41 Pull requests merged by 25 people

• Citrix ADC Update

  #39148 merged Mar 20, 2025

• add use legacy API parameter to XSIAM

  #39121 merged Mar 20, 2025

• ruff format content files (7)

  #39012 merged Mar 20, 2025

• ruff format content files (3)

  #38988 merged Mar 20, 2025

• ruff format content files (1)

  #38986 merged Mar 20, 2025

• ruff format content files (0)

  #38985 merged Mar 20, 2025

• [ASM] Update CVM Pack to Make it usable by EV3 issues - Part 2

  #39147 merged Mar 20, 2025

• encoded the session_id in aruba

  #38945 merged Mar 20, 2025

• Add api_version param to support multiple tenant versions in Workday Signon Event Collector

  #38959 merged Mar 20, 2025

• Move DBotUpdateLogoURLPhishing to the PhishingURL pack

  #39007 merged Mar 20, 2025

• Modified readme of CiscoSMA

  #39128 merged Mar 20, 2025

• [ASM] Update CVM Pack to Make it usable by EV3 issues - Part 2

  #39091 merged Mar 20, 2025

• Added logs and timeout to Proofpoint Isolation

  #39087 merged Mar 20, 2025

• demisto-sdk-release 1.36.3

  #39122 merged Mar 19, 2025

• ANY.RUN adoption start

  #39123 merged Mar 19, 2025

• Ignore AIOps TPB

  #39124 merged Mar 19, 2025

• updated last run to latest incident time and allowed more than 1 day…

  #39118 merged Mar 19, 2025

• ANY.RUN adoption start

  #39037 merged Mar 19, 2025

• Handling error of xdr-list-risky-users and xdr-list-risky-hosts

  #38931 merged Mar 19, 2025

• updated last run to latest incident time and allowed more than 1 day…

  #38867 merged Mar 19, 2025

• FEEDMISPFEED parse host bug

  #38995 merged Mar 19, 2025

• fix akamai docker outputs collision

  #38996 merged Mar 19, 2025

• IsPDFFileEncrypted improve error

  #39052 merged Mar 19, 2025

• Azure AKS Mapping

  #38912 merged Mar 18, 2025

• Error handling wmi playbooks

  #39084 merged Mar 18, 2025

• Crtx 146125 BloodHound Enterprise Mapping

  #39071 merged Mar 18, 2025

• Force upload docs packs

  #38999 merged Mar 17, 2025

• Added URL output field to FeedLOLBAS integration

  #38670 merged Mar 17, 2025

• fix parse date symantec ses

  #39031 merged Mar 17, 2025

• IPNetwork: update docker

  #39066 merged Mar 17, 2025

• Skyhigh security issue fetch

  #39058 merged Mar 17, 2025

• demisto-sdk-release 1.36.2

  #39057 merged Mar 17, 2025

• Bugfix/Prisma-Deployment-Wizard-requires-deprecated-JiraV2

  #39032 merged Mar 16, 2025

• [ASM] - expandr 12794

  #39053 merged Mar 16, 2025

• Feature Introducing three new commands

  #39047 merged Mar 16, 2025

• [ASM] - expandr 12794

  #39020 merged Mar 16, 2025

• Update contrib team

  #39049 merged Mar 16, 2025

• Refactor/date limit soc feedback command

  #39036 merged Mar 16, 2025

• Feature Introducing three new commands

  #39014 merged Mar 16, 2025

• tj-actions/changed-files@v46.0.1

  #39046 merged Mar 16, 2025

• Update for Pack: Gatewatcher AionIQ

  #39038 merged Mar 16, 2025

111 Pull requests opened by 36 people

• Test TPBs batch 2

  #39042 opened Mar 14, 2025

• [Test Please Ingore] Change Incidet Type Name

  #39048 opened Mar 16, 2025

• Amitest demo - Imperva Securesphere

  #39050 opened Mar 16, 2025

• IBM HA - add "haIntegrationEventID" to ms ATP

  #39051 opened Mar 16, 2025

• [XSUP-48037] PAN-OS fetch-incidents documentation improvements

  #39054 opened Mar 16, 2025

• new version 1.5.5 - ai summary command + new logo

  #39056 opened Mar 16, 2025

• RuffFormat (0)

  #39067 opened Mar 17, 2025

• RuffFormat (1)

  #39068 opened Mar 17, 2025

• RuffFormat (2)

  #39069 opened Mar 17, 2025

• RuffFormat (3)

  #39070 opened Mar 17, 2025

• Implement workaround to escape placeholders

  #39072 opened Mar 17, 2025

• Improve handling of command execution timeout using timed thread in QualysV2

  #39074 opened Mar 17, 2025

• ruff format content files (11)

  #39077 opened Mar 17, 2025

• ruff format content files (12)

  #39078 opened Mar 17, 2025

• ruff format content files (13)

  #39079 opened Mar 17, 2025

• Phishing campaigns - add logs

  #39085 opened Mar 17, 2025

• FormatURL does not correctly extract URLs from URLs of type ProofPoint URLDefense v3

  #39086 opened Mar 17, 2025

• ruff format content files (14)

  #39088 opened Mar 17, 2025

• ruff format content files (15)

  #39089 opened Mar 17, 2025

• ruff format content files (16)

  #39090 opened Mar 17, 2025

• Bug - sigma convert query

  #39092 opened Mar 17, 2025

• Silentpush search scan data

  #39093 opened Mar 18, 2025

• Add markdownlint hook

  #39094 opened Mar 18, 2025

• ruff format content files (17)

  #39095 opened Mar 18, 2025

• ruff format content files (18)

  #39096 opened Mar 18, 2025

• ruff format content files (19)

  #39097 opened Mar 18, 2025

• Test tpbs batch3

  #39100 opened Mar 18, 2025

• Silent - Azure AD PIM role settings change

  #39101 opened Mar 18, 2025

• Update README.md for Webhook

  #39102 opened Mar 18, 2025

• Modeling rules modification - CRTX-151278

  #39103 opened Mar 18, 2025

• Abnormal Security Bug Fixes

  #39104 opened Mar 18, 2025

• Bump types-pytz from 2022.7.1.2 to 2025.1.0.20250318

  #39105 opened Mar 18, 2025

• [Marketplace Contribution] Akamai WAF - Content Pack Update

  #39106 opened Mar 18, 2025

• Checkpoint FirewallV2 Add checkpoint-access-rule-show command

  #39107 opened Mar 19, 2025

• update the Platform core packs list

  #39108 opened Mar 19, 2025

• Test running in a branch that match the regex

  #39109 opened Mar 19, 2025

• Move to non regex matching branch

  #39110 opened Mar 19, 2025

• Platform core packs updates

  #39111 opened Mar 19, 2025

• CRTX-147053-Microsoft-Windows

  #39112 opened Mar 19, 2025

• [Code42 Event Collector] Use "event.inserted" instead of "timestamp" for file events

  #39113 opened Mar 19, 2025

• Ciac 11349 failing mdx + readme with lint errors included

  #39114 opened Mar 19, 2025

• Ciac 11349 markdownlint fixes

  #39115 opened Mar 19, 2025

• Azure Active Directory - error when role ID is not found

  #39116 opened Mar 19, 2025

• Failing mdx rm103

  #39117 opened Mar 19, 2025

• cloudflare-waf-enhancement-10062

  #39119 opened Mar 19, 2025

• Revert prismacloudcompute problematic dependencies commit

  #39125 opened Mar 19, 2025

• Tpbs batch 4

  #39126 opened Mar 19, 2025

• Auto Updated Docker PR from 2025-03-19 GitLab Pipeline ID 2918234

  #39127 opened Mar 19, 2025

• Execution of an uncommon process at an early startup stage

  #39129 opened Mar 19, 2025

• [EM] Xpanse - Remove custom fields

  #39130 opened Mar 19, 2025

• ruff format content files (20)

  #39131 opened Mar 19, 2025

• ruff format content files (21)

  #39132 opened Mar 19, 2025

• ruff format content files (22)

  #39133 opened Mar 19, 2025

• ruff format content files (23)

  #39134 opened Mar 19, 2025

• Auto Updated Docker PR from 2025-03-19 GitLab Pipeline ID 2923261

  #39135 opened Mar 19, 2025

• Auto Updated Docker PR from 2025-03-19 GitLab Pipeline ID 2923408

  #39136 opened Mar 19, 2025

• refactor-AUD-nightly

  #39137 opened Mar 19, 2025

• Auto Updated Docker PR from 2025-03-19 GitLab Pipeline ID 2923588

  #39138 opened Mar 19, 2025

• ruff format content files (0)

  #39142 opened Mar 20, 2025

• ruff format content files (1)

  #39143 opened Mar 20, 2025

• ruff format content files (2)

  #39144 opened Mar 20, 2025

• ruff format content files (3)

  #39145 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2928166

  #39149 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2928710

  #39150 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2929521

  #39151 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2929560

  #39152 opened Mar 20, 2025

• fixes

  #39153 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2930070

  #39154 opened Mar 20, 2025

• Ip-fix_symantec_ses_missing_schema

  #39155 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2930533

  #39156 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2930865

  #39157 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2931193

  #39158 opened Mar 20, 2025

• new playbook - First Azure AD PowerShell operation for a user

  #39159 opened Mar 20, 2025

• Cortex XSIAM - Data Ingestion Issue Via Webhook

  #39160 opened Mar 20, 2025

• Auto Updated Docker PR from 2025-03-20 GitLab Pipeline ID 2931975

  #39161 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #1

  #39162 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #2

  #39163 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #3

  #39164 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #4

  #39165 opened Mar 20, 2025

• [Google Threat Intelligence] IoCStream cursor

  #39166 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #6

  #39167 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #7

  #39168 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #8

  #39169 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #9

  #39170 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #10

  #39171 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #11

  #39172 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #12

  #39173 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #13

  #39174 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #14

  #39175 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #15

  #39176 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #16

  #39177 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #17

  #39178 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #18

  #39179 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #19

  #39180 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #20

  #39181 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #21

  #39182 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #22

  #39183 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #23

  #39184 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #24

  #39185 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #25

  #39186 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #26

  #39187 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #27

  #39188 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #28

  #39189 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #29

  #39190 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #30

  #39191 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #31

  #39192 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #32

  #39193 opened Mar 20, 2025

• Adopt 'platform' MP to content packs #33

  #39194 opened Mar 20, 2025

• Copied changes from enhancement/cloudflare-waf-enhancement-10062

  #39195 opened Mar 20, 2025

• edit readme file

  #39196 opened Mar 20, 2025

• Stage/platform content support test nightly

  #39197 opened Mar 20, 2025

64 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Doppel v1.0.0

  #37882 commented on Mar 20, 2025 • 47 new comments

• Nivbs/ciac 13013 quick actions

  #38979 commented on Mar 19, 2025 • 21 new comments

• Mattermost groups and role and send multiple

  #38884 commented on Mar 20, 2025 • 20 new comments

• [Anomali] add Anomali Security Analysis Alerts Pack

  #39039 commented on Mar 20, 2025 • 16 new comments

• [Marketplace Contribution] PlaybooksUsingScripts

  #39013 commented on Mar 20, 2025 • 14 new comments

• xsup-46835: Updated the ***fetch-incidents*** command to not take in count the default *limit* argument.

  #38629 commented on Mar 19, 2025 • 8 new comments

• Create file-enrichment aggregated command

  #38702 commented on Mar 20, 2025 • 7 new comments

• Isolate Endpoint Aggregated Command

  #38990 commented on Mar 20, 2025 • 6 new comments

• Microsoft Defender for Endpoint - Command additions (get-machine-software, get-machine-missing-kbs)

  #38701 commented on Mar 20, 2025 • 5 new comments

• New Cyberint Feed commands

  #38930 commented on Mar 20, 2025 • 4 new comments

• Sd 23095 Request Timeout

  #38981 commented on Mar 20, 2025 • 2 new comments

• [Marketplace Contribution] MISP - Indicator Sharing

  #38870 commented on Mar 16, 2025 • 2 new comments

• TIM - Extracting URLs with complex numerical IPs

  #39033 commented on Mar 20, 2025 • 2 new comments

• Aws eks ciac 10721

  #36689 commented on Mar 17, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-09 GitLab Pipeline ID 2696065

  #38968 commented on Mar 20, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-09 GitLab Pipeline ID 2695618

  #38967 commented on Mar 20, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-09 GitLab Pipeline ID demo_url

  #38966 commented on Mar 20, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-06 GitLab Pipeline ID 2673726

  #38954 commented on Mar 20, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-09 GitLab Pipeline ID 2694862

  #38965 commented on Mar 20, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-07 GitLab Pipeline ID 2673930

  #38955 commented on Mar 20, 2025 • 0 new comments

• Auto Updated Docker PR from 2025-03-09 GitLab Pipeline ID 2694183

  #38964 commented on Mar 20, 2025 • 0 new comments

• Enhanced the behavior of the *Should Error When Not Found* parameter to handle errors with status code 504 and 502

  #38960 commented on Mar 19, 2025 • 0 new comments

• Workday Event Collector to_time bugfix

  #38956 commented on Mar 20, 2025 • 0 new comments

• Add ICDM Integration

  #38982 commented on Mar 20, 2025 • 0 new comments

• ruff format content files (2)

  #38987 commented on Mar 19, 2025 • 0 new comments

• Test TPBs batch 1

  #39000 commented on Mar 17, 2025 • 0 new comments

• ruff format content files (4)

  #39009 commented on Mar 19, 2025 • 0 new comments

• ruff format content files (5)

  #39010 commented on Mar 19, 2025 • 0 new comments

• ruff format content files (6)

  #39011 commented on Mar 19, 2025 • 0 new comments

• Collector - Lookout Mobile Endpoint Security

  #39015 commented on Mar 20, 2025 • 0 new comments

• Added a newline to run whois

  #39021 commented on Mar 17, 2025 • 0 new comments

• ruff format content files (8)

  #39023 commented on Mar 19, 2025 • 0 new comments

• ruff format content files (9)

  #39024 commented on Mar 19, 2025 • 0 new comments

• ruff format content files (10)

  #39025 commented on Mar 19, 2025 • 0 new comments

• Make all AbnormalSecurity Incident Fields searchable

  #39040 commented on Mar 17, 2025 • 0 new comments

• Bump types-setuptools from 69.5.0.20240522 to 76.0.0.20250313

  #39041 commented on Mar 19, 2025 • 0 new comments

• Feedly/fetch reports as incidents

  #37229 commented on Mar 19, 2025 • 0 new comments

• demisto class improvements

  #37545 commented on Mar 17, 2025 • 0 new comments

• CybelAngel pack for incidents

  #37711 commented on Mar 20, 2025 • 0 new comments

• test for taxii feed

  #37849 commented on Mar 19, 2025 • 0 new comments

• Silentplaybooksall

  #37903 commented on Mar 19, 2025 • 0 new comments

• Deprecate mde

  #37935 commented on Mar 17, 2025 • 0 new comments

• Ciac 12581/fix validatecontent tpb 1

  #38134 commented on Mar 17, 2025 • 0 new comments

• cleanup after execution

  #38270 commented on Mar 17, 2025 • 0 new comments

• Enhance Google Workspace playbook

  #38319 commented on Mar 18, 2025 • 0 new comments

• Ys proofpoint threat add look back parameter

  #38635 commented on Mar 17, 2025 • 0 new comments

• add jwt authentication to service now

  #38641 commented on Mar 19, 2025 • 0 new comments

• add debug logs to Syslog

  #38654 commented on Mar 17, 2025 • 0 new comments

• CortexCoreIR: added `prettynames` and `prettypredefined `placeholder

  #38663 commented on Mar 20, 2025 • 0 new comments

• [Marketplace Contribution] VulnDB - Content Pack Update

  #38727 commented on Mar 20, 2025 • 0 new comments

• Fix indexes check

  #38731 commented on Mar 17, 2025 • 0 new comments

• Add platform MP to content packs - `core packs`

  #38770 commented on Mar 17, 2025 • 0 new comments

• Add platform MP to content packs #1

  #38782 commented on Mar 17, 2025 • 0 new comments

• Ruffs Rules update

  #38844 commented on Mar 19, 2025 • 0 new comments

• IBM HA - add "haIntegrationEventID" to multiple integrations

  #38846 commented on Mar 19, 2025 • 0 new comments

• Restored XSIAM part reverted on previous version (1.0.2).

  #38871 commented on Mar 20, 2025 • 0 new comments

• Bump pytest from 7.4.4 to 8.3.5

  #38878 commented on Mar 19, 2025 • 0 new comments

• Deprecate Autofocus V2

  #38909 commented on Mar 17, 2025 • 0 new comments

• Ciac 11349

  #38913 commented on Mar 20, 2025 • 0 new comments

• Mandiant - is time sensitive related changes

  #38918 commented on Mar 16, 2025 • 0 new comments

• Stage/platform content support

  #38933 commented on Mar 20, 2025 • 0 new comments

• BreachRx: update GraphQL query directive

  #38934 commented on Mar 20, 2025 • 0 new comments

• Malop API change

  #38940 commented on Mar 18, 2025 • 0 new comments

• Fix regex microsoft errors

  #38951 commented on Mar 20, 2025 • 0 new comments