XSUP 45025 Office 365 (#37851)

* Updated ModelingRules * Updated ReleaseNotes * Updated ReleaseNotes * Updated pack_metadata * Updated ModelingRules * Updated ReleaseNotes * Updated ReleaseNotes * Updated ReleaseNotes
demisto · Dec 29, 2024 · ab77a42 · ab77a42
1 parent 96d419b
commit ab77a42
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 5 deletions.
diff --git a/Packs/Office365/ModelingRules/Office365/Office365.xif b/Packs/Office365/ModelingRules/Office365/Office365.xif
@@ -86,7 +86,7 @@ call o365_common_fields
 	xdm.target.resource.name = if(FormName != null, FormName, ObjectId ~= "\S+", rtrim(ltrim(ObjectId, "<"), ">")),
 	xdm.target.resource.type = ItemType,
 	xdm.target.url = Url,
-	xdm.target.user.identifier = TargetYammerUserId,
+	xdm.target.user.identifier = to_string(TargetYammerUserId),
 	xdm.target.user.upn = members_upn;
 
 

diff --git a/Packs/Office365/ModelingRules/Office365/Office365_schema.json b/Packs/Office365/ModelingRules/Office365/Office365_schema.json
@@ -273,7 +273,7 @@
             "is_array": false
         },
         "TargetYammerUserId": {
-            "type": "string",
+            "type": "int",
             "is_array": false
         },
         "ThreatsAndDetectionTech": {

diff --git a/Packs/Office365/ReleaseNotes/1_0_11.md b/Packs/Office365/ReleaseNotes/1_0_11.md
@@ -0,0 +1,6 @@
+
+#### Modeling Rules
+
+##### Office 365 Modeling Rule
+
+Updated the Modeling Rule logic for **msft_o365_general_raw**, casting the field *TargetYammerUserId* as String for backend compatibility.
diff --git a/Packs/Office365/pack_metadata.json b/Packs/Office365/pack_metadata.json
@@ -2,16 +2,22 @@
     "name": "Office 365",
     "description": "The product family of productivity and collaboration cloud based softwares owned by Microsoft.",
     "support": "xsoar",
-    "currentVersion": "1.0.10",
+    "currentVersion": "1.0.11",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",
     "categories": [
         "Analytics & SIEM"
     ],
-    "tags": [],
+    "tags": [
+        "Network",
+        "Security"
+    ],
     "useCases": [],
-    "keywords": [],
+    "keywords": [
+        "office",
+        "365"
+    ],
     "marketplaces": [
         "marketplacev2"
     ]