[CortexXpanse] XSUP-53412 (#40635) (#40650)

* fix bug

* RN

* fmt

* Apply suggestions from code review



---------

Co-authored-by: johnnywilkes <[email protected]>
Co-authored-by: julieschwartz18 <[email protected]>

Author: 3 people

Packs/CortexXpanse/Integrations/FeedXpanse/FeedXpanse.py

@@ -245,12 +245,15 @@ def fetch_indicators(client: Client, limit: Optional[int] = None, asset_type: li
         List: raw response from API.
     """
     asset_list, asset_response = [], []
-    if "Domain" in asset_type:
-        asset_list.append("DOMAIN")
-    if "Certificate" in asset_type:
-        asset_list.append("CERTIFICATE")
-    if "IP" in asset_type:
-        asset_list.append("UNASSOCIATED_RESPONSIVE_IP")
+    if asset_type == []:
+        asset_list = ["DOMAIN", "CERTIFICATE", "UNASSOCIATED_RESPONSIVE_IP"]
+    else:
+        if "Domain" in asset_type:
+            asset_list.append("DOMAIN")
+        if "Certificate" in asset_type:
+            asset_list.append("CERTIFICATE")
+        if "IP" in asset_type:
+            asset_list.append("UNASSOCIATED_RESPONSIVE_IP")
     if limit:
         # Had to add 1 to the limit to get the right return.
         asset_response = client.list_asset_internet_exposure_request(
@@ -326,7 +329,7 @@ def main() -> None:  # pragma: no cover
     # Append default tags.
     feed_tags = list(set(argToList(params.get("feedTags", []))) | DEFAULT_FEED_TAGS)
     tlp_color = params.get("tlp_color", "")
-    indicator_types = params.get("indicatorTypes")
+    indicator_types = params.get("indicatorTypes", [])
     creds = params.get("credentials", {})
     api = creds.get("password", "")
     add_sensitive_log_strs(api)

Packs/CortexXpanse/Integrations/FeedXpanse/FeedXpanse.yml

@@ -119,12 +119,12 @@ configuration:
 - display: Indicator types to fetch
   name: indicatorTypes
   type: 16
-  required: true
+  required: false
   options:
   - IP
   - Domain
   - Certificate
-  additionalinfo: 'Indicator types to fetch.'
+  additionalinfo: 'Indicator types to fetch.  Default is to fetch all.'
   section: Collect
 description: Use this feed to retrieve the discovered IPs/domains/certificates from the Cortex Xpanse asset database.
 display: 'Xpanse Feed'

Packs/CortexXpanse/ReleaseNotes/1_2_11.md

@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### Xpanse Feed
+
+Updated the **Xpanse Feed** integration *indicatorTypes* parameter to be optional.

Packs/CortexXpanse/pack_metadata.json

@@ -2,7 +2,7 @@
     "name": "Cortex Xpanse",
     "description": "Content for working with Attack Surface Management (ASM).",
     "support": "xsoar",
-    "currentVersion": "1.2.10",
+    "currentVersion": "1.2.11",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",