Skip to content

Unit42 Intelligence change hard coded source reliability in relationships to use parameter.#42933

Open
lehrbaumm wants to merge 9 commits intodemisto:contrib/lehrbaumm_unit42_fix_reliabilityfrom
lehrbaumm:unit42_fix_reliability
Open

Unit42 Intelligence change hard coded source reliability in relationships to use parameter.#42933
lehrbaumm wants to merge 9 commits intodemisto:contrib/lehrbaumm_unit42_fix_reliabilityfrom
lehrbaumm:unit42_fix_reliability

Conversation

@lehrbaumm
Copy link
Contributor

@lehrbaumm lehrbaumm commented Feb 4, 2026

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

Must have

  • Tests
  • Documentation

relates: https://jira-dc.paloaltonetworks.com/browse/CIAC-15699

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Xsoar Support Level Indicates that the contribution is for XSOAR supported pack labels Feb 4, 2026
@content-bot content-bot changed the base branch from master to contrib/lehrbaumm_unit42_fix_reliability February 4, 2026 16:56
@content-bot content-bot requested a review from kamalq97 February 4, 2026 16:57
@content-bot
Copy link
Contributor

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot
Copy link
Contributor

Hi @lehrbaumm, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

@content-bot
Copy link
Contributor

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

  • @content-bot start review - Initiate a full AI code review
  • @content-bot re-review - Incremental review for new commits

@content-bot content-bot added Community Contribution Form Filled Whether contribution form filled or not. labels Feb 4, 2026
@MosheEichler MosheEichler self-requested a review February 5, 2026 08:38
Copy link
Contributor

@MosheEichler MosheEichler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @lehrbaumm,
Thank you for your contribution!
Good work :)

Pleases revert all not relevant changes (e.g. single quote to double quote etc. in general all format changes)

Please feel free to reach out to me with any questions - I'm available here or on slack :)
Thanks again

@MosheEichler MosheEichler added the pending-contributor The PR is pending the response of its creator label Feb 5, 2026
@MosheEichler MosheEichler added ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. labels Feb 5, 2026
@content-bot
Copy link
Contributor

For the Reviewer: Trigger build request has been accepted for this contribution PR.

@content-bot
Copy link
Contributor

For the Reviewer: Successfully created a pipeline in GitLab with url: https://gitlab.xdr.pan.local/xdr/cortex-content/content/-/pipelines/7028271

@content-bot content-bot removed ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. labels Feb 5, 2026
@content-bot
Copy link
Contributor

🤖 Content AI Reviewer: Analysis started. Please wait for results...

…1_0_12.md

Co-authored-by: Richard Bluestone <53567272+richardbluestone@users.noreply.github.com>
@content-bot
Copy link
Contributor

🤖 Content-bot Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

Copy link
Contributor

@content-bot content-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution! I've reviewed the changes and have a few minor items to address.

Please update the docstrings for all functions utilizing the new reliability parameter to ensure they are documented correctly. Additionally, the release notes require some formatting adjustments to match our standard conventions.

Nice work!

@kamalq97, @MosheEichler please review and approve the results generated by the AI Reviewer by responding 👍 on this comment.

indicator_type: str,
threat_objects: list[dict[str, Any]],
create_relationships: bool,
reliability: str = DBotScoreReliability.A_PLUS_PLUS,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please update the docstring to include the new reliability parameter.

This also applies to the following functions where the parameter was added:

  • create_threat_object_relationships
  • create_campaigns_relationships
  • create_attack_patterns_relationships
  • create_malware_relationships
  • create_tools_relationships
  • create_vulnerabilities_relationships
  • create_actor_relationships
  • create_location_indicators_and_relationships


##### Unit 42 Intelligence

- Change relationship source_reliability to use parameter reliability.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please use a standard prefix for the release note (e.g., 'Updated the') and format parameter/function names with single stars (*) instead of backticks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Community Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved External PR pending-contributor The PR is pending the response of its creator Xsoar Support Level Indicates that the contribution is for XSOAR supported pack

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants