We’ve added the following new steps, and improvements:
New steps and improvements:
Anvilogic
DarkTrace
Google Chronicle
Intezer
PagerDuty
Scripting
Splunk
New Templates:
We've added the following template to the template library.
Anvilogic
Several new steps were added to the Anvilogic integration:
Submit EOI for Copilot Analysis
Get Copilot License Information
DarkTrace
A new step was added to the DarkTrace integration:
Create a manual response action
Google Chronicle
A new step was added to the Google Chronicle integration:
List Detections
Intezer
A new step was added to the Intezer integration:
Create Alert Feedback
Pagerduty
A new step was added to the Pagerduty integration:
Get Incident
Scripting
A new step was added to the Scripting integration:
Run an inline Python script
Splunk
The Get Authentication Tokens step has several new optional parameters:
Timeout: Timeout for request in seconds. By default, timeout is 30 seconds.
Skip SSL verification: If set, request will not verify SSL certificates. Where applicable, it might be better to provide a self-signed certificate using the
Custom certificates pemparameter.Custom certificates pem parameter: The contents of a .pem file containing a self-signed certificate or certificate chain. Useful when connecting to local servers.
Client certificate pem: The contents of a .pem file containing a client certificate. Useful when a specific client certificate is needed.
Client private key pem: The contents of a .pem file containing the client certificate's private key. Useful when a specific client certificate is needed.
HTTP proxy: Your HTTP proxy URL. If you need to use a SOCKS proxy, set the
HTTP proxyenvironment variable tosocks5://....HTTPS_PROXY: Your HTTPS proxy URL. If you need to use a SOCKS proxy, set the
HTTPS proxyenvironment variable tosocks5://....