Skip to content

Commit

Permalink
WIP
Browse files Browse the repository at this point in the history
  • Loading branch information
pabloperezj committed May 7, 2024
1 parent 02ef74f commit 1b92c53
Show file tree
Hide file tree
Showing 3 changed files with 16 additions and 21 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ commonfields:
version: -1
name: GoogleThreatIntelligence
display: GoogleThreatIntelligence
fromversion: 5.5.0
fromversion: 6.10.0
category: Data Enrichment & Threat Intelligence
description: Analyzes suspicious hashes, URLs, domains, and IP addresses.
configuration:
Expand Down Expand Up @@ -1735,7 +1735,7 @@ script:
description: The analysis ID.
type: String

dockerimage: demisto/python3:3.10.13.89009
dockerimage: demisto/python3:3.10.14.92207
tests:
- GoogleThreatIntelligence-test
- GoogleThreatIntelligence Detonate Test
Original file line number Diff line number Diff line change
Expand Up @@ -677,12 +677,12 @@ def test_gti_assessment_command(mocker, requests_mock):
from GoogleThreatIntelligence import get_assessment_command, ScoreCalculator, Client
import CommonServerPython
# Setup Mocks
mocker.patch.object(demisto, 'args', return_value={'resource': '699ec052ecc898bdbdafea0027c4ab44c3d01ae011c17745dd2b7fbddaa077f3'})
testing_file = '699ec052ecc898bdbdafea0027c4ab44c3d01ae011c17745dd2b7fbddaa077f3'
mocker.patch.object(demisto, 'args', return_value={'resource': testing_file})
mocker.patch.object(demisto, 'params', return_value=DEFAULT_PARAMS)
mocker.patch.object(CommonServerPython, 'is_demisto_version_ge', return_value=True)

# Assign arguments
testing_file = '699ec052ecc898bdbdafea0027c4ab44c3d01ae011c17745dd2b7fbddaa077f3'
params = demisto.params()
mocked_score_calculator = ScoreCalculator(params=params)
client = Client(params=params)
Expand Down
Original file line number Diff line number Diff line change
@@ -1,15 +1,7 @@
id: 9eed1843-d81a-4e64-813f-6792d5d783ad
version: 4
id: File GTI assessment - GoogleThreatIntelligence
version: -1
contentitemexportablefields:
contentitemfields:
packID: ""
packName: GoogleThreatIntelligence
itemVersion: 1.0.0
fromServerVersion: 6.0.0
toServerVersion: ""
definitionid: ""
prevname: ""
vcShouldKeepItemLegacyProdMachine: false
contentitemfields: {}
name: File GTI assessment - GoogleThreatIntelligence
description: Get file GTI assessment using the GoogleThreatIntelligence integration.
starttaskid: "0"
Expand All @@ -24,6 +16,7 @@ tasks:
name: ""
iscommand: false
brand: ""
description: ''
nexttasks:
'#none#':
- "19"
Expand Down Expand Up @@ -54,6 +47,7 @@ tasks:
type: title
iscommand: false
brand: ""
description: ''
nexttasks:
'#none#':
- "26"
Expand Down Expand Up @@ -84,6 +78,7 @@ tasks:
type: title
iscommand: false
brand: ""
description: ''
separatecontext: false
continueonerrortype: ""
view: |-
Expand All @@ -108,8 +103,7 @@ tasks:
id: 3d9a4d8a-9a38-45a5-86d0-d9707b8f9bf1
version: -1
name: Is GoogleThreatIntelligence enabled?
description: Checks if there is an active instance of the Virus Total Private
API enabled.
description: Checks if there is an active instance of the Virus Total Private API enabled.
type: condition
iscommand: false
brand: ""
Expand Down Expand Up @@ -233,7 +227,7 @@ inputs:
iscontext: true
required: false
description: File Hash from which to get GTI assessment
playbookInputQuery: null
playbookInputQuery:
outputs:
- contextPath: File.MD5
description: Bad MD5 hash.
Expand Down Expand Up @@ -266,8 +260,7 @@ outputs:
description: For malicious files, the total number of detections.
type: Unknown
- contextPath: File.Malicious.TotalEngines
description: For malicious files, the total number of engines that checked the file
hash.
description: For malicious files, the total number of engines that checked the file hash.
type: Unknown
- contextPath: DBotScore.Indicator
description: The indicator that was tested.
Expand Down Expand Up @@ -302,4 +295,6 @@ outputs:
- contextPath: GoogleThreatIntelligence.Assessment.links.self
description: Link to the response.
type: Unknown
sourceplaybookid: File GTI assessment - GoogleThreatIntelligence
tests:
- No tests (auto formatted)
fromversion: 6.10.0

0 comments on commit 1b92c53

Please sign in to comment.