SOAR-18473: Bump to latest SDK image

rapid7 · Dec 19, 2024 · 93f026a · 93f026a
1 parent 1b1b456
commit 93f026a
Show file tree

Hide file tree

Showing 6 changed files with 11 additions and 9 deletions.
diff --git a/plugins/microsoft_atp/.CHECKSUM b/plugins/microsoft_atp/.CHECKSUM
@@ -1,7 +1,7 @@
 {
-	"spec": "934e6a0e86aaf3bfeaf24c22d52b2f4f",
-	"manifest": "4702833d54d4ebd07beee1e4ac146a61",
-	"setup": "b11db1dff4ae3bd168fabd3691c4fd78",
+	"spec": "b247f2cc2b894b70b8e6bc2d9f630077",
+	"manifest": "e15eee3183e32aca45667b79fbdca373",
+	"setup": "d291d680acf58e924d74b9baf70b537e",
 	"schemas": [
 		{
 			"identifier": "blacklist/schema.py",

diff --git a/plugins/microsoft_atp/Dockerfile b/plugins/microsoft_atp/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=linux/amd64 rapid7/insightconnect-python-3-plugin:6.1.2
+FROM --platform=linux/amd64 rapid7/insightconnect-python-3-plugin:6.2.2
 
 LABEL organization=rapid7
 LABEL sdk=python

diff --git a/plugins/microsoft_atp/bin/komand_microsoft_atp b/plugins/microsoft_atp/bin/komand_microsoft_atp
@@ -6,7 +6,7 @@ from sys import argv
 
 Name = "Microsoft Windows Defender ATP"
 Vendor = "rapid7"
-Version = "6.0.0"
+Version = "6.0.1"
 Description = "The Windows Defender Advanced Threat Protection plugin allows Rapid7 InsightConnect users to quickly take remediation actions across their organization. This plugin can isolate machines, run virus scans, and quarantine files"
 
 

diff --git a/plugins/microsoft_atp/help.md b/plugins/microsoft_atp/help.md
@@ -1335,6 +1335,7 @@ Example output:
 
 # Version History
 
+* 6.0.1 - Update to latest SDK (v6.2.2) | Address vulnerabilities
 * 6.0.0 - Updated SDK to the latest version | Initial updates for fedramp compliance
 * 5.2.0 - Add new action: Update Alert
 * 5.1.0 - Adding the following as new action types to `blacklist` action ['Warn', 'Block', 'Audit'] | Add a new flag in the `blacklist` action to toggle generateAlerts flag | Bump SDK to version 5.4.9
@@ -1369,4 +1370,4 @@ Example output:
 ## References
 
 * [Windows Defender ATP API Start Page](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/use-apis)
-* [Windows Defender ATP API Endpoints](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/exposed-apis-list)
+* [Windows Defender ATP API Endpoints](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/exposed-apis-list)
diff --git a/plugins/microsoft_atp/plugin.spec.yaml b/plugins/microsoft_atp/plugin.spec.yaml
@@ -4,7 +4,7 @@ products: ["insightconnect"]
 name: microsoft_atp
 title: Microsoft Windows Defender ATP
 description: The Windows Defender Advanced Threat Protection plugin allows Rapid7 InsightConnect users to quickly take remediation actions across their organization. This plugin can isolate machines, run virus scans, and quarantine files
-version: 6.0.0
+version: 6.0.1
 connection_version: 6
 supported_versions: ["2024-05-21"]
 vendor: rapid7
@@ -27,14 +27,15 @@ hub_tags:
   features: []
 sdk: 
   type: full 
-  version: 6.1.2
+  version: 6.2.2
   user: nobody
 links:
  - "[Windows Defender ATP](https://www.microsoft.com/en-us/windowsforbusiness/windows-atp)"
 references:
  - "[Windows Defender ATP API Start Page](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/use-apis)"
  - "[Windows Defender ATP API Endpoints](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/exposed-apis-list)"
 version_history:
+ - "6.0.1 - Update to latest SDK (v6.2.2) | Address vulnerabilities"
  - "6.0.0 - Updated SDK to the latest version | Initial updates for fedramp compliance"
  - "5.2.0 - Add new action: Update Alert"
  - "5.1.0 - Adding the following as new action types to `blacklist` action ['Warn', 'Block', 'Audit'] | Add a new flag in the `blacklist` action to toggle generateAlerts flag | Bump SDK to version 5.4.9"

diff --git a/plugins/microsoft_atp/setup.py b/plugins/microsoft_atp/setup.py
@@ -3,7 +3,7 @@
 
 
 setup(name="microsoft_atp-rapid7-plugin",
-      version="6.0.0",
+      version="6.0.1",
       description="The Windows Defender Advanced Threat Protection plugin allows Rapid7 InsightConnect users to quickly take remediation actions across their organization. This plugin can isolate machines, run virus scans, and quarantine files",
       author="rapid7",
       author_email="",