April Content Digest

We've added the following new integrations, steps, and improvements:

New Templates

We've added the following template to the template library:

A new AppCheck NG steps integration is now available on the Integrations page. The following steps are available:

A new BlackKite steps integration is now available on the Integrations page. The following steps are available:

A new Cyberhaven steps integration is now available on the Integrations page. The following steps are available:

A new DarkInvader steps integration is now available on the Integrations page. The following steps are available:

Several new steps were added to the Abnormal Security integration:

Several new steps were added to the Absolute Software integration:

The Update an existing case, Create Session, and Query Intel Indicators steps have a new optional parameter:

HTTPS proxy: Your HTTPS proxy URL. If you need to use a SOCKS proxy, set the HTTPS proxy environment variable to `socks5://...`.

The Get Recon Notification, Add alerts as evidence, and Get case IDs matching a query steps have several new optional parameters:

Max retries: The maximum number of times a step will be retried. By default (-1), the step will keep retrying for up to 50 seconds.
HTTPS proxy: Your HTTPS proxy URL. If you need to use a SOCKS proxy, set the HTTPS proxy environment variable to `socks5://...`.
Retry delay: Initial delay before retry attempts in seconds, exponential backoff calculation will be applied over this value.
Retry on status: If set, the step will automatically retry the request on the specified status codes. The maximum retry duration is 50 seconds.

The Contact FC About a Detection step has several new optional parameters:

Retry delay: Initial delay before retry attempts in seconds, exponential backoff calculation will be applied over this value.
HTTPS proxy: Your HTTPS proxy URL. If you need to use a SOCKS proxy, set the HTTPS proxy environment variable to `socks5://...`.
Recon ID: The ID of the report whose details you wish to retrieve.

The List Alerts step has several new optional parameters:

Start index: The 1-based index of the first result to return. Used for paginating through the alert list.
Count: The maximum number of alerts to return in a single response.
Sort by: The attribute to sort the returned alerts by.
Sort order: The order in which to sort the results.
Filters: A SCIM v2 filter expression used to narrow the returned alerts based on attribute values.