diff --git a/README.md b/README.md index b1a67cc..95082c3 100644 --- a/README.md +++ b/README.md @@ -2,16 +2,16 @@ # Cisco ESA Publisher: Splunk -Connector Version: 4.0.0 +Connector Version: 4.0.1 Product Vendor: Cisco Product Name: Cisco ESA Product Version Supported (regex): ".\*" -Minimum Product Version: 6.2.2 +Minimum Product Version: 6.3.0 This app supports investigation on the Cisco Email Security Appliance (ESA) device ### Configuration Variables -The below configuration variables are required for this Connector to operate. These variables are specified when configuring a Cisco ESA asset in SOAR. +This table lists the configuration variables required to operate Cisco ESA. These variables are specified when configuring a Cisco ESA asset in Splunk SOAR. VARIABLE | REQUIRED | TYPE | DESCRIPTION -------- | -------- | ---- | ----------- @@ -506,7 +506,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS **sender_not** | optional | Comma separated list of domain_entries for sender_not (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | **receiver** | optional | Comma separated list of domain_entries for receiver (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | **receiver_not** | optional | Comma separated list of domain_entries for receiver_not (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | -**operation** | optional | Boolean logic between receiver and receiver_not domain_entries. The values can be “and” or “or" . | string | +**operation** | optional | Boolean logic between receiver and receiver_not domain_entries. The values can be "and" or "or" . | string | **raw_json** | optional | Raw JSON payload for add policy items action. | string | #### Action Output @@ -570,7 +570,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS **sender_not** | optional | Comma separated list of domain_entries for sender_not (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | **receiver** | optional | Comma separated list of domain_entries for receiver (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | **receiver_not** | optional | Comma separated list of domain_entries for receiver_not (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | -**operation** | optional | Boolean logic between receiver and receiver_not domain_entries. The values can be “and” or “or" . raw_json: Raw JSON payload for add policy items action. | string | +**operation** | optional | Boolean logic between receiver and receiver_not domain_entries. The values can be "and" or "or" . raw_json: Raw JSON payload for add policy items action. | string | **raw_json** | optional | Raw JSON payload for add policy items action. | string | #### Action Output @@ -604,7 +604,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS **sender_not** | optional | Comma separated list of domain_entries for sender_not (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | **receiver** | optional | Comma separated list of domain_entries for receiver (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | **receiver_not** | optional | Comma separated list of domain_entries for receiver_not (e.g.: user@example.com,User@,@example.com,@.example.com,user@[1.2.3.4],@[1.1.2.3], user@[ipv6:2001:db8::1]) | string | -**operation** | optional | Boolean logic between receiver domain_entries. The values can be “and” or “or" | string | +**operation** | optional | Boolean logic between receiver domain_entries. The values can be "and" or "or" | string | **raw_json** | optional | Raw JSON payload for update policy items action. | string | #### Action Output diff --git a/ciscoesa.json b/ciscoesa.json index ecb8deb..3fafacf 100644 --- a/ciscoesa.json +++ b/ciscoesa.json @@ -7,12 +7,12 @@ "license": "Copyright (c) 2017-2024 Splunk Inc.", "main_module": "ciscoesa_connector.py", "type": "investigative", - "app_version": "4.0.0", + "app_version": "4.0.1", "utctime_updated": "2024-10-15T12:40:27.594330Z", "product_vendor": "Cisco", "product_name": "Cisco ESA", "product_version_regex": ".*", - "min_phantom_version": "6.2.2", + "min_phantom_version": "6.3.0", "logo": "logo_cisco.svg", "logo_dark": "logo_cisco_dark.svg", "latest_tested_versions": [ @@ -2446,7 +2446,7 @@ "param_name": "receiver_not" }, "operation": { - "description": "Boolean logic between receiver and receiver_not domain_entries. The values can be “and” or “or\" .", + "description": "Boolean logic between receiver and receiver_not domain_entries. The values can be \"and\" or \"or\" .", "data_type": "string", "required": false, "primary": true, @@ -2740,7 +2740,7 @@ "param_name": "receiver_not" }, "operation": { - "description": "Boolean logic between receiver and receiver_not domain_entries. The values can be “and” or “or\" . raw_json: Raw JSON payload for add policy items action.", + "description": "Boolean logic between receiver and receiver_not domain_entries. The values can be \"and\" or \"or\" . raw_json: Raw JSON payload for add policy items action.", "data_type": "string", "required": false, "primary": true, @@ -2940,7 +2940,7 @@ "param_name": "receiver_not" }, "operation": { - "description": "Boolean logic between receiver domain_entries. The values can be “and” or “or\"", + "description": "Boolean logic between receiver domain_entries. The values can be \"and\" or \"or\"", "data_type": "string", "required": false, "primary": true, @@ -3517,7 +3517,7 @@ { "action": "release pov quarantine", "identifier": "release_pov_quarantine", - "description": "Release a message that matches the mid attribute from a pov quarantine.", + "description": "Release a message that matches the mid attribute from a pov quarantine", "verbose": "", "type": "investigate", "read_only": false, @@ -3666,7 +3666,7 @@ "param_name": "order_by" }, "order_dir": { - "description": "pecify order direction for retrieved messages.", + "description": "Specify order direction for retrieved messages.", "data_type": "string", "required": false, "primary": false, @@ -3862,7 +3862,7 @@ { "action": "release spam quarantine", "identifier": "release_spam_quarantine", - "description": "Release a message that matches the mid attribute from spam quarantine.", + "description": "Release a message that matches the mid attribute from spam quarantine", "verbose": "", "type": "generic", "read_only": false,