XSOAR Content Update Notifications

Details
Content
Dependencies
Version History

This pack will check for any available content updates for existing packs and send an e-mail or Slack message to users to inform them of the updates.

Automate your XSOAR marketplace content update process using the playbooks in this pack.

What Does This Pack Do?

The playbook in this pack checks for any available content updates for selected installed content packs and notifies users via e-mail or Slack.
It also contains an auto-update flow that lets users decide via playbook inputs or communication tasks if they want to trigger an auto-update process to install all updates that were found.

Identify installed packs with updates.
Notify users about updates.
Display packs and updates information and release notes.
Automatically updates chosen packs to latest version.

As part of this pack, you also get out-of-the-box Content Update Manager incident views, a full layout, and automation scripts. All of these are easily customizable to suit the needs of your organization.

For more information, visit our Content Update Manager.

Content_Update_Manager

Automate your XSOAR marketplace content update process using the playbooks in this pack.

What Does This Pack Do?

Identify installed packs with updates.
Notify users about updates.
Display packs and updates information and release notes.
Automatically updates chosen packs to latest version.

For more information, visit our Content Update Manager.

Content_Update_Manager

Automations

Name	Description
CollectPacksData	This script collects the data of packs with updates.
ListInstalledContentPacks	This script will show all installed content packs and whether they have an update.
GetLatestReleaseNotes	This script retrieves the latest release notes for selected packs.
FormatContentData	This script formats the value given input from a JSON list into table.

Incident Fields

Name	Description
Content Pack Selection	A list of pack names to monitor. This can include "All" for all packs. (To find a list of installed packs, simple run !ListInstalledContentPacks from the war room).
Content Updates Available
Content Updates Auto Install	When selected, content updates will be automatically installed.
Content Notification Slack Channel ID
Content Notification Slack Channel
Content Notification Email
Content Notification Slack Username
Demisto REST API Name	Instance Name of the Demisto API integration to use for checking for new contents.

Incident Types

Name	Description
Content Update Check
Content Update Manager

Layouts

Name	Description
Content Update Check Layout
Content Update Manager Layout

Playbooks

Name	Description
Content Update Manager	This playbook checks for any available content updates for selected installed content packs and notifies users via e-mail or Slack. It also contains an auto-update flow that lets users decide via playbook inputs or communication tasks if they want to trigger an auto-update process to install all updates that were found. This playbook can be used as a Cortex XSOAR job to help users track marketplace pack updates and install them regularly.
Check For Content Installation	This playbook checks for content updates.
Content Update Check	Deprecated. Use "Content Update Manager" playbook instead. This playbook will check to see if there are any content updates available for installed packs and notify users via e-mail or Slack.

Automations

Name	Description
FormatContentData	This script formats the value given input from a JSON list into table.
ListInstalledContentPacks	This script will show all installed content packs and whether they have an update.
GetLatestReleaseNotes	This script retrieves the latest release notes for selected packs.
CollectPacksData	This script collects the data of packs with updates.

Incident Fields

Name	Description
Content Notification Slack Channel ID
Demisto REST API Name	Instance Name of the Demisto API integration to use for checking for new contents.
Content Notification Slack Channel
Content Pack Selection	A list of pack names to monitor. This can include "All" for all packs. (To find a list of installed packs, simple run !ListInstalledContentPacks from the war room).
Content Notification Email
Content Updates Auto Install	When selected, content updates will be automatically installed.
Content Notification Slack Username
Content Updates Available

Incident Types

Name	Description
Content Update Check
Content Update Manager

Playbooks

Name	Description
Content Update Check	Deprecated. Use "Content Update Manager" playbook instead. This playbook will check to see if there are any content updates available for installed packs and notify users via e-mail or Slack.
Check For Content Installation	This playbook checks for content updates.
Content Update Manager	This playbook checks for any available content updates for selected installed content packs and notifies users via e-mail or Slack. It also contains an auto-update flow that lets users decide via playbook inputs or communication tasks if they want to trigger an auto-update process to install all updates that were found. This playbook can be used as a Cortex XSIAM job to help users track marketplace pack updates and install them regularly.

Required Content Packs (4)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (4)

Pack Name	Pack By
Cortex REST API	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.0.7 - 7216131 (December 20, 2023)

Playbooks

Content Update Check

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

Content Update Manager

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

Check For Content Installation

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)

Scripts

ListInstalledContentPacks

Deprecated the demisto-api-* commands and replaced with the core-api-* commands. (Commands are identical, no effect is expected.)
Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31388

Download

1.0.6 - R6058978 (August 15, 2023)

Scripts

GetLatestReleaseNotes

Updated the Docker image to: demisto/python3:3.10.12.63474.

ListInstalledContentPacks

Updated the Docker image to: demisto/python3:3.10.12.63474.

CollectPacksData

Updated the Docker image to: demisto/python3:3.10.12.63474.

FormatContentData

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 28182

Download

1.0.5 - R5692327 (July 5, 2023)

Layouts

Content Update Manager Layout
This item is no longer supported in XSIAM.
Content Update Check Layout
This item is no longer supported in XSIAM.

Related pull requests:
- 24224

Download

1.0.4 - 2578541 (March 14, 2022)

Incident Fields

Content Notification Slack Channel ID

Layouts

Content Update Manager Layout

The layout of the new incident now contains an option to provide a Slack Channel ID.

Playbooks

Content Update Manager

The playbook now will use any provided Slack Channel IDs from the PB input in the Slack notification messages.

Download

1.0.3 - R2411339 (February 14, 2022)

Incident Fields

Content Updates Auto Install
This filed allows a default value to be set on whether to auto-upgrade packs.
Demisto REST API Name
This field is required to specify which instance of the Demisto REST API to use
to check for content updates.

Layouts

Content Update Manager Layout

Layout updated to include "Content Updates Auto Install" field and
"Demisto REST API Name" field.

Playbooks

Content Update Manager

Updated the playbook to set a default value of "All" when no
packs are provided for the field "Content Pack Selection".

Check For Content Installation

Updated an invalid script input.

Scripts

GetLatestReleaseNotes

Updated a bug that assumes a list input when it can be
a JSON dictionary.

Download

PUBLISHER

Adam Burt and XSOAR Labs

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Supported By	Community
Created	June 24, 2021
Last Release	December 20, 2023

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.