Content digest 21.3.23

We’ve added the following new integrations, steps, improvements, and templates:

• Torq
• Screenshot Utils
• String Utils
• Abnormal Security
• Astrix Security
• Discord
• Ermetic
• Host.io
• Notion
• Okta
• OpenAI
• Recorded Future Sandbox
• Zoom
• New templates

Torq

A new step was added to the torq integration:

• List Tags: Returns a list of all tags attached to any of the workflows in the account.

Screenshot Utils

The Screenshot URL step has a new optional parameter:

• Skip SSL Verification: Skip SSL certificate verification.

String Utils

The Defang or refang entity step has a new optional parameter:

• Do not parse as file: If set to true, the input will not be parsed as a file, even if it is a valid URL. Tip: use this option if you want to provide input text containing a single URL.

Abnormal Security

• The Get Case Details step has a new optional parameter:
  • Max retries: Maximum number of retries. If no value is specified, the step will keep retrying until a valid status code is received or for up to 50 seconds.
• The Check Case Action Status step has a new optional parameter:
  • Max retries: Maximum number of retries. If no value is specified, the step will keep retrying until a valid status code is received or for up to 50 seconds.
• The Get Latest Threat Intel Feed step has a new optional parameter:
  • Max retries: Maximum number of retries. If no value is specified, the step will keep retrying until a valid status code is received or for up to 50 seconds.
• The Get Case Details step has a new optional parameter:
  • Retry on status: If set, the step will automatically retry the request on the specified status codes. The maximum retry duration is 50 seconds.
• The Check Case Action Status step has a new optional parameter:
  • Retry on status: If set, the step will automatically retry the request on the specified status codes. The maximum retry duration is 50 seconds.
• The List Threats step has a new optional parameter:
  • Max retries: Maximum number of retries. If no value is specified, the step will keep retrying until a valid status code is received or for up to 50 seconds.
• The List Cases step has a new optional parameter:
  • Retry delay: Initial delay between retries in seconds. Each attempt will take 25% longer (exponential backoff). If a response contains Retry-After header, the delay will be overridden by the value of this header.
• The Set Threat Action step has a new optional parameter:
  • Retry delay: Initial delay between retries in seconds. Each attempt will take 25% longer (exponential backoff). If a response contains Retry-After header, the delay will be overridden by the value of this header.
• The List Threats step has a new optional parameter:
  • Retry on status: If set, the step will automatically retry the request on the specified status codes. The maximum retry duration is 50 seconds.
• The Submit Inquiry step has a new optional parameter:
  • Retry on status: If set, the step will automatically retry the request on the specified status codes. The maximum retry duration is 50 seconds.
• The Check Threat Action Status step has a new optional parameter:
  • Threat ID: The ID of the threat whose action status you would like to check. You may use the List Threats step to obtain the list of available threat IDs.
• The List Abuse Campaigns step has a new optional parameter:
  • Sender: A string containing the name or email address of the sender used to filter the results.
• The List Abuse Campaigns step has a new optional parameter:
  • Recipient: A string containing the name or email address of the recipient used to filter the results.
• The List Abuse Campaigns step has a new optional parameter:
  • Subject: A string containing the subject of the email used to filter the results.

Astrix Security

New Astrix Security steps and trigger integrations are now available on the Integrations page.

Use the trigger integration to trigger Torq workflows with events from Astrix Security.

Use the steps integration to add comments to integrations.

Discord

A new step was added to the discord integration:

• List Bot Guilds: Returns the list of guilds of which the bot is a member.

Ermetic

The Run GraphQL Query step has the following new optional parameters:

• Limit: The maximum number of results to return per page. To use the built-in pagination feature, please refrain from adding the pagination parameters to the query and variables.
• Cursor: A token used for pagination. To get the next page of results, use the cursor returned in the last response of the step.
  To use the built-in pagination feature, please refrain from adding the pagination parameters to the query and variables.

Host.io

A new Host.io steps integration is now available on the Integrations page.

Use the integration to retrieve information for a specified event.

Notion

A new step was added to the Notion integration:

• Get Database: Returns information about the database with the given ID.

Okta

A new step was added to the Okta integration:

• Update Network Zone: Updates the Network Zone with the given ID.

OpenAI

A new step was added to the OpenAI integration:

• Create Chat Completion: Creates a completion for the provided prompt and parameters.

Recorded Future Sandbox

A new Recorded Future Sandbox steps integration is now available on the Integrations page.

Use the integration to manage profiles and analyze URLs and samples.

Zoom

• The Send Message step has the following new optional parameters:
  • Recipient JID: The JID of the user or the channel that will receive the message. You may use the Get User step or the Get Channel step to obtain it.
  • Zoom account ID: The Zoom account ID of the receiving user. You may use the Get User step to obtain it.
  • Message content: A JSON object that contains the content of the message you wish to send. For more information, see https://marketplace.zoom.us/docs/guides/team-chat-apps/customizing-messages/.
  • Support Markdown: Whether to apply the markdown parser to the message.
  • Message content: The content of the message.

New templates

Added the following templates to the template library.

• Delete an IAM User Account
• Add Malicious IPs to Network Block Zone from Okta System Logs
• Just-in-time access to Group Membership in AzureAD
• Just-in-time access to Group Membership in AzureAD by Teams
• Request Justification of Integration from Astrix Finding
• Create Jira and Asana Tickets from Astrix Alert
• Handle Wiz Alert for Public AWS S3 Bucket with Sensitive Data
• Handle Wiz Alert for Public Azure Container with Sensitive Data
• Microsoft Teams Driven User Account Management Action Menu