Merge pull request #20 from splunk-soar-connectors/next

Merging next to main for release 4.3.2
splunk-soar-connectors · Apr 18, 2024 · ff167f6 · ff167f6
2 parents 0247902 + ce29d12
commit ff167f6
Show file tree

Hide file tree

Showing 44 changed files with 2,056 additions and 711 deletions.
diff --git a/LICENSE b/LICENSE
@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright (c) Recorded Future, Inc, 2019-2023
+   Copyright (c) Recorded Future, Inc, 2019-2024
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

diff --git a/NOTICE b/NOTICE
@@ -1,5 +1,5 @@
 Splunk SOAR Recorded Future
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 Third-party Software Attributions:
 
@@ -14,8 +14,3 @@ Library: pudb
 Version: 2019.2
 License: MIT
 Copyright 2009 Andreas Kloeckner and contributors
-
-Library: requests
-Version: 2.25.0
-License: Apache 2.0
-Kenneth Reitz
diff --git a/README.md b/README.md
@@ -2,17 +2,17 @@
 # Recorded Future For Splunk SOAR
 
 Publisher: Recorded Future, Inc  
-Connector Version: 4.3.1  
+Connector Version: 4.3.2  
 Product Vendor: Recorded Future, Inc  
 Product Name: Recorded Future App for Phantom  
 Product Version Supported (regex): ".\*"  
-Minimum Product Version: 5.5.0  
+Minimum Product Version: 6.1.1  
 
 This app implements investigative actions to perform lookups for quick reputation information, contextual threat intelligence and external threat alerts
 
 [comment]: # " File: README.md"
 [comment]: # ""
-[comment]: # "Copyright (c) Recorded Future, Inc, 2019-2023"
+[comment]: # "Copyright (c) Recorded Future, Inc, 2019-2024"
 [comment]: # ""
 [comment]: # "This unpublished material is proprietary to Recorded Future. All"
 [comment]: # "rights reserved. The methods and techniques described herein are"

diff --git a/__init__.py b/__init__.py
@@ -1,7 +1,7 @@
 # --
 # File: __init__.py
 #
-# Copyright (c) Recorded Future, Inc, 2019-2023
+# Copyright (c) Recorded Future, Inc, 2019-2024
 #
 # This unpublished material is proprietary to Recorded Future. All
 # rights reserved. The methods and techniques described herein are

diff --git a/alert_data_results.html b/alert_data_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_data_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are

diff --git a/alert_lookup_results.html b/alert_lookup_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_search_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are
@@ -35,6 +35,164 @@
 Style elements are defined in a separate file, named below,
 and will be merged during compilation:
        recordedfuture_style.css          -->
+<style>
+
+  /*  ||  RECORDED FUTURE COLOR */
+
+  :root{
+    --RecordedFutureBlue: #2673B3;
+    --CriticalityHigh: #cf0a2c;
+    --CriticalityModerate: #FFCE00;
+    --CriticalityLow: #e1e6eb;
+  }
+
+  a:hover {
+    text-decoration: underline;
+  }
+
+  .rf-widget {
+    overflow: auto;
+    width: 100%;
+    height: 100%;
+    padding-left:10px;
+    padding-right:10px;
+  }
+
+  .rf-box {
+    width: 750px;
+    padding: 5px;
+    margin: 0 5px;
+    font-size: 12px;
+  }
+
+  .highlighted {
+    font-weight: 700;
+  }
+
+  .non-highlighted {
+    font-size: x-small;
+  }
+
+  .rf-box th {
+    text-align: left;
+  }
+
+  .rf-table {
+    width: 98%;
+    border-collapse: collapse;
+    margin: 5px 5px 5px 0;
+    padding: 10px;
+    font-size: 12px;
+  }
+
+  td.rf-criticality-level-3, td.rf-criticality-level-4,
+  td.rf-criticality-level-5 {
+    background: var(--CriticalityHigh);
+    width: 0 !important;
+    padding: 0 2px 0 3px !important;
+  }
+  td.rf-criticality-level-2 {
+    background: var(--CriticalityModerate);
+    width: 0 !important;
+    padding: 0 2px 0 3px !important;
+  }
+  td.rf-criticality-level-1 {
+    background: var(--CriticalityLow);
+    width: 0 !important;
+    padding: 0 2px 0 3px !important;
+  }
+
+  .rf-table td {
+    vertical-align: text-top;
+    padding: 10px;
+  }
+
+  td.rf-timestamp {
+    min-width: 13ex !important;
+  }
+
+  .rf-hover-info {
+    font-weight: normal;
+  }
+
+  .rf-hover-info:hover {
+    font-weight: bold;
+  }
+  .rf-full-width-box {
+    width: 100%;
+    border-bottom: 1px solid #3c444d;
+    padding: 5px;
+    margin: 0 5px;
+    font-size: 12px;
+  }
+  .rf-circle {
+    height: 10px;
+    width: 10px;
+    border-radius: 50%;
+  }
+  .rf-alert-panel {
+    width: 96%;
+    margin-left: 2%;
+    border: 1px solid #3c444d;
+    padding: 10px;
+  }
+  .rf-chip-box {
+    border-radius: 10px;
+    background-color: darkred;
+    padding: 3px;
+    text-align: center;
+  }
+  .rf-priority-level-High {
+    background: var(--CriticalityHigh);
+  }
+  .rf-priority-level-Moderate {
+    background: var(--CriticalityModerate);
+  }
+  .rf-priority-level-Informational {
+    background: var(--CriticalityLow);
+  }
+  .rf-criticality-level-High {
+    background: var(--CriticalityHigh);
+  }
+  .rf-criticality-level-Medium {
+    background: var(--CriticalityModerate);
+  }
+  .rf-criticality-level-Low {
+    background: var(--CriticalityLow);
+  }
+  .rf-playbook-alert-screenshot {
+    margin-bottom: 20px;
+    width: 100%;
+    height: 720px;
+  }
+  .rf-playbook-alert-data-row {
+    display: flex;
+    align-items: center;
+    margin: 0;
+    gap: 20px;
+    margin-bottom: 5px;
+  }
+  .rf-playbook-alert-dns-data-row {
+    display: flex;
+    align-items: center;
+    margin: 0;
+    gap: 5px;
+  }
+  .rf-playbook-alert-panel-title {
+    margin-left: 2%;
+  }
+  .rf-playbook-alert-whois-data-row {
+    display: flex;
+    align-items: center;
+    gap: 20px;
+  }
+  .rf-playbook-alert-data-row-title {
+    width: 10%;
+  }
+  .rf-playbook-alert-evidence-data-row-title {
+    width: 20%;
+  }
+</style>
 
 <div class="rf-widget"> <!-- Main Div -->
   <!------------------- For each Result ---------------------->

diff --git a/alert_results.html b/alert_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are

diff --git a/alert_rule_search_results.html b/alert_rule_search_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_rule_search_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are

diff --git a/alert_rules_results.html b/alert_rules_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_rules_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are

diff --git a/alert_search_results.html b/alert_search_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_search_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are

diff --git a/alert_update_results.html b/alert_update_results.html
@@ -11,7 +11,7 @@
 
 <!-- File: alert_lookup_results.html
 
-Copyright (c) Recorded Future, Inc, 2019-2023
+Copyright (c) Recorded Future, Inc, 2019-2024
 
 This unpublished material is proprietary to Recorded Future. All
 rights reserved. The methods and techniques described herein are