f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
db9a45c9bcfb282f93cda73ff6617ce24c4e8a8f
riposte-marketplace/integrations/harfanglab/scripts
T
History
f3nris d831d0973a feat(harfanglab): fetch a threat's security events (1.7.0) 
Since HarfangLab merged alerts and security events, a threat's events
are the alerts whose threat_key is the threat id — the filter the
vendor's XSOAR integration uses. get_alerts could filter on it but
stops at one page of 100; the new threat_security_events command pages
through up to max_results and returns the threat's total with a
truncated flag.

threat_status, threat_level and alert_tag offer their status and level
as drop-downs, and threat_status now reads as the place to close a
threat or mark it a false positive, HarfangLab's only verdict.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-07 07:35:31 +00:00
..
add_ioc_to_source.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
alert_comment.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
alert_details.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
alert_history.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
alert_tag.py
feat(harfanglab): alert triage commands (tag, comment, details, history)
2026-07-21 22:18:01 +02:00
api_call.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
assign_policy_to_agent.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
av_scan.py
feat(harfanglab): on-demand AV and YARA scan commands
2026-07-21 21:57:37 +02:00
change_security_event_status.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
deisolate_endpoint.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
deisolate_from_threat.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
delete_file.py
feat(harfanglab): file/service/scheduled-task deletion commands
2026-07-21 22:01:22 +02:00
delete_ioc_from_source.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
delete_scheduled_task.py
feat(harfanglab): file/service/scheduled-task deletion commands
2026-07-21 22:01:22 +02:00
delete_service.py
feat(harfanglab): file/service/scheduled-task deletion commands
2026-07-21 22:01:22 +02:00
dump_process.py
feat(harfanglab): kill/dump process response commands
2026-07-21 21:52:39 +02:00
endpoint_count.py
feat(harfanglab): count agents by filter without listing them (1.6.0)
2026-09-21 12:29:53 +00:00
endpoint_search.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
get_alerts.py
feat(harfanglab): alert search and single-threat read commands
2026-07-21 22:14:25 +02:00
get_endpoint_info.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
get_security_events.py
feat(harfanglab): add get_security_events + get_threats ingestion commands, OCSF mappers and ingest hints
2026-06-26 14:15:57 +02:00
get_threat.py
feat(harfanglab): alert search and single-threat read commands
2026-07-21 22:14:25 +02:00
get_threats.py
feat(harfanglab): add get_security_events + get_threats ingestion commands, OCSF mappers and ingest hints
2026-06-26 14:15:57 +02:00
hunt_search_hash.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
hunt_search_runned_process_hash.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
hunt_search_running_process_hash.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
isolate_endpoint.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
isolate_from_threat.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
job_artifact_all.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_downloadfile.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_evtx.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_filesystem.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_hives.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_logs.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_mft.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_artifact_ramdump.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_cancel.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
job_driverlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_info.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_ioc.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_networkconnectionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_networksharelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_persistencelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_pipelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_prefetchlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_processlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_relaunch.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
job_runkeylist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_scheduledtasklist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_servicelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_sessionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_startuplist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
job_wmilist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
kill_process.py
feat(harfanglab): kill/dump process response commands
2026-07-21 21:52:39 +02:00
quarantine_file.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
quarantine_request_upload.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
quarantine_search.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
result_artifact_all.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_downloadfile.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_evtx.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_filesystem.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_hives.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_logs.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_mft.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_artifact_ramdump.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_driverlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_ioc.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_networkconnectionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_networksharelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_persistencelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_pipelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_prefetchlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_processlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_runkeylist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_scheduledtasklist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_servicelist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_sessionlist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_startuplist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
result_wmilist.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_linux.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_macos.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_users.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_authentication_windows.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_binary.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_dns.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_eventlog.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_network.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_process_graph.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
telemetry_processes.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
test_connection.py
feat: add test_connection command to all integrations for the instance Test button
2026-06-26 00:00:06 +02:00
threat_comment.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_history.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_level.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_note_set.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
threat_security_events.py
feat(harfanglab): fetch a threat's security events (1.7.0)
2026-10-07 07:35:31 +00:00
threat_status.py
feat(harfanglab): threat triage commands (status, level, comment, note, history)
2026-07-21 22:20:54 +02:00
unquarantine_file.py
feat(harfanglab): quarantine management commands
2026-07-21 22:04:47 +02:00
wait_for_job.py
feat(harfanglab): threat-level isolation and job lifecycle commands
2026-07-21 22:09:56 +02:00
whitelist_add_criterion.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
whitelist_add.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
whitelist_delete.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
whitelist_search.py
feat(harfanglab): HarfangLab EDR integration (71 analyst commands)
2026-06-22 13:50:20 +02:00
yara_scan.py
feat(harfanglab): on-demand AV and YARA scan commands
2026-07-21 21:57:37 +02:00