-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Deprecate O365 S&C; Add O365 S&C V2 with Session Changes #22188
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Since we don't have a lot of Powershell knowledge and the customer imp 8000 act could be quite high, I'd like some additional eyes on the PR. If anyone knows someone who is quasi-familiar with the integration, feel free to add them as a reviewer. |
Also, I removed all of the auth commands and the OAuth module (since it didn't work). That means we have parameters which are disappearing entirely and some being added so this will absolutely be a "breaking changes" PR |
…-update � Conflicts: � Packs/EWS/ReleaseNotes/1_14_6.md
…-update � Conflicts: � Packs/EWS/pack_metadata.json
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
see my comments.
lets just have a short call about creds
Packs/EWS/Integrations/SecurityAndCompliance/SecurityAndCompliance.yml
Outdated
Show resolved
Hide resolved
Packs/EWS/Integrations/SecurityAndCompliance/SecurityAndCompliance_description.md
Show resolved
Hide resolved
* update core packs on MP and MPv2 * rm type * rm redundant comma * Update Tests/Marketplace/core_packs_list.json Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> * Update Tests/Marketplace/core_packs_list.json Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> * Update Tests/Marketplace/core_packs_list.json * Jwilkes tenable (#22595) * Jwilkes tenable (#22548) * EXPANDR-89 - init * unit test first draft * more unit test work * finished unit tests * format and removed comments * updated integration README * rel notes * Apply suggestions from code review Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * bug fix, docstring, types * fixed flake errors * Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.py Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.yml * update docker image Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Tenable_io/ReleaseNotes/2_1_0.md Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Validation fix (#22611) * poetry * revert * validations failure fixed * release notes * add_comment_to_approved_categories (#22609) * TIM - fix IP regex in CSP (#22590) * fix IP regex * DOCKER IMAGE * added . * update new regex * XCLOUD Cryptomining (#22402) * test * test * XCLOUD Cryptomining files * update RN * fixes * added incident type+layout * added scripts * docs * fix secrets * fixes * fixes * fixes * incident fields fixes * fixes skipifunavailable * fixes skipifunavailable * fix scripts naming in the layout * added packs readme info * fix png * fix png * fix incident fields * update CommonTypes RN * fixes * fixes * fixes * fixes * Update playbook-Cloud_Response_-_AWS_README.md Done. * Update playbook-Cloud_Response_-_AWS.yml Done. * Update README.md Done. * Update 1_0_1.md Done. * Update playbook-Cloud_Response_-_Azure.yml Done * Update playbook-Cloud_Response_-_AWS.yml Done. * Update playbook-Cloud_Response_-_Azure_README.md Done. * Update README.md Done. * Update playbook-Cloud_Response_-_Generic.yml Done. * Update 2_3_14.md Done. * Update Cortex_XDR_Alerts_Handling.yml Done. * Update Cortex_XDR_Alerts_Handling_README.md Done * Update Cortex_XDR_Alerts_Handling.yml Done. * Update playbook-Account_Enrichment_-_Generic_v2.2.yml Done. * Update Cortex_XDR_incident_handling_v3.yml Done. * Update playbook-Cloud_Cryptomining.yml Done. * Update playbook-Cloud_Cryptomining_README.md Done. * Update playbook-Cloud_Enrichment.yml Done. * Update playbook-Cloud_Enrichment_README.md Done. * Update playbook-Cryptomining_-_Set_Verdict.yml Done. * Update playbook-Cryptomining_-_Set_Verdict_README.md Done. * Update 4_9_4.md Done. * Update playbook-Cloud_Response_-_GCP.yml Done. * Update playbook-Cloud_Response_-_GCP_README.md Done. * Update README.md Done. * fixes * fix * fix readme * fix readme * typos * typos * fix AWS playbook * fix AWS playbook * fix Azure playbook * fix GCP playbook * fix naming and skipifunavailable * added new playbook input "sourceIP" to all sub-playbooks * fix setIfEmpty * fix setIfEmpty * added associated types * changed default playbook * typos * added "systemAssociatedTypes" * added playbook outputs * added playbook outputs * fix img name in readme * fix docker version * update RN * fix * update RN Co-authored-by: evisochek <evisochek@paloaltonetworks.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * remove o365 check for pyEWS_Test (#22329) * remove test * add rn * update docket image * replace rn * update docker * update rn * fix rn * fix rn * Remove duplicate mapping from the Modeling rule. (#22583) * Remove duplicate mapping from the Modeling rule. * created releaso notes files * Changed text in the release note. Co-authored-by: Darya Koval <dkoval@paloaltonetworks.com> * ParsingRules Nadav Demo 2 (#22592) * Added Jira ParsingRules * Added Mimecast ParsingRules * Added OktaOAG ParsingRules * Update OktaOAGParsingRules.xif * Update JiraParsingRules.xif * URL formatter returning an output when encountering escape chars at end of url (#22588) * URL Formatter better handling escape chars * URL Formatter better handling escape chars * RN * Update FormatURL.py * unneeded white space. * Update FormatURL.py * Update FormatURL_test.py * Removed lower() from formatter to return a case sensitive URL. * Update 1_10_16.md * Validation fixes. * RN * Update FormatURL_test.py * Updated test playbook with case sensitive URLs * [Marketplace Contribution] Akamai WAF - Content Pack Update (#22614) * [Marketplace Contribution] Akamai WAF - Content Pack Update (#22576) * "contribution update to pack "Akamai WAF"" * Update 2_0_2.md * Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Akamai_WAF/ReleaseNotes/2_0_2.md Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * reverted the description change * Apply suggestions from code review updated release notes * Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml updated yml docker image Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com> * Remove correlation rules (#22620) * remove correlation rules * update release notes * fix Alibaba release notes (#22624) * Removed XSIAM Dashboards (#22625) * Removed CyberArkDashboard * Removed Dropbox DropboxDashboard * Removed XSIAMDashboards * Updated ReleaseNotes * Teams docs update (#22426) * added some documentation * added some documentation * added rn * added tutorial video * updated docker image * updated docker image * removed condition where failed preview image fails the entire list. (#22627) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Missing packs hf (#22632) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Fix valid preview image condition * Deprecate O365 S&C; Add O365 S&C V2 with Session Changes (#22188) * Missing packs hf (#22633) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Fix valid preview image condition * Added debug * Removed redundant if statement * rmed corexXDR from the list Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> Co-authored-by: yaakovpraisler <ypreisler@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: MLainer1 <93524335+MLainer1@users.noreply.github.com> Co-authored-by: Ben Melamed <bmelamed@paloaltonetworks.com> Co-authored-by: evisochek <evisochek@paloaltonetworks.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: ostolero <86190583+ostolero@users.noreply.github.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: Darya Koval <dkoval@paloaltonetworks.com> Co-authored-by: nkanon <109467661+nkanon@users.noreply.github.com> Co-authored-by: Dror Avrahami <davrahami@paloaltonetworks.com> Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com> Co-authored-by: Anar Azadaliyev <aazadaliyev@paloaltonetworks.com> Co-authored-by: merit-maita <49760643+merit-maita@users.noreply.github.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
* update core packs on MP and MPv2 * rm type * rm redundant comma * Update Tests/Marketplace/core_packs_list.json Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> * Update Tests/Marketplace/core_packs_list.json Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> * Update Tests/Marketplace/core_packs_list.json * Jwilkes tenable (#22595) * Jwilkes tenable (#22548) * EXPANDR-89 - init * unit test first draft * more unit test work * finished unit tests * format and removed comments * updated integration README * rel notes * Apply suggestions from code review Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * bug fix, docstring, types * fixed flake errors * Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.py Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.yml * update docker image Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Tenable_io/ReleaseNotes/2_1_0.md Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Validation fix (#22611) * poetry * revert * validations failure fixed * release notes * add_comment_to_approved_categories (#22609) * TIM - fix IP regex in CSP (#22590) * fix IP regex * DOCKER IMAGE * added . * update new regex * XCLOUD Cryptomining (#22402) * test * test * XCLOUD Cryptomining files * update RN * fixes * added incident type+layout * added scripts * docs * fix secrets * fixes * fixes * fixes * incident fields fixes * fixes skipifunavailable * fixes skipifunavailable * fix scripts naming in the layout * added packs readme info * fix png * fix png * fix incident fields * update CommonTypes RN * fixes * fixes * fixes * fixes * Update playbook-Cloud_Response_-_AWS_README.md Done. * Update playbook-Cloud_Response_-_AWS.yml Done. * Update README.md Done. * Update 1_0_1.md Done. * Update playbook-Cloud_Response_-_Azure.yml Done * Update playbook-Cloud_Response_-_AWS.yml Done. * Update playbook-Cloud_Response_-_Azure_README.md Done. * Update README.md Done. * Update playbook-Cloud_Response_-_Generic.yml Done. * Update 2_3_14.md Done. * Update Cortex_XDR_Alerts_Handling.yml Done. * Update Cortex_XDR_Alerts_Handling_README.md Done * Update Cortex_XDR_Alerts_Handling.yml Done. * Update playbook-Account_Enrichment_-_Generic_v2.2.yml Done. * Update Cortex_XDR_incident_handling_v3.yml Done. * Update playbook-Cloud_Cryptomining.yml Done. * Update playbook-Cloud_Cryptomining_README.md Done. * Update playbook-Cloud_Enrichment.yml Done. * Update playbook-Cloud_Enrichment_README.md Done. * Update playbook-Cryptomining_-_Set_Verdict.yml Done. * Update playbook-Cryptomining_-_Set_Verdict_README.md Done. * Update 4_9_4.md Done. * Update playbook-Cloud_Response_-_GCP.yml Done. * Update playbook-Cloud_Response_-_GCP_README.md Done. * Update README.md Done. * fixes * fix * fix readme * fix readme * typos * typos * fix AWS playbook * fix AWS playbook * fix Azure playbook * fix GCP playbook * fix naming and skipifunavailable * added new playbook input "sourceIP" to all sub-playbooks * fix setIfEmpty * fix setIfEmpty * added associated types * changed default playbook * typos * added "systemAssociatedTypes" * added playbook outputs * added playbook outputs * fix img name in readme * fix docker version * update RN * fix * update RN Co-authored-by: evisochek <evisochek@paloaltonetworks.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * remove o365 check for pyEWS_Test (#22329) * remove test * add rn * update docket image * replace rn * update docker * update rn * fix rn * fix rn * Remove duplicate mapping from the Modeling rule. (#22583) * Remove duplicate mapping from the Modeling rule. * created releaso notes files * Changed text in the release note. Co-authored-by: Darya Koval <dkoval@paloaltonetworks.com> * ParsingRules Nadav Demo 2 (#22592) * Added Jira ParsingRules * Added Mimecast ParsingRules * Added OktaOAG ParsingRules * Update OktaOAGParsingRules.xif * Update JiraParsingRules.xif * URL formatter returning an output when encountering escape chars at end of url (#22588) * URL Formatter better handling escape chars * URL Formatter better handling escape chars * RN * Update FormatURL.py * unneeded white space. * Update FormatURL.py * Update FormatURL_test.py * Removed lower() from formatter to return a case sensitive URL. * Update 1_10_16.md * Validation fixes. * RN * Update FormatURL_test.py * Updated test playbook with case sensitive URLs * [Marketplace Contribution] Akamai WAF - Content Pack Update (#22614) * [Marketplace Contribution] Akamai WAF - Content Pack Update (#22576) * "contribution update to pack "Akamai WAF"" * Update 2_0_2.md * Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Akamai_WAF/ReleaseNotes/2_0_2.md Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * reverted the description change * Apply suggestions from code review updated release notes * Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml updated yml docker image Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com> * Remove correlation rules (#22620) * remove correlation rules * update release notes * fix Alibaba release notes (#22624) * Removed XSIAM Dashboards (#22625) * Removed CyberArkDashboard * Removed Dropbox DropboxDashboard * Removed XSIAMDashboards * Updated ReleaseNotes * Teams docs update (#22426) * added some documentation * added some documentation * added rn * added tutorial video * updated docker image * updated docker image * removed condition where failed preview image fails the entire list. (#22627) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Missing packs hf (#22632) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Fix valid preview image condition * Deprecate O365 S&C; Add O365 S&C V2 with Session Changes (#22188) * Missing packs hf (#22633) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Fix valid preview image condition * Added debug * Removed redundant if statement * rmed corexXDR from the list Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> Co-authored-by: yaakovpraisler <ypreisler@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: MLainer1 <93524335+MLainer1@users.noreply.github.com> Co-authored-by: Ben Melamed <bmelamed@paloaltonetworks.com> Co-authored-by: evisochek <evisochek@paloaltonetworks.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: ostolero <86190583+ostolero@users.noreply.github.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: Darya Koval <dkoval@paloaltonetworks.com> Co-authored-by: nkanon <109467661+nkanon@users.noreply.github.com> Co-authored-by: Dror Avrahami <davrahami@paloaltonetworks.com> Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com> Co-authored-by: Anar Azadaliyev <aazadaliyev@paloaltonetworks.com> Co-authored-by: merit-maita <49760643+merit-maita@users.noreply.github.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
* update core packs on MP and MPv2 * rm type * rm redundant comma * Update Tests/Marketplace/core_packs_list.json Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> * Update Tests/Marketplace/core_packs_list.json Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> * Update Tests/Marketplace/core_packs_list.json * Jwilkes tenable (demisto#22595) * Jwilkes tenable (demisto#22548) * EXPANDR-89 - init * unit test first draft * more unit test work * finished unit tests * format and removed comments * updated integration README * rel notes * Apply suggestions from code review Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * bug fix, docstring, types * fixed flake errors * Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.py Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.yml * update docker image Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Tenable_io/ReleaseNotes/2_1_0.md Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Validation fix (demisto#22611) * poetry * revert * validations failure fixed * release notes * add_comment_to_approved_categories (demisto#22609) * TIM - fix IP regex in CSP (demisto#22590) * fix IP regex * DOCKER IMAGE * added . * update new regex * XCLOUD Cryptomining (demisto#22402) * test * test * XCLOUD Cryptomining files * update RN * fixes * added incident type+layout * added scripts * docs * fix secrets * fixes * fixes * fixes * incident fields fixes * fixes skipifunavailable * fixes skipifunavailable * fix scripts naming in the layout * added packs readme info * fix png * fix png * fix incident fields * update CommonTypes RN * fixes * fixes * fixes * fixes * Update playbook-Cloud_Response_-_AWS_README.md Done. * Update playbook-Cloud_Response_-_AWS.yml Done. * Update README.md Done. * Update 1_0_1.md Done. * Update playbook-Cloud_Response_-_Azure.yml Done * Update playbook-Cloud_Response_-_AWS.yml Done. * Update playbook-Cloud_Response_-_Azure_README.md Done. * Update README.md Done. * Update playbook-Cloud_Response_-_Generic.yml Done. * Update 2_3_14.md Done. * Update Cortex_XDR_Alerts_Handling.yml Done. * Update Cortex_XDR_Alerts_Handling_README.md Done * Update Cortex_XDR_Alerts_Handling.yml Done. * Update playbook-Account_Enrichment_-_Generic_v2.2.yml Done. * Update Cortex_XDR_incident_handling_v3.yml Done. * Update playbook-Cloud_Cryptomining.yml Done. * Update playbook-Cloud_Cryptomining_README.md Done. * Update playbook-Cloud_Enrichment.yml Done. * Update playbook-Cloud_Enrichment_README.md Done. * Update playbook-Cryptomining_-_Set_Verdict.yml Done. * Update playbook-Cryptomining_-_Set_Verdict_README.md Done. * Update 4_9_4.md Done. * Update playbook-Cloud_Response_-_GCP.yml Done. * Update playbook-Cloud_Response_-_GCP_README.md Done. * Update README.md Done. * fixes * fix * fix readme * fix readme * typos * typos * fix AWS playbook * fix AWS playbook * fix Azure playbook * fix GCP playbook * fix naming and skipifunavailable * added new playbook input "sourceIP" to all sub-playbooks * fix setIfEmpty * fix setIfEmpty * added associated types * changed default playbook * typos * added "systemAssociatedTypes" * added playbook outputs * added playbook outputs * fix img name in readme * fix docker version * update RN * fix * update RN Co-authored-by: evisochek <evisochek@paloaltonetworks.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> * remove o365 check for pyEWS_Test (demisto#22329) * remove test * add rn * update docket image * replace rn * update docker * update rn * fix rn * fix rn * Remove duplicate mapping from the Modeling rule. (demisto#22583) * Remove duplicate mapping from the Modeling rule. * created releaso notes files * Changed text in the release note. Co-authored-by: Darya Koval <dkoval@paloaltonetworks.com> * ParsingRules Nadav Demo 2 (demisto#22592) * Added Jira ParsingRules * Added Mimecast ParsingRules * Added OktaOAG ParsingRules * Update OktaOAGParsingRules.xif * Update JiraParsingRules.xif * URL formatter returning an output when encountering escape chars at end of url (demisto#22588) * URL Formatter better handling escape chars * URL Formatter better handling escape chars * RN * Update FormatURL.py * unneeded white space. * Update FormatURL.py * Update FormatURL_test.py * Removed lower() from formatter to return a case sensitive URL. * Update 1_10_16.md * Validation fixes. * RN * Update FormatURL_test.py * Updated test playbook with case sensitive URLs * [Marketplace Contribution] Akamai WAF - Content Pack Update (demisto#22614) * [Marketplace Contribution] Akamai WAF - Content Pack Update (demisto#22576) * "contribution update to pack "Akamai WAF"" * Update 2_0_2.md * Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * Update Packs/Akamai_WAF/ReleaseNotes/2_0_2.md Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> * reverted the description change * Apply suggestions from code review updated release notes * Update Packs/Akamai_WAF/Integrations/Akamai_WAF/Akamai_WAF.yml updated yml docker image Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com> * Remove correlation rules (demisto#22620) * remove correlation rules * update release notes * fix Alibaba release notes (demisto#22624) * Removed XSIAM Dashboards (demisto#22625) * Removed CyberArkDashboard * Removed Dropbox DropboxDashboard * Removed XSIAMDashboards * Updated ReleaseNotes * Teams docs update (demisto#22426) * added some documentation * added some documentation * added rn * added tutorial video * updated docker image * updated docker image * removed condition where failed preview image fails the entire list. (demisto#22627) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Missing packs hf (demisto#22632) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Fix valid preview image condition * Deprecate O365 S&C; Add O365 S&C V2 with Session Changes (demisto#22188) * Missing packs hf (demisto#22633) * removed condition where failed preview image fails the entire list. Fixed the case where deleted preview image is failing a single ack * fix function renaming * Fix pack collection conditions * Revert "Fix pack collection conditions" This reverts commit 23b62c0. * Fix valid preview image condition * Added debug * Removed redundant if statement * rmed corexXDR from the list Co-authored-by: Yaakov Praisler <59408745+yaakovpraisler@users.noreply.github.com> Co-authored-by: yaakovpraisler <ypreisler@paloaltonetworks.com> Co-authored-by: content-bot <55035720+content-bot@users.noreply.github.com> Co-authored-by: johnnywilkes <32227961+johnnywilkes@users.noreply.github.com> Co-authored-by: omerKarkKatz <95565843+omerKarkKatz@users.noreply.github.com> Co-authored-by: EyalPintzov <91007713+eyalpalo@users.noreply.github.com> Co-authored-by: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Co-authored-by: MLainer1 <93524335+MLainer1@users.noreply.github.com> Co-authored-by: Ben Melamed <bmelamed@paloaltonetworks.com> Co-authored-by: evisochek <evisochek@paloaltonetworks.com> Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> Co-authored-by: ostolero <86190583+ostolero@users.noreply.github.com> Co-authored-by: yasta5 <112320333+yasta5@users.noreply.github.com> Co-authored-by: Darya Koval <dkoval@paloaltonetworks.com> Co-authored-by: nkanon <109467661+nkanon@users.noreply.github.com> Co-authored-by: Dror Avrahami <davrahami@paloaltonetworks.com> Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com> Co-authored-by: Chang Liu <34745025+chang-ing@users.noreply.github.com> Co-authored-by: okarkkatz <okarkkatz@paloaltonetworks.com> Co-authored-by: Anar Azadaliyev <aazadaliyev@paloaltonetworks.com> Co-authored-by: merit-maita <49760643+merit-maita@users.noreply.github.com> Co-authored-by: Shahaf Ben Yakir <44666568+ShahafBenYakir@users.noreply.github.com> Co-authored-by: Andrew Shamah <42912128+amshamah419@users.noreply.github.com>
Status
Related Issues
fixes: https://jira-hq.paloaltonetworks.local/browse/CIAC-3997
fixes: https://jira-hq.paloaltonetworks.local/browse/XSUP-16467
Description
S&C is now requiring cert authentication as part of the move to modern auth.