"simple": "state"
},
"type": "classification",
"version": -1,
"fromVersion": "6.5.0"
}
59 changes: 59 additions & 0 deletions ...DomainToolsIrisDetect/Classifiers/classifier-DomainTools_Iris_Detect-incoming_mapper.json
View file
@@ -0,0 +1,59 @@
{
"description": "DomainTools Iris Detect - Incoming Mapper",
"feed": false,
"id": "DomainTools Iris Detect - Incoming Mapper",
"mapping": {
"DomainTools Iris Detect Blocked Domains": {
"dontMapEventToLabels": true,
"internalMapping": {
"DomainTools Iris Detect": {
"complex": {
"filters": [],
"root": "incidents",
"transformers": []
}
},
"State": {
"complex": {
"accessor": "state",
"filters": [],
"root": "incidents",
"transformers": []
}
}
}
},
"DomainTools Iris Detect Changed Domains": {
"dontMapEventToLabels": true,
"internalMapping": {
"DomainTools Iris Detect": {
"complex": {
"filters": [],
"root": "incidents",
"transformers": []
}
}
}
},
"DomainTools Iris Detect New Domains": {
"dontMapEventToLabels": true,
"internalMapping": {
"DomainTools Iris Detect": {
"complex": {
"filters": [],
"root": "incidents",
"transformers": []
}
}
}
},
"dbot_classification_incident_type_all": {
"dontMapEventToLabels": false,
"internalMapping": {}
}
},
"name": "DomainTools Iris Detect - Incoming Mapper",
"type": "mapping-incoming",
"version": -1,
"fromVersion": "6.5.0"
}
278 changes: 278 additions & 0 deletions Packs/DomainToolsIrisDetect/IncidentFields/incidentfields-DomainToolsIrisDetect.json
View file
@@ -0,0 +1,278 @@
{
"id": "incident_domaintoolsirisdetect",
"version": -1,
"modified": "2023-04-11T10:15:28.170021904+05:30",
"name": "DomainToolsIrisDetect",
"ownerOnly": false,
"description": "DomainTools Iris Detect",
"cliName": "domaintoolsirisdetect",
"type": "grid",
"closeForm": true,
"editForm": true,
"required": false,
"script": "DomainToolsIrisDetectStatusUpdate",
"neverSetAsRequired": false,
"isReadOnly": false,
"useAsKpi": false,
"locked": false,
"system": false,
"content": true,
"group": 0,
"hidden": false,
"openEnded": false,
"associatedToAll": true,
"unmapped": false,
"unsearchable": true,
"caseInsensitive": true,
"columns": [
{
"key": "state",
"displayName": "state",
"type": "singleSelect",
"orgType": "singleSelect",
"required": false,
"script": "",
"width": 100,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": [
"",
"new",
"watched",
"blocked",
"ignored",
"escalated"
]
},
{
"key": "monitor_term",
"displayName": "monitor_term",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 100,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "domain",
"displayName": "domain",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 100,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "status",
"displayName": "status",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 100,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "discovered_date",
"displayName": "discovered_date",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 100,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "changed_date",
"displayName": "changed_date",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 100,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "risk_score",
"displayName": "risk_score",
"type": "number",
"orgType": "number",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "risk_score_status",
"displayName": "risk_score_status",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "mx_exists",
"displayName": "mx_exists",
"type": "boolean",
"orgType": "boolean",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "tld",
"displayName": "tld",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "id",
"displayName": "id",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "escalations",
"displayName": "escalations",
"type": "longText",
"orgType": "longText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "monitor_ids",
"displayName": "monitor_ids",
"type": "longText",
"orgType": "longText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "registrant_contact_email",
"displayName": "registrant_contact_email",
"type": "longText",
"orgType": "longText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "name_server",
"displayName": "name_server",
"type": "longText",
"orgType": "longText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "registrar",
"displayName": "registrar",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "create_date",
"displayName": "create_date",
"type": "shortText",
"orgType": "shortText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
},
{
"key": "ip",
"displayName": "ip",
"type": "longText",
"orgType": "longText",
"required": false,
"script": "",
"width": 150,
"isDefault": true,
"fieldCalcScript": "",
"isReadOnly": false,
"selectValues": null
}
],
"defaultRows": [
{},
{},
{}
],
"sla": 0,
"threshold": 72,
"fromVersion": "6.5.0"
}

0 comments on commit 3a423d0

Please sign in to comment.