Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Custom Responder not showing up in Responders Config Tab #201

Closed
devinbfergy opened this issue Jun 24, 2019 · 1 comment
Closed

Custom Responder not showing up in Responders Config Tab #201

devinbfergy opened this issue Jun 24, 2019 · 1 comment

Comments

@devinbfergy
Copy link

Custom Responder not showing up in Responders Config Tab

Request Type

Bug

Work Environment

Question Answer
OS version (server) CentOS
OS version (client) Windows 10
Cortex version / git hash 2.1.3-1
Package Type Docker
Browser type & version Chrome Version 75.0.3770.100 (Official Build) (64-bit)

Problem Description

I have added a custom Responder. The Responder is located under:
image
While it is not located under:
image

Complementary information

CylanceUploadHash.json

    "name": "Cylance Upload Hash",
    "version": "1.0",
    "author": "Devin Ferguson",
    "url": "https://github.com/TheHive-Project/Cortex-Analyzers",
    "license": "AGPL-V3",
    "description": "Add file sha-256 hash to Cylance via API.",
    "dataTypeList": ["hash"],
    "command": "CylanceUploadHash/CylanceUploadHash.py",
    "baseConfig": "CylanceUploadHash",
    "configurationItems": [
      {
        "name": "app_id",
        "description": "Application's unique identifier",
        "type": "string",
        "multi": false,
        "required": true
      },
      {
        "name": "app_secret",
        "description": "Application's secret to sign the authentication token",
        "type": "string",
        "multi": false,
        "required": true
      },
      {
        "name": "tenant_uid",
        "description": "The Tenant's unique identifier",
        "type": "string",
        "muti": false,
        "required": true
      },
      {
          "name": "version",
          "description": "Api version",
          "type": "string",
          "multi": false,
          "required": true,
          "defaultValue": "v1"
       },
       {
         "name": "region_code",
         "description": "The region code for the cylance tenant",
         "type": "string",
         "multi": false,
         "required": false
       },
       {
         "name": "timeout",
         "description": "Timeout length for the authentication tokens",
         "type": "int",
         "multi": false,
         "required": false,
         "defaultValue": 1800
       }
    ]
  }

I am currently building the Cortex Docker Image custom to be able to install the required dependencies for the Analyzers and Responders. I also run the update.catalogs.sh script inside of my Cortex-Analyzers directory.

@devinbfergy
Copy link
Author

I figured out the problem was an misunderstanding that the Cortex Responder Config requires only type to string not int or number.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant