Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release MS ATP 6.0.2 #3025

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
+11 −9
Open

Release MS ATP 6.0.2 #3025

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions plugins/microsoft_atp/.CHECKSUM
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"spec": "934e6a0e86aaf3bfeaf24c22d52b2f4f",
"manifest": "4702833d54d4ebd07beee1e4ac146a61",
"setup": "b11db1dff4ae3bd168fabd3691c4fd78",
"spec": "b247f2cc2b894b70b8e6bc2d9f630077",
"manifest": "e15eee3183e32aca45667b79fbdca373",
"setup": "d291d680acf58e924d74b9baf70b537e",
"schemas": [
{
"identifier": "blacklist/schema.py",
Expand Down
2 changes: 1 addition & 1 deletion plugins/microsoft_atp/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM --platform=linux/amd64 rapid7/insightconnect-python-3-plugin:6.1.2
FROM --platform=linux/amd64 rapid7/insightconnect-python-3-plugin:6.2.2

LABEL organization=rapid7
LABEL sdk=python
Expand Down
2 changes: 1 addition & 1 deletion plugins/microsoft_atp/bin/komand_microsoft_atp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ from sys import argv

Name = "Microsoft Windows Defender ATP"
Vendor = "rapid7"
Version = "6.0.0"
Version = "6.0.1"
Description = "The Windows Defender Advanced Threat Protection plugin allows Rapid7 InsightConnect users to quickly take remediation actions across their organization. This plugin can isolate machines, run virus scans, and quarantine files"


Expand Down
3 changes: 2 additions & 1 deletion plugins/microsoft_atp/help.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1335,6 +1335,7 @@ Example output:

# Version History

* 6.0.1 - Update to latest SDK (v6.2.2) | Address vulnerabilities
* 6.0.0 - Updated SDK to the latest version | Initial updates for fedramp compliance
* 5.2.0 - Add new action: Update Alert
* 5.1.0 - Adding the following as new action types to `blacklist` action ['Warn', 'Block', 'Audit'] | Add a new flag in the `blacklist` action to toggle generateAlerts flag | Bump SDK to version 5.4.9
Expand Down Expand Up @@ -1369,4 +1370,4 @@ Example output:
## References

* [Windows Defender ATP API Start Page](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/use-apis)
* [Windows Defender ATP API Endpoints](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/exposed-apis-list)
* [Windows Defender ATP API Endpoints](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/exposed-apis-list)
5 changes: 3 additions & 2 deletions plugins/microsoft_atp/plugin.spec.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ products: ["insightconnect"]
name: microsoft_atp
title: Microsoft Windows Defender ATP
description: The Windows Defender Advanced Threat Protection plugin allows Rapid7 InsightConnect users to quickly take remediation actions across their organization. This plugin can isolate machines, run virus scans, and quarantine files
version: 6.0.0
version: 6.0.1
connection_version: 6
supported_versions: ["2024-05-21"]
vendor: rapid7
Expand All @@ -27,14 +27,15 @@ hub_tags:
features: []
sdk:
type: full
version: 6.1.2
version: 6.2.2
user: nobody
links:
- "[Windows Defender ATP](https://www.microsoft.com/en-us/windowsforbusiness/windows-atp)"
references:
- "[Windows Defender ATP API Start Page](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/use-apis)"
- "[Windows Defender ATP API Endpoints](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/exposed-apis-list)"
version_history:
- "6.0.1 - Update to latest SDK (v6.2.2) | Address vulnerabilities"
- "6.0.0 - Updated SDK to the latest version | Initial updates for fedramp compliance"
- "5.2.0 - Add new action: Update Alert"
- "5.1.0 - Adding the following as new action types to `blacklist` action ['Warn', 'Block', 'Audit'] | Add a new flag in the `blacklist` action to toggle generateAlerts flag | Bump SDK to version 5.4.9"
Expand Down
2 changes: 1 addition & 1 deletion plugins/microsoft_atp/setup.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@


setup(name="microsoft_atp-rapid7-plugin",
version="6.0.0",
version="6.0.1",
description="The Windows Defender Advanced Threat Protection plugin allows Rapid7 InsightConnect users to quickly take remediation actions across their organization. This plugin can isolate machines, run virus scans, and quarantine files",
author="rapid7",
author_email="",
Expand Down
Loading