53 Pull requests merged by 33 people

• Auto Updated Docker PR from 2025-08-07 GitLab Pipeline ID 4446734

  #40855 merged Aug 16, 2025

• Auto Updated Docker PR from 2025-08-11 GitLab Pipeline ID 4482772

  #40888 merged Aug 16, 2025

• Fix CRTX-191703

  #40940 merged Aug 14, 2025

• Refactoring_Unprivileged_process_opened_a_registry_hive

  #40930 merged Aug 14, 2025

• Add commands list requests request approve request deny

  #40849 merged Aug 14, 2025

• [FeedNVDv2] added batch

  #40934 merged Aug 14, 2025

• New script: disable-user

  #40768 merged Aug 14, 2025

• Fix for domain name mapping issue

  #40841 merged Aug 14, 2025

• fix core-list-risky-host not running in GetEndpointData

  #40873 merged Aug 13, 2025

• Netskope Event Collector V2 /CIAC-14266

  #40717 merged Aug 13, 2025

• silent-Suspicious local user account creation - new DT to save host risk

  #40916 merged Aug 13, 2025

• deleted images

  #40921 merged Aug 13, 2025

• Sap C4C pack metadata fixes

  #40908 merged Aug 13, 2025

• feat: added HTTP 503 retry mechanism to Microsoft Graph integrations

  #40846 merged Aug 12, 2025

• Added logos for selected integrations

  #40790 merged Aug 12, 2025

• add verdict to agentix search indicator script

  #40801 merged Aug 12, 2025

• Fix/XSUP-54599/Improve decode header in mail listener pop3

  #40911 merged Aug 12, 2025

• Fix/XSUP-54524/Add CIDR support for ThreatConnect

  #40899 merged Aug 12, 2025

• Fix PolySwarmV2 integration

  #40904 merged Aug 12, 2025

• Xsup 54290

  #40881 merged Aug 12, 2025

• Move ExecutionTimeout to CommonServerPython

  #40862 merged Aug 12, 2025

• Fix PolySwarmV2 integration

  #40466 merged Aug 12, 2025

• Update TrendMicroVisionOneV3.yml

  #40890 merged Aug 12, 2025

• [Pack][RecordedFutureV3] Update integration readme: add link to migration guide.

  #40898 merged Aug 12, 2025

• Sentinelone script list agents

  #40879 merged Aug 11, 2025

• XSUP-54350 getServerURL extend context does not work with return_outputs()

  #40880 merged Aug 11, 2025

• [CRTX-189683] - Authentication Story Alignment - Chunk 3

  #40872 merged Aug 11, 2025

• fix: add input validation

  #40889 merged Aug 11, 2025

• Added using-brands argument to generic command in get-endpoint-data

  #40797 merged Aug 11, 2025

• [Pack][RecordedFutureV3] Update integration readme: add link to migration guide.

  #40839 merged Aug 11, 2025

• Fix: Assign default value for confidence_score when NA to ensure DBot compatibility

  #40891 merged Aug 11, 2025

• XSUP-54276 AbuseIPDB Integration - Command Argument Overrides Instance Setting for "Maximum reports age"

  #40843 merged Aug 11, 2025

• Fixed XSIAM tag in Generic Web hook RN

  #40893 merged Aug 11, 2025

• Add triggers to hide the port field

  #40522 merged Aug 11, 2025

• XDRIR - Allow multiple files data in received alert

  #40417 merged Aug 11, 2025

• Rn for demisto-sdk-release 1.38.9

  #40887 merged Aug 11, 2025

• Fix: Assign default value for confidence_score when NA to ensure DBot compatibility

  #40787 merged Aug 11, 2025

• Update TrendMicroVisionOneV3.yml

  #40805 merged Aug 11, 2025

• demisto-sdk-release 1.38.9

  #40883 merged Aug 11, 2025

• SAP C4C (Cloud for Customer)

  #40424 merged Aug 11, 2025

• Reblaze WAF

  #40875 merged Aug 11, 2025

• [Armis Event Collector] Update pagination handling in fetch-events

  #40682 merged Aug 11, 2025

• Tim/add description of how the indicator relationship is extracted

  #40878 merged Aug 11, 2025

• remove pack ignore

  #40884 merged Aug 11, 2025

• Adding modeling rule for lookout mes pack

  #40826 merged Aug 10, 2025

• Fix XDR Isolate On Disconnected Endpoint

  #40829 merged Aug 10, 2025

• Command Line Analysis - Lateral Movement Bug Fix

  #40785 merged Aug 10, 2025

• Process_attempts_to_kill_a_known_security_or_AV_tool

  #40783 merged Aug 10, 2025

• Bug - Cortex XDR agent id array leads to malformed json

  #40806 merged Aug 10, 2025

• TIM/CIAC-11514/Improve TAXII2ApiModule extract IOCs

  #40835 merged Aug 10, 2025

• Azure App Service - Parsing Rule Enhancement - CRTX-190014

  #40860 merged Aug 10, 2025

• CRTX-187004: Release a new base pack

  #40867 merged Aug 10, 2025

• Generic-Webhook-integration-improvements--CRTX-124573

  #39681 merged Aug 10, 2025

50 Pull requests opened by 34 people

• playbookrefactoring

  #40871 opened Aug 10, 2025

• Implement API Token authorization type in Cloudflare Zero Trust

  #40874 opened Aug 10, 2025

• CIAC-14385

  #40882 opened Aug 10, 2025

• [Collection] - DeCyfir (partner pack)

  #40892 opened Aug 11, 2025

• Playbook Refactoring | Admin Role Assignment

  #40894 opened Aug 11, 2025

• Alignment tags, keywords and categories packs (chunk10)

  #40895 opened Aug 11, 2025

• Alignment tags, keywords and categories packs (chunk12)

  #40896 opened Aug 11, 2025

• Alignment tags, keywords and categories packs (chunk13)

  #40897 opened Aug 11, 2025

• Fix event log was cleared

  #40900 opened Aug 11, 2025

• [Marketplace Contribution] Prisma Cloud Compute by Palo Alto Networks - Content Pack Update

  #40901 opened Aug 11, 2025

• fix: add debug logging and fix type declaration in FormattedDateToEpo…

  #40902 opened Aug 11, 2025

• Bump actions/checkout from 3 to 5

  #40903 opened Aug 12, 2025

• Refactoring_Scheduled_task_created_with_HTTP_or_FTP_reference

  #40905 opened Aug 12, 2025

• Enhancement to Barracuda Cloudgen FW

  #40906 opened Aug 12, 2025

• Refactoring_Use_added_to_local_administrator_group_using_PowerShell_command

  #40907 opened Aug 12, 2025

• Playbook Refactoring | SaaS File External Access

  #40909 opened Aug 12, 2025

• Remove references to Core's secrets

  #40910 opened Aug 12, 2025

• Refactoring_Credential_Dumping_using_a_known_tool

  #40912 opened Aug 12, 2025

• update FeedTaXII

  #40913 opened Aug 12, 2025

• CRTX-190557 Migrate X2 Fields

  #40914 opened Aug 12, 2025

• MS IIS XDRC Template Update

  #40915 opened Aug 12, 2025

• Get asset details split xsiam/platform versions

  #40917 opened Aug 12, 2025

• Agentix coreir

  #40918 opened Aug 12, 2025

• Removed query arg from PANOSQueryLogs wrapper polling script

  #40919 opened Aug 12, 2025

• [Marketplace Contribution] Community Common Scripts - Content Pack Update

  #40920 opened Aug 12, 2025

• Fix uncommon execution of odbc conf playbook refactor

  #40922 opened Aug 13, 2025

• init

  #40923 opened Aug 13, 2025

• SafeBreach - Fixed the system proxy issue with SafeBreach integration

  #40924 opened Aug 13, 2025

• CRTX-165828 - Mapping Tigera Calico Secure

  #40925 opened Aug 13, 2025

• Refactoring_Office_process_creates_a_scheduled_task_via_file_access

  #40926 opened Aug 13, 2025

• Fix suspicious ldap query playbook refactor

  #40927 opened Aug 13, 2025

• Refactoring_Suspicious_process_execution_by_scheduled_task_on_a_sensitive_server

  #40928 opened Aug 13, 2025

• Deprecate AutoFocus

  #40929 opened Aug 13, 2025

• Add core-get-cases

  #40931 opened Aug 13, 2025

• Ciac 14053

  #40932 opened Aug 13, 2025

• Ensure email signature is added to body and context in SendEmailReply script

  #40933 opened Aug 13, 2025

• ForeScoutCounterACT: added support for platform MP

  #40935 opened Aug 14, 2025

• [CRTX-183528] Microsoft Windows Events Enhancement

  #40936 opened Aug 14, 2025

• [WIP] Add support for Cloud SIEM signals

  #40937 opened Aug 14, 2025

• update Aggregated scripts readmes

  #40938 opened Aug 14, 2025

• Excessive user account lockouts refactor

  #40939 opened Aug 14, 2025

• Add unit 42 new feed

  #40941 opened Aug 14, 2025

• add platform marketplace to agentix items

  #40942 opened Aug 14, 2025

• feat: optimize CrowdStrike Falcon reputation commands with reduced timeout for enrichment workflows

  #40943 opened Aug 14, 2025

• Fix SyntaxWarning in Whois integration

  #40944 opened Aug 14, 2025

• [Marketplace Contribution] GoogleThreatIntelligence - Content Pack Update

  #40945 opened Aug 14, 2025

• test

  #40946 opened Aug 15, 2025

• Updated Relationship names in Mandiant Enrich and Feed Mandiant Integ…

  #40947 opened Aug 15, 2025

• Bump protobuf from 4.25.3 to 6.32.0

  #40948 opened Aug 15, 2025

• [uptycs] Fix Import

  #40949 opened Aug 16, 2025

53 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Aggregated command api module

  #40731 commented on Aug 14, 2025 • 47 new comments

• Ciac 14276 quarantine file aggregated script

  #40779 commented on Aug 14, 2025 • 15 new comments

• Cyberwatch integration 1.0.4

  #40695 commented on Aug 12, 2025 • 4 new comments

• XSUP-53777 Bitwarden Password Manager integration doesn't account for EU endpoint

  #40775 commented on Aug 11, 2025 • 4 new comments

• Added/unshorten me integration

  #40780 commented on Aug 15, 2025 • 4 new comments

• Nbensalmon/ciac 14320 aggregated command file enrichment internal sources fix

  #40852 commented on Aug 14, 2025 • 3 new comments

• [Marketplace Contribution] Splunk - Content Pack Update

  #40868 commented on Aug 10, 2025 • 2 new comments

• Add CriminalIP integration by AI SPERA

  #40807 commented on Aug 10, 2025 • 1 new comment

• Auto Updated Docker PR from 2025-07-24 GitLab Pipeline ID 4279002

  #40710 commented on Aug 11, 2025 • 0 new comments

• Change the way to request fetch incident

  #40712 commented on Aug 12, 2025 • 0 new comments

• improve common scripts

  #40720 commented on Aug 10, 2025 • 0 new comments

• [Marketplace Contribution] Azure Open AI Service

  #40724 commented on Aug 11, 2025 • 0 new comments

• CRTX-187356

  #40725 commented on Aug 10, 2025 • 0 new comments

• Fix Python 3.12 compatibility by replacing deprecated distutils.util.strtobool

  #40759 commented on Aug 16, 2025 • 0 new comments

• [EWS v2] Fix formatted messages in bytes

  #40764 commented on Aug 12, 2025 • 0 new comments

• skeleton + YML + README

  #40770 commented on Aug 13, 2025 • 0 new comments

• Created a new aggregated command Isolate Endpoint

  #40792 commented on Aug 14, 2025 • 0 new comments

• Improve Trend Micro Vision One Event Collector configurability and error handling

  #40795 commented on Aug 14, 2025 • 0 new comments

• Crtx 187819

  #40834 commented on Aug 11, 2025 • 0 new comments

• Add EWS-GetMessageTraceV2

  #40842 commented on Aug 12, 2025 • 0 new comments

• Varonis: limiting the fetching of alerts to the last 7 days

  #40850 commented on Aug 14, 2025 • 0 new comments

• Bump cryptography from 42.0.8 to 45.0.6

  #40853 commented on Aug 11, 2025 • 0 new comments

• Agentix coreir

  #40854 commented on Aug 11, 2025 • 0 new comments

• add isInternal to searchIndicatorsAgentix and SearchIssuesAgentix

  #40859 commented on Aug 11, 2025 • 0 new comments

• CRTX-187358

  #40861 commented on Aug 14, 2025 • 0 new comments

• update AddDBotScoreToContext script

  #40864 commented on Aug 13, 2025 • 0 new comments

• refactor: enhance file reputation script with validation and error ha…

  #40869 commented on Aug 11, 2025 • 0 new comments

• Get incidents by query: changed to iterating by query

  #36569 commented on Aug 15, 2025 • 0 new comments

• Uplift "Palo Alto Networks Cortex XDR” Pack to Golden Standard

  #37598 commented on Aug 10, 2025 • 0 new comments

• Fp dlp

  #38749 commented on Aug 10, 2025 • 0 new comments

• Added Cortex Cloud Remediation Playbook

  #39843 commented on Aug 11, 2025 • 0 new comments

• Group-IB new integration

  #40018 commented on Aug 12, 2025 • 0 new comments

• CSP Gradual Rollout - POC

  #40045 commented on Aug 11, 2025 • 0 new comments

• use time sensitive

  #40223 commented on Aug 17, 2025 • 0 new comments

• Bump requests from 2.18.4 to 2.32.4 in /Packs/Exchange2016_Compliance/Integrations/Exchange2016_Compliance/doc_files

  #40275 commented on Aug 15, 2025 • 0 new comments

• change AGENTIC

  #40302 commented on Aug 16, 2025 • 0 new comments

• Bump types-decorator from 5.1.8.20240310 to 5.2.0.20250324

  #40347 commented on Aug 11, 2025 • 0 new comments

• abnormal sso auth

  #40418 commented on Aug 12, 2025 • 0 new comments

• Bump cryptography from 42.0.8 to 45.0.5

  #40467 commented on Aug 12, 2025 • 0 new comments

• quarantine file aggregation command

  #40480 commented on Aug 14, 2025 • 0 new comments

• Verify IP Script

  #40495 commented on Aug 11, 2025 • 0 new comments

• Akamai WAF SIEM - Modeling for Native Collector

  #40533 commented on Aug 13, 2025 • 0 new comments

• Microsoft Defender Threat Intelligence

  #40538 commented on Aug 13, 2025 • 0 new comments

• Crtx 173269

  #40545 commented on Aug 11, 2025 • 0 new comments

• fix_sync_mechanism

  #40585 commented on Aug 13, 2025 • 0 new comments

• IBM Storage Scale

  #40587 commented on Aug 10, 2025 • 0 new comments

• Check point xdr new

  #40590 commented on Aug 13, 2025 • 0 new comments

• Test update docker for CommonServerPowerShell

  #40592 commented on Aug 12, 2025 • 0 new comments

• test asm

  #40617 commented on Aug 16, 2025 • 0 new comments

• Debugging for XSUP-53518 QRadar

  #40628 commented on Aug 17, 2025 • 0 new comments

• fix docker ps

  #40634 commented on Aug 17, 2025 • 0 new comments

• CIAC-9227 - 'Monday' [collection] new pack

  #40684 commented on Aug 13, 2025 • 0 new comments

• Updating Sysdig Classifier, Incident fields and Layout

  #40690 commented on Aug 11, 2025 • 0 new comments