PAPP-34631: merging with changes in next

splunk-soar-connectors · Oct 31, 2024 · 47d6eef · 47d6eef
2 parents b7f0aed + 444ec12
commit 47d6eef
Show file tree

Hide file tree

Showing 24 changed files with 164 additions and 599 deletions.
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
@@ -1,7 +1,7 @@
 name: Linting
 on: [push, pull_request]
 jobs:
-  lint: 
+  lint:
     # Run per push for internal contributers. This isn't possible for forked pull requests,
     # so we'll need to run on PR events for external contributers.
     # String comparison below is case insensitive.

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,11 +1,11 @@
 repos:
 -   repo: https://github.com/phantomcyber/dev-cicd-tools
-    rev: v1.17
+    rev: v1.23
     hooks:
     -   id: org-hook
     -   id: package-app-dependencies
 -   repo: https://github.com/Yelp/detect-secrets
-    rev: v1.4.0
+    rev: v1.5.0
     hooks:
     -   id: detect-secrets
         args: ['--no-verify', '--exclude-files', '^gsgmail.json$']
diff --git a/LICENSE b/LICENSE
@@ -198,4 +198,4 @@
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
-   limitations under the License.
+   limitations under the License.
diff --git a/README.md b/README.md
@@ -8,7 +8,7 @@ Product Name: Talos Cloud Intelligence
 Product Version Supported (regex): ".\*"  
 Minimum Product Version: 6.2.1.305  
 
-This app provides investigative actions for Talos Intelligence
+This app provides investigative actions for Cisco Talos Cloud Intelligence
 
 [comment]: # " File: README.md"
 [comment]: # "Copyright (c) 2024 Splunk Inc."

diff --git a/talosintelligence.json → ciscotalosintelligence.json b/talosintelligence.json → ciscotalosintelligence.json
@@ -1,32 +1,83 @@
 {
     "appid": "7c653487-22c8-4ec1-bca0-16a8b1513c86",
     "name": "Cisco Talos Intelligence",
-    "description": "This app provides investigative actions for Talos Intelligence",
+    "description": "This app provides investigative actions for Cisco Talos Cloud Intelligence",
     "type": "information",
     "product_vendor": "Cisco",
-    "logo": "talosintelligence.svg",
-    "logo_dark": "talosintelligence_dark.svg",
+    "logo": "ciscotalosintelligence.svg",
+    "logo_dark": "ciscotalosintelligence_dark.svg",
     "product_name": "Talos Cloud Intelligence",
     "python_version": "3",
     "latest_tested_versions": [
-        "Cloud, Sept 9, 2024"
+        "Cloud, October 30, 2024"
     ],
     "product_version_regex": ".*",
     "publisher": "Splunk",
     "license": "Copyright (c) 2024 Splunk Inc.",
     "app_version": "1.0.1",
     "utctime_updated": "2024-06-21T18:40:03.685771Z",
     "package_name": "phantom_ciscotalosintelligence",
-    "main_module": "talosintelligence_connector.py",
+    "fips_compliant": false,
+    "main_module": "ciscotalosintelligence_connector.py",
     "min_phantom_version": "6.2.1.305",
     "app_wizard_version": "1.0.0",
     "pip39_dependencies": {
-        "pypi": [
+        "wheel": [
             {
-                "module": "httpx[http2]"
+                "module": "anyio",
+                "input_file": "wheels/py3/anyio-4.6.2.post1-py3-none-any.whl"
             },
             {
-                "module": "pydantic==1.10.13"
+                "module": "cffi",
+                "input_file": "wheels/py39/cffi-1.17.1-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl"
+            },
+            {
+                "module": "cryptography",
+                "input_file": "wheels/py39/cryptography-43.0.1-cp39-abi3-manylinux_2_28_x86_64.whl"
+            },
+            {
+                "module": "exceptiongroup",
+                "input_file": "wheels/py3/exceptiongroup-1.2.2-py3-none-any.whl"
+            },
+            {
+                "module": "h11",
+                "input_file": "wheels/py3/h11-0.14.0-py3-none-any.whl"
+            },
+            {
+                "module": "h2",
+                "input_file": "wheels/py3/h2-4.1.0-py3-none-any.whl"
+            },
+            {
+                "module": "hpack",
+                "input_file": "wheels/py3/hpack-4.0.0-py3-none-any.whl"
+            },
+            {
+                "module": "httpcore",
+                "input_file": "wheels/py3/httpcore-1.0.6-py3-none-any.whl"
+            },
+            {
+                "module": "httpx",
+                "input_file": "wheels/py3/httpx-0.27.2-py3-none-any.whl"
+            },
+            {
+                "module": "hyperframe",
+                "input_file": "wheels/py3/hyperframe-6.0.1-py3-none-any.whl"
+            },
+            {
+                "module": "pycparser",
+                "input_file": "wheels/py3/pycparser-2.22-py3-none-any.whl"
+            },
+            {
+                "module": "pydantic",
+                "input_file": "wheels/py39/pydantic-1.10.13-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.whl"
+            },
+            {
+                "module": "sniffio",
+                "input_file": "wheels/py3/sniffio-1.3.1-py3-none-any.whl"
+            },
+            {
+                "module": "typing_extensions",
+                "input_file": "wheels/py3/typing_extensions-4.12.2-py3-none-any.whl"
             }
         ]
     },
@@ -150,7 +201,7 @@
                     "data_path": "action_result.summary.message",
                     "data_type": "string",
                     "example_values": [
-                         "72.163.4.185 has a Favorable threat level"
+                        "72.163.4.185 has a Favorable threat level"
                     ]
                 }
             ],
@@ -238,7 +289,7 @@
                     "data_path": "action_result.summary.message",
                     "data_type": "string",
                     "example_values": [
-                         "splunk.com has a Favorable threat level"
+                        "splunk.com has a Favorable threat level"
                     ]
                 }
             ],
@@ -324,7 +375,7 @@
                     "data_path": "action_result.summary.message",
                     "data_type": "string",
                     "example_values": [
-                         "https://splunk.com has a Favorable threat level"
+                        "https://splunk.com has a Favorable threat level"
                     ]
                 }
             ],
@@ -337,10 +388,10 @@
     ],
     "copied_from_id": 190,
     "copied_from_version": "1.0.0",
-    "directory": "talosintelligence_50612f98-f830-451b-a90c-26cf82593a54",
+    "directory": "ciscotalosintelligence_7c653487-22c8-4ec1-bca0-16a8b1513c86",
     "version": 1,
     "appname": "-",
     "executable": "spawn3",
     "disabled": false,
     "custom_made": true
-}
+}
diff --git a/ciscotalosintelligence.svg b/ciscotalosintelligence.svg