-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ThreatVault EDL Feed #37465
base: master
Are you sure you want to change the base?
ThreatVault EDL Feed #37465
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice! Please see my comments.
- display: "" | ||
name: feedExpirationPolicy | ||
defaultvalue: indicatorType | ||
type: 17 | ||
required: false | ||
options: | ||
- never | ||
- interval | ||
- indicatorType | ||
- suddenDeath | ||
section: Collect | ||
- display: '' | ||
name: feedExpirationInterval | ||
defaultvalue: '20160' | ||
type: 1 | ||
required: false | ||
section: Collect |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are we okay with empty display: ""
key for feedExpirationInterval
and feedExpirationPolicy
parameters?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice!
|
||
except Exception: | ||
demisto.error(traceback.format_exc()) # print the traceback | ||
return_error(f"Failed to execute {command} command. The command not implemented") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please note that any exception raised from the code would be excepted here and printed with the "The command not implemented" suffix - which may not always be suitable.
) | ||
|
||
else: | ||
raise DemistoException(f"couldn't fetch, {response.get('success')}, response.get('message')") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we got to this section in the code, than response.get('success') is None, so what value does it add to print it?
Maybe we could print the error code or error message instead?
offset += LIMIT | ||
|
||
else: | ||
raise DemistoException(f"couldn't fetch, {response.get('success')}, response.get('message')") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same here
Status
Related Issues
related: https://jira-dc.paloaltonetworks.com/browse/CIAC-10961
Description
This is a feed based on PANW ThreatVault EDLs