Vectra AI Release 2.1.0

[crestdatasystems]

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

• In Progress
• Ready
• In Hold - (Reason for hold)

Description

Updated "Vectra Detect" Integration:

• Added support for Advanced: Fetch escalated Accounts and Hosts parameter to fetch escalated accounts and hosts.

• Added support for Re-Fetch closed incidents via mirroring parameter.

• Added support for the OAuth2.0 authentication.

• Added support for Authentication Type parameter to select the authentication method (API Token or OAuth 2.0).

• Added support for vectra-detections-mark-asopen command to mark detections as open with provided detection IDs in the argument.

• Added support for vectra-account-markall-detections-asclosed command to mark active detections as closed by providing the ID of the account in the argument.

• Added support for vectra-detections-mark-asclosed command to mark detections as close with provided detection IDs in the argument.

• Added support for vectra-host-markall-detections-asclosed command to mark active detections as closed by providing the ID of the host in the argument.

Must have

• Tests
• Documentation

[content-bot]

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @merit-maita will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

[content-bot]

Hi @crestdatasystems, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

[merit-maita]

thank you for your contribution!
please take a look at the comments added.

[merit-maita]

@crestdatasystems please send me a demo of the changes presented.

[crestdatasystems]

Hi @merit-maita,

Thanks for reviewing the PR!

We will share the demo recording with you via the DFIR Slack shortly.

[github-actions]

Thank you for your contribution. Your external PR has been merged and the changes are now included in an internal PR for further review. The internal PR will be merged to the master branch within 3 business days.