Conversation
|
The following packages appear to be unused:
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #6906 +/- ##
===========================================
+ Coverage 35.64% 68.80% +33.15%
===========================================
Files 2048 843 -1205
Lines 125310 49094 -76216
===========================================
- Hits 44672 33780 -10892
+ Misses 80638 15314 -65324 📢 Thoughts on this report? Let us know! 🚀 New features to boost your workflow:
|
|
🤖 [AI-generated] Hey @romain-filigran! 👋 Thanks a lot for opening PR #6906 — really appreciate you tackling the XTM Hub use case taxonomy harmonization across so many connector manifests! 🙏 I just had a quick look and I think the description could be enhanced a little to help reviewers get through it faster. I haven't changed anything in your description — just a gentle suggestion: Area: Checklist section Area: Further comments If helpful, the PR template (.github/PULL_REQUEST_TEMPLATE.md) walks through what to include. No rush at all — thanks again for contributing to the project! 🚀 |
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
This pull request updates a large set of connector manifests to better align their declared use_cases (and some accompanying metadata like descriptions/logos) with the official XTM Hub use case taxonomy described in #6905, to improve catalog filtering/discovery.
Changes:
- Harmonize
use_casesvalues across many connectors (including adding “Detection & Response Enablement”, “Vulnerability & Exploit Awareness”, “Infrastructure & Attack Surface Visibility”, etc.). - Refresh/expand some connector
description/short_descriptionfields to be more explicit about behavior and features. - Update some manifest
logofields (and a fewsubscription_linkvalues).
Reviewed changes
Copilot reviewed 139 out of 149 changed files in this pull request and generated 10 comments.
Show a summary per file
| File | Description |
|---|---|
| stream/zscaler/metadata/connector_manifest.json | Expanded description/short_description; adjusted use cases |
| stream/virustotal-livehunt-rules/metadata/connector_manifest.json | Updated use case label |
| stream/tanium-intel/metadata/connector_manifest.json | Expanded description/short_description; adjusted use cases |
| stream/sumologic-intel/metadata/connector_manifest.json | Updated use cases |
| stream/splunk/metadata/connector_manifest.json | Updated use cases |
| stream/splunk-soar-push/metadata/connector_manifest.json | Updated use cases |
| stream/sentinelone-intel/metadata/connector_manifest.json | Updated use cases |
| stream/qradar/metadata/connector_manifest.json | Updated use cases |
| stream/pan-cortex-xsoar-intel/metadata/connector_manifest.json | Updated use cases |
| stream/microsoft-sentinel-intel/metadata/connector_manifest.json | Updated use cases |
| stream/microsoft-graph-security-intel/metadata/connector_manifest.json | Updated use cases |
| stream/microsoft-defender-intel/metadata/connector_manifest.json | Updated use cases |
| stream/microsoft-defender-intel-synchronizer/metadata/connector_manifest.json | Added use cases |
| stream/logrhythm/metadata/connector_manifest.json | Added use cases |
| stream/infoblox-threat-defense/metadata/connector_manifest.json | Updated use cases |
| stream/harfanglab-intel/metadata/connector_manifest.json | Updated use cases |
| stream/google-secops-siem/metadata/connector_manifest.json | Updated use cases |
| stream/elastic-security-intel/metadata/connector_manifest.json | Updated use cases |
| stream/crowdstrike-endpoint-security/metadata/connector_manifest.json | Updated use case label |
| stream/chronicle/metadata/connector_manifest.json | Updated use case label |
| stream/akamai/metadata/connector_manifest.json | Updated short_description and use cases; adjusted logo field |
| internal-enrichment/yara/metadata/connector_manifest.json | Updated use case label |
| internal-enrichment/vmray-analyzer/metadata/connector_manifest.json | Updated use case label |
| internal-enrichment/visionheight/metadata/connector_manifest.json | Added use case; updated subscription_link |
| internal-enrichment/virustotal/metadata/connector_manifest.json | Updated use cases |
| internal-enrichment/virustotal-downloader/metadata/connector_manifest.json | Updated use case label |
| internal-enrichment/urlscan-enrichment/metadata/connector_manifest.json | Added use case |
| internal-enrichment/unpac-me/metadata/connector_manifest.json | Expanded description/short_description; updated use cases and subscription_link |
| internal-enrichment/team-cymru-scout/metadata/connector_manifest.json | Added use case |
| internal-enrichment/shodan/metadata/connector_manifest.json | Added use case |
| internal-enrichment/shodan-internetdb/metadata/connector_manifest.json | Added use case |
| internal-enrichment/rst-whois-api/metadata/connector_manifest.json | Added use case |
| internal-enrichment/qualys-cve-enrichment/metadata/connector_manifest.json | Replaced use cases with taxonomy-aligned value |
| internal-enrichment/polyswarm-sandbox/metadata/connector_manifest.json | Updated logo path; updated use cases |
| internal-enrichment/polyswarm-enrichment/metadata/connector_manifest.json | Updated logo path; updated use cases |
| internal-enrichment/orion-malware/metadata/connector_manifest.json | Consolidated malware/sandbox use cases |
| internal-enrichment/onyphe/metadata/connector_manifest.json | Replaced use cases with taxonomy-aligned value |
| internal-enrichment/joe-sandbox/metadata/connector_manifest.json | Expanded description/short_description; consolidated use cases |
| internal-enrichment/ivre/metadata/connector_manifest.json | Expanded description/short_description |
| internal-enrichment/ismalicious/metadata/connector_manifest.json | Reduced use cases |
| internal-enrichment/ipqs/metadata/connector_manifest.json | Expanded description/short_description; added use cases |
| internal-enrichment/intezer-sandbox/metadata/connector_manifest.json | Consolidated malware/sandbox use cases |
| internal-enrichment/hybrid-analysis-sandbox/metadata/connector_manifest.json | Consolidated malware/sandbox use cases |
| internal-enrichment/hatching-triage-sandbox/metadata/connector_manifest.json | Expanded description/short_description; consolidated use cases |
| internal-enrichment/greynoise/metadata/connector_manifest.json | Added use case |
| internal-enrichment/greynoise-vuln/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| internal-enrichment/google-dns/metadata/connector_manifest.json | Added use case |
| internal-enrichment/glimps-malware/metadata/connector_manifest.json | Consolidated malware/sandbox use cases |
| internal-enrichment/first-epss/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| internal-enrichment/censys-enrichment/metadata/connector_manifest.json | Added use case |
| internal-enrichment/cape-sandbox/metadata/connector_manifest.json | Expanded description/short_description; updated use cases |
| internal-enrichment/assemblyline/metadata/connector_manifest.json | Consolidated malware/sandbox use cases |
| internal-enrichment/anyrun-task/metadata/connector_manifest.json | Expanded description/short_description; consolidated use cases |
| internal-enrichment/anyrun-lookup/metadata/connector_manifest.json | Expanded description/short_description; updated use cases |
| external-import/vulncheck/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/valhalla/metadata/connector_manifest.json | Added use case |
| external-import/usta/metadata/connector_manifest.json | Added use case |
| external-import/urlscan/metadata/connector_manifest.json | Mapped phishing use case to taxonomy label |
| external-import/trukno/metadata/connector_manifest.json | Added use case |
| external-import/threatmatch/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/threatfox/metadata/connector_manifest.json | Punctuation/formatting fix in description |
| external-import/thehive/metadata/connector_manifest.json | Updated use case |
| external-import/tenable-vuln-management/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/tenable-security-center/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/teamt5/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/tanium-incidents/metadata/connector_manifest.json | Updated use case |
| external-import/sublime/metadata/connector_manifest.json | Updated use case |
| external-import/spycloud/metadata/connector_manifest.json | Updated use case |
| external-import/sparta/metadata/connector_manifest.json | Added multiple taxonomy-aligned use cases |
| external-import/socprime/metadata/connector_manifest.json | Added use case |
| external-import/silobreaker/metadata/connector_manifest.json | Added use case (with whitespace issue noted in review) |
| external-import/sigmahq/metadata/connector_manifest.json | Added use case |
| external-import/servicenow/metadata/connector_manifest.json | Added logo path; updated use case |
| external-import/sentinelone-incidents/metadata/connector_manifest.json | Updated use cases (partial relabeling) |
| external-import/sekoia/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/recorded-future-asi/metadata/connector_manifest.json | Mapped attack-surface use case to taxonomy labels |
| external-import/proofpoint-et-reputation/metadata/connector_manifest.json | Expanded description/short_description; added use case |
| external-import/portspoof/metadata/connector_manifest.json | Remapped use cases to taxonomy-style categories |
| external-import/pgl-yoyo/metadata/connector_manifest.json | Expanded description/short_description; added use cases |
| external-import/orange-cyberdefense-v3/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/mwdb/metadata/connector_manifest.json | Updated malware/sandbox use case label |
| external-import/mitre/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/mitre-atlas/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/misp/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/misp-feed/metadata/connector_manifest.json | Added use case |
| external-import/microsoft-sentinel-incidents/metadata/connector_manifest.json | Updated use cases |
| external-import/microsoft-defender-incidents/metadata/connector_manifest.json | Updated use case |
| external-import/mattermost/metadata/connector_manifest.json | Added logo path |
| external-import/matrix/metadata/connector_manifest.json | Added logo path |
| external-import/mandiant/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/malpedia/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/luminar/metadata/connector_manifest.json | Added use case |
| external-import/lastinfosec-feed/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/kaspersky/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/ironnet/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/ipsum/metadata/connector_manifest.json | Expanded description/short_description; added logo path; added use case |
| external-import/intelfinder/metadata/connector_manifest.json | Remapped use case to taxonomy label |
| external-import/intel471/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/intel471-darknet/metadata/connector_manifest.json | Added logo path |
| external-import/intel471_v2/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/ibm-xti/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/harfanglab-incidents/metadata/connector_manifest.json | Simplified use cases |
| external-import/group-ib/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/greynoise-feed/metadata/connector_manifest.json | Added use case |
| external-import/google-ti-feeds/metadata/connector_manifest.json | Added multiple taxonomy-aligned use cases |
| external-import/google-secops-siem-incidents/metadata/connector_manifest.json | Updated use case |
| external-import/ft3/metadata/connector_manifest.json | Updated fraud use case to taxonomy label |
| external-import/fortinet-ti/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/flashpoint/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/flare/metadata/connector_manifest.json | Added use cases |
| external-import/first-epss-bulk/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/eset/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/elastic-security-incidents/metadata/connector_manifest.json | Simplified use cases |
| external-import/dragos/metadata/connector_manifest.json | Added multiple taxonomy-style use cases (with label mismatch noted in review) |
| external-import/doppel/metadata/connector_manifest.json | Remapped use case to taxonomy label |
| external-import/dogesec-vulmatch/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/dogesec-siemrules/metadata/connector_manifest.json | Updated detection-content use case to taxonomy label |
| external-import/dogesec-cyberthreatexchange/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/disarm-framework/metadata/connector_manifest.json | Updated description punctuation; updated use cases |
| external-import/datadog/metadata/connector_manifest.json | Added logo path; updated use case |
| external-import/cybersixgill/metadata/connector_manifest.json | Updated apostrophe style; added use case; formatting tweak at EOF |
| external-import/cyber-campaign-collection/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/cybelangel/metadata/connector_manifest.json | Added logo path |
| external-import/cvelistv5/metadata/connector_manifest.json | Updated title; added logo path; updated vulnerability use case; updated subscription_link |
| external-import/cve/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/cuckoo/metadata/connector_manifest.json | Consolidated malware/sandbox use case (JSON trailing comma issue noted in review) |
| external-import/ctm360-cyberblindspot-feed/metadata/connector_manifest.json | Remapped use cases to taxonomy labels |
| external-import/crowdstrike/metadata/connector_manifest.json | Fixed encoding artifact in description; added use case; formatting tweak at EOF |
| external-import/cpe/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/cluster25/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/citalid/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/cisa-known-exploited-vulnerabilities/metadata/connector_manifest.json | Updated vulnerability use case to taxonomy label |
| external-import/checkfirst-import-connector/metadata/connector_manifest.json | Added use case |
| external-import/chapsvision/metadata/connector_manifest.json | Expanded description/short_description |
| external-import/catalyst/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/cape/metadata/connector_manifest.json | Updated malware/sandbox use case label (JSON trailing comma issue noted in review) |
| external-import/beaconbeagle/metadata/connector_manifest.json | Remapped use case to taxonomy label (JSON trailing comma issue noted in review) |
| external-import/alienvault/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
| external-import/accenture-acti/metadata/connector_manifest.json | Added use case; formatting tweak at EOF |
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Proposed changes
Related issues