-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix json parsing for reputations as well
- Loading branch information
Aviad Lichtenstadt
committed
Jul 30, 2017
1 parent
18a229c
commit 58fff75
Showing
1 changed file
with
11 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1 +1,11 @@ | ||
{"releaseDate": "2017-07-30T15:59:19.0+00:00", "release": "2.5.1", "version": -1, "id": "", "installDate": "0001-01-01T00:00:00Z", "assetId": 1234, "releaseNotes": "## Release Notes for version 2.5.1 (1234)\n\n### Playbooks\n#### New Playbooks\n- ATD-playbook\n- McAfee ePO Endpoint Connectivity Diagnostics Playbook\n-- Perform a check on ePO endpoints to see if any endpoints are unmanaged or lost connectivity with ePO and take steps to return to valid state.\n#### Removed Playbooks\n- ATD-playbook\n- McAfee ePO Endpoint Connectivity Diagnostics Playbook\n\n\n\n\n### Integrations\n#### New Integrations\n- AlienValut OTX\n-- Query IOCs in AlienVault\n- RSA Archer\n-- The RSA Archer GRC Platform provides a common foundation for managing policies, controls, risks, assessments and deficiencies across lines of business.\n- Check Point\n-- Manage Check Point firewall via API\n- Cisco Spark\n-- Send messages, create rooms and more, via the Cisco Spark API.\n- Cybereason\n-- Gets processes/connections using the Cybereason API.\n- MISP\n-- Malware Information Sharing Platform and Threat Sharing\n- PacketMail\n-- Intel look up for IPS\n- Phishme Intelligence\n-- Human-vetted, Phishing-specific Threat Intelligence from Phishme.\n- SplunkPy\n-- Run queries on Splunk servers\n- urlscan.io\n-- Urlscan.io reputation\n- fireeye\n-- Perform malware dynamic analysis\n#### Modified Integrations\n- Cisco Umbrella Investigate\n-- Fix response in non-existing domains/ip\n- Cisco CloudLock\n-- Added Demisto side filtering of results\n- Cylance Protect\n-- Better error notifications\n- McAfee ESM-v10\n-- Support ESM versions newer than 10.0\n- Incapsula\n-- Added proxy setting support\n- IntSights\n-- Support exporting incident full JSON\n- LightCyber Magna\n-- Added the commands lcm-host-autoruns, lcm-host-processes-internet-connections, lcm-host-loaded-modules, lcm-host-processes, lcm-host-processes, lcm-host-suspicious-artifacts, lcm-host-opened-ports\n- LogRhythm\n-- Support exporting incident full JSON\n- EWS\n-- Support search on multiple mailboxes, add command to get attachments, last but not least, ews now supports polling mails to create incidents\n- QRadar\n-- Support exporting incident full JSON\n- RSA NetWitness Security Analytics\n-- Upgrade to new format. Added human readable format and some command fixes\n- ServiceNow\n-- Added support for custom fields in commands (servicenow-update and servicenow-create). Added ticket number to the context.\n- ThreatConnect\n-- Fix proxy condition in TC\n- Vectra\n-- Support exporting incident full JSON\n- Venafi\n-- Context creation by Venafi search and new serach arguments\n- jira\n-- Support exporting incident full JSON\n- McAfeeDAM\n-- Support exporting incident full JSON\n- Rasterize\n-- Added proxy settings\n- Trend Micro\n-- Support exporting incident full JSON\n#### Removed Integrations\n- Check Point\n- SplunkPy\n\n\n### Reports\n\n\n### Scripts\n#### New Scripts\n- CheckpointFWBackupStatus\n-- Connect to a checkpoint firewall appliance using SSH and retrieve status for backup tasks. The user account being used to access the device must be set to use the SSH shell and not the built in Checkpoint CLI. Consult the Checkpoint documentation for instructions on how to do this.\n- CheckpointFWCreateBackup\n-- Connect to a checkpoint firewall appliance using SSH and trigger a task to create a configuration backup of the device. The user account being used to access the device must be set to use the SSH shell and not the built in Checkpoint CLI. Consult the Checkpoint documentation for instructions on how to do this.\n- ExtractDomainFromURL\n-- Extract Domain from a URL. Domain will include sub-domain as well\n- MatchRegex\n-- Extract regex data from given text - supports groups as well\n- ResolveShortenedURL\n-- Resolve the original URL from the given shortened URL and place it in both as output and in the context of a playbook. (https://unshorten.me/api)\n- ToTable\n-- Convert an array to a nice table display. Usually, from the context.\n- isError\n-- Check whether given entry/entries returned an error. Use ${lastCompletedTaskEntries} to check the previous task entries. If array is provided, will return yes if one of the entries returned an error.\n- misp_download_sample\n-- Download malicious file sample from MISP\n- misp_upload_sample\n-- Upload malicious file sample to MISP\n#### Modified Scripts\n- ADGetAllUsersEmail\n-- Deprecated\n- ADGetComputer\n-- Split Groups in context into array\n- ADGetGroupMembers\n-- Split Groups in context into array\n- ADGetUser\n-- Split Groups in context into array\n- CommonServer\n-- fix convertKeysToPascalCase utility. Add capability to chose columns with dot notation.\n- DataHashReputation\n-- Manually set value of indicator reputation will now superceed threat intel sites\n- DataIPReputation\n-- Manually set value of indicator reputation will now superceed threat intel sites\n- DataURLReputation\n-- Manually set value of indicator reputation will now superceed threat intel sites\n- EmailAskUser\n-- Added support to send emails according to roles\n- IsMaliciousIndicatorFound\n-- Fixed malicious check in caes of only one result\n- StringContains\n-- Support looking for one substring out of a list\n#### Removed Scripts\n- CheckpointFWBackupStatus\n- CheckpointFWCreateBackup\n", "modified": "2017-07-30T15:59:19.0+00:00", "ignoreGit": false} | ||
{ | ||
"installDate": "0001-01-01T00:00:00Z", | ||
"assetId": "REPLACE_THIS_WITH_CI_BUILD_NUM", | ||
"releaseNotes": "## Release Notes for version 2.5.0", | ||
"modified": "REPLACE_THIS_WITH_RELEASE_DATE", | ||
"ignoreGit": false, | ||
"releaseDate": "REPLACE_THIS_WITH_RELEASE_DATE", | ||
"version": -1, | ||
"release": "2.5.0", | ||
"id": "" | ||
} |