diff --git a/plugins/proofpoint_tap/.CHECKSUM b/plugins/proofpoint_tap/.CHECKSUM index 9497bca6d9..14cd98054c 100644 --- a/plugins/proofpoint_tap/.CHECKSUM +++ b/plugins/proofpoint_tap/.CHECKSUM @@ -1,11 +1,11 @@ { - "spec": "d1493ef38c62f567771d7036bad1893f", - "manifest": "a3ee5e6adb00aad45679877f40597052", + "spec": "d3d68bbdba90655716ee26c5b8bdfcc7", + "manifest": "062e6b1b5040557d266b72600d901cfa", "setup": "05601ce03de7ffb575c1624250bbfe27", "schemas": [ { "identifier": "fetch_forensics/schema.py", - "hash": "1bc4f1d39eb7a8537a47383f5ec00255" + "hash": "cfc2b6790cbbd17d426f7e157fc17468" }, { "identifier": "get_all_threats/schema.py", @@ -45,7 +45,7 @@ }, { "identifier": "monitor_events/schema.py", - "hash": "41aa46532b340c5c93d1905a7b832347" + "hash": "a209946dd335677bf9a8ba403934d3c9" } ] } \ No newline at end of file diff --git a/plugins/proofpoint_tap/Dockerfile b/plugins/proofpoint_tap/Dockerfile index cba45ce2a2..1d77430b3b 100755 --- a/plugins/proofpoint_tap/Dockerfile +++ b/plugins/proofpoint_tap/Dockerfile @@ -1,4 +1,4 @@ -FROM rapid7/insightconnect-python-3-38-slim-plugin:5 +FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:5 LABEL organization=rapid7 LABEL sdk=python @@ -12,7 +12,7 @@ RUN if [ -f requirements.txt ]; then pip install -r requirements.txt; fi ADD . /python/src -RUN python setup.py build && python setup.py install +RUN python setup.py build && python setup.py install # User to run plugin code. The two supported users are: root, nobody USER nobody diff --git a/plugins/proofpoint_tap/bin/komand_proofpoint_tap b/plugins/proofpoint_tap/bin/komand_proofpoint_tap index 6f19a1bfcb..57ef0f55bd 100755 --- a/plugins/proofpoint_tap/bin/komand_proofpoint_tap +++ b/plugins/proofpoint_tap/bin/komand_proofpoint_tap @@ -6,7 +6,7 @@ from sys import argv Name = "Proofpoint TAP" Vendor = "rapid7" -Version = "4.1.1" +Version = "4.1.2" Description = "Parse Proofpoint Targeted Attack Protection (TAP) alerts" diff --git a/plugins/proofpoint_tap/help.md b/plugins/proofpoint_tap/help.md index 99efb588d5..2b33847a14 100644 --- a/plugins/proofpoint_tap/help.md +++ b/plugins/proofpoint_tap/help.md @@ -1171,6 +1171,7 @@ This plugin does not contain any troubleshooting information. # Version History +* 4.1.2 - Update to latest plugin SDK to get task and exception logging * 4.1.1 - Monitor Events Task: Update max lookback time, remove log cleaning, add debugging * 4.1.0 - Update to latest plugin SDK * 4.0.0 - Add Monitor Events task | Code refactor | Update plugin to be cloud enabled diff --git a/plugins/proofpoint_tap/komand_proofpoint_tap/actions/fetch_forensics/schema.py b/plugins/proofpoint_tap/komand_proofpoint_tap/actions/fetch_forensics/schema.py index 1affa3c68e..c32896f625 100755 --- a/plugins/proofpoint_tap/komand_proofpoint_tap/actions/fetch_forensics/schema.py +++ b/plugins/proofpoint_tap/komand_proofpoint_tap/actions/fetch_forensics/schema.py @@ -74,6 +74,7 @@ class FetchForensicsOutput(insightconnect_plugin_runtime.Output): } }, "required": [ + "generated", "reports" ], "definitions": { diff --git a/plugins/proofpoint_tap/komand_proofpoint_tap/tasks/monitor_events/task.py b/plugins/proofpoint_tap/komand_proofpoint_tap/tasks/monitor_events/task.py index 2a3ee2e39f..26ed7ed229 100755 --- a/plugins/proofpoint_tap/komand_proofpoint_tap/tasks/monitor_events/task.py +++ b/plugins/proofpoint_tap/komand_proofpoint_tap/tasks/monitor_events/task.py @@ -26,7 +26,7 @@ def __init__(self): state=MonitorEventsState(), ) - def run(self, params={}, state={}): # pylint: disable=unused-argument + def run(self, params={}, state={}): # noqa: MC0001 self.connection.client.toggle_rate_limiting = False has_more_pages = False try: @@ -110,7 +110,7 @@ def run(self, params={}, state={}): # pylint: disable=unused-argument return new_unique_logs, state, has_more_pages, 200, None except ApiException as error: - self.logger.info(f"API Exception occurred: {error}") + self.logger.info(f"API Exception occurred: status_code: {error.status_code}, error: {error}") state[self.PREVIOUS_LOGS_HASHES] = [] return [], state, False, error.status_code, error except Exception as error: diff --git a/plugins/proofpoint_tap/plugin.spec.yaml b/plugins/proofpoint_tap/plugin.spec.yaml index 7ce459cc5e..68360ebeb3 100644 --- a/plugins/proofpoint_tap/plugin.spec.yaml +++ b/plugins/proofpoint_tap/plugin.spec.yaml @@ -4,9 +4,9 @@ products: [insightconnect] name: proofpoint_tap title: Proofpoint TAP description: Parse Proofpoint Targeted Attack Protection (TAP) alerts -version: 4.1.1 +version: 4.1.2 connection_version: 4 -supported_versions: ["Proofpoint TAP API v2", "Tested on 2023-06-22"] +supported_versions: ["Proofpoint TAP API v2", "Tested on 2024-01-12"] sdk: type: slim version: 5