* Updated Metadata Of Pack TaniumThreatResponse

* Added release notes to pack TaniumThreatResponse

* Packs/TaniumThreatResponse/Integrations/TaniumThreatResponseV2/TaniumThreatResponseV2.yml Docker image update

* Updated Metadata Of Pack Cybereason

* Added release notes to pack Cybereason

* Packs/Cybereason/Integrations/Cybereason/Cybereason.yml Docker image update

* Updated Metadata Of Pack MicrosoftTeams

* Added release notes to pack MicrosoftTeams

* Packs/MicrosoftTeams/Integrations/MicrosoftTeamsWebhook/MicrosoftTeamsWebhook.yml Docker image update

* Updated Metadata Of Pack ExtraHop

* Added release notes to pack ExtraHop

* Packs/ExtraHop/Integrations/ExtraHop_v2/ExtraHop_v2.yml Docker image update

* Updated Metadata Of Pack Qintel

* Added release notes to pack Qintel

* Packs/Qintel/Integrations/QintelQSentry/QintelQSentry.yml Docker image update

* Packs/Qintel/Integrations/QintelQWatch/QintelQWatch.yml Docker image update

* Packs/Qintel/Integrations/QintelPMI/QintelPMI.yml Docker image update

* Updated Metadata Of Pack Flashpoint

* Added release notes to pack Flashpoint

* Packs/Flashpoint/Integrations/Flashpoint/Flashpoint.yml Docker image update

* Updated Metadata Of Pack PhishUp

* Added release notes to pack PhishUp

* Updated Metadata Of Pack VersaDirector

* Added release notes to pack VersaDirector

* Packs/VersaDirector/Integrations/VersaDirector/VersaDirector.yml Docker image update

* Updated Metadata Of Pack SOCRadar

* Added release notes to pack SOCRadar

* Packs/SOCRadar/Integrations/SOCRadarThreatFusion/SOCRadarThreatFusion.yml Docker image update

…#25955)

* ignore ErrorInvalidIdMalformed

* fixed raise exception message

* rn

* docker

* rn

* conflicts

* version

* docker

* Bump pack from version MicrosoftExchangeOnline to 1.2.1.

* conflicts

* docker

* docker

* docker

* docker

* rn

* conflicts

* metadata

---------

Co-authored-by: Content Bot <[email protected]>

* added the dynamic section script

* fix validate

* cr changes

* fix lint

…to#26517)

* Playbooks

* Fixed and simplified process email (previously there was a problem where Email.Text would take precedence over Email.HTML if we keep the old fields)

* revert phishing playbook changes (no changes required)

* added empty descr

* Added layout with new dynamic section + moved the email delete result section to be under the email delete button section

* Added RN and breaking RN, and changed the playbook to break by default.

* Bump pack from version Phishing to 3.5.18.

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* Fixed invalid reference to dynamic section script

* Update Packs/Campaign/Playbooks/Detect_&_Manage_Phishing_Campaigns.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Phishing/ReleaseNotes/3_5_18.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Campaign/Playbooks/Detect_&_Manage_Phishing_Campaigns.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Campaign/Playbooks/Detect_&_Manage_Phishing_Campaigns.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Changed layout to use the new script name "DisplayHTMLWithImages".

* Changed the playbook to not break by default

* Bump pack from version Phishing to 3.5.19.

* new RN

* RN

* Update 3_2_23.md

* Final RN

* Trying to fix RN validation

* Attempt to fix test playbook

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* fix jsx error in OSQueryOpenSocket

* RN

…6466)

* fix

* revert

* rn

* docker

* fix

* conflicts

* fixed RN

* docs fixes

* fix the regex to support more date formats

* fix the regex

* fix last note

…emisto#27027)

* Test playbook for 'CrowdStrike Falcon - Get Endpoint Forensics Data'

* RN

* Added the base code

* more structural changes

* added yml and description

* added a test

* commit

* Adding tests

* added tests and documentation

* removed a duplicate yml conf

* commit

* commit

* commit

* commit

* commit

* changed events typo

* formating the code

* changes with nextLink

* added support for the pagination

* commit

* commit

* commit

* modified some tests

* Finished the tests and some fixes found by tests

* added some test and removed the first fetch time param

* fixed a test and some bugs in the code

* fixed extra arg in test_module

* commit

* fixes

* commit

* Added modelign rules

* added the  rule

* changes in yml and description

* Added documentation to functions

* Added documentation to tests

* removed a file

* changed to type 9 and bumped docker image

* Update Packs/AzureSecurityCenter/Integrations/MicrosoftDefenderForCloudEventCollector/MicrosoftDefenderForCloudEventCollector_description.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixed a typo in microsoft

* changes after doc review

* small change in readme.md

* fix validations

* commit

* change in the modeling rules

* Added a first_fetch_time handeling

* changed the modeling rule of event.outcome_reason

* Added the first_fetch time parameter

* Empty-Commit

* review changes

* added some known limitations

* changed the hyrarcy of the modeling rules

* fixed xif

* modeling rules change names

* Fixed the modeling rules

* updated docker image

* removed the RN for the new pack

* minor readme changes

* Apply suggestions from code review

Docs review.

Co-authored-by: ShirleyDenkberg <[email protected]>

* added RN and bumped version

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Deprecate Dedup v3

* RN for Deprecate Dedup v3

* better error msg

* RN

* Fix `token` parameter BC issue

* Bump version

* Update release notes

---------

Co-authored-by: Content Bot <[email protected]>

* add 'Required Permissions' to the  documentation

* change api call in test func to get list mails with limit 1

* docker

* RN

* Debugs

* Debugs

* Working attachments

* Working attachments

* Release notes

* Added and fixed unit tests

* Added and fixed unit tests

* Removed unstable test and formats

* Removed unstable test and formats

* Update Packs/MailListener/ReleaseNotes/1_0_37.md

Co-authored-by: Dean Arbel <[email protected]>

* Update docker image

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

* Added test data to solve the secrets validation timeout

---------

Co-authored-by: Dean Arbel <[email protected]>

* Updated Metadata Of Pack Stairwell

* Added release notes to pack Stairwell

* Packs/Stairwell/Integrations/Inception/Inception.yml Docker image update

* Updated Metadata Of Pack TrustwaveFusion

* Added release notes to pack TrustwaveFusion

* Packs/TrustwaveFusion/Integrations/TrustwaveFusion/TrustwaveFusion.yml Docker image update

* Updated Metadata Of Pack SysAid

* Added release notes to pack SysAid

* Packs/SysAid/Integrations/SysAid/SysAid.yml Docker image update

* Updated Metadata Of Pack Twitter

* Added release notes to pack Twitter

* Packs/Twitter/Integrations/Twitterv2/Twitterv2.yml Docker image update

* Updated Metadata Of Pack SkyhighSecurity

* Added release notes to pack SkyhighSecurity

* Packs/SkyhighSecurity/Integrations/SkyhighSecurity/SkyhighSecurity.yml Docker image update

* Updated Metadata Of Pack Vectra_AI

* Added release notes to pack Vectra_AI

* Packs/Vectra_AI/Integrations/VectraAIEventCollector/VectraAIEventCollector.yml Docker image update

* Packs/Vectra_AI/Integrations/VectraDetect/VectraDetect.yml Docker image update

* Updated Metadata Of Pack TrendMicroDeepSecurity

* Added release notes to pack TrendMicroDeepSecurity

* Packs/TrendMicroDeepSecurity/Integrations/TrendMicroDeepSecurity/TrendMicroDeepSecurity.yml Docker image update

* Updated Metadata Of Pack SolarWinds

* Added release notes to pack SolarWinds

* Packs/SolarWinds/Integrations/SolarWinds/SolarWinds.yml Docker image update

* Updated Metadata Of Pack SophosCentral

* Added release notes to pack SophosCentral

* Packs/SophosCentral/Integrations/SophosCentral/SophosCentral.yml Docker image update

…isto#26988)

* [Marketplace Contribution] Content Testing - Content Pack Update (demisto#26088)

* "contribution update to pack "Content Testing""

* pack resubmitted

* Update UnitTest.yml

Added comment field

* Update 1_1_2.md

updated rn with doc and metadata

---------

Co-authored-by: David Uhrlaub <[email protected]>

* updated docker image

* updated docker image

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: David Uhrlaub <[email protected]>
Co-authored-by: merit-maita <[email protected]>
Co-authored-by: merit <[email protected]>

* Update Hackuity integration: API key auth, Hackuity.Findings.Status.LastClosedAt (demisto#26558)

* Hackuity: API key auth, status last closed at

* Update docker image.

---------

Co-authored-by: Danny_Fried <[email protected]>

* Bump version

* align RN 1_0_7 with master

* Deprecate login password and support api key

* Add default value to deprecated fields.
Update README

* Take api key from hiddenuser name field.

* Remove redundant method.

* Remove redundant line.
Make api key required.

* Change display password.

* Update Packs/Hackuity/Integrations/Hackuity/README.md

Co-authored-by: Rogdham <[email protected]>

* Remove new line in end of file in RN

---------

Co-authored-by: Rogdham <[email protected]>

* Updated Metadata Of Pack ipinfo

* Added release notes to pack ipinfo

* Packs/ipinfo/Integrations/ipinfo_v2/ipinfo_v2.yml Docker image update

* Updated Metadata Of Pack PhishTank

* Added release notes to pack PhishTank

* Packs/PhishTank/Integrations/PhishTankV2/PhishTankV2.yml Docker image update

* Updated Metadata Of Pack XForceExchange

* Added release notes to pack XForceExchange

* Packs/XForceExchange/Integrations/XFE_v2/XFE_v2.yml Docker image update

* Updated Metadata Of Pack URLHaus

* Added release notes to pack URLHaus

* Packs/URLHaus/Integrations/URLHaus/URLHaus.yml Docker image update

* Updated Metadata Of Pack CrowdStrikeIntel

* Added release notes to pack CrowdStrikeIntel

* Packs/CrowdStrikeIntel/Integrations/CrowdStrikeFalconIntel_v2/CrowdStrikeFalconIntel_v2.yml Docker image update

---------

Co-authored-by: Shelly Tzohar <[email protected]>

* Reduce number of demisto server calls

* Replace format with f-string; Extra refactoring

* return_error & return_results refactoring

* Insert 'test-module' into try-except

* Reduce code duplication; Clean main function

* Fix proxy/secure if statement

* Update docker image; Update release notes

* Update test playbook

* Fix GoogleDocs-test playbook validation error

* Create GoogleDocs_test.py

* Apply suggestion in release notes

* Add UTs documentation

* Fix Flake8 errors

* Fix Flake8 errors

* Fix excepted_result strings in UTs

* test commit

* Fixed last_run

* Added pagination

* Added skip limit

* Fix modeling rules

* Added release notes and updated pack version

* Fixed lint and conflicts

* Added retries and more tests

* Revert yml

* Fixed validate

* Update docker image

* Small fixes

* Revert product-vendor name

* Fixed CR comment + more refactoring

* Small fix

* Fixed lint errors

* Fixed missing ''

* Fixed CR comments

* Small comment fix

* Added more coverage + changed also implementation for the get command

* Fixed last comment

* deprecated the playbook Archer initiate incident

* RN for deprecated the playbook Archer initiate incident

* Update deprecated content on Block Account - Generic v2 playbook

* RN for Update deprecated content on Block Account - Generic v2 playbook

* Update Deprecated content on cortex xdr playbooks

* RN for Update Deprecated content on cortex xdr playbooks

* Update deprecated content on Saas_Security_-_Incident_Processor playbook

* RN for Update deprecated content on Saas_Security_-_Incident_Processor playbook

* deprecated the playbook Vulnerability Management - Qualys (Job)

* RN for deprecated the playbook Vulnerability Management - Qualys (Job)

* update command on the playbook Tanium Demo

* RN for update command on the playbook Tanium Demo

* Update deprecated commands on the playbooks TIE IOC Hunt and `Search_Endpoints_By_Hash_-_TIE`

* RN for Update deprecated commands on the playbooks TIE IOC Hunt and `Search_Endpoints_By_Hash_-_TIE`

* Bump pack from version CortexXDR to 4.10.41.

* Bump pack from version ArcherRSA to 1.2.11.

* fix validation errors

* update test playbook McAfee TIE to use the integration McAfee Threat Intelligence Exchange V2

* update test playbook McAfee TIE to use the integration McAfee Threat Intelligence Exchange

* Bump pack from version CommonPlaybooks to 2.3.65.

* Bump pack from version CommonPlaybooks to 2.3.66.

* Bump pack from version CortexXDR to 4.10.42.

* Bump pack from version McAfee-TIE to 2.0.7.

* Bump pack from version CommonPlaybooks to 2.3.67.

* Bump pack from version CortexXDR to 4.10.43.

* Bump pack from version Tanium to 1.0.25.

* Bump pack from version qualys to 1.2.8.

* Bump pack from version CortexXDR to 4.10.44.

* Bump pack from version CommonPlaybooks to 2.3.68.

* Bump pack from version ArcherRSA to 1.2.12.

* Bump pack from version qualys to 1.2.9.

* Bump pack from version CortexXDR to 4.10.45.

* Bump pack from version CommonPlaybooks to 2.3.69.

* removed deprecated commands `EPOFindSystem` (EOL) from playbook-Search_Endpoints_By_Hash_-_TIE.yml and from playbook-TIE_-_IOC_Hunt.yml

* Deprecated cortex xdr playbooks. replaced with relevance commands

* RN for Deprecated cortex xdr playbooks. replaced with relevance commands

* Bump pack from version CortexXDR to 4.10.46.

* replaced sub-playbook-Cortex_XDR_-_delete_file with relevance commands xdr-file-delete-script-execute

* RN after replaced sub-playbook-Cortex_XDR_-_delete_file with relevance commands xdr-file-delete-script-execute

* RN after replaced sub-playbook-Cortex_XDR_-_delete_file with relevance commands xdr-file-delete-script-execute

* fix validation error - update png name on RM files

* Bump pack from version CortexXDR to 4.11.1.

* Bump pack from version CommonPlaybooks to 2.3.70.

* fix for build error

* fix for build error

* Bump pack from version CommonPlaybooks to 2.3.71.

* Update Packs/ArcherRSA/ReleaseNotes/1_2_12.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_Execute_snippet_code_script.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/qualys/Playbooks/playbook-Vulnerability_Management__-_Qualys_(Job)_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/qualys/Playbooks/playbook-Vulnerability_Management__-_Qualys_(Job)_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_Execute_snippet_code_script_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Tanium/ReleaseNotes/1_0_25.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/qualys/Playbooks/playbook-Vulnerability_Management__-_Qualys_(Job)_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/qualys/ReleaseNotes/1_2_9.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_check_file_existence.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_check_file_existence.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_check_file_existence.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_check_file_existence.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_check_file_existence_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_delete_file.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_delete_file.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_kill_process_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_delete_file.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_delete_file_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_execute_commands.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_execute_commands.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_execute_commands_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_kill_process.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_kill_process.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/Playbooks/playbook-Cortex_XDR_-_kill_process.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/ReleaseNotes/4_11_1.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/ReleaseNotes/4_11_1.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Tanium/ReleaseNotes/1_0_25.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/ReleaseNotes/4_11_1.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/ReleaseNotes/4_11_1.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/ReleaseNotes/4_11_1.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CortexXDR/ReleaseNotes/4_11_1.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-TIE/ReleaseNotes/2_0_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-TIE/ReleaseNotes/2_0_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-TIE/ReleaseNotes/2_0_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-TIE/ReleaseNotes/2_0_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-TIE/ReleaseNotes/2_0_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-TIE/ReleaseNotes/2_0_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/PrismaSaasSecurity/ReleaseNotes/2_0_21.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* update after review - rollback and commit only changes on xdr playbooks

* update after review - rollback and commit only changes on xdr playbook-Cortex_XDR_-_True_Positive_Incident_Handling.yml

* fix for validation error change png name

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: Sasha Sokolovich <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated Metadata Of Pack rasterize

* Added release notes to pack rasterize

* Packs/rasterize/Integrations/rasterize/rasterize.yml Docker image update

* Updated Metadata Of Pack ExpanseV2

* Added release notes to pack ExpanseV2

* Packs/ExpanseV2/Scripts/ExpanseGenerateIssueMapWidgetScript/ExpanseGenerateIssueMapWidgetScript.yml Docker image update

---------

Co-authored-by: Shelly Tzohar <[email protected]>

…27057)

* "pack contribution initial commit"

* Update README.md

I don't know how to add images to the readme so will look into it later

* Update README.md

* Update README.md

* Delete GoogleVertexAI_image.png

* Fix Logo

* Update pack_metadata.json

* Update GoogleVertexAI.yml

* Update GoogleVertexAI.py

* Update GoogleVertexAI.yml

* Update GoogleVertexAI.yml

* Update GoogleVertexAI.py

* Update GoogleVertexAI.py

* Update GoogleVertexAI.py

Changes as per pull request reviewer's feedback

* Update GoogleVertexAI.py

remove print statement

* Update README.md

Adding Images to readme

* Update README.md

Fix Images paths

* Add Images folder for readme

* Delete Packs/GoogleVertexAI/images directory

* Add files via upload

* Update README.md

replace images with Doc_files

* Update GoogleVertexAI.yml

Fix yml structure

* Delete Packs/GoogleVertexAI/Doc_files directory

move doc_files to integration folder

* Move Doc_files to integration folder

* Update README.md

Fix paths with new doc_files folder moved to integration folder

* Update GoogleVertexAI.py

Fix Flake8 issues and replaced Demisto.log with Demisto.debug

* Update GoogleVertexAI.py

Fix unused variable

* Update GoogleVertexAI.py

Fixed Flake8 Errors

* Update GoogleVertexAI.py

* Update README.md

Change images paths and names

* Delete Packs/GoogleVertexAI/Integrations/GoogleVertexAI/Doc_files directory

No need for that folder anymore

* Update GoogleVertexAI.py

Fix test_module

* Update GoogleVertexAI.py

* Update GoogleVertexAI.py

Fixing Flake8 issues

---------

Co-authored-by: xsoar-bot <[email protected]>
Co-authored-by: sepaprivate <[email protected]>

…ded Future" integration instance (demisto#26589) (demisto#27020)

* Update playbook-Recorded_Future_CVE_Reputation.yml

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Check for "Recorded Future v2" instead of "Recorded Future" integration instance

* Create 1_5_3.md

* update currentVersion to 1.5.3

* scriptarguments inputs.url not needed

* scriptarguments inputs.url not needed

* ${inputs.URL} instead of ${RecordedFuture.URL.name}

playbook currently fails when no RF results are returned

* ${inputs.URL} instead of ${RecordedFuture.URL.name}

playbook currently fails when no RF results are returned

* ${inputs.CVE} instead of ${RecordedFuture.CVE.name}

playbook currently fails when no RF results are returned

* ${inputs.CVE} instead of ${RecordedFuture.CVE.name}

playbook currently fails when no RF results are returned

* ${inputs.Domain} instead of ${RecordedFuture.Domain.name}

playbook currently fails when no RF results are returned

* ${inputs.Domain} instead of ${RecordedFuture.Domain.name}

playbook currently fails when no RF results are returned

* ${inputs.IP} instead of ${RecordedFuture.IP.name}

playbook currently fails when no RF results are returned

* ${inputs.IP} instead of ${RecordedFuture.IP.name}

playbook currently fails when no RF results are returned

* Bump version

---------

Co-authored-by: Randy Baldwin <[email protected]>
Co-authored-by: Danny_Fried <[email protected]>

* Fix Microsoft Sentinel mirroring BadRequest

* fix issue with the UTC time

* Add RN

* Update the unit test

* Update the docker image

* Fix review comments

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update old modeling rule and schema

* Update new modeling rules

* Updated modelling rules

* Updated modelling rules and parsing rules

* Updated modelling rules, parsing rule, release notes and readme file

* remove the _time field from events

* Update Packs/FireEyeHX/ReleaseNotes/2_3_7.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/FireEyeHX/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/FireEyeHX/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated modelling rules and readme file

* update RN

* update test_populate_modeling_rule_fields

* Updated the schema of the modeling rules

* Updated the modeling rules

* Updated the modeling rules

---------

Co-authored-by: adi88d <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* Updated Metadata Of Pack Armorblox

* Added release notes to pack Armorblox

* Packs/Armorblox/Integrations/Armorblox/Armorblox.yml Docker image update

* Updated Metadata Of Pack SecurityIntelligenceServicesFeed

* Added release notes to pack SecurityIntelligenceServicesFeed

* Packs/SecurityIntelligenceServicesFeed/Integrations/SecurityIntelligenceServicesFeed/SecurityIntelligenceServicesFeed.yml Docker image update

* Updated Metadata Of Pack AWS-Route53

* Added release notes to pack AWS-Route53

* Packs/AWS-Route53/Integrations/AWSRoute53/AWSRoute53.yml Docker image update

* Updated Metadata Of Pack AWS-SecurityHub

* Added release notes to pack AWS-SecurityHub

* Packs/AWS-SecurityHub/Integrations/AWSSecurityHubEventCollector/AWSSecurityHubEventCollector.yml Docker image update

* Updated Metadata Of Pack AbnormalSecurity

* Added release notes to pack AbnormalSecurity

* Packs/AbnormalSecurity/Integrations/AbnormalSecurity/AbnormalSecurity.yml Docker image update

* Updated Metadata Of Pack AccentureCTI

* Added release notes to pack AccentureCTI

* Packs/AccentureCTI/Integrations/ACTIIndicatorQuery/ACTIIndicatorQuery.yml Docker image update

* Updated Metadata Of Pack AppNovi

* Added release notes to pack AppNovi

* Updated Metadata Of Pack AHA

* Added release notes to pack AHA

* Packs/AHA/Integrations/AHA/AHA.yml Docker image update

* Updated Metadata Of Pack AMP

* Added release notes to pack AMP

* Packs/AMP/Integrations/AMPv2/AMPv2.yml Docker image update

* Updated Metadata Of Pack AtlassianConfluenceCloud

* Added release notes to pack AtlassianConfluenceCloud

* Packs/AtlassianConfluenceCloud/Integrations/AtlassianConfluenceCloud/AtlassianConfluenceCloud.yml Docker image update

* Updated Metadata Of Pack AWS-ILM

* Added release notes to pack AWS-ILM

* Packs/AWS-ILM/Integrations/AWSILM/AWSILM.yml Docker image update

* Updated Metadata Of Pack Automox

* Added release notes to pack Automox

* Packs/Automox/Integrations/Automox/Automox.yml Docker image update

* Updated Metadata Of Pack PassiveTotal

* Added release notes to pack PassiveTotal

* Packs/PassiveTotal/Integrations/PassiveTotal_v2/PassiveTotal_v2.yml Docker image update

* Updated Metadata Of Pack opswat-metadefender

* Added release notes to pack opswat-metadefender

* Packs/opswat-metadefender/Integrations/OPSWATMetadefenderV2/OPSWATMetadefenderV2.yml Docker image update

* Updated Metadata Of Pack OPNSense

* Added release notes to pack OPNSense

* Packs/OPNSense/Integrations/OPNSense/OPNSense.yml Docker image update

* Updated Metadata Of Pack Cylance_Protect

* Added release notes to pack Cylance_Protect

* Packs/Cylance_Protect/Integrations/Cylance_Protect_v2/Cylance_Protect_v2.yml Docker image update

* Updated Metadata Of Pack Silverfort

* Added release notes to pack Silverfort

* Packs/Silverfort/Integrations/Silverfort/Silverfort.yml Docker image update

* Updated Metadata Of Pack MicrosoftManagementActivity

* Added release notes to pack MicrosoftManagementActivity

* Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity.yml Docker image update

* Updated Metadata Of Pack BreachRx

* Added release notes to pack BreachRx

* Packs/BreachRx/Integrations/BreachRx/BreachRx.yml Docker image update

* Updated Metadata Of Pack HashiCorp-Vault

* Added release notes to pack HashiCorp-Vault

* Packs/HashiCorp-Vault/Integrations/HashiCorpVault/HashiCorpVault.yml Docker image update

* Updated Metadata Of Pack CiscoWebExFeed

* Added release notes to pack CiscoWebExFeed

* Packs/CiscoWebExFeed/Integrations/CiscoWebExFeed/CiscoWebExFeed.yml Docker image update

* Updated Metadata Of Pack GSuiteAdmin

* Added release notes to pack GSuiteAdmin

* Packs/GSuiteAdmin/Integrations/GSuiteAdmin/GSuiteAdmin.yml Docker image update

* Updated Metadata Of Pack GoogleSheets

* Added release notes to pack GoogleSheets

* Packs/GoogleSheets/Integrations/GoogleSheets/GoogleSheets.yml Docker image update

* Updated Metadata Of Pack GoogleChronicleBackstory

* Added release notes to pack GoogleChronicleBackstory

* Packs/GoogleChronicleBackstory/Integrations/GoogleChronicleBackstory/GoogleChronicleBackstory.yml Docker image update

* Updated Metadata Of Pack GSuiteSecurityAlertCenter

* Added release notes to pack GSuiteSecurityAlertCenter

* Packs/GSuiteSecurityAlertCenter/Integrations/GSuiteSecurityAlertCenter/GSuiteSecurityAlertCenter.yml Docker image update

* Updated Metadata Of Pack GoogleCalendar

* Added release notes to pack GoogleCalendar

* Packs/GoogleCalendar/Integrations/GoogleCalendar/GoogleCalendar.yml Docker image update

* Updated Metadata Of Pack CybleThreatIntel

* Added release notes to pack CybleThreatIntel

* Packs/CybleThreatIntel/Integrations/CybleThreatIntel/CybleThreatIntel.yml Docker image update

* Updated Metadata Of Pack TeamCymru

* Added release notes to pack TeamCymru

* Packs/TeamCymru/Integrations/TeamCymru/TeamCymru.yml Docker image update

* Updated Metadata Of Pack Kafka

* Added release notes to pack Kafka

* Packs/Kafka/Integrations/KafkaV3/KafkaV3.yml Docker image update

* Updated Metadata Of Pack KeeperSecretsManager

* Added release notes to pack KeeperSecretsManager

* Packs/KeeperSecretsManager/Integrations/KeeperSecretsManager/KeeperSecretsManager.yml Docker image update

* Updated Metadata Of Pack AzureDataExplorer

* Added release notes to pack AzureDataExplorer

* Packs/AzureDataExplorer/Integrations/AzureDataExplorer/AzureDataExplorer.yml Docker image update

* Updated Metadata Of Pack Illumio

* Added release notes to pack Illumio

* Packs/Illumio/Integrations/IllumioCore/IllumioCore.yml Docker image update

* Updated Metadata Of Pack CyCognito

* Added release notes to pack CyCognito

* Packs/CyCognito/Integrations/CyCognito/CyCognito.yml Docker image update

* Updated Metadata Of Pack FeedCyCognito

* Added release notes to pack FeedCyCognito

* Packs/FeedCyCognito/Integrations/FeedCyCognito/FeedCyCognito.yml Docker image update

* Updated Metadata Of Pack OctoxLabs

* Added release notes to pack OctoxLabs

* Packs/OctoxLabs/Integrations/OctoxLabs/OctoxLabs.yml Docker image update

* Updated Metadata Of Pack RemoteAccess

* Added release notes to pack RemoteAccess

* Packs/RemoteAccess/Integrations/RemoteAccessv2/RemoteAccessv2.yml Docker image update

* Updated Metadata Of Pack AzureKeyVault

* Added release notes to pack AzureKeyVault

* Packs/AzureKeyVault/Integrations/AzureKeyVault/AzureKeyVault.yml Docker image update

* Updated Metadata Of Pack MicrosoftCloudAppSecurity

* Added release notes to pack MicrosoftCloudAppSecurity

* Packs/MicrosoftCloudAppSecurity/Integrations/MicrosoftCloudAppSecurity/MicrosoftCloudAppSecurity.yml Docker image update

* Updated Metadata Of Pack MicrosoftGraphGroups

* Added release notes to pack MicrosoftGraphGroups

* Packs/MicrosoftGraphGroups/Integrations/MicrosoftGraphGroups/MicrosoftGraphGroups.yml Docker image update

* Updated Metadata Of Pack MicrosoftGraphAPI

* Added release notes to pack MicrosoftGraphAPI

* Packs/MicrosoftGraphAPI/Integrations/MicrosoftGraphAPI/MicrosoftGraphAPI.yml Docker image update

* Updated Metadata Of Pack MicrosoftGraphApplications

* Added release notes to pack MicrosoftGraphApplications

* Packs/MicrosoftGraphApplications/Integrations/MicrosoftGraphApplications/MicrosoftGraphApplications.yml Docker image update

* Updated Metadata Of Pack AzureFirewall

* Added release notes to pack AzureFirewall

* Packs/AzureFirewall/Integrations/AzureFirewall/AzureFirewall.yml Docker image update

* Updated Metadata Of Pack X509Certificate

* Added release notes to pack X509Certificate

* Packs/X509Certificate/Scripts/CertificateExtract/CertificateExtract.yml Docker image update

* Updated Metadata Of Pack TruSTAR

* Added release notes to pack TruSTAR

* Packs/TruSTAR/Integrations/TruSTAR_V2/TruSTAR_V2.yml Docker image update

* Updated Metadata Of Pack CyberArkIdentity

* Added release notes to pack CyberArkIdentity

* Packs/CyberArkIdentity/Integrations/CyberArkIdentityEventCollector/CyberArkIdentityEventCollector.yml Docker image update

* Updated Metadata Of Pack Dropbox

* Added release notes to pack Dropbox

* Packs/Dropbox/Integrations/DropboxEventCollector/DropboxEventCollector.yml Docker image update

* Updated Metadata Of Pack FeedDHS

* Added release notes to pack FeedDHS

* Packs/FeedDHS/Integrations/DHSFeedV2/DHSFeedV2.yml Docker image update

* Updated Metadata Of Pack FeedUnit42v2

* Added release notes to pack FeedUnit42v2

* Packs/FeedUnit42v2/Integrations/FeedUnit42v2/FeedUnit42v2.yml Docker image update

* Updated Metadata Of Pack MicrosoftDefenderAdvancedThreatProtection

* Added release notes to pack MicrosoftDefenderAdvancedThreatProtection

* Packs/MicrosoftDefenderAdvancedThreatProtection/Integrations/MicrosoftDefenderAdvancedThreatProtection/MicrosoftDefenderAdvancedThreatProtection.yml Docker image update

* Updated Metadata Of Pack SMIME_Messaging

* Added release notes to pack SMIME_Messaging

* Packs/SMIME_Messaging/Integrations/SMIME_Messaging/SMIME_Messaging.yml Docker image update

* Updated Metadata Of Pack Palo_Alto_Networks_WildFire

* Added release notes to pack Palo_Alto_Networks_WildFire

* Packs/Palo_Alto_Networks_WildFire/Integrations/Palo_Alto_Networks_WildFire_v2/Palo_Alto_Networks_WildFire_v2.yml Docker image update

* Updated Metadata Of Pack Shodan

* Added release notes to pack Shodan

* Packs/Shodan/Integrations/Shodan_v2/Shodan_v2.yml Docker image update

* Updated Metadata Of Pack FeedOffice365

* Added release notes to pack FeedOffice365

* Packs/FeedOffice365/Integrations/FeedOffice365/FeedOffice365.yml Docker image update

* Updated Metadata Of Pack PrismaCloud

* Added release notes to pack PrismaCloud

* Packs/PrismaCloud/Integrations/PrismaCloudV2/PrismaCloudV2.yml Docker image update

* Updated Metadata Of Pack PrismaCloudCompute

* Added release notes to pack PrismaCloudCompute

* Packs/PrismaCloudCompute/Integrations/PaloAltoNetworks_PrismaCloudCompute/PaloAltoNetworks_PrismaCloudCompute.yml Docker image update

* Google Key Management Service - moving to type 9

* update to type 9- BeyondTrust Password Safe

* type 9 changes MailListener - POP3

* RL

* undo changes

* update to required: false

* fix

* trying fix

* fix error

* false

* fix tests errors

* cr

* spacing

* set feedIncremental and change the First Fetch Time to required

* add RN and warning comment

* update docker

* commit

* Apply suggestions from code review

Docs review fixes

Co-authored-by: Andrew Shamah <[email protected]>

* fix syntax

---------

Co-authored-by: yuvalbenshalom <[email protected]>
Co-authored-by: Andrew Shamah <[email protected]>
Co-authored-by: ilaner <[email protected]>

* Catch and release the wild SAX error

* Treaty of Versailles 2.0

* removed epo v1 deprecated commands from the playbook-MAR_-_Endpoint_data_collection.yml

* RN for removed epo v1 deprecated commands from the playbook-MAR_-_Endpoint_data_collection.yml

* RN for removed epo v1 deprecated commands from the playbook-MAR_-_Endpoint_data_collection.yml

* replace deprecated script with the ad-get-user command on playbook-NIST_-_Access_Investigation_-_Generic_6_0.yml

* RN for replace deprecated script with the ad-get-user command on playbook-NIST_-_Access_Investigation_-_Generic_6_0.yml

* playbook-Vulnerability_Management_-_Nexpose_(Job).yml was deprecated.

* RN for playbook-Vulnerability_Management_-_Nexpose_(Job).yml was deprecated.

* playbook PaloAltoNetworks_Cortex_XDR_Incident_Sync.yml was deprecated.

* RN for deprecated the playbook PaloAltoNetworks_Cortex_XDR_Incident_Sync.yml.

* removed deprecated commands `vt-private-get-ip-report` and `threat-crowd-ip` (EOL packs) from playbook-IP_Enrichment_-_External_-_Generic_v2.yml

* RN after removed deprecated commands `vt-private-get-ip-report` and `threat-crowd-ip` (EOL packs) from playbook-IP_Enrichment_-_External_-_Generic_v2.yml

* removed deprecated commands `vt-private-get-domain-report (VirusTotal - Private API)` from playbook-Domain_Enrichment_-_Generic_v2.yml

* RN after removed deprecated commands `vt-private-get-domain-report (VirusTotal - Private API)` from playbook-Domain_Enrichment_-_Generic_v2.yml

* Replace cve-search (XFE) with cve-search playbook-CVE_Enrichment_-_Generic_v2.yml.

* Replace cve-search (XFE) with cve-search playbook-CVE_Enrichment_-_Generic_v2.yml.

* deprecate playbook-Tanium_Demo.yml

* replace block indicators v2 to v3 on playbook-Post_Intrusion_Ransomware_Investigation.yml

* RN after replaced block indicators v2 to v3 on playbook-Post_Intrusion_Ransomware_Investigation.yml

* add new command 'cisco-sma-list-entry-append'
 to Block Email - Generic v2. the deprecated command 'cisco-email-security-list-entry-add' will remove from the playbook after EOL date: Jul 01, 2023.
Ticket - Done

* RN after add new command 'cisco-sma-list-entry-append'
 to Block Email - Generic v2. the deprecated command 'cisco-email-security-list-entry-add' will remove from the playbook after EOL date: Jul 01, 2023.
Ticket - Done

* error fix RN for xdr

* fix validation errors - missing png

* Bump pack from version CortexXDR to 4.11.1.

* Bump pack from version CommonPlaybooks to 2.3.70.

* Update Packs/Tanium/ReleaseNotes/1_0_25.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Rapid7_Nexpose/ReleaseNotes/1_2_9.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Ransomware/ReleaseNotes/1_0_11.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/Ransomware/ReleaseNotes/1_0_11.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/NIST/ReleaseNotes/1_0_9.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-Block_Email_-_Generic_v2.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/NIST/Playbooks/playbook-NIST_-_Access_Investigation_-_Generic_6_0_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-CVE_Enrichment_-_Generic_v2_README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CommonPlaybooks/Playbooks/playbook-Domain_Enrichment_-_Generic_v2.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/McAfee-MAR/ReleaseNotes/1_0_6.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/NIST/Playbooks/playbook-NIST_-_Access_Investigation_-_Generic_6_0.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* fix validation errors - missing png

* fix validation errors

* fix for validation error

* Bump pack from version CommonPlaybooks to 2.3.71.

* Bump pack from version Rapid7_Nexpose to 1.2.11.

* update RN version

* Revert "replace block indicators v2 to v3 on playbook-Post_Intrusion_Ransomware_Investigation.yml"

This reverts commit 36f869a.

* update after review - rollback and commit only changes.

* fix for conflict files

* fix for conflict files

* Revert "removed deprecated commands `vt-private-get-ip-report` and `threat-crowd-ip` (EOL packs) from playbook-IP_Enrichment_-_External_-_Generic_v2.yml"

This reverts commit b13d25c.

* rollback to ip enrichment external

* Revert "replace block indicators v2 to v3 on playbook-Post_Intrusion_Ransomware_Investigation.yml"

This reverts commit 36f869a

* new version to playbook-Post_Intrusion_Ransomware_Investigation.yml from 6.5

* RN after new version to playbook-Post_Intrusion_Ransomware_Investigation.yml from 6.5

---------

Co-authored-by: Content Bot <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

…thentication (demisto#27058)

* updated prepreq.headers

* changed name

* changed name

* RN

* Typo fix

* Update header validation

* Remove accept_type_all header

* Update header validation logic

* Minor logic updates to accept_headers

* Update docker image/release notes

* Fix release notes validation

* Fix Ruff warning; Update UTs constant

* Change Accept header in test playbook

* Update accept header

* Fix remove_spaces_from_header docstring

* Updated Metadata Of Pack Binalyze

* Added release notes to pack Binalyze

* Packs/Binalyze/Integrations/BinalyzeAIR/BinalyzeAIR.yml Docker image update

* Updated Metadata Of Pack AzureStorageFileShare

* Added release notes to pack AzureStorageFileShare

* Packs/AzureStorageFileShare/Integrations/AzureStorageFileShare/AzureStorageFileShare.yml Docker image update

* Updated Metadata Of Pack BmcITSM

* Added release notes to pack BmcITSM

* Packs/BmcITSM/Integrations/BmcITSM/BmcITSM.yml Docker image update

* Updated Metadata Of Pack AzureStorageTable

* Added release notes to pack AzureStorageTable

* Packs/AzureStorageTable/Integrations/AzureStorageTable/AzureStorageTable.yml Docker image update

* Updated Metadata Of Pack CloudflareWAF

* Added release notes to pack CloudflareWAF

* Packs/CloudflareWAF/Integrations/CloudflareWAF/CloudflareWAF.yml Docker image update

* Updated Metadata Of Pack BitSight

* Added release notes to pack BitSight

* Packs/BitSight/Integrations/BitSightForSecurityPerformanceManagement/BitSightForSecurityPerformanceManagement.yml Docker image update

* Updated Metadata Of Pack CofenseTriage

* Added release notes to pack CofenseTriage

* Packs/CofenseTriage/Integrations/CofenseTriagev3/CofenseTriagev3.yml Docker image update

* Updated Metadata Of Pack AzureStorageQueue

* Added release notes to pack AzureStorageQueue

* Packs/AzureStorageQueue/Integrations/AzureStorageQueue/AzureStorageQueue.yml Docker image update

* Updated Metadata Of Pack SecneurXThreatFeeds

* Added release notes to pack SecneurXThreatFeeds

* Packs/SecneurXThreatFeeds/Integrations/SecneurXThreatFeeds/SecneurXThreatFeeds.yml Docker image update

* Updated Metadata Of Pack OneLogin

* Added release notes to pack OneLogin

* Packs/OneLogin/Integrations/OneLoginEventCollector/OneLoginEventCollector.yml Docker image update

* Updated Metadata Of Pack PaloAltoNetworks_IoT

* Added release notes to pack PaloAltoNetworks_IoT

* Packs/PaloAltoNetworks_IoT/Integrations/PaloAltoNetworks_IoT/PaloAltoNetworks_IoT.yml Docker image update

* Packs/PaloAltoNetworks_IoT/Scripts/iot_get_raci/iot_get_raci.yml Docker image update

* Updated Metadata Of Pack AbuseDB

* Added release notes to pack AbuseDB

* Packs/AbuseDB/Scripts/AbuseIPDBPopulateIndicators/AbuseIPDBPopulateIndicators.yml Docker image update

* Updated Metadata Of Pack PANWComprehensiveInvestigation

* Added release notes to pack PANWComprehensiveInvestigation

* Packs/PANWComprehensiveInvestigation/Scripts/PanwIndicatorCreateQueries/PanwIndicatorCreateQueries.yml Docker image update

* XSIAM | Cisco Nexus Pack

* Updated README

* Update Packs/CiscoNexus/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Added pack-ignore and secret-ignore

* Updated README

* Updating README

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* Qualys expandr 4226 (demisto#27066)

* update integration category

* RN/Dockert

* Bump pack from version qualys to 1.2.11.

---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: Content Bot <[email protected]>

* Support for Tags v3 in Expanderv1 (demisto#26998)

*added support for asset_type:
      - Network
      - Device
      - ResponsiveIP

---------

Co-authored-by: michal-dagan <[email protected]>

* added unitest

* fix

---------

Co-authored-by: Andrew Scott <[email protected]>
Co-authored-by: michal-dagan <[email protected]>
Co-authored-by: EyalPintzov <[email protected]>

* ews - get-items enhancement

* remove debug

* README

* CR

* switching to type 9

* more integration thinkst cnaray

* more changes

* fix errors

* fix

* fix

* adding deprecated

* rl

* fix

* valid

* space

* rl fix

* fixes

* updated to required: false

* fix cr

* remove space

* fix unit tests

* fix ctred

* fix unit test

* adding tests

* removing note

* Update Packs/Workday/Integrations/Workday/Workday.py

Co-authored-by: Shelly Tzohar <[email protected]>

* fix

* change test

* Update Packs/Workday/Integrations/Workday/Workday.py

Co-authored-by: Shelly Tzohar <[email protected]>

* updates

* add test

* remove info

* reverting code changes

---------

Co-authored-by: Shelly Tzohar <[email protected]>

* transforming type 4 to type 9

* rl

* added Azure Compute v2

* fix

* Blueliv adding

* docker image

* removing IN145

* type4

* changed to required: false

* fix IN116

* subscription_id

* update

* updates

* fix

* adding Demsito except

* temp

* fix

* fix

* fixed error

* fix name

* renaming

* fix

* small fix

* docker image

…emisto#27098)

* update the docker image to stop embed the base64

* CR changes

* Fix for Proofpoint TAP README

* Update Packs/ProofpointTAP/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* added source_confidence_weight arg

* version bump

* updated tpb

* docker update

* docker update

* revert docker update to latest passing tpb

* tpb - skip get-passive-dns check if error

* continue on err

* Update playbook-ThreatStream-Test.yml

* Update Packs/Anomali_ThreatStream/Integrations/AnomaliThreatStreamv3/AnomaliThreatStreamv3.py

Co-authored-by: Shahaf Ben Yakir <[email protected]>

* updated readme

* remove cmd from tpb

---------

Co-authored-by: Shahaf Ben Yakir <[email protected]>

* Netmiko (demisto#26078)

* Updated documentation and formatted code per
XSOAR-supported standards

* Updated Netmiko_description

* Updated Netmiko_description

* Spelling errors

* Initial PR update

* Updated per initial PR feedback

* Added tests parameter

* Refined unit tests

* Whitespace cleanup

* Resolved markdown table generation issues

* Updated documentation

* Documentation tuning

* Doc updates

* Doc update testing

* Docs

* Doc Cleanup

* Code refinement per reviewer comments

* Update Release Notes

* Update RN

* Test commit

* Undo test

* Code Coverage

* Code coverage refinement

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Code Coverage

* Flake8 Corrections

* Removed unneeded pragma's

* Comment cleanup

* Cleanup

---------

Co-authored-by: Dan Tavori <[email protected]>

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* cr notes

* update conf.json

* docker update, yml fixes and removed tpb

* try running tpb again

* fix tpb

* fix sshkey auth

---------

Co-authored-by: Josh Levine <[email protected]>
Co-authored-by: Dan Tavori <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Dan Tavori <[email protected]>

* fix resenging bug

* fix resending bug

* cr fix

* pre-commit fixes

* pre-commit fixes

* add encoding to the url and a UT

* RN

* pre commit

* docker image

* Update Packs/TrendMicroDDA/ReleaseNotes/1_0_13.md

Co-authored-by: yuvalbenshalom <[email protected]>

* add given when then to the UT

* remove redundant import

---------

Co-authored-by: yuvalbenshalom <[email protected]>

* Update schema file

* Update schema file

* Update CODEOWNERS

* Update .github/CODEOWNERS

Co-authored-by: Andrew Shamah <[email protected]>

* Update CODEOWNERS

* Update CODEOWNERS

* Update CODEOWNERS

---------

Co-authored-by: Andrew Shamah <[email protected]>

* Created CiscoASR

* Update Packs/CiscoASR/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CiscoASR/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CiscoASR/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/CiscoASR/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Changed ParsingRules directory location

* Updated README

* Update README.md

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* SentinelOneV2 Content Update

* Updated Release Notes - Docker Version
Added README.md to Script SentinelOneGetMAC
Updated SentinelOne-V2.yml - Docker Version
Added unit test for new get-status command
Updated SentinelOneGetMAC.yml - Docker Version

* Updated Docker Version in Release Note, Integration Yml and Script Yml.

* Removed Automation Script
Added new command sentinelone-get-agent-mac
Updated README.md
Renamed sentinelone-get-status to sentinelone-get-dv-query-status
Added new test to unit test for new function
Updated release notes
Updated Docker Version

* Updated README.md

* Added New Playbook for Running Searches on Endpoints

* Updated Playbook Format and Docs

* Updated release note

* Updated README.md

Co-authored-by: Martin Ohl <[email protected]>

* align

* Open
Align credentials stores to type 9- part 4

* adding Kenna

* adding prisma

* undo

* IN145

* fix

* adding CJ105 to ignore

* undoing last change

* updating conf

* Updated Metadata Of Pack MailSenderNew

* Added release notes to pack MailSenderNew

* Packs/MailSenderNew/Integrations/MailSenderNew/MailSenderNew.yml Docker image update

* Updated Metadata Of Pack AlienVault_OTX

* Added release notes to pack AlienVault_OTX

* Packs/AlienVault_OTX/Integrations/AlienVault_OTX_v2/AlienVault_OTX_v2.yml Docker image update

* Updated Metadata Of Pack ImageOCR

* Added release notes to pack ImageOCR

* Packs/ImageOCR/Integrations/ImageOCR/ImageOCR.yml Docker image update

…sto#27166)

* Fix "cmds" command argument
Update markdown

* Update release notes

* Update Packs/Netmiko/ReleaseNotes/1_0_3.md

---------

Co-authored-by: Josh Levine <[email protected]>
Co-authored-by: Dan Tavori <[email protected]>

* Resecurity pack (demisto#26071)

* initial Pack commit

add Pack description

initial Pack commit

add Pack description

* clean the code, add extra pack docs

* add new param 'mode', fixes

* add extra information to docs

* Update .devcontainer.json name

* update dockerimage version

* add existing secrets to whitelist

* update dockerimage version value

* increase test coverage value

* remove autogenerated files

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.yml

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* fix code after suggested commits

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* fix
remove white spaces

* increase test coverage percent

* apply changes after review:
change string formatting
update command name
update docs

* initial Pack commit

add Pack description

initial Pack commit

add Pack description

* clean the code, add extra pack docs

* add new param 'mode', fixes

* add extra information to docs

* update dockerimage version

* add existing secrets to whitelist

* update dockerimage version value

* increase test coverage value

* remove autogenerated files

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.yml

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* fix code after suggested commits

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* Update Packs/Resecurity/Integrations/ResecurityMonitoring/ResecurityMonitoring.py

Co-authored-by: Guy Afik <[email protected]>

* fix
remove white spaces

* increase test coverage percent

* Update .devcontainer.json name

* apply changes after review:
change string formatting
update command name
update docs

* add pre-commit changes

---------

Co-authored-by: oleyur <[email protected]>
Co-authored-by: Guy Afik <[email protected]>

* revert devcontainer

---------

Co-authored-by: oleyur <[email protected]>
Co-authored-by: oleyur <[email protected]>
Co-authored-by: Guy Afik <[email protected]>
Co-authored-by: GuyAfik <[email protected]>

* Changes

* Changes Release Notes

* Changes Release Notes - Pack Metadata

* resolve conflicts

* username fix

* Bump pack from version CommonPlaybooks to 2.3.68.

* Bump pack from version CortexXDR to 4.10.45.

* Bump pack from version CommonPlaybooks to 2.3.69.

* Bump pack from version CommonTypes to 3.3.71.

* Bump pack from version CortexXDR to 4.10.46.

* fix

* Bump pack from version CortexXDR to 4.11.1.

* Bump pack from version CommonPlaybooks to 2.3.70.

* Bump pack from version CommonTypes to 3.3.72.

* fix

* Bump pack from version CommonPlaybooks to 2.3.71.

* fix

* fix

* Bump pack from version CortexXDR to 4.11.2.

* Bump pack from version CommonPlaybooks to 2.3.72.

* Bump pack from version CortexXDR to 4.11.3.

* Bump pack from version CommonPlaybooks to 2.3.73.

* Review Fixes

* Review Fixes

* Review Fixes

* Review Fixes

* Review Fixes

* Fixes

---------

Co-authored-by: Content Bot <[email protected]>

…t data (demisto#26570) (demisto#27135)

* adding support for arrays of incident data

Co-authored-by: Mike Beauchamp <[email protected]>