From 94d7b912dcb6adb62d17d0b09fd5e230a92000ae Mon Sep 17 00:00:00 2001
From: splunk-jessica <jhou@splunk.com>
Date: Thu, 18 Jun 2026 09:45:32 -0700
Subject: [PATCH 1/4] fix: update datatypes

---
 release_notes/unreleased.md |  1 +
 splunkattackanalyzer.json   | 10 +++++-----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/release_notes/unreleased.md b/release_notes/unreleased.md
index fbcb2fd..aed2a79 100644
--- a/release_notes/unreleased.md
+++ b/release_notes/unreleased.md
@@ -1 +1,2 @@
 **Unreleased**
+* Update datatype [PAPP-37820]
diff --git a/splunkattackanalyzer.json b/splunkattackanalyzer.json
index 161f2d9..f5d50cb 100644
--- a/splunkattackanalyzer.json
+++ b/splunkattackanalyzer.json
@@ -19,7 +19,7 @@
     "utctime_updated": "2025-12-09T13:15:40.063995Z",
     "package_name": "phantom_splunkattackanalyzer",
     "main_module": "splunkattackanalyzer_connector.py",
-    "min_phantom_version": "6.4.0",
+    "min_phantom_version": "8.6.0",
     "app_wizard_version": "1.0.0",
     "configuration": {
         "app_url": {
@@ -6452,7 +6452,7 @@
                 },
                 "archive_password": {
                     "description": "For password-protected archive files or for decrypting documents",
-                    "data_type": "string",
+                    "data_type": "password",
                     "order": 5
                 },
                 "profile": {
@@ -6476,7 +6476,7 @@
                 },
                 {
                     "data_path": "action_result.parameter.archive_password",
-                    "data_type": "string"
+                    "data_type": "password"
                 },
                 {
                     "data_path": "action_result.parameter.profile",
@@ -6700,7 +6700,7 @@
                 },
                 "archive_password": {
                     "description": "For password-protected archive files or for decrypting documents",
-                    "data_type": "string",
+                    "data_type": "password",
                     "order": 5
                 },
                 "profile": {
@@ -6724,7 +6724,7 @@
                 },
                 {
                     "data_path": "action_result.parameter.archive_password",
-                    "data_type": "string"
+                    "data_type": "password"
                 },
                 {
                     "data_path": "action_result.parameter.profile",

From 9cdf76c908bdf313f6cb3965bbad4e9910c12b99 Mon Sep 17 00:00:00 2001
From: splunk-jessica <jhou@splunk.com>
Date: Mon, 22 Jun 2026 10:35:25 -0700
Subject: [PATCH 2/4] chore: update copyright year

---
 LICENSE                           | 2 +-
 NOTICE                            | 2 +-
 README.md                         | 2 +-
 __init__.py                       | 2 +-
 ai_malware_analysis.html          | 2 +-
 job_summary.html                  | 2 +-
 phsplunkattackanalyzer.py         | 2 +-
 splunkattackanalyzer.json         | 2 +-
 splunkattackanalyzer_connector.py | 2 +-
 splunkattackanalyzer_consts.py    | 2 +-
 splunkattackanalyzer_view.py      | 2 +-
 11 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/LICENSE b/LICENSE
index c775248..f8812ab 100644
--- a/LICENSE
+++ b/LICENSE
@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright (c) 2023-2025 Splunk Inc.
+   Copyright (c) 2023-2026 Splunk Inc.
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
diff --git a/NOTICE b/NOTICE
index 217b496..6443426 100644
--- a/NOTICE
+++ b/NOTICE
@@ -1,2 +1,2 @@
 Splunk SOAR App: Splunk Attack Analyzer Connector for Splunk SOAR
-Copyright (c) 2023-2025 Splunk Inc.
+Copyright (c) 2023-2026 Splunk Inc.
diff --git a/README.md b/README.md
index 90d00b7..6be6315 100644
--- a/README.md
+++ b/README.md
@@ -1413,7 +1413,7 @@ ______________________________________________________________________
 
 Auto-generated Splunk SOAR Connector documentation.
 
-Copyright 2025 Splunk Inc.
+Copyright 2026 Splunk Inc.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/__init__.py b/__init__.py
index 6f4d6a6..ec5df61 100644
--- a/__init__.py
+++ b/__init__.py
@@ -1,6 +1,6 @@
 # File: __init__.py
 #
-# Copyright (c) 2023-2025 Splunk Inc.
+# Copyright (c) 2023-2026 Splunk Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
diff --git a/ai_malware_analysis.html b/ai_malware_analysis.html
index f5d9b54..cb17456 100644
--- a/ai_malware_analysis.html
+++ b/ai_malware_analysis.html
@@ -1,6 +1,6 @@
 <!-- File: ai_malware_analysis.html
 
-  Copyright (c) 2023-2025 Splunk Inc.
+  Copyright (c) 2023-2026 Splunk Inc.
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
diff --git a/job_summary.html b/job_summary.html
index 78d8604..5a2c5b3 100644
--- a/job_summary.html
+++ b/job_summary.html
@@ -1,6 +1,6 @@
 <!-- File: job_summary.html
 
-  Copyright (c) 2023-2025 Splunk Inc.
+  Copyright (c) 2023-2026 Splunk Inc.
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
diff --git a/phsplunkattackanalyzer.py b/phsplunkattackanalyzer.py
index aae50e0..301f387 100644
--- a/phsplunkattackanalyzer.py
+++ b/phsplunkattackanalyzer.py
@@ -1,6 +1,6 @@
 # File: phsplunkattackanalyzer.py
 #
-# Copyright (c) 2023-2025 Splunk Inc.
+# Copyright (c) 2023-2026 Splunk Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
diff --git a/splunkattackanalyzer.json b/splunkattackanalyzer.json
index f5d50cb..a6cab2d 100644
--- a/splunkattackanalyzer.json
+++ b/splunkattackanalyzer.json
@@ -10,7 +10,7 @@
     "python_version": "3.9, 3.13",
     "product_version_regex": ".*",
     "publisher": "Splunk",
-    "license": "Copyright (c) 2023-2025 Splunk Inc.",
+    "license": "Copyright (c) 2023-2026 Splunk Inc.",
     "latest_tested_versions": [
         "Cloud, API: api.twinwave.io, API version: v1"
     ],
diff --git a/splunkattackanalyzer_connector.py b/splunkattackanalyzer_connector.py
index 4041435..e17f157 100644
--- a/splunkattackanalyzer_connector.py
+++ b/splunkattackanalyzer_connector.py
@@ -1,6 +1,6 @@
 # File: splunkattackanalyzer_connector.py
 #
-# Copyright (c) 2023-2025 Splunk Inc.
+# Copyright (c) 2023-2026 Splunk Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
diff --git a/splunkattackanalyzer_consts.py b/splunkattackanalyzer_consts.py
index cbf48aa..30e1374 100644
--- a/splunkattackanalyzer_consts.py
+++ b/splunkattackanalyzer_consts.py
@@ -1,6 +1,6 @@
 # File: splunkattackanalyzer_consts.py
 #
-# Copyright (c) 2023-2025 Splunk Inc.
+# Copyright (c) 2023-2026 Splunk Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
diff --git a/splunkattackanalyzer_view.py b/splunkattackanalyzer_view.py
index adb465c..4d05ebf 100644
--- a/splunkattackanalyzer_view.py
+++ b/splunkattackanalyzer_view.py
@@ -1,6 +1,6 @@
 # File: splunkattackanalyzer_view.py
 #
-# Copyright (c) 2023-2025 Splunk Inc.
+# Copyright (c) 2023-2026 Splunk Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

From 054af01f80d70275fc2cb15c404abb016de16844 Mon Sep 17 00:00:00 2001
From: splunk-jessica <jhou@splunk.com>
Date: Mon, 22 Jun 2026 10:50:13 -0700
Subject: [PATCH 3/4] chore: cleanup

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 6be6315..3c3b0ac 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ Publisher: Splunk <br>
 Connector Version: 2.2.0 <br>
 Product Vendor: Splunk <br>
 Product Name: Splunk Attack Analyzer <br>
-Minimum Product Version: 6.4.0
+Minimum Product Version: 8.6.0
 
 This connector integrates with the Splunk Attack Analyzer platform to reduce the friction of repetitive manual tasks typically associated with investigating threats
 

From 5a29e03418c0b8027df8884ae9d51238cf3181c2 Mon Sep 17 00:00:00 2001
From: splunk-jessica <jhou@splunk.com>
Date: Mon, 22 Jun 2026 12:17:38 -0700
Subject: [PATCH 4/4] chore: precommit

---
 .pylintrc | 2 ++
 README.md | 8 ++++----
 2 files changed, 6 insertions(+), 4 deletions(-)
 create mode 100644 .pylintrc

diff --git a/.pylintrc b/.pylintrc
new file mode 100644
index 0000000..fcbba09
--- /dev/null
+++ b/.pylintrc
@@ -0,0 +1,2 @@
+[MASTER]
+ignore=.venv
diff --git a/README.md b/README.md
index 3c3b0ac..55d7093 100644
--- a/README.md
+++ b/README.md
@@ -1280,7 +1280,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
 **user_agent** | optional | User agent for Web Analyzer runs (Select "Custom" to provide custom user agent) | string | |
 **internet_region** | optional | GeoIP-based exit region for Web Analyzer runs | string | |
 **custom_user_agent** | optional | Activated when user agent is "Custom" | string | |
-**archive_password** | optional | For password-protected archive files or for decrypting documents | string | |
+**archive_password** | optional | For password-protected archive files or for decrypting documents | password | |
 **profile** | optional | An optional profile name that defines the analysis behavior to be used during the analysis for this job | string | `splunk attack analyzer profile` |
 
 #### Action Output
@@ -1288,7 +1288,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
 DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES
 --------- | ---- | -------- | --------------
 action_result.status | string | | success failed |
-action_result.parameter.archive_password | string | | |
+action_result.parameter.archive_password | password | | |
 action_result.parameter.profile | string | `splunk attack analyzer profile` | default |
 action_result.parameter.custom_user_agent | string | | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0 |
 action_result.parameter.file | string | `vault id` | 89b238c79f7752948b176222ae0010d0a1aa |
@@ -1319,7 +1319,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
 **user_agent** | optional | User agent for Web Analyzer runs (Select "Custom" to provide custom user agent) | string | |
 **internet_region** | optional | GeoIP-based exit region for Web Analyzer runs | string | |
 **custom_user_agent** | optional | Activated when user agent is "Custom" | string | |
-**archive_password** | optional | For password-protected archive files or for decrypting documents | string | |
+**archive_password** | optional | For password-protected archive files or for decrypting documents | password | |
 **profile** | optional | An optional profile name that defines the analysis behavior to be used during the analysis for this job | string | `splunk attack analyzer profile` |
 
 #### Action Output
@@ -1327,7 +1327,7 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
 DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES
 --------- | ---- | -------- | --------------
 action_result.status | string | | success failed |
-action_result.parameter.archive_password | string | | |
+action_result.parameter.archive_password | password | | |
 action_result.parameter.profile | string | `splunk attack analyzer profile` | default |
 action_result.parameter.custom_user_agent | string | | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0 |
 action_result.parameter.internet_region | string | | US Residential US |