Content digest 14.3.24

We’ve added the following new integrations, steps, improvements, and templates:

• New templates
• Anthropic Claude
• Cato Networks
• ConnectWise
• CrowdStrike
• GCP
• Google Calendar
• Microsoft Azure AD
• Microsoft Defender for Endpoint
• Microsoft Outlook
• Microsoft Teams
• monday.com
• OpenAI
• ServiceNow
• Slack
• Snowflake
• Stellar Cyber
• Zscaler Internet Access

New templates

Added the following templates to the template library.

• Send a Question to Slack Users and Collect Responses
• Collect Information on Case Closure by Permitted Analysts

Anthropic Claude

A new Anthropic Claude steps integration is now available on the Integrations page.

The following step is available:

• Create a message in a conversation: Creates a "next" message in the conversation between the user and the assistant.

Cato Networks

A new Cato Networks steps integration is now available on the Integrations page.

The following step is available:

• Run GraphQL Query: Run a GraphQL Introspection Query.

ConnectWise

Several new steps were added to the ConnectWise integration:

• Update Company: Updates a company record.
• Update Ticket: Updates a Ticket record.

CrowdStrike

• Several new steps were added to the CrowdStrike integration:
  • Download MITRE Report: Export Mitre ATT&CK information for a given actor.
  • Download Intel Report: Return a Report PDF attachment.
• The List Intel Indicator IDs step has a new optional parameter:
  • RESPONSE_API_OBJECT_ONLY: If set to false, response headers will be included in the response.
• The List Intel Indicator IDs step has a new optional parameter:
  • FILTER: The FQL filter you would like to use.

GCP

A new step was added to the GCP integration:

• Vertex AI Gemini Chat Prompt: Send a stream request to the model using Google Vertex AI Gemini API.

Google Calendar

A new step was added to the Google Calendar integration:

• Create Calendar: Creates a new Google Calendar.

Microsoft Azure AD

A new step was added to the Microsoft Azure AD integration:

• Get User Profile Picture: Returns the profile picture of the specified user.

Microsoft Defender for Endpoint

Several new steps were added to the Microsoft Defender for Endpoint integration:

• Get File-related Machines: Returns a collection of machines related to a given file hash.

• Get File Statistics: Returns statistics for a given file.

• Get File-related Alerts: Returns a collection of alerts related to a given file hash.

• Get Live Response Results: Retrieves a specific live response command result by it's index.

• Put a File from Library to an Endpoint: Copies a file from the library to endpoint's file system.

Microsoft Outlook

The Send Message step has several new optional parameters:

• CONTENT_ID: The html code in the img tag as the source for the image.
• IS_INLINE: Whether or not to show the attachment inline.

Microsoft Teams

The Create New Channel step has a new optional parameter:

• OWNER_ID: The ID of the user to be the owner of the private channel.

monday.com

The Run GraphQL Query step has several new optional parameters:

• API_VERSION: Monday API Version to use, when empty, Current version will be used. https://developer.monday.com/api-reference/docs/api-versioning
• TIMEOUT: Timeout for request in seconds. By default, timeout is 30 seconds.

OpenAI

The Create Chat Completion step has several new optional parameters:

• TIMEOUT: Timeout for request in seconds. By default, timeout is 30 seconds.
• RETRY_DELAY: Initial delay before retry attempts in seconds, exponential backoff calculation will be applied over this value.
• MAX_RETRIES: The maximum number of times a step will be retried. By default (-1), the step will keep retrying for up to 50 seconds.
• RETRY_ON_STATUS: If set, the step will automatically retry the request on the specified status codes. The maximum retry duration is 50 seconds.

ServiceNow

A new step was added to the ServiceNow integration:

• Add Public Comment: Adds a public comment to the incident in ServiceNow.

Slack

The List User Groups and List User Group Members steps have a new optional parameter:

• SLACK_API_KEY: Your Slack access token.

Snowflake

The Post Synchronous Statement step has a new optional parameter:

• TIMEOUT: Timeout for request in seconds. By default, timeout is 30 seconds.

Stellar Cyber

A new step was added to the Stellar Cyber (cloud) integration:

• Generate Access Token: Generates an access token for Stellar Cyber API.

Zscaler Internet Access

Several new steps were added to the Zscaler Internet Access integration:

• Update User: Updates the user information for the specified ID. The email attribute, although mandatory, is read-only.
• Delete User: Deletes the user for the specified ID.
• Get Authenticated Session: Checks if there is an authentication session. When an authenticated session exists, the response will contain authType information. If authType is not present, the authenticated session has expired or it does not exist.