From d2d500a45750963b878d6d8fd35444a2cc718d91 Mon Sep 17 00:00:00 2001 From: Jakub Orzol Date: Wed, 13 May 2026 13:51:40 +0100 Subject: [PATCH 1/5] update readme, fix typos --- .../Integrations/FeedCyjax/FeedCyjax.py | 2 +- .../Integrations/FeedCyjax/FeedCyjax.yml | 2 +- .../Integrations/FeedCyjax/README.md | 50 +++++++++---------- 3 files changed, 27 insertions(+), 27 deletions(-) diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py index f06ef846500b..5e76c754ea2d 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py @@ -89,7 +89,7 @@ def fetch_indicators(self, since=None, until=None, indicator_type=None, source_t :param indicator_type: The indicator type. If not specified all indicators are returned :type source_type: ``str`` - :param source_type: The indicators source type. Allowed values are incidnet-report, my-report + :param source_type: The indicators source type. Allowed values are incident-report, my-report :type source_id: ``int`` :param source_id: The indicators source ID diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml index 6e1324de7115..802636f166a8 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml @@ -125,7 +125,7 @@ script: - name: type description: 'The indicator type. If not specified all indicators are returned. Allowed values are IPv4, IPv6, Domain, Hostname, Email, FileHash-SHA1, FileHash-SHA256, FileHash-MD5, FileHash-SSDEEP.' - name: source_type - description: The indicators source type. Allowed values are incidnet-report, my-report. + description: The indicators source type. Allowed values are incident-report, my-report. - name: source_id description: The indicators source ID. - name: limit diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/README.md b/Packs/FeedCyjax/Integrations/FeedCyjax/README.md index 66adc1086dda..19d59fa157d7 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/README.md +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/README.md @@ -1,11 +1,11 @@ -The feed allows customers to pull indicators of compromise from cyber incidents (IP addresses, URLs, domains, CVE, and file hashes). +The feed allows customers to pull indicators of compromise from cyber incidents (IP addresses, URLs, domains, CVEs, and file hashes). -## Cyjax API token +## CYJAX API token -1. Log in to [Cyjax threat intelligence portal](https://cymon.co). -2. On the top navigation bar, hover the cursor over your user icon and go to **Developer settings**. -3. Open the personal access token tab. -4. Generate a new token +1. Log in to [CYJAX threat intelligence portal](https://cymon.co). +2. On the top navigation bar, hover the cursor over your user icon and go to **Profile Settings**. +3. Open the API tokens tab. +4. Generate a new token and enable the Indicators API scope. 5. Record the API token, as it will not be accessible after the window is closed. ## Feed installation @@ -16,17 +16,17 @@ The feed allows customers to pull indicators of compromise from cyber incidents ## Configuration -1. Enter feed name eg. `Cyjax Feed` -2. API URL `https://api.cyberportal.co` -3. Enter Cyjax API token -4. Set proxy if required by your installation -5. Indicator reputation (the reputation set to the indicators fetched from this feed, default is Suspicious) -6. Source reliability: A - Completely reliable +1. Enter feed name, e.g., `CYJAX Feed`. +2. API URL: `https://api.cymon.co/v2`. +3. Enter CYJAX API token. +4. Set proxy if required by your installation. +5. Indicator reputation (the reputation assigned to the indicators fetched from this feed; the default is Suspicious). +6. Source reliability: A - Completely reliable. 7. Traffic Light Protocol Color - The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed. -8. Use Cyjax feed TLP (selected by default) - Whether to use TLP set by Cyjax. Will override TLP set above. -9. Set feed tags. (optional, comma delimited, eg. MyTag, YourTag) -10. Set Indicator Expiration Method (default is never) -11. Set fetch interval (default is to fetch every 1 hour) +8. Use CYJAX feed TLP (selected by default) - Whether to use the TLP set by CYJAX. This will override the TLP set above. +9. Set feed tags (optional, comma-delimited, e.g., MyTag, YourTag). +10. Set Indicator Expiration Method (default is never). +11. Set fetch interval (default is to fetch every 1 hour). 12. First fetch time. The time interval for the first fetch (retroactive). The default is 3 days. 13. Test connection. 14. Click done to save. @@ -39,32 +39,32 @@ After you successfully execute a command, a DBot message appears in the War Room ### !cyjax-get-indicators *** -Get indicators from Cyjax API +Get indicators from the CYJAX API. | **Argument** | **Description** | **Required** | | --- | --- | --- | | since | The start date time in ISO 8601 format | Optional | | until | The end date time in ISO 8601 format | Optional | | type | The indicator type. If not specified all indicators are returned. Allowed values are IPv4, IPv6, Domain, Hostname, Email, FileHash-SHA1, FileHash-SHA256, FileHash-MD5, FileHash-SSDEEP | Optional | -| source_type | The indicators source type. Allowed values are incidnet-report, my-report | Optional | -| source_id | The indicators source ID | Optional | +| source_type | The indicator source type. Allowed values are incident-report, my-report | Optional | +| source_id | The indicator source ID | Optional | | limit | The maximum number of indicators to get. The default value is 50. | Optional | -example: `!cyjax-get-indicators since=2020-10-23T00:00:00 type=IPv4` +Example: `!cyjax-get-indicators since=2020-10-23T00:00:00 type=IPv4` -### !cyjax-cyjax-indicator-sighting +### !cyjax-indicator-sighting *** -Get Cyjax sighting of a indicator +Get the CYJAX sighting of an indicator. | **Argument** | **Description** | **Required** | | --- | --- | --- | | value | The indicator value | Required | -example: `!cyjax-indicator-sighting value=176.117.5.126` +Example: `!cyjax-indicator-sighting value=176.117.5.126` ### !cyjax-unset-indicators-last-fetch-date *** -Unset the indicators feed last fetch date. Should only be used if user needs to use `re-fetch` button -and wants to fetch old indicators from Cyjax. Next feed will use date set in first_fetch (default is last 3 days) +Unset the indicators feed last fetch date. Should only be used if a user needs to use the `re-fetch` button +and wants to fetch old indicators from CYJAX. The next feed will use the date set in first_fetch (default is the last 3 days). From 44a7ddc7df167fc09983d8d18cbfba947529fa62 Mon Sep 17 00:00:00 2001 From: Jakub Orzol Date: Wed, 13 May 2026 14:18:30 +0100 Subject: [PATCH 2/5] Update logo to new design --- Packs/FeedCyjax/Author_image.png | Bin 4570 -> 2285 bytes .../FeedCyjax/FeedCyjax_image.png | Bin 4570 -> 2285 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/Packs/FeedCyjax/Author_image.png b/Packs/FeedCyjax/Author_image.png index 245a94fd7eff65dd07147e9e328449ca63f6c474..5d2b877ddab42ec01e832098ea143b0ac2b275e9 100644 GIT binary patch literal 2285 zcmY*bc|4SB8-B-(wL!-|)-i2FGpKBhi7YdgNt9zOHTG@Hk{QQLHDfEDxey->D{_&pLw-+lfrzr;jfV?x# z!BZ5OVk{#idIz1kmn#a8a67ym06e^~P8cXDTEl~Jo_GK_vKaspjsw6~Q7Yjh0K}RA zz(fE5SZ4u%IxUCiffj8X4<$H<;qky$5tacYK}rBvgg~MP0BHhZH4y?_Kw4|q6J+p< zBLM)ZkpScu$5#}^11Fl|nx7Gz3;I_vS7MFL%muGud2w0mgtyq7EDh&F2Y_|T;t2w- z=4go2d?F7J7zDhVbug8T3=E+Lg(8_`nz#x;Gp$9C9LflUGs)2ux;4`V@q=M4!s0Xv z0slc^kZceH{64rnH6|2pjx<4sz6e=z*4jH!{ zNsS3dnOa#{p-jwBW@g(&jBRulg%QZyMxk%`De_+(hfsQOOeBpFNu|KWx`9E|ScVM( zA#Subex8#N8TM}{3jLQYkwKJr2W5&hL9JzY92&KDZ5TP&p?A^%AVqO@uscAIy^|GL;N_+Aj4JRqCqO)-LI@#^ zsmBeB@?I9SNa0E&(hx}nisx|3=Ttn1H&4#FI)%_7p-}`Mf(mShhn)F^ly>?z&eGIs zY~4TXCq~HS8{EZyQc>-q@5?{j~7C zme<_Q7NW#(RS$78LD0MkZj-!~utQb|xwxv;k}VNAoU(8oMm-Y-JK0HX$vEQ`tu%bI zm0~rg&{WLFdc>9uzBqlMikA{>XqxRIXge}JES;8f2&+4g1)X(0JKI)NFct4)?iBuq z$9J&0Y~SdD(6G-rKdEm)(4Lsp&z+t(_fI)^N&cWulS`W&Q=#jaPXUOlgP}+n;mO;Zk3nX@xPVWn>)#k+hz1u-OWngQHepjuQyt`M`!b@T{2wB z#O~S!ciZ&j{8giXYK;cAYaOUV_NbX8ZosBM`%%@4(g8R32-%mtfAtMydI0rIY%Y8HGoM)I`?6*ug(v}i;wAA^=vP|F^zcUaP&<8d0formt~kHIIX8QzIc zeNWXWrd=e(txx8>9UTL5y13H}Hz8*R%GAzc?na;Zu3x$s`8>qG*~iyZAnWT_Y-k;8Cpq z#Jy`ObzwW^uUHL^l-RvbsY|5<9eytFm$GVcJ_Eg_`98(oK(-=yo>bbT5Q-VLV}8nr zwF%KnI6_VLzS*gNmR%Ps6-g83XL4ig{XHZ`0X|{0R)_p((Nmb+^)g&DPC1Ic^k#es zaYOd9QXOp8?Qa{$O<6etS6ihT&=+8cI!W7dtq^%-DvBmM(;fLa%n6}&yC}OL`&DP> zmxlqQfGO2_e5!Ho(PfD?iB9lfgkrJe3N%M1$ATCPeO&Uf(Nt&8L^)q4v^fivkp054 z>R{8dWodlZo0-Oh?_?L7wlBs3HeA7*jSQQ=QUeTWb&JJV%GP|Vw?M0TgmxNI>IzYB zdMEj!Cv&^+E`HizK;71i&Jm@`0Z6vtL77Kf!W_)D%plnl(>703K%02>WF=4e^O0m- z$OX`Wtkz_UHwviw>uMN2O+l-d)sluu6{N!ubc`l92k0V)QsN$0a(e~)Wl~7 zH|VlW6b1}v>Mcj8syYu`hglqOPRXRk3I|`do%TeBOys&ZJbDKRKoISw+KR@rPV ziyPRyQYv^dtqI#9R12xIeU?z2=xAnp`h+C{=BnATMeu#>c@i$89x(&f=(tc=Tuc29 zNvkoQ<{40ZdOoS;#Z;<(fefj$j*{8NLP~w({SvEUkUnV?TX3|irzW%9;;F6`${$;O ztwBCO4X4*ll$nMUmvDYF!P1v?-N5S_IQ2|H!>M|H>=F%`)PeBsEpN$_lv(hPmVS52 zf(s$3X8p+bKWB@gEXlTLkj!%05D{KG;ZMR`@$;^u0Tu+6(Pn-R?tpcjW#}HAuES7JO%(5867yy zOj*uNTFFaS&`ny9Gd>CmA{iYwlQuyF2pJh2I9wekbtp5zM^wN^Q?f%%cO)vcLr;4u zGs#O>5*91cPFoZhE{Qcgp*=>kLr#M%Gt5j`bSyNpLr#-3JIzd4&`w&uM^m3WMA1%L zhBG@C8Z#LkI0XwC5ECcCNL0#8Sgk=!z(`bhEHcGPR?JLU&`nx^EjqJ7OnfXe$4gho zN>{BwOUFr9qdiFv5+)TGF%1wS7aKGK3K|$3H_c30k2XHHMNwQDAG<|SyG2pPN>-6G zK%YBB%S&0AIYW9ZHljR72@D<#3>g<2H3EjDm0GQ~+&78^5$GCPnpKn@ZlwnR^xH$$X7N1i%9 zr$0&1OR~{rV^M@&y<(6FMJ28uCfgm`2zBPZmQ4_Sfv+ z@Jci5T^8;VEzrxH8LTADhv%n8c%VV$Dy35B;=yn7Kg8$~Z_VVM#v$3^_&%va+sTo} zepRwt$qVJ{TDly-zRY82)oDPADkIn$H$5C6P?s(a&vP(gOUarrtY08cj+A)ly3m8M zwz7R{&eQDjdEd9xG@Dl=qIkUA>_&)9hLzsH?2CYcwNtN3uHB+Skej^W#YIhXbwzGt zXs2x#u(_#XwSq%~$-kyiLOn@ob6`!vz=4Zn#c-liqupG!STr=Et*n-N6q^754U0)c zK~#7FwVDN78(Y)HpG~sNIU9l`*e#L*rT(^rQc4x-?n1BB-QBO&-QC^Y-QMf&?k=zU zXR}|X2^1e$df(o#(Bx2YZI+}WeaCX zmUZq#!$Oaq-uIKeqg%GTvh#vHd2L*1^3hzOT)e%9!kiIy6rZI^8O zj~J8#t8F~x6o8~!%u~JzgxBmAhG1qPU2eBaS`Q;eZp|R8#?%p6Ms}YwY*3Ygf+|VLP1e?ml*|zWhv@*cw+*&+qHx#O$wLYNIwLuM1S#2> zD!e|dnLr4EqK==47c7r;ApnC0vv@BZ;oytso<2aYEqHkq0GdOZ+c_Cf#Je7kM^`a3?V{Z3(&B~L4t zOE&uG0Ns@QrH%)MPOxnRK($%4)B*cw$<97@_=!1r)*B%>h>*sPx8ukv9eFIi@&NQs zg!92;`;rv52sk5H>3Rk-x3J2{ps$^Rg)4u@@Ec>tUi{mro+`#&y_2od(Oq(Tl?8=q zcu*4Zd5jKhl6+SOd<|G$)B#lA6~XL0d(x*9EQk_2zE@eWT)vI~nrg5&6JbEZ*_i<( z4dvzOfUiH>rV^lSHCS~0!9%#8=$~szwsrOZ$joPF93GsNlAi#yTAW`6@HAkfBY=#4 z%y~`hP*7sph&y*`u8RwpuJ;`&xaV;I)3>=Z@WAM`c(4YXVc7-H*03!HKvoU5wX}jJ z=F*-#x3F;4n6b*Lm|7o$-E-8NRq)`{lrkAeGWZHWS6EI3@K+nx$Wap22RH?@Fud`3 zMTSj9+Ab@323=+OdqOzqgZUQ%&EzRjKu5_J33%PbLs|vP2pa?6@0Oqu>7J@n|LGOB zI4EMyvRsXD$da-UNS0y~;ECrJI*{e&`W^u4G&1GSp*54DvKu0Rw!U&9!oY88EdtHr zIs`h+h7ZVy=OG?Izbx6gA{M^}MI#)1Ze{8^DW3$=Y~n{i>&KC;0R3y`ei^7RI&tM# z&~6^AgJy6qJFt~yM@v_aZZ>fV$S`;<0T)^PflzTIMaWFxZT3ci z?(z@~w2Sj%tnltks6d|J{B+RcJe-hVh}l5Z2(bb1c;h}Vd zP>)aor2|QIWmQmj9_5#Gi`D8g7zw}@&Z`%yI{(>bDJdzH4(yu*g+4KL0*aZ}xYm_`1pA1UzwjW-=H5-jwirui9e@km0fOAZ6Zasz_B z25$gf6YfNm@b8EGKjX9ci=O`DeuwG!E&R++F((I%rw*pMgh~s)WcsiD9K}4^*mMM) z)Xp^L*25nDl>Gj7#esVBaG`{~!{-fzwde}@^h!Pe%)Roo;_%{IUc@FTC*hbKXiX7lF*C%)kk%?j! zIFu_(@z5(~$_se3nVB*lrG@n)<}37Qs<{LuP&-&IQa zJ^+p3+Jt23(h!6ioBIi6pcX6FG@qq1gz2c6vJ7~^VNM85<+-Mx@j8^SkXh;&KZfu@ zggXw@mTv%WiO744TFHFAY++hrn&xv4p$y@sspe4v><7)~C^RiAnPxNVKWJqOj|dU2 zSIO*vvavsBrY=HR!tG4Qg5bZ6Py)SZn%2_%-&{S}JU}QDdf3c;s4U@n&CJGj@-r{R z98U|n^4Iy z?$?AD9x|J0fyHqwMUcb6;;#M9G+!d?(Zi<7lbeA}LY)Kls!c+x!9S_6b{C+8MUR+f zZiflge%o%c!%V4Gmhdy<7PmVTjMz!3=3GLMM^gi3V2R&OEojJObzwshX>E%)?`?~{ z39^WYo;^>n)(BJSxL>yHFHZ20<-*TZjlXS z2M+@I(YOaKY&Z8%O6nuyf1}-3yB<+eio-`HKll7n3Y3ZGewQBNuIFC11NyUbpFs&P z9BBu;b@a)$>~6sy5u%;^XP}CU$KpPS>S;u{AEJAYLLc9MO&PC2?ZUg&VNZ5ZS>^Nq zr@3dkGTE5~RPgaO7W6oOtkRd?RdLO;t>bMiJ1UY^Hkqm9)zPc9b)f%Gj`sjLlDiXt ziob=KYTdJCTemPR3AB^NQx&S*iHoe8wvjq$CU>=4J&Brtewsz+iuAV6Exu9x7nuX3 zxx|}++tehbEVxz$Mi|YsZplYke-B`zy4Bb0ngHlKB^#Zh@oP{N!XjD9bwH*RJpfOh z)rv@V^EtmVa?UfK@03WPVm-1;S`kHs2nW56I)KnLtNHSl>z-~Y6z=@(O#%(J9}RY|Qg-_g28ELQ zSPi~>pVd-yD`j6l=J*YEC@7)LuuYprbSu!I&~q9vZ(9kV>iKY5ifVUqRtKtkxmG$5 z*Pm_g5TL*5WYP2O1j7A9^{Atos4>bdMeHpA5Kh~8jRw?|yhj7#uCm;$DWm^O_4RuH zBSRxtkY2F5b&+7XrjP(yWw3W0!s2@=z98TY$(?n;^A&Ty>ek%yv{S`XjmJOSvUBI= z^=+rP)zfL#pev@eops05m6@(E!q$v-6ZS4Bh}_7Q9;k;i&dlQ}YWy==axI^-bgdfyyj%A8=h6}49$Dg#;&C_I{A(>flgxl>3Ozd5C z-tZ|gN**aVFB9cJUndW3NC8X4;Et9w#U$UH*~_cOxGwk5_Fvw}2~-s7Hbb)QL=4J> zv?*+}2G_pbHWq(hRUBHRd3@EY`w~l9d+8lpNS4P63FSn=a^`+X*6{F8)-3hgGDh{$ znQK*eoolEA@H`QR^1!~u#>NV}<;&IvvvfAU_-(5g3KCtA^=9uP6}Fr7beAe%mo)Mm^ru>ypfD`}^3y%slN?$wm*96P}hfmb0=5mUhF= z=Zv~6*g|k!SNpq7e1WhVw9Ccv)#@lex~-8c2Tu)-iYYcJ>mPeJ*RDN!?O|2=|7vZ0 zt*T!~4HW?;`oHO8eUWU)*)4tkdf~}oBQDK(>eInqsb1`=zU@Dxey->D{_&pLw-+lfrzr;jfV?x# z!BZ5OVk{#idIz1kmn#a8a67ym06e^~P8cXDTEl~Jo_GK_vKaspjsw6~Q7Yjh0K}RA zz(fE5SZ4u%IxUCiffj8X4<$H<;qky$5tacYK}rBvgg~MP0BHhZH4y?_Kw4|q6J+p< zBLM)ZkpScu$5#}^11Fl|nx7Gz3;I_vS7MFL%muGud2w0mgtyq7EDh&F2Y_|T;t2w- z=4go2d?F7J7zDhVbug8T3=E+Lg(8_`nz#x;Gp$9C9LflUGs)2ux;4`V@q=M4!s0Xv z0slc^kZceH{64rnH6|2pjx<4sz6e=z*4jH!{ zNsS3dnOa#{p-jwBW@g(&jBRulg%QZyMxk%`De_+(hfsQOOeBpFNu|KWx`9E|ScVM( zA#Subex8#N8TM}{3jLQYkwKJr2W5&hL9JzY92&KDZ5TP&p?A^%AVqO@uscAIy^|GL;N_+Aj4JRqCqO)-LI@#^ zsmBeB@?I9SNa0E&(hx}nisx|3=Ttn1H&4#FI)%_7p-}`Mf(mShhn)F^ly>?z&eGIs zY~4TXCq~HS8{EZyQc>-q@5?{j~7C zme<_Q7NW#(RS$78LD0MkZj-!~utQb|xwxv;k}VNAoU(8oMm-Y-JK0HX$vEQ`tu%bI zm0~rg&{WLFdc>9uzBqlMikA{>XqxRIXge}JES;8f2&+4g1)X(0JKI)NFct4)?iBuq z$9J&0Y~SdD(6G-rKdEm)(4Lsp&z+t(_fI)^N&cWulS`W&Q=#jaPXUOlgP}+n;mO;Zk3nX@xPVWn>)#k+hz1u-OWngQHepjuQyt`M`!b@T{2wB z#O~S!ciZ&j{8giXYK;cAYaOUV_NbX8ZosBM`%%@4(g8R32-%mtfAtMydI0rIY%Y8HGoM)I`?6*ug(v}i;wAA^=vP|F^zcUaP&<8d0formt~kHIIX8QzIc zeNWXWrd=e(txx8>9UTL5y13H}Hz8*R%GAzc?na;Zu3x$s`8>qG*~iyZAnWT_Y-k;8Cpq z#Jy`ObzwW^uUHL^l-RvbsY|5<9eytFm$GVcJ_Eg_`98(oK(-=yo>bbT5Q-VLV}8nr zwF%KnI6_VLzS*gNmR%Ps6-g83XL4ig{XHZ`0X|{0R)_p((Nmb+^)g&DPC1Ic^k#es zaYOd9QXOp8?Qa{$O<6etS6ihT&=+8cI!W7dtq^%-DvBmM(;fLa%n6}&yC}OL`&DP> zmxlqQfGO2_e5!Ho(PfD?iB9lfgkrJe3N%M1$ATCPeO&Uf(Nt&8L^)q4v^fivkp054 z>R{8dWodlZo0-Oh?_?L7wlBs3HeA7*jSQQ=QUeTWb&JJV%GP|Vw?M0TgmxNI>IzYB zdMEj!Cv&^+E`HizK;71i&Jm@`0Z6vtL77Kf!W_)D%plnl(>703K%02>WF=4e^O0m- z$OX`Wtkz_UHwviw>uMN2O+l-d)sluu6{N!ubc`l92k0V)QsN$0a(e~)Wl~7 zH|VlW6b1}v>Mcj8syYu`hglqOPRXRk3I|`do%TeBOys&ZJbDKRKoISw+KR@rPV ziyPRyQYv^dtqI#9R12xIeU?z2=xAnp`h+C{=BnATMeu#>c@i$89x(&f=(tc=Tuc29 zNvkoQ<{40ZdOoS;#Z;<(fefj$j*{8NLP~w({SvEUkUnV?TX3|irzW%9;;F6`${$;O ztwBCO4X4*ll$nMUmvDYF!P1v?-N5S_IQ2|H!>M|H>=F%`)PeBsEpN$_lv(hPmVS52 zf(s$3X8p+bKWB@gEXlTLkj!%05D{KG;ZMR`@$;^u0Tu+6(Pn-R?tpcjW#}HAuES7JO%(5867yy zOj*uNTFFaS&`ny9Gd>CmA{iYwlQuyF2pJh2I9wekbtp5zM^wN^Q?f%%cO)vcLr;4u zGs#O>5*91cPFoZhE{Qcgp*=>kLr#M%Gt5j`bSyNpLr#-3JIzd4&`w&uM^m3WMA1%L zhBG@C8Z#LkI0XwC5ECcCNL0#8Sgk=!z(`bhEHcGPR?JLU&`nx^EjqJ7OnfXe$4gho zN>{BwOUFr9qdiFv5+)TGF%1wS7aKGK3K|$3H_c30k2XHHMNwQDAG<|SyG2pPN>-6G zK%YBB%S&0AIYW9ZHljR72@D<#3>g<2H3EjDm0GQ~+&78^5$GCPnpKn@ZlwnR^xH$$X7N1i%9 zr$0&1OR~{rV^M@&y<(6FMJ28uCfgm`2zBPZmQ4_Sfv+ z@Jci5T^8;VEzrxH8LTADhv%n8c%VV$Dy35B;=yn7Kg8$~Z_VVM#v$3^_&%va+sTo} zepRwt$qVJ{TDly-zRY82)oDPADkIn$H$5C6P?s(a&vP(gOUarrtY08cj+A)ly3m8M zwz7R{&eQDjdEd9xG@Dl=qIkUA>_&)9hLzsH?2CYcwNtN3uHB+Skej^W#YIhXbwzGt zXs2x#u(_#XwSq%~$-kyiLOn@ob6`!vz=4Zn#c-liqupG!STr=Et*n-N6q^754U0)c zK~#7FwVDN78(Y)HpG~sNIU9l`*e#L*rT(^rQc4x-?n1BB-QBO&-QC^Y-QMf&?k=zU zXR}|X2^1e$df(o#(Bx2YZI+}WeaCX zmUZq#!$Oaq-uIKeqg%GTvh#vHd2L*1^3hzOT)e%9!kiIy6rZI^8O zj~J8#t8F~x6o8~!%u~JzgxBmAhG1qPU2eBaS`Q;eZp|R8#?%p6Ms}YwY*3Ygf+|VLP1e?ml*|zWhv@*cw+*&+qHx#O$wLYNIwLuM1S#2> zD!e|dnLr4EqK==47c7r;ApnC0vv@BZ;oytso<2aYEqHkq0GdOZ+c_Cf#Je7kM^`a3?V{Z3(&B~L4t zOE&uG0Ns@QrH%)MPOxnRK($%4)B*cw$<97@_=!1r)*B%>h>*sPx8ukv9eFIi@&NQs zg!92;`;rv52sk5H>3Rk-x3J2{ps$^Rg)4u@@Ec>tUi{mro+`#&y_2od(Oq(Tl?8=q zcu*4Zd5jKhl6+SOd<|G$)B#lA6~XL0d(x*9EQk_2zE@eWT)vI~nrg5&6JbEZ*_i<( z4dvzOfUiH>rV^lSHCS~0!9%#8=$~szwsrOZ$joPF93GsNlAi#yTAW`6@HAkfBY=#4 z%y~`hP*7sph&y*`u8RwpuJ;`&xaV;I)3>=Z@WAM`c(4YXVc7-H*03!HKvoU5wX}jJ z=F*-#x3F;4n6b*Lm|7o$-E-8NRq)`{lrkAeGWZHWS6EI3@K+nx$Wap22RH?@Fud`3 zMTSj9+Ab@323=+OdqOzqgZUQ%&EzRjKu5_J33%PbLs|vP2pa?6@0Oqu>7J@n|LGOB zI4EMyvRsXD$da-UNS0y~;ECrJI*{e&`W^u4G&1GSp*54DvKu0Rw!U&9!oY88EdtHr zIs`h+h7ZVy=OG?Izbx6gA{M^}MI#)1Ze{8^DW3$=Y~n{i>&KC;0R3y`ei^7RI&tM# z&~6^AgJy6qJFt~yM@v_aZZ>fV$S`;<0T)^PflzTIMaWFxZT3ci z?(z@~w2Sj%tnltks6d|J{B+RcJe-hVh}l5Z2(bb1c;h}Vd zP>)aor2|QIWmQmj9_5#Gi`D8g7zw}@&Z`%yI{(>bDJdzH4(yu*g+4KL0*aZ}xYm_`1pA1UzwjW-=H5-jwirui9e@km0fOAZ6Zasz_B z25$gf6YfNm@b8EGKjX9ci=O`DeuwG!E&R++F((I%rw*pMgh~s)WcsiD9K}4^*mMM) z)Xp^L*25nDl>Gj7#esVBaG`{~!{-fzwde}@^h!Pe%)Roo;_%{IUc@FTC*hbKXiX7lF*C%)kk%?j! zIFu_(@z5(~$_se3nVB*lrG@n)<}37Qs<{LuP&-&IQa zJ^+p3+Jt23(h!6ioBIi6pcX6FG@qq1gz2c6vJ7~^VNM85<+-Mx@j8^SkXh;&KZfu@ zggXw@mTv%WiO744TFHFAY++hrn&xv4p$y@sspe4v><7)~C^RiAnPxNVKWJqOj|dU2 zSIO*vvavsBrY=HR!tG4Qg5bZ6Py)SZn%2_%-&{S}JU}QDdf3c;s4U@n&CJGj@-r{R z98U|n^4Iy z?$?AD9x|J0fyHqwMUcb6;;#M9G+!d?(Zi<7lbeA}LY)Kls!c+x!9S_6b{C+8MUR+f zZiflge%o%c!%V4Gmhdy<7PmVTjMz!3=3GLMM^gi3V2R&OEojJObzwshX>E%)?`?~{ z39^WYo;^>n)(BJSxL>yHFHZ20<-*TZjlXS z2M+@I(YOaKY&Z8%O6nuyf1}-3yB<+eio-`HKll7n3Y3ZGewQBNuIFC11NyUbpFs&P z9BBu;b@a)$>~6sy5u%;^XP}CU$KpPS>S;u{AEJAYLLc9MO&PC2?ZUg&VNZ5ZS>^Nq zr@3dkGTE5~RPgaO7W6oOtkRd?RdLO;t>bMiJ1UY^Hkqm9)zPc9b)f%Gj`sjLlDiXt ziob=KYTdJCTemPR3AB^NQx&S*iHoe8wvjq$CU>=4J&Brtewsz+iuAV6Exu9x7nuX3 zxx|}++tehbEVxz$Mi|YsZplYke-B`zy4Bb0ngHlKB^#Zh@oP{N!XjD9bwH*RJpfOh z)rv@V^EtmVa?UfK@03WPVm-1;S`kHs2nW56I)KnLtNHSl>z-~Y6z=@(O#%(J9}RY|Qg-_g28ELQ zSPi~>pVd-yD`j6l=J*YEC@7)LuuYprbSu!I&~q9vZ(9kV>iKY5ifVUqRtKtkxmG$5 z*Pm_g5TL*5WYP2O1j7A9^{Atos4>bdMeHpA5Kh~8jRw?|yhj7#uCm;$DWm^O_4RuH zBSRxtkY2F5b&+7XrjP(yWw3W0!s2@=z98TY$(?n;^A&Ty>ek%yv{S`XjmJOSvUBI= z^=+rP)zfL#pev@eops05m6@(E!q$v-6ZS4Bh}_7Q9;k;i&dlQ}YWy==axI^-bgdfyyj%A8=h6}49$Dg#;&C_I{A(>flgxl>3Ozd5C z-tZ|gN**aVFB9cJUndW3NC8X4;Et9w#U$UH*~_cOxGwk5_Fvw}2~-s7Hbb)QL=4J> zv?*+}2G_pbHWq(hRUBHRd3@EY`w~l9d+8lpNS4P63FSn=a^`+X*6{F8)-3hgGDh{$ znQK*eoolEA@H`QR^1!~u#>NV}<;&IvvvfAU_-(5g3KCtA^=9uP6}Fr7beAe%mo)Mm^ru>ypfD`}^3y%slN?$wm*96P}hfmb0=5mUhF= z=Zv~6*g|k!SNpq7e1WhVw9Ccv)#@lex~-8c2Tu)-iYYcJ>mPeJ*RDN!?O|2=|7vZ0 zt*T!~4HW?;`oHO8eUWU)*)4tkdf~}oBQDK(>eInqsb1`=zU@ Date: Wed, 13 May 2026 14:30:00 +0100 Subject: [PATCH 3/5] Removed deprecated type comments --- Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py | 10 +++++----- Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml | 2 +- Packs/FeedCyjax/ReleaseNotes/1_1_0.md | 5 +++++ 3 files changed, 11 insertions(+), 6 deletions(-) create mode 100644 Packs/FeedCyjax/ReleaseNotes/1_1_0.md diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py index 5e76c754ea2d..c187d80daaab 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.py @@ -349,10 +349,10 @@ def fetch_indicators_command( # Add one second from last_fetch_timestamp to avoid fetching the same indicators since = last_fetch_date + timedelta(seconds=1) - indicators = [] # type:List - cyjax_indicators = client.fetch_indicators(since=since.isoformat()) # type:List + indicators: list[dict[str, Any]] = [] + cyjax_indicators: list[Any] = client.fetch_indicators(since=since.isoformat()) - indicators_score = map_reputation_to_score(reputation) # type: int + indicators_score: int = map_reputation_to_score(reputation) for cyjax_indicator in cyjax_indicators: indicator_date = dateparser.parse(cyjax_indicator.get("discovered_at")) @@ -402,7 +402,7 @@ def get_indicators_command(client: Client, args: dict[str, Any]) -> dict[str, An since=since, until=until, indicator_type=indicator_type, source_type=source_type, source_id=source_id, limit=limit ) - indicators = [convert_cyjax_indicator(indicator) for indicator in cyjax_indicators] # type:List + indicators: list[dict[str, Any]] = [convert_cyjax_indicator(indicator) for indicator in cyjax_indicators] # Format indicators for human readable table output human_readable_indicators = [] @@ -523,7 +523,7 @@ def main() -> None: return_results(test_module(client)) elif demisto.command() == "fetch-indicators": - last_fetch_date = get_indicators_last_fetch_date() # type:datetime + last_fetch_date: datetime = get_indicators_last_fetch_date() next_run, indicators = fetch_indicators_command(client, last_fetch_date, reputation, tlp_to_use, tags) if indicators: diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml index 802636f166a8..1a0ddd1fe271 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml @@ -7,7 +7,7 @@ commonfields: id: Cyjax Feed version: -1 configuration: -- defaultvalue: https://api.cyberportal.co +- defaultvalue: https://api.cymon.co/v2 additionalinfo: Url to Cyjax API. display: Cyjax API URL name: url diff --git a/Packs/FeedCyjax/ReleaseNotes/1_1_0.md b/Packs/FeedCyjax/ReleaseNotes/1_1_0.md new file mode 100644 index 000000000000..ccf966b7f5dd --- /dev/null +++ b/Packs/FeedCyjax/ReleaseNotes/1_1_0.md @@ -0,0 +1,5 @@ +#### Integrations +##### Cyjax Feed +- Updated README file +- Updated CYJAX logo +- Removed deprecated type comments From b3f245fab97f0ae3d4b310863436baa6a6cd21d4 Mon Sep 17 00:00:00 2001 From: Jakub Orzol Date: Wed, 13 May 2026 14:40:56 +0100 Subject: [PATCH 4/5] bump version to 1.1.0 --- Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml | 10 +++++----- .../Integrations/FeedCyjax/FeedCyjax_description.md | 10 +++++----- Packs/FeedCyjax/pack_metadata.json | 6 +++--- 3 files changed, 13 insertions(+), 13 deletions(-) diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml index 1a0ddd1fe271..e193181ab951 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax.yml @@ -1,5 +1,5 @@ category: Data Enrichment & Threat Intelligence -provider: Cyjax +provider: CYJAX display: Cyjax Feed name: Cyjax Feed description: 'The feed allows customers to pull indicators of compromise from cyber incidents (IP addresses, URLs, domains, CVE and file hashes).' @@ -8,13 +8,13 @@ commonfields: version: -1 configuration: - defaultvalue: https://api.cymon.co/v2 - additionalinfo: Url to Cyjax API. + additionalinfo: Url to CYJAX API. display: Cyjax API URL name: url required: true type: 0 - display: API Key - additionalinfo: Cyjax API key obtained from Cyjax portal. + additionalinfo: CYJAX API key obtained from CYJAX portal. name: apikey required: true type: 4 @@ -68,7 +68,7 @@ configuration: required: false - name: use_cyjax_tlp display: Use Cyjax feed TLP - additionalinfo: Whether to use TLP set by Cyjax. Will override TLP set above. + additionalinfo: Whether to use TLP set by CYJAX. Will override TLP set above. defaultvalue: 'true' type: 8 required: false @@ -140,7 +140,7 @@ script: name: cyjax-indicator-sighting description: Get sighting of a indicator. - name: cyjax-unset-indicators-last-fetch-date - description: 'Unset the indicators feed last fetch date. Should only be used if user needs to use `re-fetch` button and wants to fetch old indicators from Cyjax. Next feed will use date set in first_fetch (default is last 3 days).' + description: 'Unset the indicators feed last fetch date. Should only be used if user needs to use `re-fetch` button and wants to fetch old indicators from CYJAX. Next feed will use date set in first_fetch (default is last 3 days).' feed: true script: '-' type: python diff --git a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax_description.md b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax_description.md index 058bd3c67494..e9d5b702a89a 100644 --- a/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax_description.md +++ b/Packs/FeedCyjax/Integrations/FeedCyjax/FeedCyjax_description.md @@ -1,15 +1,15 @@ -## Cyjax Feed Help +## CYJAX Feed Help The feed allows customers to pull indicators of compromise from cyber incidents (IP addresses, URLs, domains, CVE and file hashes). ## Configuration -1. Enter feed name eg. `Cyjax Feed` -2. API URL `https://api.cyberportal.co` -3. Enter Cyjax API token +1. Enter feed name eg. `CYJAX Feed` +2. API URL `https://api.cymon.co/v2` +3. Enter CYJAX API token 4. Set proxy if required by your installation 5. Indicator reputation (the reputation set to the indicators fetched from this feed, default is Suspicious) 6. Source reliability: A - Completely reliable 7. Traffic Light Protocol Color - The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed. -8. Use Cyjax feed TLP (selected by default) - Whether to use TLP set by Cyjax. Will override TLP set above. +8. Use CYJAX feed TLP (selected by default) - Whether to use TLP set by CYJAX. Will override TLP set above. 9. Set feed tags. (optional, comma delimited, eg. MyTag, YourTag) 10. Set Indicator Expiration Method (default is never) 11. Set fetch interval (default is to fetch every 1 hour) diff --git a/Packs/FeedCyjax/pack_metadata.json b/Packs/FeedCyjax/pack_metadata.json index a44facc62919..9943fafb5544 100644 --- a/Packs/FeedCyjax/pack_metadata.json +++ b/Packs/FeedCyjax/pack_metadata.json @@ -1,9 +1,9 @@ { "name": "Cyjax Feed", - "description": "This pack is used to pull indicators of compromise from the Cyjax Threat Intelligence Platform.", + "description": "This pack enables the retrieval of indicators of compromise from the CYJAX Threat Intelligence Platform.", "support": "partner", - "currentVersion": "1.0.32", - "author": "Cyjax", + "currentVersion": "1.1.0", + "author": "CYJAX", "url": "https://cyjax.com", "email": "devs@cyjax.com", "created": "2021-01-06T15:46:16Z", From 38ac483f539ef27b5c0453a5273544baa104e86c Mon Sep 17 00:00:00 2001 From: Jakub Orzol Date: Thu, 14 May 2026 08:41:58 +0100 Subject: [PATCH 5/5] add contributors --- Packs/FeedCyjax/CONTRIBUTORS.json | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 Packs/FeedCyjax/CONTRIBUTORS.json diff --git a/Packs/FeedCyjax/CONTRIBUTORS.json b/Packs/FeedCyjax/CONTRIBUTORS.json new file mode 100644 index 000000000000..f2953c8fe220 --- /dev/null +++ b/Packs/FeedCyjax/CONTRIBUTORS.json @@ -0,0 +1,3 @@ +[ + "Jakub Orzol" +] \ No newline at end of file