Merge branch 'repo_sync_2024_08_27' into public_main

ibmresilient · Aug 27, 2024 · d8d629c · d8d629c
2 parents fd944fe + 5a717f7
commit d8d629c
Show file tree

Hide file tree

Showing 6 changed files with 38 additions and 40 deletions.
diff --git a/...crosoft_security_graph/data/wf_example_microsoft_security_graph_alert_search.md b/...crosoft_security_graph/data/wf_example_microsoft_security_graph_alert_search.md
@@ -1,7 +1,7 @@
 <!--
     DO NOT MANUALLY EDIT THIS FILE
     THIS FILE IS AUTOMATICALLY GENERATED WITH resilient-sdk codegen
-    Generated with resilient-sdk v51.0.2.0.974
+    Generated with resilient-sdk v51.0.2.2.1096
 -->
 
 # Example: Microsoft Security Graph Alert Search
@@ -24,19 +24,17 @@ from datetime import datetime
 search = "filter="
 conjunction = False
 
-# Assuming rule and artifact are predefined objects with the necessary properties
-
 if rule.properties.microsoft_security_graph_query_start_datetime:
-    start = datetime.fromisoformat(rule.properties.microsoft_security_graph_query_start_datetime)
-    start_ts = start.isoformat()
-    start_filter = "createdDateTime%20ge%20{}".format(start_ts)
+    start_ts = int(rule.properties.microsoft_security_graph_query_start_datetime) / 1000
+    start = datetime.fromtimestamp(start_ts)
+    start_filter = "createdDateTime%20ge%20{}".format(start.isoformat())
     search += start_filter
     conjunction = True
 
 if rule.properties.microsoft_security_graph_query_end_datetime:
-    end = datetime.fromisoformat(rule.properties.microsoft_security_graph_query_end_datetime)
-    end_ts = end.isoformat()
-    end_filter = "createdDateTime%20le%20{}".format(end_ts)
+    end_ts = int(rule.properties.microsoft_security_graph_query_end_datetime) / 1000
+    end = datetime.fromtimestamp(end_ts)
+    end_filter = "createdDateTime%20le%20{}".format(end.isoformat())
     if conjunction: 
         search += "%20and%20"
     search += end_filter

diff --git a/...ft_security_graph/data/wf_example_microsoft_security_graph_get_alert_details.md b/...ft_security_graph/data/wf_example_microsoft_security_graph_get_alert_details.md
@@ -1,7 +1,7 @@
 <!--
     DO NOT MANUALLY EDIT THIS FILE
     THIS FILE IS AUTOMATICALLY GENERATED WITH resilient-sdk codegen
-    Generated with resilient-sdk v51.0.2.0.974
+    Generated with resilient-sdk v51.0.2.2.1096
 -->
 
 # Example: Microsoft Security Graph Get Alert Details

diff --git a/...rosoft_security_graph/data/wf_example_microsoft_security_graph_resolve_alert.md b/...rosoft_security_graph/data/wf_example_microsoft_security_graph_resolve_alert.md
@@ -1,7 +1,7 @@
 <!--
     DO NOT MANUALLY EDIT THIS FILE
     THIS FILE IS AUTOMATICALLY GENERATED WITH resilient-sdk codegen
-    Generated with resilient-sdk v51.0.2.0.974
+    Generated with resilient-sdk v51.0.2.2.1096
 -->
 
 # Example: Microsoft Security Graph Resolve Alert

diff --git a/...crosoft_security_graph/data/wf_example_microsoft_security_graph_update_alert.md b/...crosoft_security_graph/data/wf_example_microsoft_security_graph_update_alert.md
@@ -1,7 +1,7 @@
 <!--
     DO NOT MANUALLY EDIT THIS FILE
     THIS FILE IS AUTOMATICALLY GENERATED WITH resilient-sdk codegen
-    Generated with resilient-sdk v51.0.2.0.974
+    Generated with resilient-sdk v51.0.2.2.1096
 -->
 
 # Example: Microsoft Security Graph Update Alert

diff --git a/fn_microsoft_security_graph/fn_microsoft_security_graph/util/customize.py b/fn_microsoft_security_graph/fn_microsoft_security_graph/util/customize.py
@@ -1,6 +1,6 @@
 # -*- coding: utf-8 -*-
 # (c) Copyright IBM Corp. 2010, 2024. All Rights Reserved.
-# Generated with resilient-sdk v51.0.2.0.974
+# Generated with resilient-sdk v51.0.2.2.1096
 
 """Generate the SOAR customizations required for fn_microsoft_security_graph"""
 

diff --git a/fn_microsoft_security_graph/fn_microsoft_security_graph/util/data/export.res b/fn_microsoft_security_graph/fn_microsoft_security_graph/util/data/export.res