Skip to content

Commit

Permalink
Merge pull request #40 from splunk-soar-connectors/next
Browse files Browse the repository at this point in the history
Merging next to main for release 3.0.0
  • Loading branch information
ishans-crest authored Mar 5, 2024
2 parents 29fd446 + 08321c0 commit 1219cfc
Show file tree
Hide file tree
Showing 20 changed files with 530 additions and 409 deletions.
2 changes: 1 addition & 1 deletion .pre-commit-config.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
repos:
- repo: https://github.com/phantomcyber/dev-cicd-tools
rev: v1.16
rev: v1.17
hooks:
- id: org-hook
- id: package-app-dependencies
Expand Down
2 changes: 1 addition & 1 deletion LICENSE
Original file line number Diff line number Diff line change
Expand Up @@ -186,7 +186,7 @@
same "printed page" as the copyright notice for easier
identification within third-party archives.

Copyright (c) 2017-2023 Splunk Inc.
Copyright (c) 2017-2024 Splunk Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
Expand Down
17 changes: 1 addition & 16 deletions NOTICE
Original file line number Diff line number Diff line change
@@ -1,18 +1,8 @@
Splunk SOAR MS Graph for Office 365
Copyright (c) 2017-2023 Splunk Inc.
Copyright (c) 2017-2024 Splunk Inc.

Third-party Software Attributions:

Library: Django
Version: 3.2.13
License: BSD 3
0.9.0 thru 1.2 1991-1995 CWI yes
1.3 thru 1.5.2 1.2 1995-1999 CNRI yes
2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020 Python Software Foundation;
Copyright 1991-1995 Stichting Mathematisch Centrum Amsterdam
Copyright 2001 Python Software Foundation; All Rights Reserved
Copyright Django Software Foundation and individual contributors

Library: beautifulsoup4
Version: 4.9.1
License: MIT
Expand All @@ -24,8 +14,3 @@ Library: python-magic
Version: 0.4.18
License: MIT
Copyright 2001-2014 Adam Hupp

Library: requests
Version: 2.25.0
License: Apache 2.0
Kenneth Reitz
36 changes: 23 additions & 13 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,16 +2,16 @@
# MS Graph for Office 365

Publisher: Splunk
Connector Version: 2.8.0
Connector Version: 3.0.0
Product Vendor: Microsoft
Product Name: Office 365 (MS Graph)
Product Version Supported (regex): ".\*"
Minimum Product Version: 6.0.0
Minimum Product Version: 6.1.1

This app connects to Office 365 using the MS Graph API to support investigate and generic actions related to the email messages and calendar events

[comment]: # " File: README.md"
[comment]: # " Copyright (c) 2017-2023 Splunk Inc."
[comment]: # " Copyright (c) 2017-2024 Splunk Inc."
[comment]: # ""
[comment]: # "Licensed under the Apache License, Version 2.0 (the 'License');"
[comment]: # "you may not use this file except in compliance with the License."
Expand All @@ -26,6 +26,14 @@ This app connects to Office 365 using the MS Graph API to support investigate an
[comment]: # ""
## Playbook Backward Compatibility

- With version 3.0.0 of the connector, the 'group_id' parameter of the 'list group members' action has been removed and two new parameters are added in the same action as follows:
- **method** - Method(Group ID or Group e-mail) using which you want to list group members, by default it is **Group ID**.
- **identificator** - Value of group id or group e-mail based on the **method** selected.

Hence, it is requested to please update the existing playbooks by re-inserting
| modifying | deleting the corresponding action blocks to ensure the correct functioning of the
playbooks created on the earlier versions of the app.

- The 'id' field of email artifact has been renamed to 'messageId'. Hence, it is requested to the
end-user to please update their existing playbooks by re-inserting | modifying | deleting the
corresponding action blocks to ensure the correct functioning of the playbooks created on the
Expand Down Expand Up @@ -329,7 +337,7 @@ VARIABLE | REQUIRED | TYPE | DESCRIPTION
[list rules](#action-list-rules) - Get all the messageRule objects defined for the user's inbox
[list users](#action-list-users) - Retrieve a list of users
[list groups](#action-list-groups) - List all the groups in an organization, including but not limited to Office 365 groups
[list group members](#action-list-group-members) - List all the members in group
[list group members](#action-list-group-members) - List all the members in group by group ID or group e-mail address
[list folders](#action-list-folders) - Retrieve a list of mail folders
[copy email](#action-copy-email) - Copy an email to a folder
[move email](#action-move-email) - Move an email to a folder
Expand Down Expand Up @@ -390,7 +398,7 @@ DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES
--------- | ---- | -------- | --------------
action_result.status | string | | success failed
action_result.parameter.user_id | string | `msgoffice365 user id` `msgoffice365 user principal name` `email` | eeb3645f-df19-58a1-0e9c-ghi234cb5f6f
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/$metadata#users('eeb3645f-df19-47a1-8e8c-fcd234cb5f6f')/mailboxSettings/automaticRepliesSetting
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/$metadata#users('EXAMPLEUSERID')/mailboxSettings/automaticRepliesSetting
action_result.data.\*[email protected] | string | |
action_result.data.\*.externalAudience | string | | all
action_result.data.\*.externalReplyMessage | string | |
Expand Down Expand Up @@ -438,8 +446,8 @@ action_result.data.\*.attendees.\*.type | string | | required
action_result.data.\*.body.content | string | | `<html><head><meta name="Generator" content="Test Server">\\r\\n<!-- converted from text -->\\r\\n<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style></head>\\r\\n<body>\\r\\n<font size="2"><span style="font-size:11pt;"><div class="PlainText">&nbsp;</div></span></font>\\r\\n</body>\\r\\n</html>\\r\\n`
action_result.data.\*.body.contentType | string | | html
action_result.data.\*.bodyPreview | string | |
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('ggfe645f-df19-47a1-8e8c-fcd234cb5f6f')/calendars('AQMkAGYxNGJmOWQyLTlhMjctNGRiOS1iODU0LTA1ZWE3ZmQ3NDU3MQBGAAADeDDJKaEf4EihMWU6SZgKbAcA07XhOkNngkCkqoNfY_k-jQAAAgEGAAAA07XhOkNngkCkqoNfY_k-jQAAAhTzBBAA')/$ref
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('ffb3645f-df20-47a1-8e9c-fcd234cb5f6f')/calendars('AQMkAGYxNGJmOWQyLTlhMjctNGRiOS1iODU0LTA1ZWE3ZmQ3NDU3MQBGAAADeDDJKaEf4EihMWU6SZgKbAcA07XhOkNngkCkqoNfY_k-jQAAAgEGAAAA07XhOkNngkCkqoNfY_k-jQAAAhTzABBB')
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('EXAMPLEUSERID')/calendars('EXAMPLECALENDERID')/$ref
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('EXAMPLEUSERID')/calendars('EXAMPLECALENDERID')
action_result.data.\*.categories.\*.name | string | |
action_result.data.\*.changeKey | string | | b1MzKFCcdkuJ24Mc2VsdjwABAdhQhg==
action_result.data.\*.createdDateTime | string | | 2019-10-03T09:03:42.4958512Z
Expand Down Expand Up @@ -640,7 +648,7 @@ action_result.data.\*.expirationDateTime | string | |
action_result.data.\*.groupTypes | string | | Unified
action_result.data.\*.id | string | `msgoffice365 group id` | 2a201c95-101b-42d9-a7af-9a2fdf8193f1
action_result.data.\*.isAssignableToRole | string | |
action_result.data.\*.mail | string | `email` | [email protected]
action_result.data.\*.mail | string | `email` `msgoffice365 group e-mail address` | [email protected]
action_result.data.\*.mailEnabled | boolean | | True False
action_result.data.\*.mailNickname | string | | Test-test-site
action_result.data.\*.membershipRule | string | |
Expand All @@ -667,15 +675,16 @@ summary.total_objects | numeric | | 1
summary.total_objects_successful | numeric | | 1

## action: 'list group members'
List all the members in group
List all the members in group by group ID or group e-mail address

Type: **investigate**
Read only: **True**

#### Action Parameters
PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
--------- | -------- | ----------- | ---- | --------
**group_id** | required | Group ID | string | `msgoffice365 group id`
**method** | required | Method to use to list group members | string |
**identificator** | required | Group ID or group e-mail address, based on the selected method | string | `msgoffice365 group id` `msgoffice365 group e-mail address`
**get_transitive_members** | optional | Get a list of the group's members. A group can have users, devices, organizational contacts, and other groups as members. This operation is transitive and returns a flat list of all nested members | boolean |
**filter** | optional | Search for specific results | string |
**limit** | optional | Maximum number of members to return | numeric |
Expand All @@ -686,7 +695,8 @@ DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES
action_result.status | string | | success failed
action_result.parameter.filter | string | | displayName eq 'Group Name'
action_result.parameter.get_transitive_members | boolean | | True False
action_result.parameter.group_id | string | `msgoffice365 group id` | 11907d21-7631-4ea7-97b2-1328d1c5b901
action_result.parameter.method | string | | Group ID Group e-mail
action_result.parameter.identificator | string | `msgoffice365 group id` `msgoffice365 group e-mail address` | TEST7d21-7631-4ea7-97b2-1328d1c5b901 [email protected]
action_result.parameter.limit | numeric | | 20
action_result.data.\*[email protected] | string | | #test.abc.user
action_result.data.\*.businessPhones | string | | 2056120271
Expand Down Expand Up @@ -989,8 +999,8 @@ action_result.data.\*.event.attendees.\*.type | string | | required
action_result.data.\*.event.body.content | string | | `plain text?\\r\\n`
action_result.data.\*.event.body.contentType | string | | text
action_result.data.\*.event.bodyPreview | string | | plain text?
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('[email protected]')/calendars('AQMkAGYxNGJmOWQyLTlhMjctNGRiOS1iODU0LTA1ZWE3ZmQ3NDU3MQAuAAADeDDJKaEf4EihMWU6SZgKbAEA07XhOkNngkCkqoNfY_k-jQAAAgENAAAA')/$ref
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('[email protected]')/calendars('AQMkAGYxNGJmOWQyLTlhMjctNGRiOS1iODU0LTA1ZWE3ZmQ3NDU3MQAuAAADeDDJKaEf4EihMWU6SZgKbAEA07XhOkNngkCkqoNfY_k-jQAAAgENAAAA')
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('[email protected]')/calendars('EXAMPLECALENDERID')/$ref
action_result.data.\*[email protected] | string | `url` | https://test.abc.com/v1.0/users('[email protected]')/calendars('EXAMPLECALENDERID')
action_result.data.\*.event.changeKey | string | | CQAAABYAAABBKXVvwEWISZupmqX4mJS3AAFQwHj9
action_result.data.\*.event.createdDateTime | string | | 0001-01-01T00:00:00Z
action_result.data.\*.event.end.dateTime | string | | 0001-01-01T00:00:00.0000000
Expand Down
2 changes: 1 addition & 1 deletion __init__.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# File: __init__.py
#
# Copyright (c) 2017-2023 Splunk Inc.
# Copyright (c) 2017-2024 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
Expand Down
Loading

0 comments on commit 1219cfc

Please sign in to comment.