Skip to content

Commit

Permalink
[ReliaQuestGreyMatterDRPEventCollector] MyPy In Docker (#38024)
Browse files Browse the repository at this point in the history
* fix

* RN

* RM110

* RN
  • Loading branch information
shmuel44 authored Jan 8, 2025
1 parent fd6aec7 commit 5b8052b
Show file tree
Hide file tree
Showing 6 changed files with 48 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -19,14 +19,48 @@ This is the default integration for this content pack when configured by the Dat
| Use system proxy settings | | False |
| Username | The username to authenticate Relia Quest Event Collector. | False |
| Password | The password to authenticate Relia Quest Event Collector | False |

5. Click **Test** to validate the URLs, token, and connection.


## ReliaQuest GreyMatter DRP EventCollector Authentication

Requests to all operation endpoints require HTTP Basic authentication, using dedicated (high entropy) API credentials. These normally consist of a six character key, and a 32 character 'secret'. Note that you will not be able to use your normal email/password login details with the HTTP Basic authentication mechanism.

Contact your Digital Shadows representative to obtain API credentials.

To authenticate the integration, you must have a username, password and account ID. To get the account ID, see [here](https://portal-digitalshadows.com/api/stored-objects/portal/searchlight-api-docs/SearchLightAPI_APIKey_AccountId2.pdf).

## Limitations
Increasing the Maximum number of events per fetch parameter to high numbers can cause rate-limits, however The integration will recover from those rate-limits automatically. For more information about rate-limits, see [here](https://portal-digitalshadows.com/learn/searchlight-api/overview/rate-limiting).

Increasing the Maximum number of events per fetch parameter to high numbers can cause rate-limits, however The integration will recover from those rate-limits automatically. For more information about rate-limits, see [here](https://portal-digitalshadows.com/learn/searchlight-api/overview/rate-limiting).

## Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.


### relia-quest-get-events

***
Manual command to fetch reila-quest events and display them.

#### Base Command

`relia-quest-get-events`

#### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| start_time | From which time to get the events in ISO8601 format, for example 2020-09-24T16:30:10.016Z or (<number> <time unit>, e.g., 12 hours, 7 days). If not provided, will retrieve the oldest events available in case event_num_after argument is not provided. Default is 3 days ago. | Optional |
| end_time | Until which time to get the events in ISO8601 format, for example 2020-09-24T16:30:10.016Z or (<number> <time unit>, e.g., 12 hours, 7 days). | Optional |
| limit | The maximum number of events to retrieve. Default is 200. | Optional |
| event_num_after | Fetch events that were created after a specific event-number. | Optional |

#### Context Output

| **Path** | **Type** | **Description** |
| --- | --- | --- |
| ReilaQuest.Events | Unknown | A list of events. |
Original file line number Diff line number Diff line change
Expand Up @@ -444,7 +444,8 @@ def fetch_events(client: ReilaQuestClient, last_run: dict[str, Any], max_fetch:
demisto.info(f'now: {now}, retry-after: {retry_after}')
if retry_after_datetime and now < retry_after_datetime:
demisto.info(
f'Waiting for the api to recover from rate-limit, need to wait {(retry_after - now).total_seconds()} seconds'
'Waiting for the api to recover from rate-limit,'
f' need to wait {(retry_after - now).total_seconds()} seconds' # type: ignore[operator]
)
return
for events, largest_event in client.list_triage_item_events(
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -66,11 +66,11 @@ script:
script: '-'
type: python
subtype: python3
dockerimage: demisto/python3:3.11.10.115186
dockerimage: demisto/python3:3.11.11.1940698
isfetchevents: true
fromversion: 8.0.0
supportlevelheader: xsoar
marketplaces:
- marketplacev2
- marketplacev2
tests:
- No tests (auto formatted)
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
!relia-quest-get-events start_date=2024-01-1T09:39:00.000Z end_date=2024-02-24T09:40:00.000Z limit=2
7 changes: 7 additions & 0 deletions Packs/DigitalShadows/ReleaseNotes/2_0_5.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@

#### Integrations

##### ReliaQuest GreyMatter DRP Event Collector

- Updated the Docker image to: *demisto/python3:3.11.11.1940698*.
- Documentation and metadata improvements.
2 changes: 1 addition & 1 deletion Packs/DigitalShadows/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "ReliaQuest GreyMatter DRP Incidents",
"description": "ReliaQuest GreyMatter DRP monitors and manages an organization's digital risk across the open, deep, and dark web.",
"support": "partner",
"currentVersion": "2.0.4",
"currentVersion": "2.0.5",
"author": "ReliaQuest",
"url": "https:// www.reliaquest.com/",
"email": "[email protected]",
Expand Down

0 comments on commit 5b8052b

Please sign in to comment.