Prepare for 3.51.0 (#1225)

* add file/host state to msft graph alert context (#1220) * Update PAT to 0.46.1 (#1222) * pack for traildiscover LUT (#1221) * Fix Snyk yaml load error (#1224) --------- Co-authored-by: Ariel Ropek <[email protected]> Co-authored-by: Oleh Melenevskyi <[email protected]>
panther-labs · Apr 30, 2024 · 55c4bac · 55c4bac
1 parent 214feae
commit 55c4bac
Show file tree

Hide file tree

Showing 4 changed files with 64 additions and 55 deletions.
diff --git a/Pipfile.lock b/Pipfile.lock
diff --git a/global_helpers/panther_base_helpers.py b/global_helpers/panther_base_helpers.py
@@ -473,7 +473,9 @@ def msft_graph_alert_context(event):
     return {
         "category": event.get("category", ""),
         "description": event.get("description", ""),
-        "userstates": event.get("userstates", []),
+        "userStates": event.get("userStates", []),
+        "fileStates": event.get("fileStates", []),
+        "hostStates": event.get("hostStates", []),
     }
 
 

diff --git a/packs/traildiscover.yml b/packs/traildiscover.yml
@@ -0,0 +1,7 @@
+AnalysisType: pack
+PackID: TrailDiscoverEnrichment
+Description: Panther managed TrailDiscover lookup table
+PackDefinition:
+  IDs:
+    - TrailDiscover
+DisplayName: "TrailDiscover Lookup Tables"
diff --git a/test_scenarios/send_data.py b/test_scenarios/send_data.py
@@ -29,7 +29,7 @@ def main(args):
         return False
 
     with open(args.file) as file:
-        data = yaml.load(file, Loader=yaml.FullLoader)
+        data = yaml.safe_load(file, Loader=yaml.FullLoader)
 
     # ensure UTC
     args.panther_compromise_datetime = args.panther_compromise_datetime.replace(tzinfo=timezone.utc)