demisto · DeanArbel · Sep 7, 2023 · Sep 3, 2023 · Sep 3, 2023 · Sep 4, 2023
diff --git a/Packs/CofenseIntelligenceV2/Integrations/CofenseIntelligenceV2/test_data/test_threats.json b/Packs/CofenseIntelligenceV2/Integrations/CofenseIntelligenceV2/test_data/test_threats.json
@@ -50,8 +50,7 @@
       ],
       "senderEmailSet": [
         {
-          "1": 1,
-          "1": "1"
+          "1": 1
         }
       ],
       "executableSet": [

diff --git a/Packs/CortexXDR/Classifiers/classifier-PaloAltoNetworks_CortexXDR_5_9_9.json b/Packs/CortexXDR/Classifiers/classifier-PaloAltoNetworks_CortexXDR_5_9_9.json
@@ -1,6 +1,5 @@
 {
 	"brandName": "Cortex XDR - IR",
-	"custom": true,
 	"defaultIncidentType": "",
 	"fromVersion": "5.0.0",
 	"toVersion": "5.9.9",

diff --git a/Packs/CortexXDR/ReleaseNotes/5_1_3.md b/Packs/CortexXDR/ReleaseNotes/5_1_3.md
@@ -0,0 +1,6 @@
+
+#### Classifiers
+
+##### Cortex XDR - IR
+
+Remove duplicate key from the classifier.
diff --git a/Packs/CortexXDR/pack_metadata.json b/Packs/CortexXDR/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Cortex XDR by Palo Alto Networks",
     "description": "Automates Cortex XDR incident response, and includes custom Cortex XDR incident views and layouts to aid analyst investigations.",
     "support": "xsoar",
-    "currentVersion": "5.1.2",
+    "currentVersion": "5.1.3",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/Packs/DuoAdminApi/ModelingRules/DuoModelingRule/DuoModelingRule_schema.json b/Packs/DuoAdminApi/ModelingRules/DuoModelingRule/DuoModelingRule_schema.json
@@ -51,14 +51,6 @@
     "type": {
       "type": "string",
       "is_array": false
-    },
-    "phone": {
-      "type": "string",
-      "is_array": false
-    },
-    "description": {
-      "type": "string",
-      "is_array": false
     }
   }
 }
diff --git a/Packs/DuoAdminApi/ReleaseNotes/4_0_9.md b/Packs/DuoAdminApi/ReleaseNotes/4_0_9.md
@@ -0,0 +1,6 @@
+
+#### Modeling Rules
+
+##### Duo Modeling Rule
+
+Remove duplicate keys from the schema.
diff --git a/Packs/DuoAdminApi/pack_metadata.json b/Packs/DuoAdminApi/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "DUO Admin",
     "description": "DUO for admins.\nMust have access to the admin api in order to use this",
     "support": "xsoar",
-    "currentVersion": "4.0.8",
+    "currentVersion": "4.0.9",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/...oftAdvancedThreatAnalytics/IncidentTypes/incidenttype-MicrosoftATASuspiciousActivity.json b/...oftAdvancedThreatAnalytics/IncidentTypes/incidenttype-MicrosoftATASuspiciousActivity.json
@@ -21,7 +21,6 @@
     "closureScript": "",
     "disabled": false,
     "reputationCalc": 0,
-    "layout": "",
     "fromVersion": "5.0.0",
     "layout": "Microsoft ATA Suspicious Activity"
 }
diff --git a/Packs/MicrosoftAdvancedThreatAnalytics/ReleaseNotes/1_0_15.md b/Packs/MicrosoftAdvancedThreatAnalytics/ReleaseNotes/1_0_15.md
@@ -0,0 +1,4 @@
+
+#### Incident Types
+
+- **Microsoft ATA Suspicious Activity**
diff --git a/Packs/MicrosoftAdvancedThreatAnalytics/pack_metadata.json b/Packs/MicrosoftAdvancedThreatAnalytics/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Microsoft Advanced Threat Analytics",
     "description": "Manage suspicious activities, monitoring alerts and entities on Microsoft ATA.",
     "support": "xsoar",
-    "currentVersion": "1.0.14",
+    "currentVersion": "1.0.15",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/...e/Integrations/Palo_Alto_Networks_WildFire_v2/tests_data/report_url_response_success.json b/...e/Integrations/Palo_Alto_Networks_WildFire_v2/tests_data/report_url_response_success.json
@@ -123,5 +123,6 @@
       "sha256": "191347bfe55d0ca9a574db77bc8648275ce258461450e793528e0cc6d2dcf8f5",
       "type": "wf-report",
       "verdict": "benign"
-  },
-  "url_type": "original"}}
+    }
+  }
+}
diff --git a/...tions/PhishLabsIOC_DRP/test_data/client_methods/get_cases/begin_date_filter/output_1.json b/...tions/PhishLabsIOC_DRP/test_data/client_methods/get_cases/begin_date_filter/output_1.json
@@ -41,7 +41,6 @@
             ],
             "formReceiver": false,
             "brandAbuseFlag": false,
-            "brandAbuseFlag": false,
             "appDate": "0001-01-01T00:00:00Z",
             "primaryMarketplace": false
         }

diff --git a/...y/ModelingRules/SaasSecurityEventCollector_1_3/SaasSecurityEventCollector_1_3_schema.json b/...y/ModelingRules/SaasSecurityEventCollector_1_3/SaasSecurityEventCollector_1_3_schema.json
@@ -64,10 +64,6 @@
         "type": "string",
         "is_array": false
       },
-      "log_type": {
-        "type": "string",
-        "is_array": false
-      },
       "cloud_app_instance": {
         "type": "string",
         "is_array": false

diff --git a/Packs/PrismaSaasSecurity/ReleaseNotes/2_0_25.md b/Packs/PrismaSaasSecurity/ReleaseNotes/2_0_25.md
@@ -0,0 +1,6 @@
+
+#### Modeling Rules
+
+##### SaasSecurityModelingRules
+
+Remove duplicate keys from the schema.
diff --git a/Packs/PrismaSaasSecurity/pack_metadata.json b/Packs/PrismaSaasSecurity/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "SaaS Security by Palo Alto Networks",
     "description": "SaaS Security connects directly to your sanctioned SaaS applications to provide data classification, sharing and permission visibility, and threat detection.",
     "support": "xsoar",
-    "currentVersion": "2.0.24",
+    "currentVersion": "2.0.25",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",

diff --git a/...talFootprint/Integrations/RiskIQDigitalFootprint/test_data/get_asset_ip_address_resp.json b/...talFootprint/Integrations/RiskIQDigitalFootprint/test_data/get_asset_ip_address_resp.json
@@ -1766,7 +1766,6 @@
         "current": true
       }
     ],
-    "attributes": [],
     "cookies": [],
     "sslCerts": [
       {

diff --git a/...IQDigitalFootprint/Integrations/RiskIQDigitalFootprint/test_data/get_asset_page_resp.json b/...IQDigitalFootprint/Integrations/RiskIQDigitalFootprint/test_data/get_asset_page_resp.json
@@ -470,7 +470,6 @@
         "current": true
       }
     ],
-    "attributes": [],
     "assetSecurityPolicies": [
       {
         "policyName": "content-security-policy-high",
@@ -1053,7 +1052,6 @@
         "lastSeen": 1543521869887
       }
     ],
-    "sslCerts": [],
     "firstSeen": 1539018024251,
     "lastSeen": 1591595881794,
     "count": 860,

diff --git a/Packs/SecurityScorecard/Integrations/SecurityScorecard/test_data/data.json b/Packs/SecurityScorecard/Integrations/SecurityScorecard/test_data/data.json
@@ -16,22 +16,12 @@
 				"factor": "network_security",
 				"direction": "drops",
 				"grade_letter": "C",
-				"score_impact": -3,
-				"direction": "drops",
-				"score": 77,
-				"grade_letter": "C",
-				"factor": "network_security",
 				"score_impact": -3
 			}, {
 				"score": 69,
 				"factor": "ip_reputation",
 				"direction": "drops",
 				"grade_letter": "D",
-				"score_impact": -3,
-				"direction": "drops",
-				"score": 69,
-				"grade_letter": "D",
-				"factor": "ip_reputation",
 				"score_impact": -3
 			}]
 		}, {
@@ -51,11 +41,6 @@
 				"factor": "network_security",
 				"direction": "drops",
 				"grade_letter": "C",
-				"score_impact": -2,
-				"direction": "drops",
-				"score": 78,
-				"grade_letter": "C",
-				"factor": "network_security",
 				"score_impact": -2
 			}]
 		}],

diff --git a/Packs/epo/ModelingRules/McafeeEpoModelingRules/McafeeEpoModelingRules_schema.json b/Packs/epo/ModelingRules/McafeeEpoModelingRules/McafeeEpoModelingRules_schema.json
@@ -32,22 +32,6 @@
       "type": "string",
       "is_array": false
     },
-    "ThreatName": {
-      "type": "string",
-      "is_array": false
-    },
-    "NodeName": {
-      "type": "string",
-      "is_array": false
-    },
-    "ServerID": {
-      "type": "string",
-      "is_array": false
-    },
-    "AnalyzerVersion": {
-      "type": "string",
-      "is_array": false
-    },
     "AnalyzerName": {
       "type": "string",
       "is_array": false

diff --git a/Packs/epo/ReleaseNotes/2_0_25.md b/Packs/epo/ReleaseNotes/2_0_25.md
@@ -0,0 +1,6 @@
+
+#### Modeling Rules
+
+##### Mcafee Epo Modeling Rule
+
+Remove duplicate keys from the schema.
diff --git a/Packs/epo/pack_metadata.json b/Packs/epo/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "McAfee ePO",
     "description": "McAfee ePolicy Orchestrator",
     "support": "xsoar",
-    "currentVersion": "2.0.24",
+    "currentVersion": "2.0.25",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",
-Original file line number
+Diff line change
@@ Expand Up / @@ -50,8 +50,7 @@ @@
           ],
           "senderEmailSet": [
             {
-              "1": 1,
-              "1": "1"
+              "1": 1
             }
           ],
           "executableSet": [
@@ Expand Down @@
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,4 @@

		#### Incident Types

		- Microsoft ATA Suspicious Activity