Initial commit | Update state and api limit handling in task

rapid7 · Jan 16, 2025 · 208de86 · 208de86
1 parent fc9b7c5
commit 208de86
Show file tree

Hide file tree

Showing 9 changed files with 512 additions and 191 deletions.
diff --git a/plugins/proofpoint_tap/.CHECKSUM b/plugins/proofpoint_tap/.CHECKSUM
@@ -1,7 +1,7 @@
 {
-	"spec": "2fb04d208580295eb2130af367993059",
-	"manifest": "28e4d2cb40027a13b74ccd2156ed9798",
-	"setup": "c7621059ff603f9c8aa42bbbe2ce39e8",
+	"spec": "2059286423eb5a73fa04ba04c788e570",
+	"manifest": "14b35211c0ebf40e6fad3e569f26aeae",
+	"setup": "97182fc26a28ec7fc9c4cd98d2ce7d83",
 	"schemas": [
 		{
 			"identifier": "fetch_forensics/schema.py",
@@ -45,7 +45,7 @@
 		},
 		{
 			"identifier": "monitor_events/schema.py",
-			"hash": "b871e3cb1925e5738a83b666dc74268a"
+			"hash": "e2ac0558ed03896ab84d1c123e43b868"
 		}
 	]
 }
diff --git a/plugins/proofpoint_tap/Dockerfile b/plugins/proofpoint_tap/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:6.1.0
+FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:6.2.2
 
 LABEL organization=rapid7
 LABEL sdk=python

diff --git a/plugins/proofpoint_tap/bin/komand_proofpoint_tap b/plugins/proofpoint_tap/bin/komand_proofpoint_tap
@@ -6,7 +6,7 @@ from sys import argv
 
 Name = "Proofpoint TAP"
 Vendor = "rapid7"
-Version = "4.1.10"
+Version = "4.1.11"
 Description = "[Proofpoint Targeted Attack Protection](https://www.proofpoint.com/us/products/ransomware-and-targeted-attack-protection) (TAP) helps you stay ahead of attackers with an innovative approach that detects, analyzes and blocks advanced threats before they reach your inbox. This plugin enables users to parse TAP alerts"
 
 

diff --git a/plugins/proofpoint_tap/help.md b/plugins/proofpoint_tap/help.md
@@ -1175,7 +1175,8 @@ Example output:
 
 # Version History
 
-* 4.1.10 - Update `Parse Tap Alert` to utilise BeautifulSoup resolving vulnerabilities | SDK Bump to 6.1.0 | Task Connection test added
+* 4.1.11 - SDK Bump to 6.2.2 | `Monitor Events` task updated to handle requests outside of Proofpoint TAP API limits
+* 4.1.10 - SDK Bump to 6.1.0 | Task Connection test added Update `Parse Tap Alert` to utilise BeautifulSoup resolving vulnerabilities
 * 4.1.9 - Update connection fields to be required.
 * 4.1.8 - Include SDK 5.4.9 | Task - Use cutoff of 7 days for first query, use cutoff of 1 hours for subsequent queries
 * 4.1.7 - Include SDK 5.4.5 | Task - enforce query cutoff based on Proofpoint API max lookback | Task - toggle pagination when backfilling | Task - only store previous page of hashes.