Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .pylintrc
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
[MASTER]
ignore=.venv
2 changes: 1 addition & 1 deletion LICENSE
Original file line number Diff line number Diff line change
Expand Up @@ -186,7 +186,7 @@
same "printed page" as the copyright notice for easier
identification within third-party archives.

Copyright (c) 2023-2025 Splunk Inc.
Copyright (c) 2023-2026 Splunk Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion NOTICE
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
Splunk SOAR App: Splunk Attack Analyzer Connector for Splunk SOAR
Copyright (c) 2023-2025 Splunk Inc.
Copyright (c) 2023-2026 Splunk Inc.
12 changes: 6 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ Publisher: Splunk <br>
Connector Version: 2.2.0 <br>
Product Vendor: Splunk <br>
Product Name: Splunk Attack Analyzer <br>
Minimum Product Version: 6.4.0
Minimum Product Version: 8.6.0

This connector integrates with the Splunk Attack Analyzer platform to reduce the friction of repetitive manual tasks typically associated with investigating threats

Expand Down Expand Up @@ -1280,15 +1280,15 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
**user_agent** | optional | User agent for Web Analyzer runs (Select "Custom" to provide custom user agent) | string | |
**internet_region** | optional | GeoIP-based exit region for Web Analyzer runs | string | |
**custom_user_agent** | optional | Activated when user agent is "Custom" | string | |
**archive_password** | optional | For password-protected archive files or for decrypting documents | string | |
**archive_password** | optional | For password-protected archive files or for decrypting documents | password | |
**profile** | optional | An optional profile name that defines the analysis behavior to be used during the analysis for this job | string | `splunk attack analyzer profile` |

#### Action Output

DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES
--------- | ---- | -------- | --------------
action_result.status | string | | success failed |
action_result.parameter.archive_password | string | | |
action_result.parameter.archive_password | password | | |
action_result.parameter.profile | string | `splunk attack analyzer profile` | default |
action_result.parameter.custom_user_agent | string | | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0 |
action_result.parameter.file | string | `vault id` | 89b238c79f7752948b176222ae0010d0a1aa |
Expand Down Expand Up @@ -1319,15 +1319,15 @@ PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
**user_agent** | optional | User agent for Web Analyzer runs (Select "Custom" to provide custom user agent) | string | |
**internet_region** | optional | GeoIP-based exit region for Web Analyzer runs | string | |
**custom_user_agent** | optional | Activated when user agent is "Custom" | string | |
**archive_password** | optional | For password-protected archive files or for decrypting documents | string | |
**archive_password** | optional | For password-protected archive files or for decrypting documents | password | |
**profile** | optional | An optional profile name that defines the analysis behavior to be used during the analysis for this job | string | `splunk attack analyzer profile` |

#### Action Output

DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES
--------- | ---- | -------- | --------------
action_result.status | string | | success failed |
action_result.parameter.archive_password | string | | |
action_result.parameter.archive_password | password | | |
action_result.parameter.profile | string | `splunk attack analyzer profile` | default |
action_result.parameter.custom_user_agent | string | | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0 |
action_result.parameter.internet_region | string | | US Residential US |
Expand Down Expand Up @@ -1413,7 +1413,7 @@ ______________________________________________________________________

Auto-generated Splunk SOAR Connector documentation.

Copyright 2025 Splunk Inc.
Copyright 2026 Splunk Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion __init__.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# File: __init__.py
#
# Copyright (c) 2023-2025 Splunk Inc.
# Copyright (c) 2023-2026 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion ai_malware_analysis.html
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
<!-- File: ai_malware_analysis.html

Copyright (c) 2023-2025 Splunk Inc.
Copyright (c) 2023-2026 Splunk Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion job_summary.html
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
<!-- File: job_summary.html

Copyright (c) 2023-2025 Splunk Inc.
Copyright (c) 2023-2026 Splunk Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion phsplunkattackanalyzer.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# File: phsplunkattackanalyzer.py
#
# Copyright (c) 2023-2025 Splunk Inc.
# Copyright (c) 2023-2026 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
Expand Down
1 change: 1 addition & 0 deletions release_notes/unreleased.md
Original file line number Diff line number Diff line change
@@ -1 +1,2 @@
**Unreleased**
* Update datatype [PAPP-37820]
12 changes: 6 additions & 6 deletions splunkattackanalyzer.json
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
"python_version": "3.9, 3.13",
"product_version_regex": ".*",
"publisher": "Splunk",
"license": "Copyright (c) 2023-2025 Splunk Inc.",
"license": "Copyright (c) 2023-2026 Splunk Inc.",
"latest_tested_versions": [
"Cloud, API: api.twinwave.io, API version: v1"
],
Expand All @@ -19,7 +19,7 @@
"utctime_updated": "2025-12-09T13:15:40.063995Z",
"package_name": "phantom_splunkattackanalyzer",
"main_module": "splunkattackanalyzer_connector.py",
"min_phantom_version": "6.4.0",
"min_phantom_version": "8.6.0",
"app_wizard_version": "1.0.0",
"configuration": {
"app_url": {
Expand Down Expand Up @@ -6452,7 +6452,7 @@
},
"archive_password": {
"description": "For password-protected archive files or for decrypting documents",
"data_type": "string",
"data_type": "password",
"order": 5
},
"profile": {
Expand All @@ -6476,7 +6476,7 @@
},
{
"data_path": "action_result.parameter.archive_password",
"data_type": "string"
"data_type": "password"
},
{
"data_path": "action_result.parameter.profile",
Expand Down Expand Up @@ -6700,7 +6700,7 @@
},
"archive_password": {
"description": "For password-protected archive files or for decrypting documents",
"data_type": "string",
"data_type": "password",
"order": 5
},
"profile": {
Expand All @@ -6724,7 +6724,7 @@
},
{
"data_path": "action_result.parameter.archive_password",
"data_type": "string"
"data_type": "password"
},
{
"data_path": "action_result.parameter.profile",
Expand Down
2 changes: 1 addition & 1 deletion splunkattackanalyzer_connector.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# File: splunkattackanalyzer_connector.py
#
# Copyright (c) 2023-2025 Splunk Inc.
# Copyright (c) 2023-2026 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion splunkattackanalyzer_consts.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# File: splunkattackanalyzer_consts.py
#
# Copyright (c) 2023-2025 Splunk Inc.
# Copyright (c) 2023-2026 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
Expand Down
2 changes: 1 addition & 1 deletion splunkattackanalyzer_view.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# File: splunkattackanalyzer_view.py
#
# Copyright (c) 2023-2025 Splunk Inc.
# Copyright (c) 2023-2026 Splunk Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
Expand Down
Loading