Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ThreatVault EDL Feed #37465

Open
wants to merge 12 commits into
base: master
Choose a base branch
from
Open

ThreatVault EDL Feed #37465

wants to merge 12 commits into from

Conversation

Ni-Knight
Copy link
Contributor

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

related: https://jira-dc.paloaltonetworks.com/browse/CIAC-10961

Description

This is a feed based on PANW ThreatVault EDLs

Copy link

github-actions bot commented Nov 28, 2024

Coverage

Coverage Report
FileStmtsMissCoverMissing
Packs/FeedThreatVault/Integrations/FeedThreatVault
   FeedThreatVault.py1161686%153–155, 199, 245–247, 270, 305, 324–325, 328, 336–338, 340
TOTAL1161686% 

Tests Skipped Failures Errors Time
28 0 💤 0 ❌ 0 🔥 8.449s ⏱️

Copy link
Contributor

@samuelFain samuelFain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice! Please see my comments.

Comment on lines +90 to +106
- display: ""
name: feedExpirationPolicy
defaultvalue: indicatorType
type: 17
required: false
options:
- never
- interval
- indicatorType
- suddenDeath
section: Collect
- display: ''
name: feedExpirationInterval
defaultvalue: '20160'
type: 1
required: false
section: Collect
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are we okay with empty display: "" key for feedExpirationInterval and feedExpirationPolicy parameters?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!


except Exception:
demisto.error(traceback.format_exc()) # print the traceback
return_error(f"Failed to execute {command} command. The command not implemented")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please note that any exception raised from the code would be excepted here and printed with the "The command not implemented" suffix - which may not always be suitable.

)

else:
raise DemistoException(f"couldn't fetch, {response.get('success')}, response.get('message')")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we got to this section in the code, than response.get('success') is None, so what value does it add to print it?
Maybe we could print the error code or error message instead?

offset += LIMIT

else:
raise DemistoException(f"couldn't fetch, {response.get('success')}, response.get('message')")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants