[ Sekoia XDR pack ] - Update Repo by TOUFIKIzakarya · Pull Request #7 · SEKOIA-IO/Cortex-XSOAR-integration

TOUFIKIzakarya · 2026-01-02T15:03:36Z

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

[] In Progress
Ready
In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

Update this repo, to start using it instead of my local one.

Must have

Tests
Documentation

* VectraXDR Release 1.2.0 (demisto#41811) Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com> * Fix for tags and optimized use for list detections --------- Co-authored-by: Crest Data <60967033+crestdatasystems@users.noreply.github.com> Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com> Co-authored-by: merit-maita <meretmaayta@gmail.com>

* Vectra AI Release 2.1.0 (demisto#41809) * Vectra AI Release 2.1.0 * Applied the suggested review comments changes from the PR --------- Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com> * Fixed an issue with Outgoing Mirroring when invalid tags are provided. --------- Co-authored-by: Crest Data <60967033+crestdatasystems@users.noreply.github.com> Co-authored-by: crestdatasystems <crestdatasystems@users.noreply.github.com>

* add region field to Cyberint integration, rename incoming mapper * update release notes * fix region * fix tests * fix region position * fix tests * fix tests * fix tests * add default classifiers and mappers * update the field name * Update Packs/Cyberint/Classifiers/classifier-mapper-incoming-CyberInt.json * update the field id --------- Co-authored-by: klevitskiy <155461095+klevitskiy@users.noreply.github.com> Co-authored-by: merit-maita <49760643+merit-maita@users.noreply.github.com>

…ity (demisto#41900) * new * RN * RN * TPB * TPB fix * Bump pack from version CommonScripts to 1.20.39. * Bump pack from version CommonScripts to 1.20.40. * Bump pack from version CommonScripts to 1.20.41. * Bump pack from version CommonScripts to 1.20.42. * Bump pack from version CommonScripts to 1.20.43. * cr * const -> let * RN * RN --------- Co-authored-by: ipolishuk <ipolishuk@paloaltonetworks.com> Co-authored-by: Content Bot <bot@demisto.com>

* init * working hard coded fetch to a single type. * get events * fetch events * corrcted ts * corrcted params * works but ts * added evnt type arg to debug command * added evnt type arg to debug command * tests and touchups * back at it - some seconds accounting * reformating * refactored * refactored * docs * docs * tests * rn * pre comit * supprot xsoar * pr comments * revert support level * test doc strings * pre commit * pre commit * pre commit * pr comments * time delta * pr comments * pre commit * DeCYFIR * apikey * hr * demo * added test case * pre commit * tests * pre commit * pre commit * pre commit * pre commit * https://github.com/demisto/content/pull/40892/files#r2531944788 * https://github.com/demisto/content/pull/40892/files#r2532133350 * https://github.com/demisto/content/pull/40892/files#r2531922576 * https://github.com/demisto/content/pull/40892/files#r2531924331 * Update Packs/DeCYFIR/Integrations/DecyfirEventCollector/README.md Co-authored-by: Jasmine Beilin <71636766+JasBeilin@users.noreply.github.com> * Update Packs/DeCYFIR/ReleaseNotes/1_0_19.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * dedup * pr comments * pr comments * test * pre commit * tz * pre commit * pre commit * pre commit --------- Co-authored-by: Danny_Fried <dfried@paloaltonetworks.com> Co-authored-by: Jasmine Beilin <71636766+JasBeilin@users.noreply.github.com> Co-authored-by: talihaff <thaffner@paloaltonetworks.com>

* RN * Update Packs/CortexResponseAndRemediation/ReleaseNotes/1_2_64.md Co-authored-by: OmriItzhak <115150792+OmriItzhak@users.noreply.github.com> * Bump pack from version CortexResponseAndRemediation to 1.2.65. --------- Co-authored-by: OmriItzhak <115150792+OmriItzhak@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com>

…mmand (demisto#41980) * fix: corrected field_name parameter values for list-held-message command * docs: Updates release notes * chore: update docker image * chore: added release notes row for docker image update

* test support developer * RN * RN * RN * support * rn * Update Packs/JARM/ReleaseNotes/1_0_19.md Co-authored-by: JudithB <132264628+jbabazadeh@users.noreply.github.com> * Cancel version upload --------- Co-authored-by: JudithB <132264628+jbabazadeh@users.noreply.github.com>

@JasBeilin

* init * improve * pre commit and rn * fix test * fix mypy * cr * cr #2 * fix pre commit * Apply suggestion from @JasBeilin * CR * line too long --------- Co-authored-by: Jasmine Beilin <71636766+JasBeilin@users.noreply.github.com>

…42019) * Remove SlashNextPhishingIncidentResponse from PCAP Analysis * Remove SlashNextPhishingIncidentResponse from deps

…quired fields (demisto#41988) * move params to connect section

@AradCarmi

* Merge master to dev-cloud (demisto#41128) * update codeowners - platform automation (demisto#40952) * update codeowners * Update CODEOWNERS * Update CODEOWNERS * Fix JiraV3 Issues Query using deprecated endpoint (demisto#41025) * Update the issue query endpoint and replace start_at with next_page_token * Fix next page token output * Change to use old ep when start_at is given; add UTs * update rn * error message * Added BC note * Update 3_3_7.md * Apply suggestions from doc review Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> * log the actual error --------- Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> * Bump pack version. (demisto#40999) * Nbensalmon/ciac 10618/collection app sentinels.ai (demisto#39982) Appsentinels.ai offers a platform for collecting, analyzing, and managing security events to provide comprehensive application protection. * Updated Relationship names in Mandiant Enrich and Feed Mandiant Integ… (demisto#40947) (demisto#41113) * Updated Relationship names in Mandiant Enrich and Feed Mandiant Integration * Fixed typo in FeedMandiantThreatIntelligence.py * Increment pack version and Docker tags --------- Co-authored-by: adamlevymandiant <93735185+adamlevymandiant@users.noreply.github.com> Co-authored-by: Adam Levy <adamhlevy@google.com> * XSUP-54313 (demisto#40991) * Initial implementation * Fix UT * ruff chagnes * UT * ruff * RN and UT * ruff * Update Packs/CrowdStrikeFalcon/ReleaseNotes/2_3_7.md Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> * Minor fix * Fix UT * Apply suggestion from @AradCarmi Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * Apply suggestion from @AradCarmi Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * Delete Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/integration-CrowdStrikeFalcon.yml * final CR * Change user key * Raise version * RN * Fix --------- Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * Xsup 55040 (demisto#41063) * required yml fields to allow mapping * yml changes * return results * return results * pre-commit * pre-commit * pr comments * pr comments * pre commot * Mark remaining internal scripts with isInternal (demisto#41083) * Add missing isInternal to agentix scripts * Bump versions and RN * Update docker * Remove list notation from rn * Apply suggestions from doc review Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Fix rn * Bump pack from version CrowdStrikeFalcon to 2.3.9. * replace rn with generic message --------- Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> * fix get-endpoint-data action inputs (demisto#41118) * bump version of aggregated scripts * Update 1_1_3.md * Whois - adding another regex for registrant_regexes (demisto#41116) * add one log to see the raw-response as is * adding another regex for registrant_regexes * CRTX-165828 - Mapping Tigera Calico Secure (demisto#40925) * create all files * remove unwanted files * update readme according to tech writer suggestions * update readme * create files * fix timestamp parsing rule * fix timestamp parsing rule * fix timestamp parsing rule * fix readme * fix readme * fix metadata - add platform * fix time parsing * fix time parsing * fix readme precommit error * fix readme precommit error * fix xif * readme file error * readme file error * fix xif * change ip_protocol * cisco umbrella - use risk score for domain verdict (demisto#41000) * domaine verdict update to use risk score * update rn * Update Packs/Cisco-umbrella/ReleaseNotes/2_0_5.md Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> * sectionOrder and docker image * add docker update to release note * send risk_score and improve threshold logic * update Threshold default value --------- Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> * Updating Trend Micro Vision One pack (demisto#41079) * Updating Trend Micro Vision One pack * Updating RN * fixing rn and md * fixing fields in modeling rules * TIM/Improve the removal of trailing characters in the format URL script (demisto#41075) * TIM/Improve the removal of trailing characters in the format URL script * Bump pack from version CommonScripts to 1.20.7. * Bump pack from version CommonScripts to 1.20.8. * cr fixes * Bump pack from version CommonScripts to 1.20.9. * Bump pack from version CommonScripts to 1.20.10. * empty commit * fixes --------- Co-authored-by: Content Bot <bot@demisto.com> * Microsoft Management Activity API (O365/Azure Events) integration request to have case insensitive for Operations to fetch (demisto#41070) * Operation filter changed to lowercase * Operation filter changed to lowercase * formatter * formatter * formatter * back to doc change only * back to doc change only * Small change * Small change * Small change * Small change * merged from master * review changes * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity.yml Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity.yml Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity_description.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/ReleaseNotes/1_3_60.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity_description.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity_description.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * small changes * small changes * small changes * small changes * small changes * small changes * added to readme * added to readme * Update Packs/MicrosoftManagementActivity/ReleaseNotes/1_3_60.md Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> --------- Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> * Fix get user data ad missing args (demisto#41125) * fix the arg name username is directed to when calling ad-get-user * added rn --------- Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> Co-authored-by: Sapir Malka <44067957+itssapir@users.noreply.github.com> Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> Co-authored-by: Mike Rizzo <mrizzo@paloaltonetworks.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: adamlevymandiant <93735185+adamlevymandiant@users.noreply.github.com> Co-authored-by: Adam Levy <adamhlevy@google.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: Maya Goldman <94686128+mayyagoldman@users.noreply.github.com> Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: rshunim <102469772+rshunim@users.noreply.github.com> Co-authored-by: akshotiamit-pa <aakshoti@paloaltonetworks.com> Co-authored-by: yedidyacohenpalo <162107504+yedidyacohenpalo@users.noreply.github.com> Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> Co-authored-by: ellopez777 <159898322+ellopez777@users.noreply.github.com> Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com> Co-authored-by: almog2296 <alabudi@paloaltonetworks.com> Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> * Merge branch 'master' into dev-cloud * CRTX-193174 - CloudTrail describe command (demisto#41105) * CRTX-193174 * finish implemention py, add unit-test, add RN * Empty-Commit to trigger build * doc review fixes * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * doc review fixes * Empty-Commit to trigger build * add description * fix demo comments * fix UT, add contextpaths * add errors handling mechanism to the main * README fix * error hundling * RN change version number --------- Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * CRTX-192056 - S3 existing commands (demisto#41129) * CRTX-192056 * implement commands * remove download and upload commands * fix yml contextpath, fix commands implemention, delete contextpath from README * add UT, doc review, little fix * Demo fixes * fix RM102 * reslove conflicts * CRTX-187358 - Instance commands (demisto#40861) * Empty-Commit - CRTX-187356 * add RN and commands template method * update RN * change RN, add commands templates, add command mapping, order REQUIRED_ACTIONS * add yml commands, add methods * add describe method, add quick actions, add contextpath * fix pre-commit errors, change arguments names * change supportsquickactions place in yml * delete long context from yml fix describe command add readme * fix pre-commit errors * add arguments pretty names * remove tag_specifications rewrite parse_filter_field * change description of filter argument, limit filter regex, add RN * add dot, add REQUIRED_ACTIONS, add tests * fix error Using variable 'error_message' before assignment * delete failed test * add return to the delete_security_group_command * fix regex * fix regex * error hundling * fix method issue * fix delete method and fix error entry * fix parse_filter_field method * improve regex * add AWSErrorHandler, add pagination for describe_command,fix filter regexs, fix describe command * fix aws-ec2-security-group-egress-authorize update README.md * Empty-Commit - CRTX-187358 * change aws-ec2-security-group-describe to aws-ec2-security-groups-describe * add quickaction prettypredefined * fixed deleted ip_permissions arg * change regex and errors hundling * add COOC error handling * replace *port* arg support, add bc RN * fix UT * error hundling * error hundling * remove quick action * fix UT * fix test_ec2_create_security_group_command_client_error test * fix UT, add remove_encoded_authorization_message method * fix UT * change API Module, Fix UT, Fix README, Add ex to yml * replace parse_resource_ids with argToList * fix from argToList(args.get("group_ids",[]) to argToList(args.get("group_ids",[])) * Update AWS.py * remove AccountId context from aws-ec2-security-group-create command * remove regex overlaps * remove regex overlaps * Update README.md * change from_port to_port description, README Re-generated and doc-review fixes * Update 3_0_0.md * first implementation * add describe_instances_command and fix yml * Update AWS.py * Update AWS.py * change implementation, add more info to README * fix tests according to new implemntion * change yml for create command * change ruff errors * add parse_tag_field method * Update AWS.py * remove any CRTX-187356 * remove any CRTX-187356 * remove any CRTX-187356 * Add README for new commands, Delete yml not supported arguments, Add UT, Fix parse_tag_field method and add UT * fix UT * change AWSErrorHandler * fix yml defaultvalue to defaultValue and change PREDEFINED from capital letters * change defaultValue to defaultvalue in configuration AWS.yml * change build_pagination_kwargs * doc review * doc review * finish doc review * add methods * change process_instance_data * fix CR review * add tests form demisto#40861 to here * update docker, update RN, add errors handling mechanism to the main * add tests and fix build_pagination_kwargs * ruff format errors * add errors handling mechanism to the main - aws error hundling * ruff format errors * change cotextpath * change metadata version * change context path * Update AWS.py * RM102 change * Update README.md * pre-commit fixes * Update AWS.py * Update AWS.py * CR review fixes * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * fix error handling, fix UT * reslove conflicts and CR review fixes * reslove conflicts * change metadata version * CR review fixes * reslove conflicts --------- Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * feat: add AWS EKS, EC2 snapshot and ECS cluster management commands (demisto#41101) * feat: add AWS EKS, EC2 snapshot and ECS cluster management commands * style: reformat AWS integration YAML with consistent indentation and quotes * feat: add AWS EKS cluster management commands and update EC2 snapshot functionality * docs: relocate command descriptions to top of AWS integration command blocks * test: add AWS ECS/EKS/EC2 snapshot and cluster management tests * fix: add error handling and debug logs for AWS EC2, EKS and ECS operations, added tests * fix: update AWS region parameter and add missing EC2/EKS/ECS required actions * fix: update ECS cluster settings with correct parameter names and error handling * style: fix indentation in ECS cluster settings update method * refactor: move parse_tag_field function to module level and improve error handling - cr * refactor: simplify error handling in ECS cluster settings update + cr * cr * cr * cr * docs: add docstring and tests for EC2 snapshot permission modification * pc * feat: update AWS regions and remove redundant isArray flags in EKS commands * docs: consolidate AWS S3 bucket commands into v2.1.5 release notes * Changed context path to Snapshot * docs: update EC2 snapshot output paths from plural to singular form * fix: update EC2 snapshot test output prefix from plural to singular * CRTX-187328: GCP commands (demisto#41302) * commands * unit tests and commands updates * error handling + fine tunning * removed iam unit tests + pre-commit updates * removed the iam commands * pre-commit updates * readme * yml + readme updates * rn * remove metadata-set command * review * pre-commit readme updates * unit tests and small fixes * small updates * small README update * remove debug statements * README pre-commit * labels-set add oprion and unit tests * pre-commit and small fixes * readme * xsoar * error handling explanation * cr updates * fixed unit tests * pre-commit * doc review * readme * add labels and labelFingerprint to hr * pre-commit * do106 * rn * Add commands from Azure NSG to Azure integration (demisto#41096) * add pattern * add pattern * added commands to yml * added all commands * fixed yml * changes * fixed yml and py * added unittest beside the delete function * removed mock from publicip * fixed unittests * fixed pre commit errors * changed docker image, aligned readme and run precommit * fixed delete function * fixed conflicts * added command exmaples * fixed readme * fixed readme * added the permissions to the py file * Update pack_metadata.json * edited the permissions in the py file * run pre commit * fixed ai cr * added descriptions to functions * changes * added to readme * fixed readme * removed letter * fixed delete function * added unittest for delete * Added also the case of 200 in the delete command * Added patterns for the new 2 commands * added first command and permissions * added both commands * added to readme * added json and unttests for 2 commands * run pre commit * fixed permissions' * Apply suggestions from code review Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * added 2 commands to rn * fixed errors in delete, commit before errors handeling change * Added a new dict and handle errors 401 and 403 * added unittests and fix error handling * added try-except to commands * run pre commit * fixed the delete function * fixed * added exmaples for 2 commands * removed the subsriptions list * removed the 2 additional commands * run pre commit * removed more in yml * removed jsons test and from commands examples * fixed handle_azure_error function * added descriptions * added a small test for etag * added return types * fixed delte rule functio * fixed delte rule functio * fixed issues after demo * fixed unittests * added more unittets * removed a file * added retuen statments * pre commit * fixed reture statments * fixed reture statments * fixed reture statments * fixed reture statments * fixed reture statments * fixed reture statments * fixed reture statments * fixed reture statments * added comments * fixed context paths * fixed readme * run pre commit * review and pre-commit * updated the doc strings * cr updates * doc review * README update * error entries --------- Co-authored-by: noydavidi <nodavidi.paloaltonetworks.com> Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Add blob commands to Azure integration (demisto#41147) * added the commands * added to readme * created rn * added the examples command and jsons * Added the util_load_json function * run pre commit * CR: extract Azure resource info parsing into dedicated function and simplify code * notes from demo * fix: move removeNull parameter to correct TableData constructor argument * pc * refactor: remove unused util_load_json function from Azure test file * doc review + pc --------- Co-authored-by: noydavidi <nodavidi.paloaltonetworks.com> Co-authored-by: MLainer1 <mlainer@paloaltonetworks.com> * Crtx 196562 add aws additional commands (demisto#41466) * init aws-s3-delete-bucket-website command * delete_bucket_website_command done * wip modify_event_subscription_command * allign with naming convention and add aws-s3-bucket-ownership-controls-put * enforce OwnershipControls contain rules * put_bucket_ownership_controls_command validations * add aws-ec2-subnet-attribute-modify * fine tuning * wip modify_event_subscription_command * wip modify_event_subscription_command * wip * wip * add modify_subnet_attribute_command * wip * wip * done modify_subnet_attribute_command * add docstrings * delete expected bucket owner * create ownership control dict in code * add unit tests * fix unit tests * ruff format * ruff format * add rn, pack metadata and readme * revert pack metatadata * fix readme, output of aws-rds-event-subscription-modify * pre commit changes * fix arg_to_boolean_or_none * Update Packs/AWS/Integrations/AWS/AWS.py Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * docs * Update Packs/AWS/Integrations/AWS/AWS.py Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * ruff * ruff * add modify_event_subscription_command * empty commit * empty commit --------- Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Aws additional commands s3 upload/download (demisto#41599) * commands * working commands * release notes + readme * release notes + readme * release notes + readme * release notes + readme * minor change * minor change * Your commit message here * Your commit message here * minor change * added context path to yml * changed permission * Update Packs/AWS/Integrations/AWS/AWS_test.py Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS_test.py Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/README.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/README.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/README.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * empty commit --------- Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Add Azure VM commands (demisto#41559) * Azure QA Batch1 (demisto#41528) * add subscription id argument * commands * update release notes * add permission + update release notes * tests change * tests change * tests change * tests change * tests change * Update Packs/Azure/Integrations/Azure/Azure.yml Co-authored-by: Moish-Gilboa <moish.gilboa@gmail.com> * tests change * merged from master * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud --------- Co-authored-by: Moish-Gilboa <moish.gilboa@gmail.com> * Azure QA Batch2 (demisto#41529) * add permission + update release notes * add permission + update release notes * add permission + update release notes * tests change * tests change * tests change * tests change * tests change * tests change * tests change * tests change * tests change * tests change * docs * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * Gcp quick actions (demisto#41446) * added quick actions * fixed qa * rn and fix * added default values * fix qa's * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * fix pr comments * ruff format * ruff format * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/Integrations/GCP/GCP.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/GCP/ReleaseNotes/1_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * generate README * pre-commit updates --------- Co-authored-by: ilaredo <ilaredo@paloaltonetworks.com> Co-authored-by: ilaredo <166304750+ilaredo@users.noreply.github.com> Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Crtx 196222 support aws new quick actions v2 (demisto#41509) * add aws ec2 revoke-security-group-ingress qa * wip * wip * add some qa's * add qa's * add qa's * add qa's * add qa's * merge * add qa's * fix identation * wip * wip * wip * wip * wip * wip * wip * wip * wip * wip * wip * wip * wip * add description * add qa * add rn for aws * add rn for aws-iam * add rn for aws-iam * Update Packs/AWS-IAM/Integrations/AWS-IAM/AWS-IAM.yml Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * fix rn * fix pr comments * update aws-iam tag * ruff format * handle int convertion error * Update Packs/AWS-IAM/Integrations/AWS-IAM/AWS-IAM.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/ReleaseNotes/2_2_0.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS-IAM/ReleaseNotes/1_1_76.md Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.yml Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Apply suggestions from code review Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Update Packs/AWS/Integrations/AWS/AWS.py Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * generated docs * add readme * pre-commit updates * pre-commit updates * pre-commit updates * add 4 commands to readme --------- Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Azure QA Batch3 (demisto#41531) * add permission + update release notes * add permission + update release notes * add permission + update release notes * add permission + update release notes * tests change * tests change * tests change * tests change * tests change * merged from dev-cloud * merged from dev-cloud * small changes * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * Platform AWS & Azure Billing & Budgets (demisto#41564) * Platform AWS & Azure Billing & Budgets * README (demisto#41706) * Az CIAC 13916.2 (demisto#41711) * AWS new commands Crtx 193217 (demisto#41622) * first commit * first commit * add commands + tests * add readme+release notes * add ignore context depth above 5 * add ignore context depth above 5 * small readme fix * tests change * tests change * removed kms command * removed kms command * fixed tests * fixed tests * fixed tests * fixed tests * small changes * small changes * small changes * merged from dev-cloud * update after review * update after review * update after review * update after review * update after review * update after review * update after review * feat: add EC2 VPC and IPAM resource discovery commands to AWS pack (demisto#41554) * feat: add EC2 VPC and IPAM resource discovery commands to AWS pack * feat: add commands to describe VPCs and subnets in AWS EC2 * feat: add EC2 IPAM resource discovery commands and VPC/subnet descriptions * demo notes: enhance AWS EC2 table formatting and standardize pagination parameters * demo notes * chore: remove BA109 ignore rule from AWS pack configuration * chore: remove unused EC2 VPC and IPAM permissions from required actions list * review notes * docs: clarify AWS account ID description in EC2 IPAM commands * refactor: rename AWS EC2 describe commands to follow consistent naming pattern * revert to origin before merge * pc * revert readme for merge * feat: add AWS subnet and IPAM resource discovery commands to AWS integration * docs: update AWS integration with expanded region list and context output fixes * revert before merge * docs: fix markdown escaping in AWS integration documentation * rm * feat: add AWS EC2 commands for VPC, subnet, and IPAM resource discovery management * CRTX-193821/AWSLambda (demisto#41596) * Empty-Commit * RN, update YML, Update py methods * update YML, add README, add commands, add tests * update tests, fixs py, fix readme * reslove conflicts * generate README.md * update README.md * delete extra lambda class * add raw response to invoke command * CR review * fix get_policy_command context * fix demo comments * CR review * CR review * CR review * reslove conflicts * reslove conflicts * fix tests * fix tests * Update AWS_test.py * update get-policy README * CR review * reslove conflicts * Create GCP Storage commands (demisto#41632) * Create GCP Storage commands * Add GCP Compute commands (demisto#41672) * Add 7 GCP Compute commands `gcp-compute-firewall-insert` `gcp-compute-firewall-list` `gcp-compute-firewall-get` `gcp-compute-snapshots-list` `gcp-compute-snapshot-get` `gcp-compute-instances-aggregated-list-by-ip` `gcp-compute-network-tag-set` * lambda commad add region (demisto#41870) * Crtx 188346 aws ec2 add additional commands (demisto#41717) * get_latest_ami_command wip * add create_network_acl_command * wip * add command * add create tags command * wip * get_latest_ami_command * fix get_latest_ami_command * fix create_network_acl_command * fix get_ipam_discovered_public_addresses_command * fix create_tags_command * add get_bucket_website_command get_bucket_acl_command * add docstrings * support pagination * support pagination * support pagination * add unit tests * add unit tests * FIX TAGS * add tests * wip * wip * fix get_latest_ami_command * fix unit tests * add get_ipam_discovered_public_addresses_command tests * add rn,readme, and fix commands * fix tag specification * fix descriptions * fix readme * demo comments * Apply suggestions from code review Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * fix pc comments * fix tests * fix conflict * add new rn * pre-commit fixes * pre-commit fixes * wip * wip * fix pr comment * ruff * fix max_results issues * remove whitespace from readme * remove whitespace from readme * remove whitespace from readme * remove limit and next token from latest-ami * Apply suggestions from code review Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * pr comments * Apply suggestions from code review Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * update readme for aws-ec2-tags-create * fix unit tests * ruff format * add empty line --------- Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * fixed aws rn * fix azure rn * fix gcp rn * fixed the quick actions naming in the rn * removed the quick actions from readme * aws-iam update readme and rn * removed docker image update from rn * limit default value 50 in gcp * fix unit test * commands and quick actions renaming * CRTX-203967-aws-update-certificate (demisto#41682) * new pr * first commit * first commit * first commit * merged from dev-cloud * merged from dev-cloud + readme removal * merged from dev-cloud + readme removal * update * Empty-Commit * Crtx 193217 batch4 (demisto#41708) * yml + .py * update after review * update after review * update after review * update after review * update after review * update after review * update after review * update after review * first commit * merged from dev-cloud * merged from dev-cloud * merged from dev-cloud * update * update * Crtx 204150 additional aws qas (demisto#41767) * add 2 qa's * add eks qa's * add iam qa * add rn * wrap code * fix qa's * add readme * Apply suggestions from code review Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * pr comments * Apply suggestions from code review Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * ruff format * ruff format * revert readme, format files * revert format * format yml * add new line in the end of file * fix qa name * revoke aws-iam-suspend-access-for-role-quick-action * remove empty line * revert Enable IMDSv2, Block S3 Public Access qa * merged * add rn --------- Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * removed Revoke NSG Rule to Stop Traffic which is Update NSG to Block Traffic from Azure QA * add Enable IMDSv2 and Block S3 Public Access qa's (demisto#42006) * add gcp commands (demisto#41592) * add commands * update rn * update rn * add unitests * changh yml path * changh yml path * readme fix * CR FIX * conflict solving * context solving * code review * code review * code review * Delete Packs/GCP/ReleaseNotes/1_1_1.md * code review * code review * code review * code review * code review * code review * code review * renamed the quick actions names * fixed the order of GCP RN * remove aws-iam from current pr * remove aws-iam from current pr --------- Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> Co-authored-by: Sapir Malka <44067957+itssapir@users.noreply.github.com> Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> Co-authored-by: Mike Rizzo <mrizzo@paloaltonetworks.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: adamlevymandiant <93735185+adamlevymandiant@users.noreply.github.com> Co-authored-by: Adam Levy <adamhlevy@google.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: Maya Goldman <94686128+mayyagoldman@users.noreply.github.com> Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: rshunim <102469772+rshunim@users.noreply.github.com> Co-authored-by: akshotiamit-pa <aakshoti@paloaltonetworks.com> Co-authored-by: yedidyacohenpalo <162107504+yedidyacohenpalo@users.noreply.github.com> Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> Co-authored-by: ellopez777 <159898322+ellopez777@users.noreply.github.com> Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com> Co-authored-by: almog2296 <alabudi@paloaltonetworks.com> Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: MLainer1 <mlainer@paloaltonetworks.com> Co-authored-by: Sapir Shuker <49246861+sapirshuker@users.noreply.github.com> Co-authored-by: talihaff <thaffner@paloaltonetworks.com> Co-authored-by: MLainer1 <93524335+MLainer1@users.noreply.github.com> Co-authored-by: noydavidi <77931201+noydavidi@users.noreply.github.com> Co-authored-by: ilaredo <166304750+ilaredo@users.noreply.github.com> Co-authored-by: Moish-Gilboa <moish.gilboa@gmail.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: ilaredo <ilaredo@paloaltonetworks.com> Co-authored-by: azonenfeld <117573492+aaron1535@users.noreply.github.com> Co-authored-by: masulin97 <masulin@paloaltonetworks.com>

…o#41939) * AWS Public Access Misconfiguration playbook files. * Updated release notes for v2.0.0 * Updated playbooks after feedback, release notes, pack_metadata and trigger files. * Updated release notes for v1.5.0 and descriptions of trigger files. * README updates. * Updated content pack README. * Fixed validation errors. * Updated trigger descriptions. * Fixed pre-commit errors. * Removed extra fields and added fromversion to trigger files. * Removed fromversion from trigger files. * Added description for task 0 because pre-commit flagged it. * Applied suggestions from docs review Co-authored-by: talihaff <thaffner@paloaltonetworks.com> * Updated README for pack to remove numbering. * Removed supportedModules from trigger files to let it inherit from pack metadata. * Removed playbooktaskmissingcomponent: null from all playbooks. * Pre-commit error fix for missing description. * Pre-commit error fix for missing description. * Removed adopted field and spaces from trigger file names. * Removed adopted field from notify playbook. * Updated pack_metadata with server version and dependencies. * Removed serverminversion from pack metadata as it did not fix pre-commit error. * Updated fromversion for AWS playbook. * Added from_version to Azure trigger file. * Reverted trigger file from_version field. * first commit * first commit * first commit * Cosmetic updates to AWS Public Access Misconfig playbook. --------- Co-authored-by: talihaff <thaffner@paloaltonetworks.com> Co-authored-by: Tal <tcarmeli@paloaltonetworks.com>

* poetry files * update validation config file * update validation config file * update validation config file --------- Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: yedidyacohenpalo <yecohen@paloaltonetworks.com>

* fix rn * fix rn * Update Packs/ServiceNow/ReleaseNotes/2_8_21.md

…41930)

* Update release notes * Bump pack from version CortexResponseAndRemediation to 1.2.56. * Restore release notes file * update release notes * Bump pack from version CortexResponseAndRemediation to 1.2.62. * Bump pack from version CortexResponseAndRemediation to 1.2.63. * Bump pack from version CortexResponseAndRemediation to 1.2.64. * Bump pack from version CortexResponseAndRemediation to 1.2.65. * Bump pack from version CortexResponseAndRemediation to 1.2.66. * Trigger Build --------- Co-authored-by: Content Bot <bot@demisto.com>

…sto#41864) * Added 2 new arguments, added context data * Added test for new functionallity * Added tests, readme, rn * add noqa: E9003 because of sleep in legacy code * Update Okta_v2.py * Bump pack from version Okta to 3.3.27. * Ignore sleep errors * cr * add metadata outputs to all commands * fix tests * fix test * readme * fix test * pc * Update 3_3_27.md * Update 3_3_27.md * di * Added a fix to the disable-user script * fix error when there is an error entry from Okta * pc * cr * Empty commit to trigger build --------- Co-authored-by: Content Bot <bot@demisto.com>

* add CitrixDaasEventCollector * revert CommonServerPython.py * add README.md * pre commit * add search_date_option arg * handle invalid token res * handle invalid token res * add CitrixCloudEventCollector * add _ENTRY_STATUS field * change event time format * update res example * update README * update README * update pack README * pre commit * fix token using * refactoring the code after testing * delete daas * pre commit * add end_date_time param * add image * pre commit * update README * add tests * ruff * ruff * fix tests * update README * update README * fix pr comments * avoid duplicates in pagination * add test_fetch_events_command_first_run * pre commit * add pack README * pre commit * use utcnow for first fetch * ruff * remove event collector from name * change pack name to citrix cloud * use dateparser * fix test * split the line * change method name to module_test_command * ignore mypy * citrix daas * delete citrix daas * doc review * update pack metadata * update README.md * update README.md * change name to citrix * doc review

…ons prs (demisto#42026) * switch between fixes and relates * minor change in function name * Update .github/github_workflow_scripts/create_internal_pr.py Co-authored-by: Jasmine Beilin <71636766+JasBeilin@users.noreply.github.com> * Update .github/github_workflow_scripts/create_internal_pr.py * change --------- Co-authored-by: Jasmine Beilin <71636766+JasBeilin@users.noreply.github.com>

* regex u change * docker version. bump version. pre commit. * fix regex pattern * remove redundant comment * pre-commit

* added modeling rules * added comments, updated pack_metadata and release notes. * fix to the readme file * schema json * changes to schema * changes to readme, schema and modeling * fix to tags * added notes * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/README.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/OktaASA/ReleaseNotes/1_0_6.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * fix to release note * fix to release note * changes to xif due to review --------- Co-authored-by: sfish99 <sharonfispam@gmail.com> Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com>

* docker * RN * fix * fix * revert

* init * minor changes * complete * RN * Update docker * resolve conflicts * cr changes * Bump pack from version Core to 3.4.42. * pre-commit * Bump pack from version Core to 3.4.43. * Bump pack from version Core to 3.4.44. * Bump pack from version Core to 3.4.45. * Bump pack from version Core to 3.4.46. * Bump pack from version Core to 3.4.47. * Bump pack from version Core to 3.4.48. * Bump pack from version Core to 3.4.49. * Bump pack from version Core to 3.4.50. * Bump pack from version Core to 3.4.51. * Bump pack from version Core to 3.4.52. * conflicts * Update 3_4_53.md --------- Co-authored-by: Content Bot <bot@demisto.com>

@AradCarmi

* Empty-Commit - CRTX-187356 * add RN and commands template method * update RN * change RN, add commands templates, add command mapping, order REQUIRED_ACTIONS * add yml commands, add methods * add describe method, add quick actions, add contextpath * fix pre-commit errors, change arguments names * change supportsquickactions place in yml * delete long context from yml fix describe command add readme * fix pre-commit errors * add arguments pretty names * remove tag_specifications rewrite parse_filter_field * change description of filter argument, limit filter regex, add RN * add dot, add REQUIRED_ACTIONS, add tests * fix error Using variable 'error_message' before assignment * delete failed test * add return to the delete_security_group_command * fix regex * fix regex * error hundling * fix method issue * fix delete method and fix error entry * fix parse_filter_field method * improve regex * add AWSErrorHandler, add pagination for describe_command,fix filter regexs, fix describe command * fix aws-ec2-security-group-egress-authorize update README.md * change aws-ec2-security-group-describe to aws-ec2-security-groups-describe * add quickaction prettypredefined * fixed deleted ip_permissions arg * change regex and errors hundling * add COOC error handling * replace *port* arg support, add bc RN * fix UT * error hundling * error hundling * remove quick action * fix UT * fix test_ec2_create_security_group_command_client_error test * fix UT, add remove_encoded_authorization_message method * fix UT * change API Module, Fix UT, Fix README, Add ex to yml * replace parse_resource_ids with argToList * fix from argToList(args.get("group_ids",[]) to argToList(args.get("group_ids",[])) * Update AWS.py * remove AccountId context from aws-ec2-security-group-create command * remove regex overlaps * remove regex overlaps * Update README.md * change from_port to_port description, README Re-generated and doc-review fixes * Update 3_0_0.md * Update AWS.py * change implementation, add more info to README * fix tests according to new implemntion * change yml for create command * change ruff errors * change AWSErrorHandler and fix UT * fix UT * Update AWS_test.py * fix demo comments * add to metadata * remove metadata * CR review * change RN * change filter argument description aws-ec2-security-groups-describe * Update Packs/AWS/Integrations/AWS/AWS.py Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> * fix CR review * fix pre-commit * update docker * change filter argument description aws-ec2-security-groups-describe * change IpPermissionsEgress type * CRTX-192056 * Merge master to dev-cloud (demisto#41128) * update codeowners - platform automation (demisto#40952) * update codeowners * Update CODEOWNERS * Update CODEOWNERS * Fix JiraV3 Issues Query using deprecated endpoint (demisto#41025) * Update the issue query endpoint and replace start_at with next_page_token * Fix next page token output * Change to use old ep when start_at is given; add UTs * update rn * error message * Added BC note * Update 3_3_7.md * Apply suggestions from doc review Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> * log the actual error --------- Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> * Bump pack version. (demisto#40999) * Nbensalmon/ciac 10618/collection app sentinels.ai (demisto#39982) Appsentinels.ai offers a platform for collecting, analyzing, and managing security events to provide comprehensive application protection. * Updated Relationship names in Mandiant Enrich and Feed Mandiant Integ… (demisto#40947) (demisto#41113) * Updated Relationship names in Mandiant Enrich and Feed Mandiant Integration * Fixed typo in FeedMandiantThreatIntelligence.py * Increment pack version and Docker tags --------- Co-authored-by: adamlevymandiant <93735185+adamlevymandiant@users.noreply.github.com> Co-authored-by: Adam Levy <adamhlevy@google.com> * XSUP-54313 (demisto#40991) * Initial implementation * Fix UT * ruff chagnes * UT * ruff * RN and UT * ruff * Update Packs/CrowdStrikeFalcon/ReleaseNotes/2_3_7.md Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> * Minor fix * Fix UT * Apply suggestion from @AradCarmi Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * Apply suggestion from @AradCarmi Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * Delete Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/integration-CrowdStrikeFalcon.yml * final CR * Change user key * Raise version * RN * Fix --------- Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> * Xsup 55040 (demisto#41063) * required yml fields to allow mapping * yml changes * return results * return results * pre-commit * pre-commit * pr comments * pr comments * pre commot * Mark remaining internal scripts with isInternal (demisto#41083) * Add missing isInternal to agentix scripts * Bump versions and RN * Update docker * Remove list notation from rn * Apply suggestions from doc review Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Fix rn * Bump pack from version CrowdStrikeFalcon to 2.3.9. * replace rn with generic message --------- Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> * fix get-endpoint-data action inputs (demisto#41118) * bump version of aggregated scripts * Update 1_1_3.md * Whois - adding another regex for registrant_regexes (demisto#41116) * add one log to see the raw-response as is * adding another regex for registrant_regexes * CRTX-165828 - Mapping Tigera Calico Secure (demisto#40925) * create all files * remove unwanted files * update readme according to tech writer suggestions * update readme * create files * fix timestamp parsing rule * fix timestamp parsing rule * fix timestamp parsing rule * fix readme * fix readme * fix metadata - add platform * fix time parsing * fix time parsing * fix readme precommit error * fix readme precommit error * fix xif * readme file error * readme file error * fix xif * change ip_protocol * cisco umbrella - use risk score for domain verdict (demisto#41000) * domaine verdict update to use risk score * update rn * Update Packs/Cisco-umbrella/ReleaseNotes/2_0_5.md Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> * sectionOrder and docker image * add docker update to release note * send risk_score and improve threshold logic * update Threshold default value --------- Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> * Updating Trend Micro Vision One pack (demisto#41079) * Updating Trend Micro Vision One pack * Updating RN * fixing rn and md * fixing fields in modeling rules * TIM/Improve the removal of trailing characters in the format URL script (demisto#41075) * TIM/Improve the removal of trailing characters in the format URL script * Bump pack from version CommonScripts to 1.20.7. * Bump pack from version CommonScripts to 1.20.8. * cr fixes * Bump pack from version CommonScripts to 1.20.9. * Bump pack from version CommonScripts to 1.20.10. * empty commit * fixes --------- Co-authored-by: Content Bot <bot@demisto.com> * Microsoft Management Activity API (O365/Azure Events) integration request to have case insensitive for Operations to fetch (demisto#41070) * Operation filter changed to lowercase * Operation filter changed to lowercase * formatter * formatter * formatter * back to doc change only * back to doc change only * Small change * Small change * Small change * Small change * merged from master * review changes * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity.yml Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity.yml Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity_description.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/ReleaseNotes/1_3_60.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity_description.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * Update Packs/MicrosoftManagementActivity/Integrations/MicrosoftManagementActivity/MicrosoftManagementActivity_description.md Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> * small changes * small changes * small changes * small changes * small changes * small changes * added to readme * added to readme * Update Packs/MicrosoftManagementActivity/ReleaseNotes/1_3_60.md Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> --------- Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> * Fix get user data ad missing args (demisto#41125) * fix the arg name username is directed to when calling ad-get-user * added rn --------- Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> Co-authored-by: Sapir Malka <44067957+itssapir@users.noreply.github.com> Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> Co-authored-by: Mike Rizzo <mrizzo@paloaltonetworks.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: adamlevymandiant <93735185+adamlevymandiant@users.noreply.github.com> Co-authored-by: Adam Levy <adamhlevy@google.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: Maya Goldman <94686128+mayyagoldman@users.noreply.github.com> Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: rshunim <102469772+rshunim@users.noreply.github.com> Co-authored-by: akshotiamit-pa <aakshoti@paloaltonetworks.com> Co-authored-by: yedidyacohenpalo <162107504+yedidyacohenpalo@users.noreply.github.com> Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> Co-authored-by: ellopez777 <159898322+ellopez777@users.noreply.github.com> Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com> Co-authored-by: almog2296 <alabudi@paloaltonetworks.com> Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> * add errors handling mechanism to the main * add tests parse_resource_ids for coverage * add tests * fix tests * format tests file * Update AWS_test.py * change SecurityGroupsNextToken contextpath type and add SecurityGroupArn to the context path * CR review * Final fix * fix tests * update Packs/AWS/ReleaseNotes/2_1_0.md RN * update ReleaseNotes/2_1_1.md ReleaseNotes/2_1_1.json pack_metadata.json * reslove AWS.yml and AWS_test.py conflicts * reslove AWS.yml conflicts * reslove AWS.yml and AWS.py conflicts * reslove AWS/README.md conflicts * Update 2_1_1.json * deprected insted of delete the port arguments * delete 2_2_1.json * add handle_port_range method * Update AWS_test.py * Update AWS_test.py --------- Co-authored-by: RotemAmit <ramit@paloaltonetworks.com> Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> Co-authored-by: Sapir Malka <44067957+itssapir@users.noreply.github.com> Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> Co-authored-by: Mike Rizzo <mrizzo@paloaltonetworks.com> Co-authored-by: Niv Ben Salmon <nbensalmon@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: adamlevymandiant <93735185+adamlevymandiant@users.noreply.github.com> Co-authored-by: Adam Levy <adamhlevy@google.com> Co-authored-by: Tal Zichlinsky <35036457+talzich@users.noreply.github.com> Co-authored-by: Arad Carmi <62752352+AradCarmi@users.noreply.github.com> Co-authored-by: Maya Goldman <94686128+mayyagoldman@users.noreply.github.com> Co-authored-by: julieschwartz18 <91824591+julieschwartz18@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: rshunim <102469772+rshunim@users.noreply.github.com> Co-authored-by: akshotiamit-pa <aakshoti@paloaltonetworks.com> Co-authored-by: yedidyacohenpalo <162107504+yedidyacohenpalo@users.noreply.github.com> Co-authored-by: yuvalbenshalom <ybenshalom@paloaltonetworks.com> Co-authored-by: ellopez777 <159898322+ellopez777@users.noreply.github.com> Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com> Co-authored-by: almog2296 <alabudi@paloaltonetworks.com> Co-authored-by: Shelly Tzohar <45915502+Shellyber@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com>

* aws-iam quick action * quick action command name renaming and rn update

* updathe the PB * RN * update doc in Splunk * add TPB related data * bug fix and doc updates * move bug fix to another pr * Apply suggestions from code review Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> --------- Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com>

* RN * Bump pack from version CortexResponseAndRemediation to 1.2.60. * Bump pack from version CortexResponseAndRemediation to 1.2.61. * Bump pack from version CortexResponseAndRemediation to 1.2.63. * Updated release notes * fix lod release notes --------- Co-authored-by: Content Bot <bot@demisto.com>

* CortexGetEndpointUpdateVersion * move to cortexPlatformCore * update-version command * support multiple endpoints, times and days * Fixes * transform distirbutions * pre-commit * support all outputs * fix outputs * unittests * docstrings * greater,equal,less * fix unittest * RN * RM * pre-commit * Bump pack from version Core to 3.4.70. * Bump pack from version Core to 3.4.71. * Bump pack from version Core to 3.4.72. * Bump pack from version Core to 3.4.73. * Fix CR * fix pre-commit * RN * Bump pack from version Core to 3.4.75. * Supported * Docs fixes * Fix RM * Fix --------- Co-authored-by: Content Bot <bot@demisto.com>

* [core-get-endpoint-support-file] New command for action * Add unit tests * Fix validate * Update 3_4_59.md * Update Packs/Core/ReleaseNotes/3_4_62.md * Update 3_4_59.md * Fix * Fix validate * Update Packs/Core/Integrations/CortexPlatformCore/CortexPlatformCore.py Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> * Fix review notes * add RN * Fix validate * Bump pack from version Core to 3.4.73. * Fix the supportedModules * fix * Fix the RN --------- Co-authored-by: Dan Tavori <38749041+dantavori@users.noreply.github.com> Co-authored-by: Content Bot <bot@demisto.com>

…tSystemUsers (demisto#42235) * added new command * first test * first test * first test * pagination * command works * added outputs to yaml * added outputs to yaml * first test * first test * first test * demo comments * rn * rn * pre commit * start and end * start and end * start and end * list naming * image * tests * tests * removed redundant tests * rn * add field only if they r not none * tests * tests * tests * tests * docs * "MODIFICATION_TIME" : 1000 * "MODIFICATION_TIME": 1000 * conditions pretty * subtype * subtype * pre commit * pre commit * pre commit * pre commit * pre commit * pre commit * debug * debug * debug * debug * pr comments * return older test * rn * tests * pre commit * pre commit * pre commit * small change to time * Bump pack from version Core to 3.4.71. * pre comit * rn * Bump pack from version Core to 3.4.72. * Bump pack from version Core to 3.4.73. * rn * pre ocommit * unrelated changes --------- Co-authored-by: Content Bot <bot@demisto.com>

@kobymeir

* pre-commit brack * pre-commit brack * Apply suggestion from @kobymeir

* fix * fix * empty commit * empty commit * empty commit * change other queries * change other queries * unitest * ruff fix

Co-authored-by: Content Bot <bot@demisto.com>

* pre-commit brack support .

* RN for xdr management agent * add actions

…emisto#42416) * ExtractEmailV2: Add support for extracting emails from complex URL query parameters * version * Bump pack from version CommonScripts to 1.20.63. --------- Co-authored-by: Content Bot <bot@demisto.com>

* fix MimecastQuery typo * Update RN

* Add Actions to Agents

demisto#42424)

…mands and playbooks (demisto#42428) * [ANY.RUN pack update] Improve reputation commands, update Sandbox commands and playbooks (demisto#42250) * feat(general): update integrations * fix(general): fix pre-commit errors * fix(general): fix pre-commit errors * fix(common_playbooks): remove unused playbook input parameter * fix(general): fix ai issues * fix(release_notes): fix docker image specification --------- Co-authored-by: Semen Shalnev <85073445+pro100broo@users.noreply.github.com> * ruff auto-fixes * Add BC release notes * Fix pack versions and related RN file names * Bump pack from version CommonPlaybooks to 2.7.25. --------- Co-authored-by: Semen Shalnev <85073445+semayellow@users.noreply.github.com> Co-authored-by: Semen Shalnev <85073445+pro100broo@users.noreply.github.com> Co-authored-by: samuelFain <sfainberg@paloaltonetworks.com> Co-authored-by: Content Bot <bot@demisto.com>

* add account_name param * add rewrite_img_src * use get_tenant_account_name * add account_name arg * hide account_name arg * bump RN * add test_rewrites_single_img_src * ruff * pre commit * Update Packs/EmailCommunication/ReleaseNotes/2_0_49.md Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com> --------- Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com>

…and add release notes (demisto#42036) (demisto#42465) * removed unsuported alert statuses * version update, added release notes * fix release notes, add point in the end of description * Update Packs/VaronisSaaS/ReleaseNotes/1_0_13.md * Update Packs/VaronisSaaS/ReleaseNotes/1_0_13.md * VaronisSaaS: add 'Informational' alert severity; bump pack to 1.0.14 and add release notes * Update Packs/VaronisSaaS/Scripts/varonisalertpostprocessing/varonisalertpostprocessing.yml Commit suggestion * bump version to 1.0.16 * VaronisSaaS: support 'Informational' severity — include in severity list and map to INFO; add tests * Map "Informational" -> IncidentSeverity.INFO in convert_to_demisto_severity. Update unit tests to cover the new severity and mapping. * Update Packs/VaronisSaaS/Scripts/varonisalertpostprocessing/varonisalertpostprocessing.yml * Update Packs/VaronisSaaS/Scripts/varonisalertpostprocessing/varonisalertpostprocessing.yml * - no need for it to be breaking changes release note; - update the docker image * Update 1_0_16.md to include update Docker image * Update Docker image version in VaronisSaaS.yml to 3.12.12 * Update 1_0_16.md to include update Docker image * Revert "Update 1_0_16.md to include update Docker image" This reverts commit 90c96df * Trying to Fix ruff formatting issues for VaronisSaaS pack * Revert "Trying to Fix ruff formatting issues for VaronisSaaS pack" This reverts commit c98812b. * Pre-Commit * Fix ruff-format * Fix ruff-format --------- Co-authored-by: bdudnyk-varonis <145133825+bdudnyk-varonis@users.noreply.github.com> Co-authored-by: Volodymyr Korenkov <vkorenkov@varonis.com> Co-authored-by: vkorenkov-varonis <99330808+vkorenkov-varonis@users.noreply.github.com> Co-authored-by: Sapir Malka <44067957+itssapir@users.noreply.github.com> Co-authored-by: merit-maita <49760643+merit-maita@users.noreply.github.com>

) * rn * rn rename fix * pb specific rn

…emisto#42144) * ReleaseNotes * Bump pack from version CortexResponseAndRemediation to 1.2.73. * Bump pack from version CortexResponseAndRemediation to 1.2.74. * Bump pack from version CortexResponseAndRemediation to 1.2.75. * Bump pack from version CortexResponseAndRemediation to 1.2.76. * Bump pack from version CortexResponseAndRemediation to 1.2.77. * Bump pack from version CortexResponseAndRemediation to 1.2.78. * Bump pack from version CortexResponseAndRemediation to 1.2.79. --------- Co-authored-by: Content Bot <bot@demisto.com>

* test * UPDATE * UPDATE * added tests * fix merge conflicts * update * remove the Available options. * remove the Available options. * merge conflicts * merge conflicts * update * update * update * CR UPDATE * FIX PRECOMMIT

…in raw response (demisto#42372) * [MicrosoftExchangeOnline] bug - no entries is showed in hm but exist in raw response * Added a fix in the Remove-EmptyItems function to handle PSObject * Added tests, rn * rn + version * fixedf tests + validate * cr * fixed test * simplified the code * cr * fix tests

* init * improve * improvements * unit tests * pre commit * pack version * docker * pre commit * fix * readme * fix readme * space * add command * fix import * more tests * more tests * handle timestamp * fix the offset issue * fix test * fix error * ruff * remove todo * typo * CR * cr * time field * ruff * fix test * improve * supportedModules * cr fixes * change PRODUCT

* add citrix daas * add test file * update raw res * move daas to citrix pack * add tests * pre commit * add days_since * add test_days_since * pre commit * add todo * fix test * fix get_operations_with_pagination * update readme and description * fix citrix cloud * ruff * bump RN * update README.md * update README.md * fix days_since * add defaultDataSource * add days arg * add Site Name param * add tests * pre commit * add Dedup logic * add test_deduplicate_events * pr commit * pr commit * update days_since * pre commit * update description * bump RN * remove res_example * fix pr comments * fix tests * add comment for sending order * doc review

* RN * Update 1_2_80.md

…eanup (demisto#42493)

* Add MCP tag * Review changes

content-bot and others added 30 commits November 23, 2025 11:07

rn (demisto#42000)

3e9f531

Improve troubleshooting section in QRadar v3 docs (demisto#41957)

810e7b7

RN (demisto#42002)

29512b8

Fix date parsing - SysAid (demisto#41948)

78fa376

* init * improve * pre commit and rn * fix test * fix mypy * cr * cr #2 * fix pre commit * Apply suggestion from @JasBeilin * CR * line too long --------- Co-authored-by: Jasmine Beilin <71636766+JasBeilin@users.noreply.github.com>

Remove SlashNextPhishingIncidentResponse from PCAP Analysis (demisto#…

1fa2b63

…42019) * Remove SlashNextPhishingIncidentResponse from PCAP Analysis * Remove SlashNextPhishingIncidentResponse from deps

Fix hidden Collect parameters in Core IOC and EWS v2 by relocating re…

78a8618

…quired fields (demisto#41988) * move params to connect section

demisto-sdk-release 1.38.14 (demisto#42025)

0adde20

* poetry files * update validation config file * update validation config file * update validation config file --------- Co-authored-by: Content Bot <bot@demisto.com> Co-authored-by: yedidyacohenpalo <yecohen@paloaltonetworks.com>

Fix rn (demisto#42035)

cdd0015

* fix rn * fix rn * Update Packs/ServiceNow/ReleaseNotes/2_8_21.md

CIAC-12908 | BaseClient Time-Sensitive Logic Implementation (demisto#…

870b019

…41930)

regex u change (demisto#42038)

af9c30b

* regex u change * docker version. bump version. pre commit. * fix regex pattern * remove redundant comment * pre-commit

Keeper Secrets Manager (demisto#42027)

f31c8c6

* docker * RN * fix * fix * revert

Remove deprecated code from CSFalcon (demisto#41884)

13e44cb

AWS-IAM quick action for Nov Release (demisto#42034)

d142b27

* aws-iam quick action * quick action command name renaming and rn update

ilappe and others added 27 commits December 28, 2025 14:20

pre-commit brack (demisto#42423)

6fdf278

* pre-commit brack * pre-commit brack * Apply suggestion from @kobymeir

Fix CrowdStrike fetch old detection (demisto#42395)

3d3415d

* fix * fix * empty commit * empty commit * empty commit * change other queries * change other queries * unitest * ruff fix

poetry files (demisto#42442)

6363fe2

Co-authored-by: Content Bot <bot@demisto.com>

Brack.2 (demisto#42447)

275daa6

* pre-commit brack support .

RN for xdr management agent (demisto#42444)

4c55091

* RN for xdr management agent * add actions

[MimecastQuery] Fix typo (demisto#42443)

596ef22

* fix MimecastQuery typo * Update RN

Add Actions to Agents (demisto#42429)

b4709ce

* Add Actions to Agents

Added a deprecation warning for legacy alerts microsoft graph security (

8013c12

demisto#42424)

SearchAlertsV2 alert ID sanitization silent fix for query (demisto#42455

d56d30a

) * rn * rn rename fix * pb specific rn

Update case custom field (demisto#42463)

ac7bee7

* test * UPDATE * UPDATE * added tests * fix merge conflicts * update * remove the Available options. * remove the Available options. * merge conflicts * merge conflicts * update * update * update * CR UPDATE * FIX PRECOMMIT

Playbook - RPC Over SMB (demisto#42483)

f697662

* RN * Update 1_2_80.md

Bump versions to update metadata (demisto#42466)

ca6e242

XSUP-58469 | SSDeepReputation: Add investigationID key support and cl…

47b3652

…eanup (demisto#42493)

Add MCP tag (demisto#42229)

03ce39c

* Add MCP tag * Review changes

TOUFIKIzakarya requested a review from squioc January 2, 2026 15:04

TOUFIKIzakarya self-assigned this Jan 2, 2026

TOUFIKIzakarya added the enhancement New feature or request label Jan 2, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[ Sekoia XDR pack ] - Update Repo#7

[ Sekoia XDR pack ] - Update Repo#7
TOUFIKIzakarya wants to merge 3101 commits intoSEKOIA-IO:masterfrom
TOUFIKIzakarya:master

TOUFIKIzakarya commented Jan 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

TOUFIKIzakarya commented Jan 2, 2026

Status

Related Issues

Description

Must have

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants