* Created PrismaCloudCompute mapping

* ParsingRule

* RN

* ParsingRule

* Updated README

* Updated README

* Updated ModelingRules

* Update Packs/PrismaCloudCompute/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/PrismaCloudCompute/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/PrismaCloudCompute/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/PrismaCloudCompute/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/PrismaCloudCompute/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated ModelingRules

* Updated ModelingRules

* Updated ModelingRules

* Updated ModelingRules

* Updated ModelingRules

* Updated ModelingRules

* Updated README

* Updated README

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated ModelingRules

* Updated ReleaseNotes

* Updated ReleaseNotes

* PANOS-EXPANDR-5997 (demisto#30156)

* init

* RN

* contributors

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* update RN

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* fix RN format

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: sapirshuker <[email protected]>
Co-authored-by: sapir shuker <[email protected]>

…ybook (demisto#30226)

…emisto#30229)

* add $TEST_XDR_ENV

* add $TEST_XDR_ENV

* fix

* fix

* test with TEST_XDR_ENV = true

* test with TEST_XDR_ENV = true

* test with TEST_XDR_ENV = true

* test with TEST_XDR_ENV = true

* fixed

* testing

* Update .gitlab/ci/.gitlab-ci.on-push.yml

* testing

* Update .gitlab/ci/.gitlab-ci.on-push.yml

* testing

* testing

* testing

* testing

* testing

* fixed

* Remove TEST_XDR_ENV: "true"

* test for cr

* test for cr

* test with TEST_XDR_ENV: "true"

* Remove TEST_XDR_ENV: "true"

* Updated Metadata Of Pack OracleCloudInfrastructure

* Added release notes to pack OracleCloudInfrastructure

* Packs/OracleCloudInfrastructure/Integrations/OracleCloudInfrastructureEventCollector/OracleCloudInfrastructureEventCollector.yml Docker image update

* Updated Metadata Of Pack QualysFIM

* Added release notes to pack QualysFIM

* Packs/QualysFIM/Integrations/QualysFIM/QualysFIM.yml Docker image update

* Updated Metadata Of Pack FortiSIEM

* Added release notes to pack FortiSIEM

* Packs/FortiSIEM/Integrations/FortiSIEMV2/FortiSIEMV2.yml Docker image update

* Updated Metadata Of Pack FreshworksFreshservice

* Added release notes to pack FreshworksFreshservice

* Packs/FreshworksFreshservice/Integrations/FreshworksFreshservice/FreshworksFreshservice.yml Docker image update

* Updated Metadata Of Pack KnowBe4_KMSAT

* Added release notes to pack KnowBe4_KMSAT

* Packs/KnowBe4_KMSAT/Integrations/KnowBe4KMSATEventCollector/KnowBe4KMSATEventCollector.yml Docker image update

* Packs/KnowBe4_KMSAT/Integrations/KnowBe4KMSAT/KnowBe4KMSAT.yml Docker image update

* Updated Metadata Of Pack SafeNet_Trusted_Access

* Added release notes to pack SafeNet_Trusted_Access

* Packs/SafeNet_Trusted_Access/Integrations/SafeNetTrustedAccessEventCollector/SafeNetTrustedAccessEventCollector.yml Docker image update

* Updated Metadata Of Pack DelineaSS

* Added release notes to pack DelineaSS

* Packs/DelineaSS/Integrations/DelineaSS/DelineaSS.yml Docker image update

* Updated Metadata Of Pack Cryptocurrency

* Added release notes to pack Cryptocurrency

* Packs/Cryptocurrency/Integrations/Cryptocurrency/Cryptocurrency.yml Docker image update

* Updated Metadata Of Pack PANOSPolicyOptimizer

* Added release notes to pack PANOSPolicyOptimizer

* Packs/PANOSPolicyOptimizer/Integrations/PANOSPolicyOptimizer/PANOSPolicyOptimizer.yml Docker image update

* Updated Metadata Of Pack DeveloperTools

* Added release notes to pack DeveloperTools

* Packs/DeveloperTools/Integrations/CreateIncidents/CreateIncidents.yml Docker image update

* Updated Metadata Of Pack Cybersixgill-ActionableAlerts

* Added release notes to pack Cybersixgill-ActionableAlerts

* Packs/Cybersixgill-ActionableAlerts/Integrations/CybersixgillActionableAlerts/CybersixgillActionableAlerts.yml Docker image update

* Updated Metadata Of Pack Sixgill-Darkfeed

* Added release notes to pack Sixgill-Darkfeed

* Packs/Sixgill-Darkfeed/Integrations/Sixgill_Darkfeed_Enrichment/Sixgill_Darkfeed_Enrichment.yml Docker image update

* Packs/Sixgill-Darkfeed/Integrations/Sixgill_Darkfeed/Sixgill_Darkfeed.yml Docker image update

* Updated Metadata Of Pack SecurityIntelligenceServicesFeed

* Added release notes to pack SecurityIntelligenceServicesFeed

* Packs/SecurityIntelligenceServicesFeed/Integrations/SecurityIntelligenceServicesFeed/SecurityIntelligenceServicesFeed.yml Docker image update

* Updated Metadata Of Pack AWS-IAM

* Added release notes to pack AWS-IAM

* Packs/AWS-IAM/Integrations/AWS-IAM/AWS-IAM.yml Docker image update

* Updated Metadata Of Pack AWS-Route53

* Added release notes to pack AWS-Route53

* Packs/AWS-Route53/Integrations/AWSRoute53/AWSRoute53.yml Docker image update

* Updated Metadata Of Pack AWS-AccessAnalyzer

* Added release notes to pack AWS-AccessAnalyzer

* Packs/AWS-AccessAnalyzer/Integrations/AWS-AccessAnalyzer/AWS-AccessAnalyzer.yml Docker image update

* Updated Metadata Of Pack AWS-GuardDuty

* Added release notes to pack AWS-GuardDuty

* Packs/AWS-GuardDuty/Integrations/AWSGuardDutyEventCollector/AWSGuardDutyEventCollector.yml Docker image update

* Packs/AWS-GuardDuty/Integrations/AWSGuardDuty/AWSGuardDuty.yml Docker image update

* Updated Metadata Of Pack AWS-SecurityHub

* Added release notes to pack AWS-SecurityHub

* Packs/AWS-SecurityHub/Integrations/AWSSecurityHubEventCollector/AWSSecurityHubEventCollector.yml Docker image update

* Updated Metadata Of Pack Aws-SecretsManager

* Added release notes to pack Aws-SecretsManager

* Packs/Aws-SecretsManager/Integrations/AwsSecretsManager/AwsSecretsManager.yml Docker image update

* Updated Metadata Of Pack MicrosoftCloudAppSecurity

* Added release notes to pack MicrosoftCloudAppSecurity

* Packs/MicrosoftCloudAppSecurity/Integrations/MicrosoftCloudAppSecurity/MicrosoftCloudAppSecurity.yml Docker image update

* Updated Metadata Of Pack Intezer

* Added release notes to pack Intezer

* Packs/Intezer/Integrations/IntezerV2/IntezerV2.yml Docker image update

* Updated Metadata Of Pack Zabbix

* Added release notes to pack Zabbix

* Packs/Zabbix/Integrations/Zabbix/Zabbix.yml Docker image update

* Updated Metadata Of Pack FeedMalwareBazaar

* Added release notes to pack FeedMalwareBazaar

* Packs/FeedMalwareBazaar/Integrations/MalwareBazaarFeed/MalwareBazaarFeed.yml Docker image update

* Updated Metadata Of Pack FeedGCPWhitelist

* Added release notes to pack FeedGCPWhitelist

* Packs/FeedGCPWhitelist/Integrations/FeedGoogleIPRanges/FeedGoogleIPRanges.yml Docker image update

* Updated Metadata Of Pack AccentureCTI_Feed

* Added release notes to pack AccentureCTI_Feed

* Packs/AccentureCTI_Feed/Integrations/ACTIIndicatorFeed/ACTIIndicatorFeed.yml Docker image update

* Updated Metadata Of Pack SEKOIAIntelligenceCenter

* Added release notes to pack SEKOIAIntelligenceCenter

* Packs/SEKOIAIntelligenceCenter/Integrations/SEKOIAIntelligenceCenter/SEKOIAIntelligenceCenter.yml Docker image update

* Updated Metadata Of Pack Anomali_ThreatStream

* Added release notes to pack Anomali_ThreatStream

* Packs/Anomali_ThreatStream/Integrations/AnomaliThreatStreamv3/AnomaliThreatStreamv3.yml Docker image update

* Updated Metadata Of Pack CommonWidgets

* Added release notes to pack CommonWidgets

* Packs/CommonWidgets/Scripts/RSSWidget/RSSWidget.yml Docker image update

* Updated Metadata Of Pack FiltersAndTransformers

* Added release notes to pack FiltersAndTransformers

* Packs/FiltersAndTransformers/Scripts/Jmespath/Jmespath.yml Docker image update

* Updated Metadata Of Pack Cylance_Protect

* Added release notes to pack Cylance_Protect

* Packs/Cylance_Protect/Integrations/Cylance_Protect_v2/Cylance_Protect_v2.yml Docker image update

* Updated Metadata Of Pack Zoom

* Added release notes to pack Zoom

* Packs/Zoom/Integrations/Zoom/Zoom.yml Docker image update

* Packs/Zoom/Integrations/ZoomEventCollector/ZoomEventCollector.yml Docker image update

* Updated Metadata Of Pack Silverfort

* Added release notes to pack Silverfort

* Packs/Silverfort/Integrations/Silverfort/Silverfort.yml Docker image update

* Updated Metadata Of Pack AzureDataExplorer

* Added release notes to pack AzureDataExplorer

* Packs/AzureDataExplorer/Integrations/AzureDataExplorer/AzureDataExplorer.yml Docker image update

* Updated Metadata Of Pack MicrosoftManagementActivity

* Added release notes to pack MicrosoftManagementActivity

* Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity.yml Docker image update

* Updated Metadata Of Pack Box

* Added release notes to pack Box

* Packs/Box/Integrations/BoxEventsCollector/BoxEventsCollector.yml Docker image update

* Packs/Box/Integrations/BoxV2/BoxV2.yml Docker image update

* Updated Metadata Of Pack Troubleshoot

* Added release notes to pack Troubleshoot

* Packs/Troubleshoot/Scripts/CertificatesTroubleshoot/CertificatesTroubleshoot.yml Docker image update

* Updated Metadata Of Pack GSuiteAdmin

* Added release notes to pack GSuiteAdmin

* Packs/GSuiteAdmin/Integrations/GSuiteAdmin/GSuiteAdmin.yml Docker image update

* Updated Metadata Of Pack GoogleChronicleBackstory

* Added release notes to pack GoogleChronicleBackstory

* Packs/GoogleChronicleBackstory/Integrations/GoogleChronicleBackstory/GoogleChronicleBackstory.yml Docker image update

* Updated Metadata Of Pack GSuiteSecurityAlertCenter

* Added release notes to pack GSuiteSecurityAlertCenter

* Packs/GSuiteSecurityAlertCenter/Integrations/GSuiteSecurityAlertCenter/GSuiteSecurityAlertCenter.yml Docker image update

* Updated Metadata Of Pack GoogleCalendar

* Added release notes to pack GoogleCalendar

* Packs/GoogleCalendar/Integrations/GoogleCalendar/GoogleCalendar.yml Docker image update

* Updated Metadata Of Pack Slack

* Added release notes to pack Slack

* Packs/Slack/Integrations/SlackV3/SlackV3.yml Docker image update

* Updated Metadata Of Pack MicrosoftDefenderAdvancedThreatProtection

* Added release notes to pack MicrosoftDefenderAdvancedThreatProtection

* Packs/MicrosoftDefenderAdvancedThreatProtection/Integrations/MicrosoftDefenderAdvancedThreatProtection/MicrosoftDefenderAdvancedThreatProtection.yml Docker image update

* Updated Metadata Of Pack GenericSQL

* Added release notes to pack GenericSQL

* Packs/GenericSQL/Integrations/GenericSQL/GenericSQL.yml Docker image update

* Updated Metadata Of Pack GenericSQL

* Added release notes to pack GenericSQL

* Packs/GenericSQL/Integrations/GenericSQL/GenericSQL.yml Docker image update

* Updated Metadata Of Pack MicrosoftGraphMail

* Added release notes to pack MicrosoftGraphMail

* Packs/MicrosoftGraphMail/Integrations/MicrosoftGraphMail/MicrosoftGraphMail.yml Docker image update

* Updated Metadata Of Pack MicrosoftDefenderAdvancedThreatProtection

* Added release notes to pack MicrosoftDefenderAdvancedThreatProtection

* Packs/MicrosoftDefenderAdvancedThreatProtection/Integrations/MicrosoftDefenderAdvancedThreatProtection/MicrosoftDefenderAdvancedThreatProtection.yml Docker image update

* Updated Metadata Of Pack AzureSecurityCenter

* Added release notes to pack AzureSecurityCenter

* Packs/AzureSecurityCenter/Integrations/AzureSecurityCenter_v2/AzureSecurityCenter_v2.yml Docker image update

* playbooks fix

* RN

* remove paths

* add image

* Hotfix for calculate severity

* RN

* IsExists -> IsNotEmpty
Simple -> Complex

* format

…30171)

* Additional argument for servicenow-generic-api-call command (demisto#30016)

* added additional argument to generic api command to be able to send the request to a custom servicenow api, added changes from demisto-sdk validation

* fixed pass through of custom api argument

* added unit test with the new argument, adjustes argument descriptions of existing arguments for generic command

* added new param to function docstring

* renamed arg custom_api_root to custom_api and reverted description changes of other args

* removed custom_api argument manipulation and added validation and returning an error instead, adjusted release notes

* fixed typing in function definition

---------

Co-authored-by: psybertool <[email protected]>
Co-authored-by: okarkkatz <[email protected]>
Co-authored-by: omerKarkKatz <[email protected]>

* fix gmail-list-labels command

* Update 1_3_14.md

* Credentials rotation playbooks

* update RN

* review fix

* review fix

* review fix

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* review fix

* review fix

* review fix

* update RN

* Bump pack from version CommonPlaybooks to 2.4.11.

* Bump pack from version CommonPlaybooks to 2.4.12.

* review fix

* review fix

* review fix

* review fix

* review fix

* Bump pack from version CommonPlaybooks to 2.4.13.

---------

Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Content Bot <[email protected]>

…'t presented in XSOAR 8.x. (demisto#30214)

* Fixed a bug where the integration default classifier and mapper weren't presented in XSOAR 8.x

* Update 1_1_8.md

* commit

* add UT and RN

* corrections

* Fix DS108 and update Docker

* correction comments

…30172)

* init

* update

* init

* RN

* bump

* add conditon statements

* update wording

* Unescape JSON views

* Unscape JSON continued

* change inet address for pan-os-security-policy-match command

* Apply suggestions from code review



---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: bigeasyj <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

…isto#30298)

Co-authored-by: pl-brault <[email protected]>

* Pcap file extract streams (demisto#30289)

* Update .devcontainer.json name

* Update .devcontainer.json name

* Update .devcontainer.json name

* Update .devcontainer.json name

* fix

* Added an entry_id parameter to the output.

* Update RN

* Added CONTRIBUTORS.json

* Update RN / Fixed test cases

* Fixed test cases

* Update docker image

* Update docker image

* Fixed comments

* Update RN

---------

Co-authored-by: spearmin10 <[email protected]>

* pre-commit fixes

* doc review

---------

Co-authored-by: Masahiko Inoue <[email protected]>
Co-authored-by: spearmin10 <[email protected]>
Co-authored-by: MosheEichler <[email protected]>

* Update CiscoSpark.yml (demisto#30184)

* Update CiscoSpark.yml

api.ciscospark.com has changed to webexapis.com - https://developer.webex.com/docs/basics

* Update .gitlab-ci.on-push.yml

* Revert .gitlab-ci.on-push.yml

* Revert .gitlab-ci.on-push.yml

---------

Co-authored-by: Moshe Eichler <[email protected]>

* pack metedata updates

* format yml file

* RN

* doc review

* secrets

---------

Co-authored-by: idev <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: MosheEichler <[email protected]>

* Fix query in the playbook

* RN

demisto#30230)

* Added additional *with_attachments* argument to command misp-search-a… (demisto#30114)

* Added additional *with_attachments* argument to command misp-search-attributes

* Added CONTRIBUTORS.json

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Updated MISPV3.py formatting.
Filename of zip equals to the input argument

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Update Packs/MISP/ReleaseNotes/2_1_34.md

Co-authored-by: Moshe Eichler <[email protected]>

* Update Packs/MISP/Integrations/MISPV3/MISPV3.py

Co-authored-by: Moshe Eichler <[email protected]>

* Updated MISPV3.py

* Updated release note and pack metadata

* Update 2_1_35.md

---------

Co-authored-by: Moshe Eichler <[email protected]>

* pre-commit fixes

* fix UT

* docker

* flake error

* doc review fixes

* doc review fixes

---------

Co-authored-by: Martin Ohl <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: MosheEichler <[email protected]>

…#30313)

* change needed params

* update RN

* Updated Metadata Of Pack Phishing

* Added release notes to pack Phishing

* Packs/Phishing/Scripts/FindDuplicateEmailIncidents/FindDuplicateEmailIncidents.yml Docker image update

* Fix DS108

---------

Co-authored-by: israelpolishook <[email protected]>

…sto#30293)

* [Marketplace Contribution] VMRay Analyzer - Content Pack Update (demisto#28872)

* "contribution update to pack "VMRay Analyzer""

* Fixed several issues / added docs

* Update VMRay.yml

Added  Descriptions to command

* Changed as requested

* fix conflicts

* conflict with docker image

* Added documentation for commands

* fix the readme

* fix yml

* format

* fix validation

---------

Co-authored-by: Konrad <[email protected]>
Co-authored-by: Menachem Weinfeld <[email protected]>
Co-authored-by: Yehuda <[email protected]>

* add a period

* fix RN

* Apply suggestions from Shirley

Co-authored-by: ShirleyDenkberg <[email protected]>

* flake 8

* docker

* add outputs

* adding pragma no cover' since the new functions are straightforward and don't need test

* moving the no cover to the new functions instead main

* flake 8

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: Konrad <[email protected]>
Co-authored-by: Menachem Weinfeld <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated Metadata Of Pack CommonScripts

* Added release notes to pack CommonScripts

* Packs/CommonScripts/Scripts/ParseEmailFilesV2/ParseEmailFilesV2.yml Docker image update

* Fix DS108

---------

Co-authored-by: israelpolishook <[email protected]>

* Updated Metadata Of Pack CommonScripts

* Added release notes to pack CommonScripts

* Packs/CommonScripts/Scripts/ConvertFile/ConvertFile.yml Docker image update

* update docker

* Update RN

* commit

---------

Co-authored-by: israelpolishook <[email protected]>

* added formatSublists param

* revert bad changes

* no underscores

* no underscores

* negative for bakwards compatibility

* added desc

* change desc

* update readme

* format

* added rn

* variable, nbetter rn

* snake case

* added test

* assert have underscore

* no answer for risky is acceptable

* format

* Revert "format"

This reverts commit d0a33c5.

* Revert "Revert "format""

This reverts commit 8452418a6b1c0ec6b779a0c9353d05567615e505.

* fix playbook

* fix playbook

* docker image

* fixed time

* fix mistake

* fix pb

* account not admin

* switch to 1

* [Feedly] Initial Integration (demisto#29822)

* [feedly] initial integration

* [feedly] pr.review

* [feedly] address pre commit checks

* [feedly] fix image sizes

* [feedly] pr.review

* [feedly] pr.review

* [feedly] pr.review

* [feedly] update image

* [feedly] increase coverage and fix typing

* [feedly] fix relationships and test it

* [feedly] fix indicators imit

* [feedly] add TTP and threat tags

* [feedly] order of params

* [feedly] Add custom FeedlyReport for better visualization

* [feedly] fixes

* [feedly] fix feedyl report layout

* [feedly] add to free feeds

* [feedly] (layout) pr.review

* [feedly] format layout file

* [feedly] update image

---------

Co-authored-by: Michael Yochpaz <[email protected]>

* Bump Docker image

---------

Co-authored-by: Mathieu Béligon <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

Co-authored-by: Content Bot <[email protected]>

* fix PytestUnhandledThreadExceptionWarning warning
in UrlScan

* PytestUnhandledThreadExceptionWarning version.

* handle PytzUsageWarning.

* UserWarning: DataFrame

* handle PytestMockWarning

* SettingWithCopyWarning

* Handle PytestReturnNotNoneWarning

* Handle GuessedAtParserWarning

* Handle PytestUnraisableExceptionWarning

* Handle InsecureRequestWarning.

* Handle PytestUnknownMarkWarning

* Handle PytestRemovedIn8Warning

* Handling warnings.

* trigger nightly

* reduce warnings.

* reduce warnings.

* More warnings.

* Add ignore warnings to pyproject.toml file

* testing if commit nightly can run now

* Fix wrong usage of ignore warning in pyproject.

* yet again fix warnings.

* Remove pytets changes from pyproject.toml

* Trying to ignore using a pytest.ini
in root of a pack.

* Remove pytest.ini for specific pack.

* ignore PytestUnraisableExceptionWarning

* Ignore marshmallow and ignore unknown mark
warnings.

* Use exact path to PytestUnknownMarkWarning

* Yet another method to try ignore
PytestUnknownMarkWarning

* resolve conflicts.

* Versions and readme and versions update.

* Remove "Note: Zero warnings effort." from RN.

* Update to latest docker images.

* revert wrong changes.

* Fix failing unit tests.

* making changes to catch
linter validations

* try to load Axonius src file in lint stage.

* specify type for args.

* Bump pack from version Phishing to 3.5.28.

* import marshmallow and ignore marshmallow warning.

* Break long lines.

* Different ignore

* Update docker images.

* Bump pack from version CommonScripts to 1.12.37.

* update forgotten docker images.

* Fix RN validation errors.

* yet another docker image.

---------

Co-authored-by: Content Bot <[email protected]>

* add input

* Update 2_0_20.md

…to#30329)

* Update README.md

Per CyberArk's request

* modified pack metadata

* added author image

* update author image

* decreased size of author image

* added secret ignore

* rm conflict patch

* revert vectra ai readme

* added rn

added adoption readme preface

---------

Co-authored-by: Melody Crosby <[email protected]>
Co-authored-by: Kobbi Gal <[email protected]>
Co-authored-by: kgal-pan <[email protected]>

* [partner collectors] - add support_level_header headers

* bump rn

* update supportlevelheader

* update rn

* fix

* poetry lock

* revert poetry

* bump rn

* update docker image

* bump docker

* trendmicro fixes

* Updated ModelingRules

* Updated secrets

* Updated yml

* Update Packs/CyberArk_Privileged_Threat_Analytics/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CyberArk_Privileged_Threat_Analytics/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CyberArk_Privileged_Threat_Analytics/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated yml

* Updated README

* Updated Beta Note

* Updated ModelingRules

* Updated README

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

)

* fixed the parameter that send as a limit

* update rn

* update test playbook

* Update Packs/CrowdStrikeFalcon/ReleaseNotes/1_11_7.md

Co-authored-by: Shelly Tzohar <[email protected]>

* fixing test playbook

* adding sort incidents by the ids order; fix time field issue

* rename rn

* bump version

* added unitest

* fix rn

* save unitest fix

* save format

* save unitest fix

* update docker

* use created timestamp

* start_time

* RN

* Update Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py

Co-authored-by: yuvalbenshalom <[email protected]>

* CR

* typo

* fixes

* fixes

* fixes

* fixes

* sort by created

* fixes

* fixes

* simplify

* back to offset

* fix offset

* remove sort

* fixes

* fix

* fixes

* updates

* fix offset calc

* fix

* move calculate new offset

* fix tests

* fix

* update limit

* fixes

---------

Co-authored-by: daryakoval <[email protected]>
Co-authored-by: Darya Koval <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>
Co-authored-by: yuvalbenshalom <[email protected]>

…to#30352)

This reverts commit 8832678.

* Fix ruff error N804

* pre-commit

…Pack Update (demisto#30338)

* "contribution update to pack "Microsoft Defender for Endpoint"" (demisto#30323)

* revert

* Update Packs/MicrosoftDefenderAdvancedThreatProtection/ReleaseNotes/1_16_15.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* docker

* RN

* RN

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: MosheEichler <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* ThreatZone Integration

* Add Playbooks & Minor Fixes

* Limit Check Added & Minor Fixes

* Fix Problems & Update Integration Image

* Fix Problems & Update Integration Image

* Fix Playbook Dt Condition

* Minor Fixed & Indicator/DBotScore

* Temporary Disable CDR Sanitized File Return as File

* Fix Package Name etc

* Format & Verification Changes & Satisfy Requirements

* Fix  Release Notes & DBotScore Unknown to None

* Remove Unused Exception Variable

* Fix Too Much return_error Usage & Add Test

* Implemented Improvements Based on Feedbacks

* unit tests added

* fix unit test sample path & comment unreachable code

* fix flake8 errors

* add more unit tests

* fix flake8 error

* minor fixes & playbook improvements

* requested fixes

* fix validation errors & requested changes

* fix unittests

* fix flake8 error

* return submission decline error & minor fix

* Add Scan Type as Prefix to Submission Context Path

* Unit Test Scan Type Correction

Co-authored-by: Veli Tekin <[email protected]>

…30111)

* [Marketplace Contribution] Akamai WAF - Content Pack Update (demisto#29671)

* "contribution update to pack "Akamai WAF""

* Update Akamai_WAF.py

Added [0] to line entry_context.append(raw_response.get('siteShieldMaps'))
human_readable.append(raw_response.get('siteShieldMaps'))

* Update Akamai_WAF.py

1) Added additional validations when all "enrollment_path", "enrollment_id", "change_id" are all blank.
2) Added Dateparer for input dates

* Update Akamai_WAF.yml

Added output for both commands:
akamai-get-cps-enrollment-deployment
akamai-get-cps-change-status
Added additional description for both arguments:
enrollment_id
change_id

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/ReleaseNotes/2_0_8.md

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Akamai_WAF.yml

Updated "akamai-update-cps-enrollment-schedule" command's Arguments to predefined value.

* Update Akamai_WAF.yml

Updated "akamai-update-cps-enrollment" commmand's Arguments.

* Update Akamai_WAF.yml

Updated command outputs descriptions and types.

* Update Akamai_WAF.yml

Updated Command Output descriptions and types

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.py

Co-authored-by: RotemAmit <[email protected]>

* updated the yml according to master

---------

Co-authored-by: davistonehub <[email protected]>
Co-authored-by: RotemAmit <[email protected]>

* README.md

* format of yml file and pre-commit

* added test_get_cps_enrollment_deployment_command_production

* pre-commit changes and first test updates

* updated the dates, mypy updates and docker image update

* fixed trailing whitespaces

* updated the dates issue to be a function, more test

* final tests

* test_try_parsing_date

* doc-review changes

* readme and docker image update

* fixed a test and release notes

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: davistonehub <[email protected]>
Co-authored-by: RotemAmit <[email protected]>
Co-authored-by: okarkkatz <[email protected]>

* added notes to the readme

* update after doc review

* update after doc review

* Updated README

* Updated README

* Updated ModelingRules

* Updated ModelingRules

* Updated MicrosoftWindowsEvents_1_3

* Updated MicrosoftWindowsEvents_1_3

* Updated MicrosoftWindowsEvents_1_3

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated MicrosoftWindowsEvents_1_3

* Updated README

* fixed the parameter that send as a limit

* update rn

* update test playbook

* Update Packs/CrowdStrikeFalcon/ReleaseNotes/1_11_7.md

Co-authored-by: Shelly Tzohar <[email protected]>

* fixing test playbook

* adding sort incidents by the ids order; fix time field issue

* rename rn

* bump version

* added unitest

* fix rn

* save unitest fix

* save format

* save unitest fix

* update docker

* use created timestamp

* start_time

* RN

* Update Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py

Co-authored-by: yuvalbenshalom <[email protected]>

* CR

* typo

* fixes

* fixes

* fixes

* fixes

* sort by created

* fixes

* fixes

* simplify

* back to offset

* fix offset

* remove sort

* fixes

* RN

* RN

* fixes

* adding tests

* update

* fixes

* fix

* fix

* fix

* add test with offset

* add freeze time

---------

Co-authored-by: daryakoval <[email protected]>
Co-authored-by: Darya Koval <[email protected]>
Co-authored-by: Shelly Tzohar <[email protected]>
Co-authored-by: yuvalbenshalom <[email protected]>

* Add list_target to f5-silverline-ip-object-delete

* Add list_target argument logic

* Update docker Image & release notes; format fixes

* Update release notes

* Add known_words

* Update delete command to default to proxy

* Fix typo in human readable

* Update test_delete_ip_objects_command UT

* Update docker image

* Remove explicit None return

* Fix release notes typo

* Updated Metadata Of Pack Base

* Added release notes to pack Base

* Packs/Base/Scripts/CommonServerPython/CommonServerPython.yml Docker image update

* Bump pack from version Base to 1.32.39.

* Bump pack from version Base to 1.32.40.

---------

Co-authored-by: Content Bot <[email protected]>

…date (demisto#30357)

* [Marketplace Contribution] Community Common Scripts - Content Pack Update (demisto#29645)

* "contribution update to pack "Community Common Scripts""

* Update RetrievePlaybookDependencies.yml

* Update RetrievePlaybookDependencies.py

* Update RetrievePlaybookDependencies.yml

* Update README.md

* Update 1_2_0.md

* Update RetrievePlaybookDependencies.py

update d[...] to d.get(...)

* Update RetrievePlaybookDependencies.py

* Update RetrievePlaybookDependencies.yml

update docker image version

* Delete Packs/CommunityCommonScripts/Scripts/RetrievePlaybooksAndIntegrations directory

* Revert "Delete Packs/CommunityCommonScripts/Scripts/RetrievePlaybooksAndIntegrations directory"

This reverts commit 0c67b27.

* deprecation

* delete RN

* final delete

* add RN

* specify commands output are only the brandless ones

* RN

* docker

---------

Co-authored-by: Randy Baldwin <[email protected]>
Co-authored-by: Yehuda <[email protected]>

* shorten the lines

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: Randy Baldwin <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>

* Gatewatcher lis generic command (demisto#30095)

* Add generic commands

* Add generic commands

* updat

* add: unit tests for generic_reputation_command

* add: commands for emails

* add: unit tests for mail commands

* add: LIS readme pack information

---------

Co-authored-by: thibault <[email protected]>

* fix validation error

---------

Co-authored-by: Liolaeus <[email protected]>
Co-authored-by: thibault <[email protected]>
Co-authored-by: ilappe <[email protected]>

* First commit

* Add demistomock.py to exclude in mypy

* Revert mistake

---------

Co-authored-by: Koby Meir <[email protected]>

* Update Group-IB TI APP PR from master branch (#29350)

* test commit

* remove bt link

* Remove A in TI for yaml and md for indicator

* back yaml to default

* refactor yaml with cortex utils

* refactor md and yaml for feed

* remove bp/domain

* replace git_leak with git_repository

* Add new collection
Fix issue with date for TI

* remove changes outside the Packs

* Update Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIB_TIA_Feed/test_data/example.json

Co-authored-by: Mai Morag <[email protected]>

* Update Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIB_TIA_Feed/test_data/example.json

Co-authored-by: Mai Morag <[email protected]>

* Update Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIBTIA/test_data/example.json

Co-authored-by: Mai Morag <[email protected]>

* Update Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIBTIA/test_data/example.json

Co-authored-by: Mai Morag <[email protected]>

* Update Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIBTIA/test_data/example.json

Co-authored-by: Mai Morag <[email protected]>

* update release notes

* update logo

* update logo

* Revert "update release notes"

This reverts commit fc93e44461b3085c156c42a96e3f5aaf8efbe0af.

* revert microsocks

* fix compromised account issue

* adding RL

* Update Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIBTIA/GroupIBTIA.py

Co-authored-by: Mai Morag <[email protected]>

* create release notes v1_3_12

* add test for compromised/account_group

* refactor changes in playbook

* fixed validation errors

* adding pragma no cover

* refactor RN

* add urllib exception

* fixing validation errors

* adding pragma no cover

* format

* fix lint test errors

* revert sentinel

* revert changes to azure sentinel

* fixing cloud machine ids processing (#29777)

* fixing cloud machine ids processing

* not exiting the installation script if we fail to install a pack. report an error but continue with the test playbook upload (#29759)

Co-authored-by: kobymeir <[email protected]>

* Microsoft DNS Parsing Rule Drop (#29765)

* Updated ParsingRules

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated pack_metadata

* Updated pack_metadata

* Updated pack_metadata

* Updated README

* Updated README

* Updated README

* [JoeSecurity] Pre-Commit (#29717)

* [pre-commit ruff] Align the entire repo with ruff #2 (#29754)

* [pre-commit ruff] Align the entire repo with ruff #2

* Add RN

* Update the docker image

* Don't checkout build files in pre-commit (#27900)

* is file up to date pre-commit

* Revert changes made by mistake

---------

Co-authored-by: dorschw <[email protected]>
Co-authored-by: Menachem Weinfeld <[email protected]>
Co-authored-by: Menachem Weinfeld <[email protected]>

* Fixes for 'NGFW Scan' and 'WildFire Malware' XSIAM playbooks (#29774)

* Fixes for 'NGFW Scan' and 'WildFire Malware' XSIAM playbooks

* RN

* fixed RN and 'NGFW Scan playbook'

* CiscoSMA- Added timeout parameter (#29372)

* fix

* add_tests

* fix_test_description

* fix_yml_add_readme

* fixes - add timeout to the client

* add timeout to yml

* revert changes

* Update CiscoSMA.py

* Update CiscoSMA.py

* CR review

* add RN

* fix CR review

* update docker image

* XSUP-27956/ Added EWS PS V3 Description (#29784)

* updated the description

* update rn

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Xsup 27738 DBotFindSimilarIncidents NoneType Error (#29701)

* failed ut

* fix

* rn

* pre-commit

* pre commit

* just the fix

* fix description in yml

* fix

* docker

* Update Packs/Base/ReleaseNotes/1_32_34.md

Co-authored-by: Dan Tavori <[email protected]>

* test

* test

* removed import

---------

Co-authored-by: Dan Tavori <[email protected]>

* Wiz v1 2 11 (#29719)

* Wiz v1 2 11 (#29688)

* remove redundant parenthesis

* ../Packs/Wiz/Integrations/Wiz/Wiz.py

* add Wiz user agent

* rephrase release notes

* update pack metadata json

* rephrase release notes v2

* fix minor typos and update docker image

* Bump Docker version

---------

Co-authored-by: Ariel Tobiana <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [ASM] - Expander - Update ASM fields (4821) (#29702)

* [ASM] - Expander - Update ASM fields (4821) (#29506)

* Add missing comments to grid fields

- Update descriptions of fields as needed.

* Add release notes

* Add descriptions to two fields

- asmdevcheckdetails
- asmenrichmentstatus

* Update release notes.

* Grammar updates.

* Update release notes

* Add mandatory or optional in comments

* Update comments with mandatory

* Update pack version and release notes

* Add correct 1_6_33 release notes

* fix rn

* fix rn

---------

Co-authored-by: John <[email protected]>
Co-authored-by: ostolero <[email protected]>
Co-authored-by: ostolero <[email protected]>

* Wildfire-upload-url add poling timeout argument (#29790)

* save adding timeout param

* new docker image

* added rn

* fix ruff

* ruff made me to do this fixes :( not related to my changes

* Update Packs/Palo_Alto_Networks_WildFire/ReleaseNotes/2_1_35.md

* poetry files (#29793)

Co-authored-by: Content Bot <[email protected]>

* Dra-cvss-color-fix (#29757)

* Fixed a small issue when indicator had no custom fields

* RN

* docker bump

* RN

* Update CVECVSSColor.py

* docker bump

* RN

* fixing typos in build scripts. (#29788)

unremovable -> non-removable
productname -> product_name
testplaybook -> test_playbook
changed some arg passing to use their full name:
-gpidd -gpidp

Co-authored-by: kobymeir <[email protected]>

* mapping to standard stix values (#29785)

* mapping to standard stix values

* updated release notes

* update docker

* breaking json

* add dot

* Add the nightly_ruff file for run pre-commit with --all flag (#29684)

* Add the nightly_ruff file for run pre-commit with --all flag

* Add more rules; Add the error name

* Add E501

* Add F601, F842, TID252

* XSUP-27528 (#29705)

* add_tests

* add_tests

* add RN, fix tests, format yml

* Update Packs/CommonScripts/ReleaseNotes/1_12_24.md

Co-authored-by: Arad Carmi <[email protected]>

* fix readme

* Bump pack from version CommonScripts to 1.12.25.

---------

Co-authored-by: Arad Carmi <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* [Axonius Content Pack 1.2.0] Bumping Dockerfile (#29802)

* [Axonius Content Pack 1.2.0] Bumping Dockerfile (#29625)

* bumped docker version for axonius api client

* docker image

* remove the -

---------

Co-authored-by: Yehuda <[email protected]>

* format

---------

Co-authored-by: Bryce Pedroza <[email protected]>
Co-authored-by: Yehuda <[email protected]>

* Updated native:8.4 image; Add auth-utils support (#29792)

Co-authored-by: GuyAfik <[email protected]>

* Fixed sc_task closing state (#29636)

* Fixed sc_task closing state

* Added release notes

* Updated docker image

* small fix

* bumped dokcer

* fixed rn

---------

Co-authored-by: Shahaf Ben Yakir <[email protected]>
Co-authored-by: sbenyakir <[email protected]>

* Private Compliance Packs (#29664)

* XSUP-27936 problem with regex (#29613)

* failed test

* fix

* rn

* rn

* unit test

* ut

* validations

* fixed test and docker

* fix

* validation

* Prisma Cloud V2 Add "usernames" Argument (#29710)

* add username arg

* support list

* update UT

* update README

* docker update

* update TPB

* Fortinet fortigate enhancement (#29655)

* Updated the readme for proofpoint fortigate.

* Modified the modeling rule.

* Modified the modeling rule and the schema file.

* Updated the release note.

* Update Packs/FortiGate/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated the modeling rule.

* Added tags to the readme.

* removed ftntfgtmastersrcmac and ftntfgtmasterdstmac from the mapping.

* updated the modeling rule and the schema file.

* updated the modeling rule

* updated the modeling rule

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Add syslog example for War Room Actions (#29800)

* Graph Security Update (#29797)

* Updated MicrosoftGraphSecurity_schema

* Updated ReleaseNotes

* Updated ReleaseNotes

* [Dataminr Pulse] Release 106 (#29805)

* [Dataminr Pulse] Release 106 (#29693)

* Changes related to release v1.0.6

* Changes related to release v1.0.6

* Fixing Release Note related issue

---------

Co-authored-by: crestdatasystems <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* Bump Docker version

---------

Co-authored-by: Crest Data Systems <[email protected]>
Co-authored-by: crestdatasystems <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [RecordedFuture] threat actor playbook update V2.5.1 (#29690) (#29807)

* Update Threat actor search playbook.

* Add release notes

* Fix formatting

* Change ExtractedIndicators to ExtractedIndicators\.File

* Fix release notes

---------

Co-authored-by: Yaroslav Nestor <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [JoeSecurity] show partial result in polling commands (#29715)

* updating build docker image to latest devdemisto/gitlab-content-ci:1.0.0.64455 (#29761)

* updating build docker image to latest devdemisto/gitlab-content-ci:1.0.0.64455

* Private Upload Mode - ThreatExchange v2 (#28249)

* ThreatExchange integration

* ThreatExchange updates

* Added param to instance configuration

* pre-commit

* updated RN

* RN test

* CR updates

* Removed Threat_Crowd

* Update Packs/ThreatExchange/ReleaseNotes/2_0_12.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* docker

* format

* skip tests since theres no instance

* no testing instance

---------

Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>
Co-authored-by: Yehuda <[email protected]>

* added plus 1 for each iteration in find destination (#29811)

* added plus 1 for each iteration in find destination (#29760)

* added plus 1 for each iteration in find destination

* added release notes

* Update Packs/Cisco-umbrella-cloud-security/ReleaseNotes/2_0_2.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* updated docker image tag to latest

* updated unit test for pagination functions

* removed comments

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update 2_0_2.md

---------

Co-authored-by: LiorQM <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: RotemAmit <[email protected]>

* Mde list indicator filter (#29640)

* Mde list indicator filter (#29338)

* init indicator filter

* release notes

* latest docker image

* updated docker image

* minor fixes

* reslove conflicts

* resolve version conflicts

* silence linter

* format

* docker

* Apply suggestions from Shirley

Co-authored-by: ShirleyDenkberg <[email protected]>

* add period

* change phrase

* adding    "is_mockable": false

* docker

* try change test playbook

* empty line

* docker

* return the mock

* Revert "return the mock"

This reverts commit da9baeff5cadddf2cd125fb073c266c867f465a5.

---------

Co-authored-by: ckaadic <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Audit Logs Endpoints Scripts Aligments for Xsoar-8 (#29781)

* test

* fix core api

* ExportAuditLogsToFile - add support for xsoar-8

* add ExportAuditLogsToFile UTs

* add forward audit logs uts

* update ut

* validation fixes

* mypy

* bump rns

* update docker

* update docker image

* fix ut

* format

* Bump pack from version CommonScripts to 1.12.25.

* Bump pack from version CommonScripts to 1.12.26.

* cr

* cr fixes

* update

* fix uts

---------

Co-authored-by: Content Bot <[email protected]>

* Add command prisma-cloud-compute-get-file-integrity-events (#29608)

* Add command prisma-cloud-compute-get-file-integrity-events (#29187)

* Add command prisma-cloud-compute-get-file-integrity-events

* Incorporate changes from review comments. Add documentation and unit test.

* Add missing lines to YML file (add description of new command)

* Update docker image

* Incorporate changes from demo

* Update docker image

* fix validation

* fix validation

---------

Co-authored-by: ostolero <[email protected]>
Co-authored-by: ostolero <[email protected]>

* Bump pack from version PrismaCloudCompute to 1.4.10.

* [pre-commit ruff] Align the entire repo with ruff (#29603)

* Fix falls of the ruff hook

* pre-commit

* Fix B003 ruff error

* Fix ruff errors on Utils/update_playbook.py

* remove code to trigger upload on dev branches (#29621)

* [pre-commit pycln] Align the entire repo with pycln (#29611)

* Fix falls of the pycln hook

* pre-commit

* Fix unit test

* Add RN

* Fix validate in GetDomainDNSDetails

* fuff on GetDomainDNSDetails

* ignore mypy error in test_content.py:350

* Fix falls of the autopep8 hook (#29638)

* add marketplaces to metadata (#29629)

* Fixing AWS Project Number in ASM Cloud (#29593) (#29642)

Co-authored-by: Chait A <[email protected]>
Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [MS Teams] support reset_graph_auth (#29644)

* fixed

* pre-commit

* update

* Recordedfuture threathunting v2.5.0 (#29641)

* Recordedfuture threathunting v2.5.0 (#29025)

* Add commands related to Automated Threat hunting
recordedfuture-threat-map
recordedfuture-threat-links
recordedfuture-detection-rules

* Add recordedfuture-collective-insight command. Change app version.

* Update README.md. Add release notes

* Add playbook. Add unittests

* Add unittests

* Fix test_collective_insight_command

* Remove incorrect release note

* Add documentation for threat actor search playbook

* update Recorded Future Threat actor search playbook. add release note about new playbook.

* Update release notes, fix formatting

* Format yml files

* Update Recorded future threat actor search playbook

* Update docker image

* Fix linter

---------

Co-authored-by: Michael Yochpaz <[email protected]>

* Minor README fixes

---------

Co-authored-by: Yaroslav Nestor <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [ASM] Expander 5777 (#29647)

* [ASM] Expander 5777 (#29619)

* first

* RN

* Bump pack from version CortexAttackSurfaceManagement to 1.6.36.

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* XDR Malware Enrichment - hotfix for usernames (split) (#29585)

* Updated playbook with hotfix where we split usernames from domains and append them to the username list of usernames for account enrichment

* Added RN

* remove irrelevant test

* Updated RN

* Bump pack from version CortexXDR to 5.1.6.

* Update Packs/CortexXDR/ReleaseNotes/5_1_6.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Docker Image To demisto/pyjwt3  (#29656)

* Updated Metadata Of Pack Silverfort

* Added release notes to pack Silverfort

* Packs/Silverfort/Integrations/Silverfort/Silverfort.yml Docker image update

* Update Docker Image To demisto/trustar  (#29660)

* Updated Metadata Of Pack TruSTAR

* Added release notes to pack TruSTAR

* Update Docker Image To demisto/keeper-ksm  (#29661)

* Updated Metadata Of Pack KeeperSecretsManager

* Added release notes to pack KeeperSecretsManager

* Packs/KeeperSecretsManager/Integrations/KeeperSecretsManager/KeeperSecretsManager.yml Docker image update

* Update Docker Image To demisto/py3-tools  (#29654)

* Updated Metadata Of Pack Intezer

* Added release notes to pack Intezer

* Packs/Intezer/Integrations/IntezerV2/IntezerV2.yml Docker image update

* Updated Metadata Of Pack FeedMalwareBazaar

* Added release notes to pack FeedMalwareBazaar

* Packs/FeedMalwareBazaar/Integrations/MalwareBazaarFeed/MalwareBazaarFeed.yml Docker image update

* Updated Metadata Of Pack FeedGCPWhitelist

* Added release notes to pack FeedGCPWhitelist

* Packs/FeedGCPWhitelist/Integrations/FeedGoogleIPRanges/FeedGoogleIPRanges.yml Docker image update

* Updated Metadata Of Pack AccentureCTI_Feed

* Added release notes to pack AccentureCTI_Feed

* Packs/AccentureCTI_Feed/Integrations/ACTIIndicatorFeed/ACTIIndicatorFeed.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* Update Docker Image To demisto/taxii-server  (#29659)

* Updated Metadata Of Pack CybleThreatIntel

* Added release notes to pack CybleThreatIntel

* Packs/CybleThreatIntel/Integrations/CybleThreatIntel/CybleThreatIntel.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* Update Docker Image To demisto/datadog-api-client  (#29662)

* Updated Metadata Of Pack DatadogCloudSIEM

* Added release notes to pack DatadogCloudSIEM

* Packs/DatadogCloudSIEM/Integrations/DatadogCloudSIEM/DatadogCloudSIEM.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* Add reliability parameter to cves and pipl integration (#28703)

* commiting PrismaCloudCompute

* release notes added

* changed couldcompute, CVESearchV2, pipl

* added pack metadata

* fixed pipl readme

* reverting changes in CVESearch since it was deprecated

* removed redundant

* committing pre commit changes

* added known words

* added known words

* fixed lint error

* changed according to review

* updated docker version in PrismaCloudCompute

* changed according to doc review

* Added condition for not receiving new incidents in the test playbook

* updating release notes

* reverting fetch changes

* fixed playbook

* formatted playbook

* new validation, new run

* new validation, new run

* Bump pack from version PrismaCloudCompute to 1.4.10.

* update the docker image

---------

Co-authored-by: Content Bot <[email protected]>

* Proofpoint email security pack: update description (#29651)

* update description

* Updated the schema file.

* Updated the schema file.

---------

Co-authored-by: Yehonatan Asta <[email protected]>

* Jira v2 deprecated (#29649)

* Deprecate to jira v2

* update RN

* update conf.json file

* add task to the Create Jira Issue playbook that check if jira v3 is enable

* add image.png of the playbook

* update the playbook (yml, readme, image) and RN

* Update Docker Image To demisto/python3  (#29652)

* Updated Metadata Of Pack PANOSPolicyOptimizer

* Added release notes to pack PANOSPolicyOptimizer

* Packs/PANOSPolicyOptimizer/Integrations/PANOSPolicyOptimizer/PANOSPolicyOptimizer.yml Docker image update

* Updated Metadata Of Pack VMwareWorkspaceONEUEM

* Added release notes to pack VMwareWorkspaceONEUEM

* Packs/VMwareWorkspaceONEUEM/Integrations/VMwareWorkspaceONEUEM/VMwareWorkspaceONEUEM.yml Docker image update

* Updated Metadata Of Pack CiscoSMA

* Added release notes to pack CiscoSMA

* Packs/CiscoSMA/Integrations/CiscoSMA/CiscoSMA.yml Docker image update

* Updated Metadata Of Pack FeedThreatConnect

* Added release notes to pack FeedThreatConnect

* Packs/FeedThreatConnect/Integrations/FeedThreatConnect/FeedThreatConnect.yml Docker image update

* Updated Metadata Of Pack BitSight

* Added release notes to pack BitSight

* Packs/BitSight/Integrations/BitSightForSecurityPerformanceManagement/BitSightForSecurityPerformanceManagement.yml Docker image update

* Updated Metadata Of Pack AWS-ILM

* Added release notes to pack AWS-ILM

* Packs/AWS-ILM/Integrations/AWSILM/AWSILM.yml Docker image update

* Updated Metadata Of Pack CiscoWSA

* Added release notes to pack CiscoWSA

* Packs/CiscoWSA/Integrations/CiscoWSAV2/CiscoWSAV2.yml Docker image update

* Updated Metadata Of Pack SysAid

* Added release notes to pack SysAid

* Packs/SysAid/Integrations/SysAid/SysAid.yml Docker image update

* Updated Metadata Of Pack ManageEngine_PAM360

* Added release notes to pack ManageEngine_PAM360

* Packs/ManageEngine_PAM360/Integrations/ManageEnginePAM360/ManageEnginePAM360.yml Docker image update

* Updated Metadata Of Pack CiscoUmbrellaReporting

* Added release notes to pack CiscoUmbrellaReporting

* Packs/CiscoUmbrellaReporting/Integrations/CiscoUmbrellaReporting/CiscoUmbrellaReporting.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* XSUP-27717/FortiSIEM (#29458)

* add tests

* add RN,fix,logs

* Update 2_0_21.md

* add period

* add a name to incident

* fixes CR

* update docker image

* delete logs

* CR fixes

* Update 2_0_21.md

* Update FortiSIEMV2.py

* reverting the Docker image (#29607)

* reverting the Docker image

* Update Packs/cyberark_AIM/ReleaseNotes/1_0_14.md

---------

Co-authored-by: Dan Tavori <[email protected]>

* [Marketplace Contribution] Roksit DNS Security Integration - Sarp (#29663)

* [Marketplace Contribution] Roksit DNS Security Integration - Sarp (#29314)

* "pack contribution initial commit"

* Update RoksitDNSSecurityIntegrationSarp.py

* Update RoksitDNSSecurityIntegrationSarp.py

* Yehuda's version

* test module

* readme

* new logo

* Update RoksitDNSSecurityIntegrationSarp.yml

* Apply suggestions from code review

* Update RoksitDNSSecurityIntegrationSarp_description.md

* Update pack_metadata.json

* Update README.md

* Update pack_metadata.json

* Update pack_metadata.json

* Update Packs/RoksitDNSSecurityIntegration-Sarp/pack_metadata.json

* fixes

* change name

* folder name

* file names

* version

* rename sub folder

* remove (DNSSense) from the integration name

* rename folder

* docker

* replace image

* fix image name

---------

Co-authored-by: asimsarpkurt <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>

* rename image

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: asimsarpkurt <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>

* add unstuck fetch stream command (#29646)

* add unstuck fetch stream command

* added RN

* fixes

* add note

* cr fixes

* fix conflicts

* reverts

* [pre-commit pycln] Align the entire repo with pycln #4 (#29665)

* Fix pycln errors

* Update the docker images

* Run demisto-sdk pre-commit

* Remove unnecessary recommendations from extensions.json (#29605)

* update extensions.json

* Update devcontainer.json

* Update recommendations list

* Zscaler-FW-Logs (#29094)

* Zscaler FW Logs Modeling Rules

* Zscaler FW logs Modeling Rules

* Updated README

* Updated ZscalerModelingRule_1_3

* Changed cs5 field name to cat

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated README

* Updated ModelingRules and Schema

* Updated ModelingRules and schema

* Updated ModelingRules

* Updated ModelingRules

---------

Co-authored-by: Eido Epstain <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* PANOS - EXPANDR-5744 (#29223) (#29686)

* playbook updates

* RN, Readme, screenshot

* Apply suggestions from code review



* update RN

* bump ver

* more descriptive task

* bump ver

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Audit alert fields fix (#29685)

* Add associated types to systemAssociatedTypes

* Add associated types to systemAssociatedTypes

* fix incident field structure

* RN

* Workday documentation fix (#29681)

* readme

* readme

* rn

* rn

* [Marketplace Contribution] Active Directory Query - Content Pack Update (#28633)

* [Marketplace Contribution] Active Directory Query - Content Pack Update (#27822)

* "contribution update to pack "Active Directory Query""

* revert changes

* rl

* remove files

* removed from rl

* Update pack_metadata.json

* Create 1_6_19.md

* Update 1_6_18.md

* Update 1_6_19.md

* Delete 1_6_19.md

* Update 1_6_18.md

* Update pack_metadata.json

* Update Active_Directory_Query.yml

removed duplicate section and type

* pass SERVER_IP as argument to test_credentials function

* Create 1_7_0.md

* Update pack_metadata.json

* Update README.md with ad-test-credentials info

* Update Active_Directory_Query.yml

* removed duplicate `type: 8` from ntlm

* removed duplicate types from integration settings

* removed duplicate description from ad-enable-account

* Update Active_Directory_Query.yml

* Update Active_Directory_Query.yml

* Update Active_Directory_Query.yml

* removing not relevant  release note

* adding function

* update fucntion

* cr note

* adding NTLM_AUTH option

* Update Active_Directory_Query.py

* Update Packs/Active_Directory_Query/Integrations/Active_Directory_Query/Active_Directory_Query.py

Co-authored-by: dorschw <[email protected]>

* cr notes

* update after merging from master

* reverting a change in olr rl

* added test_test_credentials unit test function

* fix unit test

* fixing unit tests

* fix unit test

* fixed lint errors

* Update Active_Directory_Query_test.py

* empty commit

* fix yml and docker file

* revert changes in send email manager

* fix yml

* fix

* fix validation error

* fixing in129

---------

Co-authored-by: maimorag <[email protected]>
Co-authored-by: Randy Baldwin <[email protected]>
Co-authored-by: Mai Morag <[email protected]>
Co-authored-by: dorschw <[email protected]>

* cr notes

* Bump pack from version Active_Directory_Query to 1.6.21.

* fix yml changes

* cr notes

* lint fixes

* fix test

* docker update

* Update Packs/Active_Directory_Query/Integrations/Active_Directory_Query/README.md

Co-authored-by: dorschw <[email protected]>

* fix delete required

* Apply suggestions from code review

* fix test

* docker update

* rl

* empty commit

* docker update

* empty commit

* empty commit

* merge from master

* empty commit check

* revert changes

* Delete Packs/cyberark_AIM/Integrations/CyberArkAIM_v2/integration-CyberArkAIM_v2.yml

* docker downgrade

* rl

* trying  new docker image

* validate errors fix

* revert docker version

* [DS108] - Description must end with a period (".") - fix

* empty commit check

* empty commit check

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: maimorag <[email protected]>
Co-authored-by: Randy Baldwin <[email protected]>
Co-authored-by: Mai Morag <[email protected]>
Co-authored-by: dorschw <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* Big query bug xsup 28132 (#29680)

* bug fix

* rn

* rn

* Apply suggestions from code review

Co-authored-by: Dan Tavori <[email protected]>

* format

* pre commit

---------

Co-authored-by: Dan Tavori <[email protected]>

* New Prisma Cloud v2 commands (#29323)

* resource list command

* limit results

* user roles list command

* pre commit

* users list command

* edit remediation commands

* UTs

* update README

* update RN

* pre commit fixes

* edit test playbook

* CR changes

* Demo changes -
remediate 406 raises error
new args for resource_list & user_roles

* fix test

* Apply suggestions from doc review

Co-authored-by: ShirleyDenkberg <[email protected]>

* fix test playbook

* Tomer's changes

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Prisma Cloud Update (#29666)

* Updated ModelingRules

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated ModelingRules

* Updated ModelingRules

* Updated ModelingRules

* Bump pack from version PrismaCloud to 4.2.4.

---------

Co-authored-by: Content Bot <[email protected]>

* Rapid7 appsec (#29134) (#29687)

* Revert "Add space to  conf"

This reverts commit 3a74b931d31ae2b33e0e4570c7df7d06c668e9c8.

* Updated the packs category to *Authentication & Identity Management*  (part 2) (#24876)

* Update Docker Image To demisto/fastapi  (#24923)

* Updated Metadata Of Pack CyberArkIdentity

* Added release notes to pack CyberArkIdentity

* Packs/CyberArkIdentity/Integrations/CyberArkIdentityEventCollector/CyberArkIdentityEventCollector.yml Docker image update

* Update Docker Image To demisto/lxml  (#24924)

* Updated Metadata Of Pack TaniumThreatResponse

* Added release notes to pack TaniumThreatResponse

* Packs/TaniumThreatResponse/Integrations/TaniumThreatResponseV2/TaniumThreatResponseV2.yml Docker image update

* Update Docker Image To demisto/crypto  (#24922)

* Updated Metadata Of Pack X509Certificate

* Added release notes to pack X509Certificate

* Packs/X509Certificate/Scripts/CertificateExtract/CertificateExtract.yml Docker image update

* Update Docker Image To demisto/python3  (#24921)

* Updated Metadata Of Pack Cybereason

* Added release notes to pack Cybereason

* Packs/Cybereason/Integrations/Cybereason/Cybereason.yml Docker image update

* Updated Metadata Of Pack DNSDB

* Added release notes to pack DNSDB

* Packs/DNSDB/Integrations/DNSDB_v2/DNSDB_v2.yml Docker image update

* Updated Metadata Of Pack DeepInstinct

* Added release notes to pack DeepInstinct

* Packs/DeepInstinct/Integrations/DeepInstinct3x/DeepInstinct3x.yml Docker image update

* Updated Metadata Of Pack FeedCyrenThreatInDepth

* Added release notes to pack FeedCyrenThreatInDepth

* Packs/FeedCyrenThreatInDepth/Integrations/CyrenThreatInDepth/CyrenThreatInDepth.yml Docker image update

* Updated Metadata Of Pack IronDefense

* Added release notes to pack IronDefense

* Packs/IronDefense/Integrations/IronDefense/IronDefense.yml Docker image update

* Updated Metadata Of Pack Qintel

* Added release notes to pack Qintel

* Packs/Qintel/Integrations/QintelPMI/QintelPMI.yml Docker image update

* Packs/Qintel/Integrations/QintelQSentry/QintelQSentry.yml Docker image update

* Packs/Qintel/Integrations/QintelQWatch/QintelQWatch.yml Docker image update

* Updated Metadata Of Pack QualysFIM

* Added release notes to pack QualysFIM

* Packs/QualysFIM/Integrations/QualysFIM/QualysFIM.yml Docker image update

* Updated Metadata Of Pack QutteraWebsiteMalwareScanner

* Added release notes to pack QutteraWebsiteMalwareScanner

* Packs/QutteraWebsiteMalwareScanner/Integrations/QutteraWebsiteMalwareScanner/QutteraWebsiteMalwareScanner.yml Docker image update

* Fixed mypy + validation

---------



* NGINXApiModule: fix logging typo (#24878)

* fix logging typo

* bump dependent packs

---------



* Downgrade docker to fix banner issue (#24905)

* Downgrade docker to fix banner issue

* Fix docs

* Add UT to prevent Docker bump

* Fix yml validation

* Adding vulnerability commands

* Fixing pagination page index

* Updating PR comments and Scan commands

* Updating ID in test data.

* Updating integration

* Updating integration

* Updating fromversion

* Updating linters

* Updating linters

* Updating git pre-commit

* Updating docstring

* Updating the handling of request when limit

* Removing get_pagination_params

* Updating integration

* Updating git-pre commit

* Updating integration

* Updating integration

* Updating unit test

* Updating docker image

* Updating integration

* Updating README version.

* Updating secrets

* Updating integration

* Updating integration

* Updating integration

* Updating docstrings

* Updating doc-review comments.

* Updating doc-review comments.

* Updating description

---------

Co-authored-by: ‪Ron Hadad‬‏ <[email protected]>
Co-authored-by: TalGumi <[email protected]>
Co-authored-by: Mai Morag <[email protected]>
Co-authored-by: sberman <[email protected]>
Co-authored-by: Guy Lichtman <[email protected]>
Co-authored-by: glicht <[email protected]>
Co-authored-by: Andrew Shamah <[email protected]>

* Panos add param (#29672)

* added param job_polling_max_num_attempts

* Added rn

* Added missing param type
Fixed unit tests

* added to readme

* fixed readme

* Update Packs/PAN-OS/Integrations/Panorama/Panorama.yml

Co-authored-by: Guy Afik <[email protected]>

* fixed text and namings

* Bump pack from version PAN-OS to 2.1.8.

---------

Co-authored-by: Guy Afik <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* Fix proxy usage (#85) (#29630)

* Fix proxy usage (#85) (#29181)

* Fix proxy usage (#85)

* Fix proxy usage in ZF client

* Fix variable USE_SSL to verify requests

* Remove proxy object from client

Given that the proxy works by default with env vars, the proxy object
is not necessary

* Update version and add release notes

* Fix call to modified alerts (#86)

* Fix call to modified alerts

* Update docker image

* Fix tests associated with get modified data

* change rn

* fix validation

---------

Co-authored-by: Felipe Garrido <[email protected]>
Co-authored-by: ostolero <[email protected]>
Co-authored-by: ostolero <[email protected]>

* Missing dependencies when installing packs (#28989)

* search and install packs


---------

Co-authored-by: kobymeir <[email protected]>

* Deprecate Picus Community (#29573)

* Merge branch 'master' into github_workflow_partner

# Conflicts:
#	Utils/github_workflow_scripts/utils.py

* Merge branch 'master' into github_workflow_partner

# Conflicts:
#	Utils/github_workflow_scripts/utils.py

* Picus NG display name

* Picus update

* Picus update

* Picus update

* Picus update

* Picus update

* Picus update

* Picus update

* Picus update

---------

Co-authored-by: RotemAmit <[email protected]>

* [ASM] - Expander - GCP Hierarchy field - 4376 (#29696) (#29704)

* Add assethierarchy field to GCP ASM playbook

* Add release notes

* Update field json

Co-authored-by: John <[email protected]>

* fix merge

* update rn

* remove access code

* fix conflicts

* update docker

* fix validation

---------

Co-authored-by: Ali Sawyer <[email protected]>
Co-authored-by: ostolero <[email protected]>
Co-authored-by: ostolero <[email protected]>
Co-authored-by: Content Bot <[email protected]>
Co-authored-by: Menachem Weinfeld <[email protected]>
Co-authored-by: omerKarkKatz <[email protected]>
Co-authored-by: Yaakov Praisler <[email protected]>
Co-authored-by: Chait A <[email protected]>
Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>
Co-authored-by: michal-dagan <[email protected]>
Co-authored-by: Yaroslav Nestor <[email protected]>
Co-authored-by: Ido van Dijk <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: sberman <[email protected]>
Co-authored-by: DinaMeylakh <[email protected]>
Co-authored-by: ilaner <[email protected]>
Co-authored-by: Yehonatan Asta <[email protected]>
Co-authored-by: israelpoli <[email protected]>
Co-authored-by: sapir shuker <[email protected]>
Co-authored-by: Mai Morag <[email protected]>
Co-authored-by: Dan Tavori <[email protected]>
Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: asimsarpkurt <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>
Co-authored-by: Yuval Hayun <[email protected]>
Co-authored-by: samuelFain <[email protected]>
Co-authored-by: nkanon <[email protected]>
Co-authored-by: Eido Epstain <[email protected]>
Co-authored-by: Tomer Haimof <[email protected]>
Co-authored-by: EyalPintzov <[email protected]>
Co-authored-by: maimorag <[email protected]>
Co-authored-by: Randy Baldwin <[email protected]>
Co-authored-by: dorschw <[email protected]>
Co-authored-by: Adi Bamberger Edri <[email protected]>
Co-authored-by: eepstain <[email protected]>
Co-authored-by: ‪Ron Hadad‬‏ <[email protected]>
Co-authored-by: TalGumi <[email protected]>
Co-authored-by: Guy Lichtman <[email protected]>
Co-authored-by: glicht <[email protected]>
Co-authored-by: Andrew Shamah <[email protected]>
Co-authored-by: Shahaf Ben Yakir <[email protected]>
Co-authored-by: Guy Afik <[email protected]>
Co-authored-by: Felipe Garrido <[email protected]>
Co-authored-by: Koby Meir <[email protected]>
Co-authored-by: kobymeir <[email protected]>
Co-authored-by: Edi Katsenelson <[email protected]>
Co-authored-by: RotemAmit <[email protected]>
Co-authored-by: John <[email protected]>

* [Marketplace Contribution] Okta - Content Pack Update (#29650)

* [Marketplace Contribution] Okta - Content Pack Update (#29303)

* "contribution update to pack "Okta""

* minor fixes

* add outputs and readme

* add outputs description

* update docker

* change outputs

---------

Co-authored-by: ostolero <[email protected]>
Co-authored-by: ostolero <[email protected]>

* Fixing AWS Project Number in ASM Cloud (#29593) (#29642)

Co-authored-by: Chait A <[email protected]>
Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [MS Teams] support reset_graph_auth (#29644)

* fixed

* pre-commit

* update

* Recordedfuture threathunting v2.5.0 (#29641)

* Recordedfuture threathunting v2.5.0 (#29025)

* Add commands related to Automated Threat hunting
recordedfuture-threat-map
recordedfuture-threat-links
recordedfuture-detection-rules

* Add recordedfuture-collective-insight command. Change app version.

* Update README.md. Add release notes

* Add playbook. Add unittests

* Add unittests

* Fix test_collective_insight_command

* Remove incorrect release note

* Add documentation for threat actor search playbook

* update Recorded Future Threat actor search playbook. add release note about new playbook.

* Update release notes, fix formatting

* Format yml files

* Update Recorded future threat actor search playbook

* Update docker image

* Fix linter

---------

Co-authored-by: Michael Yochpaz <[email protected]>

* Minor README fixes

---------

Co-authored-by: Yaroslav Nestor <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* [ASM] Expander 5777 (#29647)

* [ASM] Expander 5777 (#29619)

* first

* RN

* Bump pack from version CortexAttackSurfaceManagement to 1.6.36.

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* XDR Malware Enrichment - hotfix for usernames (split) (#29585)

* Updated playbook with hotfix where we split usernames from domains and append them to the username list of usernames for account enrichment

* Added RN

* remove irrelevant test

* Updated RN

* Bump pack from version CortexXDR to 5.1.6.

* Update Packs/CortexXDR/ReleaseNotes/5_1_6.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Docker Image To demisto/pyjwt3  (#29656)

* Updated Metadata Of Pack Silverfort

* Added release notes to pack Silverfort

* Packs/Silverfort/Integrations/Silverfort/Silverfort.yml Docker image update

* Update Docker Image To demisto/trustar  (#29660)

* Updated Metadata Of Pack TruSTAR

* Added release notes to pack TruSTAR

* Update Docker Image To demisto/keeper-ksm  (#29661)

* Updated Metadata Of Pack KeeperSecretsManager

* Added release notes to pack KeeperSecretsManager

* Packs/KeeperSecretsManager/Integrations/KeeperSecretsManager/KeeperSecretsManager.yml Docker image update

* Update Docker Image To demisto/py3-tools  (#29654)

* Updated Metadata Of Pack Intezer

* Added release notes to pack Intezer

* Packs/Intezer/Integrations/IntezerV2/IntezerV2.yml Docker image update

* Updated Metadata Of Pack FeedMalwareBazaar

* Added release notes to pack FeedMalwareBazaar

* Packs/FeedMalwareBazaar/Integrations/MalwareBazaarFeed/MalwareBazaarFeed.yml Docker image update

* Updated Metadata Of Pack FeedGCPWhitelist

* Added release notes to pack FeedGCPWhitelist

* Packs/FeedGCPWhitelist/Integrations/FeedGoogleIPRanges/FeedGoogleIPRanges.yml Docker image update

* Updated Metadata Of Pack AccentureCTI_Feed

* Added release notes to pack AccentureCTI_Feed

* Packs/AccentureCTI_Feed/Integrations/ACTIIndicatorFeed/ACTIIndicatorFeed.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* Update Docker Image To demisto/taxii-server  (#29659)

* Updated Metadata Of Pack CybleThreatIntel

* Added release notes to pack CybleThreatIntel

* Packs/CybleThreatIntel/Integrations/CybleThreatIntel/CybleThreatIntel.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* Update Docker Image To demisto/datadog-api-client  (#29662)

* Updated Metadata Of Pack DatadogCloudSIEM

* Added release notes to pack DatadogCloudSIEM

* Packs/DatadogCloudSIEM/Integrations/DatadogCloudSIEM/DatadogCloudSIEM.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* Add reliability parameter to cves and pipl integration (#28703)

* commiting PrismaCloudCompute

* release notes added

* changed couldcompute, CVESearchV2, pipl

* added pack metadata

* fixed pipl readme

* reverting changes in CVESearch since it was deprecated

* removed redundant

* committing pre commit changes

* added known words

* added known words

* fixed lint error

* changed according to review

* updated docker version in PrismaCloudCompute

* changed according to doc review

* Added condition for not receiving new incidents in the test playbook

* updating release notes

* reverting fetch changes

* fixed playbook

* formatted playbook

* new validation, new run

* new validation, new run

* Bump pack from version PrismaCloudCompute to 1.4.10.

* update the docker image

---------

Co-authored-by: Content Bot <[email protected]>

* Proofpoint email security pack: update description (#29651)

* update description

* Updated the schema file.

* Updated the schema file.

---------

Co-authored-by: Yehonatan Asta <[email protected]>

* Jira v2 deprecated (#29649)

* Deprecate to jira v2

* update RN

* update conf.json file

* add task to the Create Jira Issue playbook that check if jira v3 is enable

* add image.png of the playbook

* update the playbook (yml, readme, image) and RN

* Update Docker Image To demisto/python3  (#29652)

* Updated Metadata Of Pack PANOSPolicyOptimizer

* Added release notes to pack PANOSPolicyOptimizer

* Packs/PANOSPolicyOptimizer/Integrations/PANOSPolicyOptimizer/PANOSPolicyOptimizer.yml Docker image update

* Updated Metadata Of Pack VMwareWorkspaceONEUEM

* Added release notes to pack VMwareWorkspaceONEUEM

* Packs/VMwareWorkspaceONEUEM/Integrations/VMwareWorkspaceONEUEM/VMwareWorkspaceONEUEM.yml Docker image update

* Updated Metadata Of Pack CiscoSMA

* Added release notes to pack CiscoSMA

* Packs/CiscoSMA/Integrations/CiscoSMA/CiscoSMA.yml Docker image update

* Updated Metadata Of Pack FeedThreatConnect

* Added release notes to pack FeedThreatConnect

* Packs/FeedThreatConnect/Integrations/FeedThreatConnect/FeedThreatConnect.yml Docker image update

* Updated Metadata Of Pack BitSight

* Added release notes to pack BitSight

* Packs/BitSight/Integrations/BitSightForSecurityPerformanceManagement/BitSightForSecurityPerformanceManagement.yml Docker image update

* Updated Metadata Of Pack AWS-ILM

* Added release notes to pack AWS-ILM

* Packs/AWS-ILM/Integrations/AWSILM/AWSILM.yml Docker image update

* Updated Metadata Of Pack CiscoWSA

* Added release notes to pack CiscoWSA

* Packs/CiscoWSA/Integrations/CiscoWSAV2/CiscoWSAV2.yml Docker image update

* Updated Metadata Of Pack SysAid

* Added release notes to pack SysAid

* Packs/SysAid/Integrations/SysAid/SysAid.yml Docker image update

* Updated Metadata Of Pack ManageEngine_PAM360

* Added release notes to pack ManageEngine_PAM360

* Packs/ManageEngine_PAM360/Integrations/ManageEnginePAM360/ManageEnginePAM360.yml Docker image update

* Updated Metadata Of Pack CiscoUmbrellaReporting

* Added release notes to pack CiscoUmbrellaReporting

* Packs/CiscoUmbrellaReporting/Integrations/CiscoUmbrellaReporting/CiscoUmbrellaReporting.yml Docker image update

* Fix DS108

---------

Co-authored-by: sberman <[email protected]>

* XSUP-27717/FortiSIEM (#29458)

* add tests

* add RN,fix,logs

* Update 2_0_21.md

* add period

* add a name to incident

* fixes CR

* update docker image

* delete logs

* CR fixes

* Update 2_0_21.md

* Update FortiSIEMV2.py

* reverting the Docker image (#29607)

* reverting the Docker image

* Update Packs/cyberark_AIM/ReleaseNotes/1_0_14.md

---------

Co-authored-by: Dan Tavori <[email protected]>

* [Marketplace Contribution] Roksit DNS Security Integration - Sarp (#29663)

* [Marketplace Contribution] Roksit DNS Security Integration - Sarp (#29314)

* "pack contribution initial commit"

* Update RoksitDNSSecurityIntegrationSarp.py

* Update RoksitDNSSecurityIntegrationSarp.py

* Yehuda's version

* test module

* readme

* new logo

* Update RoksitDNSSecurityIntegrationSarp.yml

* Apply suggestions from code review

* Update RoksitDNSSecurityIntegrationSarp_description.md

* Update pack_metadata.json

* Update README.md

* Update pack_metadata.json

* Update pack_metadata.json

* Update Packs/RoksitDNSSecurityIntegration-Sarp/pack_metadata.json

* fixes

* change name

* folder name

* file names

* version

* rename sub folder

* remove (DNSSense) from the integration name

* rename folder

* docker

* replace image

* fix image name

---------

Co-authored-by: asimsarpkurt <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>

* rename image

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: asimsarpkurt <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>

* add unstuck fetch stream command (#29646)

* add unstuck fetch stream command

* added RN

* fixes

* add note

* cr fixes

* fix conflicts

* reverts

* [pre-commit pycln] Align the entire repo with pycln #4 (#29665)

* Fix pycln errors

* Update the docker images

* Run demisto-sdk pre-commit

* update docker

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: ostolero <[email protected]>
Co-authored-by: ostolero <[email protected]>
Co-authored-by: Chait A <[email protected]>
Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>
Co-authored-by: michal-dagan <[email protected]>
Co-authored-by: Yaroslav Nestor <[email protected]>
Co-authored-by: Content Bot <[email protected]>
Co-authored-by: Ido van Dijk <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: sberman <[email protected]>
Co-authored-by: DinaMeylakh <[email protected]>
Co-authored-by: ilaner <[email protected]>
Co-authored-by: Yehonatan Asta <[email protected]>
Co-authored-by: israelpoli <[email protected]>
Co-authored-by: sapir shuker <[email protected]>
Co-authored-by: Mai Morag <[email protected]>
Co-authored-by: Dan Tavori <[email protected]>
Co-authored-by: asimsarpkurt <[email protected]>
Co-authored-by: Yehuda <[email protected]>
Co-authored-by: Yehuda Rosenberg <[email protected]>
Co-authored-by: Yuval Hayun <[email protected]>
Co-authored-by: Menachem Weinfeld <[email protected]>

* If-Elif Transformer (#27763)

* IfElif init

* minor changes

* parse single strings not json

* fixed regex

* fixed json bug

* removed context

* created eval blacklist

* added json KW to eval

* Update bucket-upload.yml

* added ast for parsing

* use hash for context grab

* added value arg

* quick

* added unit-tests

* added README.md

* added RN

* added flags arg; use dt for context grabbing

* fixed context grabbing

* added regex support

* finished readme

* finished readme 2

* added variables arg

* changed vars to upper

* changed to class

* prefixed variable bug

* some tests

* finished unit-tests

* completed tests

* finished docs

* finished docs in yml

* new design for 'value'

* unit-tests complete

* docs part 1

* docs complete

* added if-elif TPB

* fixed TPB

* fixed mypy error

* fixed mypy error

* fixed injection issue; added + op

* name changes

* added injection test in TPB

* CR changes

* error for unknown variables

* reformat 'from_context' func

* resolve conflicts

* demo changes

* demo changes part 2

* bug fix

* updated docker

* added list_compare flag

* added error catcher for comp funcs

* readme update; textArea for conditions

* resolve conflicts

* resolve conflicts

* updated docker

* name changes

* fixed unit-tests

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* added missing flag to readme

* CR changes

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* name changes

* added suppres_error behaviuor to docs

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* updated docker

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* revert removal of release notes generator (#29828)

* revert

* validations

* rn

* search_and_install_packs.py - less strict when installing packs during nightly. should be reverted in (#29806)

Co-authored-by: kobymeir <[email protected]>

* exit on error alignment.fixing echo message when exiting the uninstallation script. (#29821)

* exit on error alignment.
fixing echo message when exiting the uninstallation script.

* installing specific poetry version (#29812)

* installing specific poetry version - moving the logic to bootstrap

* Cs falcon detections revert (#29833)

* Revert "Cs falcon fetch limit issue (#29411)"

This reverts commit f7b7d5c6

* Revert "Cs limit in idp detections (#29550)"

This reverts commit 47738d56

* Added rn

* Added rn

* SQL Alchemy 2.x.x (#29436)

* MySQL and Postgress works

* MSSQL, My SQL and postgres works with bind_variables from the second form

* resolve conflicts

* fix CR's comments

* pre commit

* parsing the results

* Add UT

* same name and right docker

* RN

* sourcery

* another docker image

* revert docker image

* Update Packs/GenericSQL/ReleaseNotes/1_0_25.md

Co-authored-by: dorschw <[email protected]>

* Update Packs/GenericSQL/Integrations/GenericSQL/GenericSQL.py

Co-authored-by: dorschw <[email protected]>

* Update Packs/GenericSQL/Integrations/GenericSQL/GenericSQL.py

Co-authored-by: dorschw <[email protected]>

* Update Packs/GenericSQL/Integrations/GenericSQL/GenericSQL.py

Co-authored-by: dorschw <[email protected]>

* fix variable name

* constants

* mapping instead of conditions

* unskip Oracle TPB

* resolve conflicts

* resolve conflicts

* Constants

* Update Packs/GenericSQL/Integrations/GenericSQL/GenericSQL.py

Co-authored-by: dorschw <[email protected]>

* CR fixes

* Update Packs/GenericSQL/ReleaseNotes/1_1_0.md

Co-authored-by: dorschw <[email protected]>

* add commit after executing a query

* fix UT

* remove autocommit true from MSSQL

* fix UT

* autocommit for
MSSQL, commit for the others

* commit for the others DBs, since in MSSQL is automatically

* docker image

---------

Co-authored-by: dorschw <[email protected]>

* Generic playbooks fixes (#29711)

* fixes for generic playbooks

* fixes for generic playbooks

* fixes for generic playbooks

* Use Case Builder Development stage Field update (#29771) (#29825)

* pushing changes to the use case stage

* adding release notes

* Update pack_metadata.json

* Rename 1_1_0.md to 1_0_4.md

* Update 1_0_4.md

* Update 1_0_4.md

---------

Co-authored-by: Joe Cosgrove <[email protected]>
Co-authored-by: Michael Yochpaz <[email protected]>

* Add mapper and disable auto extraction for ThinkstCanary (#29756)

* Add Classification and Mapping to ThinkstCanary Integration

* Duo Mapping Enrichment (#29139)

* Updated DuoModelingRule_1_3

* Updated ModelingRules and ReleaseNotes

* Updated ModelingRules and ReleaseNotes

* Updated DuoModelingRule_1_3_schema and README

* Rev DuoModelingRule_1_3 | add DuoModelingRule_2_0

* Updated .yml and ReleaseNotes

* Updated DuoModelingRule_2_0

* Updated ReleaseNotes

* Updated .yml with toversion: 8.3.0

* Updated DuoModelingRule_2_0_schema

* Updated ModelingRules

* Updated ReleaseNotes

* Bump pack from version DuoAdminApi to 4.0.8.

* Updated DuoModelingRule_1_3

* azure

* Updated DuoModelingRule_2_0

* Updated DuoModelingRule_2_0

* Updated ParsingRules

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated pack_metadata

* Updated pack_metadata

* Updated pack_metadata

* Updated README

* Updated README

* Updated README

* Updated ReleaseNotes

* Updated ReleaseNotes

* Updated DuoModelingRule_2_0

* Reverted MS packs

* Reverted MS packs

* Updated DuoModelingRule_1_3_schema

* Updated ReleaseNotes

* Update Packs/DuoAdminApi/ReleaseNotes/4_0_10.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* [AWS System Manager] New Pack (#28992)

* init - new pack

* 2 commands

* aws-ssm-inventory-entry-list

* list_associations_command

* remove boto stubs

* remove boto stubs

* improve

* poetry

* revert poetry

* aws-ssm-association-list

* aws-ssm-association-get

* aws-ssm-association-get

* aws-ssm-association-version-list

* format

* aws-ssm-document-list

* ruff

* ruff

* ssmclient test

* test

* doc get

* docs

* Update pyproject.toml

* Update poetry.lock

* Update .pre-commit-config_template.yaml

* regex

* aws-ssm-tag-remove

* improve

* aws-ssm-automation-execution-list

* pack

* aws-ssm-command-list

* aws-ssm-command-run aws-ssm-command-cancel

* ruff

* Apply suggestions from code review

Co-authored-by: Jacob Levy <[email protected]>

* Apply suggestions from code review

Co-authored-by: Jacob Levy <[email protected]>

* UT

* UT

* cr and docs

* black

* black and ruff

* format

* description

* format description

* pack metadata

* fix ut

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* cr

* cr

* fix yml

* add outputs

* Update Packs/AWS_SystemManager/Integrations/AWSSystemManager/AWSSystemManager.py

Co-authored-by: dorschw <[email protected]>

* fix cr

* run command and fix UT

* automation run

* fix output add playbook

* docs

* docs

* docs

* docs

* ruff and black

* fix demo

* fix demo

* update docker and fix line to long

* Apply suggestions from code review (docs)

Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: dorschw <[email protected]>

* cr fix

* update docker

* fix line

* Fix an issue

* Fix an issue

* Update playbook description

* Update docker

---------

Co-authored-by: Jacob Levy <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: dorschw <[email protected]>

* Fix splunk search in incident context (#29763)

* fixes

* fixes

* fixes

* update docker

* added rn

* add bc rn

* Empty-Commit

* Test For 'WildFire Malware' Playbook (#29404)

* Test For 'WildFire Malware' Playbook

* PR

* RN

* added the "is_mockable" config to the conf file

* removed the "is_mockable" config to the conf file

* Bump pack from version Core to 2.0.14.

* Bump pack from version Core to 2.0.15.

* Increased timeout configs

* Added VirusTotal to the conf file

* added virustotal instance name

* changed the 'AutoContainment' playbook input config to 'true'

* changed 'timeout'

* changed 'timeout'

* changed 'timeout' to 1600

* changed the 'ShouldCloseAutomatically' playbook input to 'false'

* added the test playbook name to the playbook YML file

* RN

* removed the close note alert field verification

* added the 'marketplacev2' to the test playbook YML file

* added the '000001e7a228b2a7abdf7f7e404bc8522df32b725e86907dde32176bccbbbb27' malicious file hash to secrets ignore file. the file hash is used within the test playbook for enrichment and test purposes.

---------

Co-authored-by: Content Bot <[email protected]>

* update docker image (#29845)

* added functionallity to download index by marketplace (#29834)

* added functionallity to download index by marketplace

* added some logs for validation

* commit

* removed logs

* [pre-commit MyPy] Align the entire repo with MyPy #2 (#29799)

* [pre-commit MyPy] Align the entire repo with MyPy #2

* Add RN

* Revert changes in 1.12.26 RN

* Update the docker images

* [pre-commit MyPy] Align the entire repo with MyPy #1 (#29798)

* [pre-commit MyPy] Align the entire repo with MyPy #1

* Xsup 27738 DBotFindSimilarIncidents NoneType Error (#29701)

* failed ut

* fix

* rn

* pre-commit

* pre commit

* just the fix

* fix description in yml

* fix

* docker

* Update Packs/Base/ReleaseNotes/1_32_34.md

Co-authored-by: Dan Tavori <[email protected]>

* test

* test

* removed import

---------

Co-authored-by: Dan Tavori <[email protected]>

* Wiz v1 2 11 (#29719)

* Wiz v1 2 11 (#29688)

* remove redundant parenthesis

* ../Packs/Wiz/Integrations/Wiz/Wiz.py

* add Wiz user agent

* rephrase re…

* Working changes.

* Introducing instance cache.

* - Instance cache work
- Unit tests
- New commands

* - Fix unit tests
- Document changes

* Logging improvements

* Pre-commit findings.

* pre-commit readme changes

* Removed unwanted test.

* Fix for failing tests.

* Local pre-commit changes

* Review comments.

* Bug fix, improvement in query performance, and documentation.

* Updating version number in the header.

* Bug fix and additional review comments.

* pre-commit - upgrading docker image version

* Pre-committ recommendation and review comments.
- Changed the image version in the Release notes
- Changed the version number to use the get_pack_version function instead.

* Review comments

* Review comments.

* Removing the use of get_pack_version() as it is not working in testing.

* Cleanup cache stale entries

* Changed Docker image tag to latest.

* Clear cache only if fetch_unique_incidents is enabled.

* - Readme changes to make it similar to the last version and also include commands in the correct format
- updated Traceable_description.md
- parameterized `pack_version` in Traceable.py
- Added `additionalinfo` to a couple of parameters in Traceable.yaml

* Pre-commit changes.

Co-authored-by: Mayuresh Kshirsagar <[email protected]>

* added-test-xdr-prefix-tests

* pre-commit

* fixed validation

…30370)

* Changes related to Securonix release 2.0.13

* Update Packs/Securonix/ReleaseNotes/2_0_13.md



* Update Packs/Securonix/ReleaseNotes/2_0_13.md



* Update 2_0_13.md

---------

Co-authored-by: scnx-knathani <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Added alert fields, RDP brute-force playbooks, XDR layout

* formatted fields, layout and playbooks

* Regenerated RDP Brute Force playbook README

* Updated playbook images

* Release notes and versions

* Changed reason fields to be unsearchable due to performance implications

* Validation fixes

* Update Packs/Core/Playbooks/playbook-Possible_External_RDP_Brute-Force.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Core/Playbooks/playbook-Possible_External_RDP_Brute-Force.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Bump pack from version Core to 2.1.0.

* Bump pack from version Core to 2.1.0.

* Bump pack from version Core to 2.1.0.

---------

Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* Process email generic v2 (demisto#30159)

* Allow rasterization of plain-text mails

* update relase notes

* apply format for release notes

* Remove Period in yml file

---------

Co-authored-by: Moshe Eichler <[email protected]>

* revert to master

* RN

* Update Packs/Phishing/ReleaseNotes/3_5_29.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: rundssoar <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: MosheEichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* packs/reco: change path of url (demisto#30204)

* packs/reco: change path of url

Change alerts path

Signed-off-by: Gal Nakash <[email protected]>

* Update Packs/Reco/ReleaseNotes/1_1_7.md

Co-authored-by: sapir shuker <[email protected]>

---------

Signed-off-by: Gal Nakash <[email protected]>
Co-authored-by: sapir shuker <[email protected]>

* update docker image and period issue

---------

Signed-off-by: Gal Nakash <[email protected]>
Co-authored-by: GalNakash-RecoLabs <[email protected]>
Co-authored-by: sapir shuker <[email protected]>
Co-authored-by: sapirshuker <[email protected]>

* Add multiple new commands and arguments

* Add multiple new commands and arguments

* Release Notes

* fix command output

* documentation and test updates

* test files

* remove case_id_list

* unit test fixes

* validation errors

* validation errors retry

* reliability

* build failures

* API error

* required integration param

* PR feedback

* Apply suggestions from code review



* Apply suggestions from code review



* update subject name

* PR feedback

* readme formatting

* docker version

---------

Co-authored-by: Andrew Scott <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Sapir Shuker <[email protected]>

…demisto#30176)

* test file type variable

* test

* removed test

* dont clean packs from xsoar_saas

* remove repeated code

* create_dependencies as well

* Removed from the dependency

…PI of ArcSight. (demisto#30365)

* support the new detect-api for add-entries command

* Added support to use the new detect api

* add Collect/Connect sections

* formatted yml

* fix review notes

* added new workflow

* added checkout step

* test

* final changes

* Update .github/workflows/clean_stale_branches.yml

Co-authored-by: Shahaf Ben Yakir <[email protected]>

* test

* wet run

* wet run

* last changes

* Update .github/workflows/clean_stale_branches.yml

Co-authored-by: Shahaf Ben Yakir <[email protected]>

---------

Co-authored-by: Shahaf Ben Yakir <[email protected]>