Test Playbook - MDE Malware - Incident Enrichment (demisto#27812)

* Test Playbook - MDE Malware - Incident Enrichment * RN * Fixed the description of task 451 * RN and re-added test playbook to the conf file * Removed 'employeetype' from the YML file
xsoar-contrib · Jul 26, 2023 · 4ad7ac7 · 4ad7ac7
1 parent 2831540
commit 4ad7ac7
Show file tree

Hide file tree

Showing 5 changed files with 7,804 additions and 27 deletions.
diff --git a/...DefenderAdvancedThreatProtection/Playbooks/playbook-MDE_Malware_-_Incident_Enrichment.yml b/...DefenderAdvancedThreatProtection/Playbooks/playbook-MDE_Malware_-_Incident_Enrichment.yml
@@ -1440,31 +1440,6 @@ tasks:
                 iscontext: true
           - operator: uniq
           - operator: FirstArrayElement
-      employeetype:
-        complex:
-          root: Account
-          accessor: Type
-          transformers:
-          - operator: If-Then-Else
-            args:
-              condition:
-                value:
-                  simple: lhs==rhs
-              else:
-                value:
-                  simple: Account.Type
-                iscontext: true
-              equals: {}
-              lhs: {}
-              options: {}
-              rhs:
-                value:
-                  simple: Account.Type
-                iscontext: true
-              then:
-                value:
-                  simple: IAM.UserProfile.profile.userType
-                iscontext: true
       managername:
         complex:
           root: Account
@@ -1609,6 +1584,6 @@ view: |-
     }
   }
 tests:
-- No tests (auto formatted)
+- Test Playbook - MDE Malware - Incident Enrichment
 fromversion: 6.5.0
 system: true
diff --git a/Packs/MicrosoftDefenderAdvancedThreatProtection/ReleaseNotes/1_15_32.md b/Packs/MicrosoftDefenderAdvancedThreatProtection/ReleaseNotes/1_15_32.md
@@ -0,0 +1,6 @@
+
+#### Playbooks
+
+##### MDE Malware - Incident Enrichment
+
+Internal code improvements.