demisto · ShahafBenYakir · Apr 22, 2025 · Apr 7, 2025 · Apr 7, 2025 · Apr 8, 2025
diff --git a/Config/core_packs_platform_list.json b/Config/core_packs_platform_list.json
@@ -224,6 +224,8 @@
         {
             "id": "CortexResponseAndRemediation",
             "supportedModules": [
+                "C3",
+                "X0",
                 "X1",
                 "X3",
                 "X5",

diff --git a/Packs/AWS-IAM/Playbooks/playbook-AWS_IAM_-_User_enrichment.yml b/Packs/AWS-IAM/Playbooks/playbook-AWS_IAM_-_User_enrichment.yml
@@ -45,8 +45,7 @@ tasks:
       id: 6375c9c5-a24c-4469-8b62-21f382d3d5a5
       version: -1
       name: AWS IAM - Get user information
-      description: Retrieves information about the specified IAM user, including the
-        user's creation date, path, unique ID, and ARN.
+      description: Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
       script: AWS - IAM|||aws-iam-get-user
       type: regular
       iscommand: true
@@ -81,8 +80,7 @@ tasks:
       id: 05067a56-0350-4f75-8075-85ccd9c98f0c
       version: -1
       name: 'AWS IAM -  List user access keys   '
-      description: Returns information about the access key IDs associated with the
-        specified IAM user.
+      description: Returns information about the access key IDs associated with the specified IAM user.
       script: AWS - IAM|||aws-iam-list-access-keys-for-user
       type: regular
       iscommand: true
@@ -166,17 +164,20 @@ outputs:
 - contextPath: AWS.IAM.Users.Path
   description: The path to the user.
 - contextPath: AWS.IAM.Users.PasswordLastUsed
-  description: The date and time,  when the user's password was last used to sign
-    in to an AWS website.
+  description: The date and time,  when the user's password was last used to sign in to an AWS website.
 - contextPath: AWS.IAM.Users.AccessKeys.AccessKeyId
   description: The ID for this access key.
 - contextPath: AWS.IAM.Users.AccessKeys.Status
-  description: The status of the access key. Active means the key is valid for API
-    calls; Inactive means it is not.
+  description: The status of the access key. Active means the key is valid for API calls; Inactive means it is not.
 - contextPath: AWS.IAM.Users.AccessKeys.CreateDate
   description: The date when the access key was created.
 - contextPath: AWS.IAM.Users.AccessKeys.UserName
   description: The name of the IAM user that the key is associated with.
 tests:
 - No tests
 fromversion: 5.5.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
diff --git a/Packs/AWS-IAM/pack_metadata.json b/Packs/AWS-IAM/pack_metadata.json
@@ -20,6 +20,8 @@
         "platform"
     ],
     "supportedModules": [
+        "C3",        
+        "X0",
         "X1",
         "X3",
         "X5",

diff --git a/Packs/AbuseDB/pack_metadata.json b/Packs/AbuseDB/pack_metadata.json
@@ -21,6 +21,8 @@
         "platform"
     ],
     "supportedModules": [
+        "C3",
+        "X0",
         "X1",
         "X3",
         "X5",

diff --git a/Packs/AzureKeyVault/pack_metadata.json b/Packs/AzureKeyVault/pack_metadata.json
@@ -18,6 +18,7 @@
         "platform"
     ],
     "supportedModules": [
+        "C1",
         "X1",
         "X3",
         "X5",

diff --git a/Packs/AzureResourceGraph/pack_metadata.json b/Packs/AzureResourceGraph/pack_metadata.json
@@ -19,6 +19,7 @@
         "platform"
     ],
     "supportedModules": [
+        "C1",
         "X1",
         "X3",
         "X5",

@@ -926,3 +926,8 @@ marketplaces:
 contentitemexportablefields:
   contentitemfields: {}
 system: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -376,3 +376,8 @@ quiet: true
 tests:
 - No tests (auto formatted)
 fromversion: 6.5.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -225,3 +225,8 @@ fromversion: 5.0.0
 tests:
 - No tests (deprecated)
 deprecated: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -2096,4 +2096,9 @@ outputs:
 tests:
 - Account Enrichment - Generic v2.1 - Test
 fromversion: 6.5.0
-system: true
+system: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -371,7 +371,12 @@ outputs: []
 tests:
 - No tests (auto formatted)
 marketplaces:
-  - xsoar
-  - marketplacev2
-  - platform
-deprecated: true
+- xsoar
+- marketplacev2
+- platform
+deprecated: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -291,3 +291,8 @@ tests:
 - No tests (auto formatted)
 fromversion: 5.5.0
 deprecated: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -424,3 +424,8 @@ outputs: []
 tests:
 - No tests (auto formatted)
 fromversion: 6.5.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -175,4 +175,9 @@ tests:
 - no tests
 fromversion: 5.0.0
 description: Deprecated. Use 'Block Email - Generic v2' instead. This playbook will block emails at your mail relay integration.
-deprecated: true
+deprecated: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -565,3 +565,8 @@ outputs: []
 tests:
 - No tests (auto formatted)
 fromversion: 6.5.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -651,3 +651,8 @@ outputs:
 tests:
 - No tests (auto formatted)
 fromversion: 5.0.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -1046,6 +1046,11 @@ fromversion: 5.0.0
 tests:
 - block_indicators_-_generic_-_test
 marketplaces:
-  - xsoar
-  - marketplacev2
-  - platform
+- xsoar
+- marketplacev2
+- platform
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -3781,3 +3781,8 @@ system: true
 contentitemexportablefields:
   contentitemfields:
     propagationLabels: []
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -269,10 +269,7 @@ tasks:
       id: 97c787e9-d72a-4c27-861e-f09f6c63723e
       version: -1
       name: Block File - Generic v2
-      description: "This playbook is used to block files from running on endpoints.\
-        \ \nThis playbook supports the following integrations:\n- Palo Alto Networks\
-        \ Traps\n- Cybereason\n- Carbon Black Enterprise Response\n- Cylance Protect\
-        \ v2\n"
+      description: "This playbook is used to block files from running on endpoints. \nThis playbook supports the following integrations:\n- Palo Alto Networks Traps\n- Cybereason\n- Carbon Black Enterprise Response\n- Cylance Protect v2\n"
       playbookName: Block File - Generic v2
       type: playbook
       iscommand: false
@@ -567,8 +564,7 @@ inputs:
   value:
     simple: Demisto Remediation - URL EDL
   required: false
-  description: URL list from the instance context with which to override the remote
-    file.
+  description: URL list from the instance context with which to override the remote file.
   playbookInputQuery:
 - key: CustomURLCategory
   value:
@@ -670,6 +666,11 @@ tests:
 - No Test
 fromversion: 5.5.0
 marketplaces:
-  - xsoar
-  - marketplacev2
-  - platform
+- xsoar
+- marketplacev2
+- platform
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -1765,3 +1765,8 @@ marketplaces:
 - xsoar
 - marketplacev2
 - platform
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -558,7 +558,12 @@ fromversion: 5.0.0
 tests:
 - block_indicators_-_generic_-_test
 marketplaces:
-  - xsoar
-  - marketplacev2
-  - platform
-deprecated: true
+- xsoar
+- marketplacev2
+- platform
+deprecated: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -1421,3 +1421,8 @@ tests:
 - No tests (auto formatted)
 fromversion: 6.5.0
 system: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -44,8 +44,7 @@ tasks:
       id: 4cfa2898-da16-4d61-839a-cc66e5492541
       version: -1
       name: Is there a CVE to enrich?
-      description: Verify that the playbook input includes at least one CVE ID to
-        enrich.
+      description: Verify that the playbook input includes at least one CVE ID to enrich.
       type: condition
       iscommand: false
       brand: ''
@@ -567,6 +566,11 @@ sourceplaybookid: cve_enrichment_-_generic
 tests:
 - No test
 marketplaces:
-  - xsoar
-  - marketplacev2
-  - platform
+- xsoar
+- marketplacev2
+- platform
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -475,3 +475,8 @@ outputs:
   type: string
 tests:
 - No tests
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -1326,3 +1326,8 @@ outputs:
   type: unknown
 tests:
 - Calculate Severity - Generic v2 - Test
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -1026,3 +1026,8 @@ outputs:
 tests:
 - Calculate Severity - Generic v2 - Test
 fromversion: 5.0.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -313,3 +313,8 @@ outputs:
   type: string
 tests:
 - No tests
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -537,3 +537,8 @@ tests:
 - Calculate Severity - Standard - Test
 contentitemexportablefields:
   contentitemfields: {}
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -520,3 +520,8 @@ tests:
 - Calculate Severity - Standard - Test
 fromversion: 6.0.0
 system: true
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -602,3 +602,8 @@ quiet: false
 tests:
 - No tests (auto formatted)
 fromversion: 6.8.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
@@ -685,3 +685,8 @@ quiet: true
 tests:
 - No tests (auto formatted)
 fromversion: 6.9.0
+supportedModules:
+- X1
+- X3
+- X5
+- ENT_PLUS
-Original file line number
+Diff line change
@@ Expand Up / @@ -224,6 +224,8 @@ @@
             {
                 "id": "CortexResponseAndRemediation",
                 "supportedModules": [
+                    "C3",
+                    "X0",
                     "X1",
                     "X3",
                     "X5",
@@ Expand Down @@