[PLGN-639] Proofpoint TAP Release v4.1.2

plugins/proofpoint_tap/.CHECKSUM

@@ -1,11 +1,11 @@
 {
-	"spec": "d1493ef38c62f567771d7036bad1893f",
-	"manifest": "a3ee5e6adb00aad45679877f40597052",
+	"spec": "d3d68bbdba90655716ee26c5b8bdfcc7",
+	"manifest": "062e6b1b5040557d266b72600d901cfa",
 	"setup": "05601ce03de7ffb575c1624250bbfe27",
 	"schemas": [
 		{
 			"identifier": "fetch_forensics/schema.py",
-			"hash": "1bc4f1d39eb7a8537a47383f5ec00255"
+			"hash": "cfc2b6790cbbd17d426f7e157fc17468"
 		},
 		{
 			"identifier": "get_all_threats/schema.py",
@@ -45,7 +45,7 @@
 		},
 		{
 			"identifier": "monitor_events/schema.py",
-			"hash": "41aa46532b340c5c93d1905a7b832347"
+			"hash": "a209946dd335677bf9a8ba403934d3c9"
 		}
 	]
 }

plugins/proofpoint_tap/Dockerfile

@@ -1,4 +1,4 @@
-FROM rapid7/insightconnect-python-3-38-slim-plugin:5
+FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:5
 
 LABEL organization=rapid7
 LABEL sdk=python
@@ -12,7 +12,7 @@ RUN if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
 
 ADD . /python/src
 
-RUN	python setup.py build && python setup.py install
+RUN python setup.py build && python setup.py install
 
 # User to run plugin code. The two supported users are: root, nobody
 USER nobody

plugins/proofpoint_tap/bin/komand_proofpoint_tap

@@ -6,7 +6,7 @@ from sys import argv
 
 Name = "Proofpoint TAP"
 Vendor = "rapid7"
-Version = "4.1.1"
+Version = "4.1.2"
 Description = "Parse Proofpoint Targeted Attack Protection (TAP) alerts"
 
 

plugins/proofpoint_tap/help.md

@@ -1171,6 +1171,7 @@ This plugin does not contain any troubleshooting information.
 
 # Version History
 
+* 4.1.2 - Update to latest plugin SDK to get task and exception logging
 * 4.1.1 - Monitor Events Task: Update max lookback time, remove log cleaning, add debugging
 * 4.1.0 - Update to latest plugin SDK
 * 4.0.0 - Add Monitor Events task | Code refactor | Update plugin to be cloud enabled

plugins/proofpoint_tap/komand_proofpoint_tap/actions/fetch_forensics/schema.py

@@ -74,6 +74,7 @@ class FetchForensicsOutput(insightconnect_plugin_runtime.Output):
     }
   },
   "required": [
+    "generated",
     "reports"
   ],
   "definitions": {

plugins/proofpoint_tap/komand_proofpoint_tap/tasks/monitor_events/task.py

@@ -26,7 +26,7 @@ def __init__(self):
             state=MonitorEventsState(),
         )
 
-    def run(self, params={}, state={}):  # pylint: disable=unused-argument
+    def run(self, params={}, state={}):  # noqa: MC0001
         self.connection.client.toggle_rate_limiting = False
         has_more_pages = False
         try:
@@ -110,7 +110,7 @@ def run(self, params={}, state={}):  # pylint: disable=unused-argument
                 return new_unique_logs, state, has_more_pages, 200, None
 
             except ApiException as error:
-                self.logger.info(f"API Exception occurred: {error}")
+                self.logger.info(f"API Exception occurred: status_code: {error.status_code}, error: {error}")
                 state[self.PREVIOUS_LOGS_HASHES] = []
                 return [], state, False, error.status_code, error
         except Exception as error:

plugins/proofpoint_tap/plugin.spec.yaml

@@ -4,9 +4,9 @@ products: [insightconnect]
 name: proofpoint_tap
 title: Proofpoint TAP
 description: Parse Proofpoint Targeted Attack Protection (TAP) alerts
-version: 4.1.1
+version: 4.1.2
 connection_version: 4
-supported_versions: ["Proofpoint TAP API v2", "Tested on 2023-06-22"]
+supported_versions: ["Proofpoint TAP API v2", "Tested on 2024-01-12"]
 sdk:
   type: slim
   version: 5