From 31e6890ae07129c1a495984f28b946329acd31d0 Mon Sep 17 00:00:00 2001 From: TOUFIKI Zakarya Date: Fri, 30 Aug 2024 14:38:50 +0200 Subject: [PATCH] Update documentation and yml --- Packs/SekoiaXDR/Integrations/SekoiaXDR/README.md | 8 ++++---- Packs/SekoiaXDR/Integrations/SekoiaXDR/SekoiaXDR.yml | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/Packs/SekoiaXDR/Integrations/SekoiaXDR/README.md b/Packs/SekoiaXDR/Integrations/SekoiaXDR/README.md index ef55b95ecc2f..dcc1977be6fc 100644 --- a/Packs/SekoiaXDR/Integrations/SekoiaXDR/README.md +++ b/Packs/SekoiaXDR/Integrations/SekoiaXDR/README.md @@ -276,7 +276,7 @@ Command to retrieve the events from the search job "sekoia-xdr-execute-events-qu ### sekoia-xdr-search-events *** -Command to search and retrieve the events from an alert. This is a combination of 3 commands: jobquery-events, jobquery-events-status and jobquery-retrieve events. +Command to search and retrieve the events from an alert. This is a combination of 3 commands: sekoia-xdr-events-execute-query, sekoia-xdr-events-status-query and sekoia-xdr-events-results-query. #### Base Command @@ -393,7 +393,7 @@ Command to get the possible transitions of status on the alert. ### sekoia-xdr-get-cases-alert *** -Command to retrieve the cases related to an Alert from Sekoia XDR. If a case_id is given, returns the information about it. +Command to retrieve the cases related to an Alert from Sekoia XDR. If a case_id is given, returns the information about it, and if not it will give all cases in this alert. #### Base Command @@ -757,7 +757,7 @@ There is no context output for this command. ### get-mapping-fields *** -This command pulls the remote schema for the different incident types, and their associated incident fields, from the remote system. +This command pulls the remote schema for the different incident types, and their associated incident fields, from the remote system. #### Base Command @@ -823,7 +823,7 @@ Command that performs a HTTP request to Sekoia using the integration authenticat | **Argument Name** | **Description** | **Required** | | --- | --- | --- | | method | Method to use with the http request (GET,POST,etc). Default is GET. | Required | -| url_sufix | The URL sufix after https://api.sekoia.io/v1, i.e. /sic/alerts/ or /asset-management/assets/. | Required | +| url_sufix | The URL suffix after https://api.sekoia.io, i.e. /v1/sic/alerts/ or /v1/asset-management/assets/. | Required | | parameters | Query parameters, i.e. limit -> 10 , match['status_name'] -> Ongoing. | Optional | #### Context Output diff --git a/Packs/SekoiaXDR/Integrations/SekoiaXDR/SekoiaXDR.yml b/Packs/SekoiaXDR/Integrations/SekoiaXDR/SekoiaXDR.yml index 48c4f2583adc..19bfd43ab24a 100644 --- a/Packs/SekoiaXDR/Integrations/SekoiaXDR/SekoiaXDR.yml +++ b/Packs/SekoiaXDR/Integrations/SekoiaXDR/SekoiaXDR.yml @@ -666,7 +666,7 @@ script: outputs: - contextPath: SekoiaXDR.Events.Results description: The outputs are different for each event, they will be output inside SekoiaXDR.Events.Results. - description: "Command to search and retrieve the events from an alert. This is a combination of 3 commands: jobquery-events, jobquery-events-status and jobquery-retrieve events." + description: "Command to search and retrieve the events from an alert. This is a combination of 3 commands: sekoia-xdr-events-execute-query, sekoia-xdr-events-status-query and sekoia-xdr-events-results-query." - name: sekoia-xdr-update-status-alert arguments: - name: id @@ -885,7 +885,7 @@ script: description: The unique identifier of the avatar of the subscriber. - contextPath: SekoiaXDR.Cases.subscribers.type description: The type of subscriber. - description: Command to retrieve the cases related to an Alert from Sekoia XDR. If a case_id is given, returns the information about it. + description: Command to retrieve the cases related to an Alert from Sekoia XDR. If a case_id is given, returns the information about it, and if not it will give all cases in this alert. - name: sekoia-xdr-get-asset arguments: - name: asset_uuid @@ -1149,7 +1149,7 @@ script: description: Pushes local changes to the remote system. - name: get-mapping-fields arguments: [] - description: This command pulls the remote schema for the different incident types, and their associated incident fields, from the remote system. + description: This command pulls the remote schema for the different incident types, and their associated incident fields, from the remote system. - name: sekoia-xdr-remove-attribute-asset arguments: - name: asset_uuid @@ -1176,7 +1176,7 @@ script: defaultValue: GET - name: url_sufix required: true - description: "The URL sufix after https://api.sekoia.io/v1, i.e. /sic/alerts/ or /asset-management/assets/." + description: "The URL suffix after https://api.sekoia.io, i.e. /v1/sic/alerts/ or /v1/asset-management/assets/." - name: parameters description: Query parameters, i.e. limit -> 10 , match['status_name'] -> Ongoing. type: keyValue