Skip to content

Carbon Black Enterprise Protection - Content Pack Update#43696

Merged
kamalq97 merged 12 commits intodemisto:contrib/whsmith1223_masterfrom
whsmith1223:master
Apr 16, 2026
Merged

Carbon Black Enterprise Protection - Content Pack Update#43696
kamalq97 merged 12 commits intodemisto:contrib/whsmith1223_masterfrom
whsmith1223:master

Conversation

@whsmith1223
Copy link
Copy Markdown
Contributor

@whsmith1223 whsmith1223 commented Mar 26, 2026

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

Must have

  • Tests
  • Documentation

relates: https://jira-dc.paloaltonetworks.com/browse/CIAC-16395

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Xsoar Support Level Indicates that the contribution is for XSOAR supported pack labels Mar 26, 2026
@content-bot content-bot changed the base branch from master to contrib/whsmith1223_master March 26, 2026 20:29
@content-bot content-bot requested a review from kamalq97 March 26, 2026 20:29
@content-bot
Copy link
Copy Markdown
Contributor

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot
Copy link
Copy Markdown
Contributor

Hi @whsmith1223, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

@content-bot
Copy link
Copy Markdown
Contributor

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

  • @marketplace-ai-reviewer start review - Initiate a full AI code review
  • @marketplace-ai-reviewer re-review - Incremental review for new commits

@kamalq97
Copy link
Copy Markdown
Contributor

Hi @whsmith1223

Thank you for your contribution! I am glad you managed to resolve the submission issues.

Please generate updated pack release notes.

Please contact me via the DFIR Community Slack to coordinate a demo. Refer to this page for our guidelines on demo preparation.

@kamalq97 kamalq97 added ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. labels Mar 29, 2026
@content-bot
Copy link
Copy Markdown
Contributor

For the Reviewer: Trigger build request has been accepted for this contribution PR.

@content-bot
Copy link
Copy Markdown
Contributor

For the Reviewer: Successfully created a pipeline in GitLab with url: https://gitlab.xdr.pan.local/xdr/cortex-content/content/-/pipelines/7976032

@content-bot content-bot removed the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Mar 29, 2026
@marketplace-ai-reviewer marketplace-ai-reviewer removed the ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. label Mar 29, 2026
@marketplace-ai-reviewer
Copy link
Copy Markdown
Contributor

🤖 Analysis started. Please wait for results...

@marketplace-ai-reviewer
Copy link
Copy Markdown
Contributor

🤖 AI Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

Copy link
Copy Markdown
Contributor

@marketplace-ai-reviewer marketplace-ai-reviewer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for submitting your PR!
Before moving on with the detailed review, please take a moment to address the following general comments.

  • Your PR title and description are too generic. Please update the PR description to explicitly mention the addition of the cbp-disable-user and cbp-retrieve-user-data commands so the scope of the changes is clear.

@content-bot
Copy link
Copy Markdown
Contributor

Validate summary
The following errors were thrown as a part of this pr: .
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.

Verdict: PR can be force merged from validate perspective? ✅

@kamalq97 kamalq97 added pending-demo Demo pending pending-contributor The PR is pending the response of its creator labels Mar 29, 2026
Copy link
Copy Markdown
Contributor

@kamalq97 kamalq97 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the contribution.

Please ensure you address my comment below and please do not forget to generate a new release notes entry for the content pack.

Comment thread Packs/CarbonBlackProtect/Integrations/CarbonBlackProtect/CarbonBlackProtect.yml Outdated
Updated command names
Copy link
Copy Markdown
Contributor Author

@whsmith1223 whsmith1223 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changed command wording

@kamalq97 kamalq97 removed the pending-contributor The PR is pending the response of its creator label Apr 9, 2026
Comment thread Packs/CarbonBlackProtect/Integrations/CarbonBlackProtect/CarbonBlackProtect.yml Outdated
…nBlackProtect.yml

Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

@kamalq97 kamalq97 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @whsmith1223!

I enjoyed our demo session today.

Please perform the minor changes below.

Once all is done, please run :

demisto-sdk generate-docs -i 'Packs/CarbonBlackProtect/Integrations/CarbonBlackProtect/CarbonBlackProtect.yml'

This will sync the YML changes to the README file. 😊

Comment thread Packs/CarbonBlackProtect/Integrations/CarbonBlackProtect/CarbonBlackProtect.py Outdated
Comment thread Packs/CarbonBlackProtect/Integrations/CarbonBlackProtect/CarbonBlackProtect.py Outdated
@kamalq97 kamalq97 added pending-contributor The PR is pending the response of its creator and removed pending-demo Demo pending labels Apr 14, 2026
@whsmith1223
Copy link
Copy Markdown
Contributor Author

whsmith1223 commented Apr 14, 2026

Made a couple commits for the proposed changes. We should be all good but let me know if anything else arises.

I still need to run the demisto-sdk command but had to take off for the day. I'll look at that tomorrow.

@kamalq97 kamalq97 enabled auto-merge (squash) April 16, 2026 16:52
@kamalq97 kamalq97 merged commit b501a53 into demisto:contrib/whsmith1223_master Apr 16, 2026
21 of 24 checks passed
@github-actions
Copy link
Copy Markdown

Thank you for your contribution. Your external PR has been merged and the changes are now included in an internal PR for further review. The internal PR will be merged to the master branch within 3 business days.

kamalq97 added a commit that referenced this pull request Apr 16, 2026
…ection (#43926)

* Carbon Black Enterprise Protection - Content Pack Update (#43696)

* Update CarbonBlackProtect.yml

* Update README.md

* Update pack_metadata.json

* Update CarbonBlackProtect.py

* Update CarbonBlackProtect.yml

* Update README.md

* Update CarbonBlackProtect.yml

Updated command names

* updated command wording

* Update Packs/CarbonBlackProtect/Integrations/CarbonBlackProtect/CarbonBlackProtect.yml

Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>

* updated command output to be markdown

* updated outputs in yml

---------

Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>

* Update release notes and fix validation erros

---------

Co-authored-by: whsmith1223 <whsmith1223@gmail.com>
Co-authored-by: Kamal Qarain <45042524+kamalq97@users.noreply.github.com>
Co-authored-by: Kamal Qarain <kqarain@paloaltonetworks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Contribution Thank you! Contributions are always welcome! docs-approved External PR pending-contributor The PR is pending the response of its creator Xsoar Support Level Indicates that the contribution is for XSOAR supported pack

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants