Merge pull request #13230 from fenil-savani/VectraXDR-pcap-playbook-changes

v-atulyadav · web-flow · commit 5f66fa0fb311 · 2025-12-03T17:40:40.000+05:30
[VectraXDR][Playbbok] - Vectra xdr pcap playbook changes
diff --git a/Solutions/Vectra XDR/Package/3.3.0.zip b/Solutions/Vectra XDR/Package/3.3.0.zip
diff --git a/Solutions/Vectra XDR/Package/mainTemplate.json b/Solutions/Vectra XDR/Package/mainTemplate.json
@@ -34953,8 +34953,8 @@
                                 "messageBody": "{\n    \"$schema\": \"http://adaptivecards.io/schemas/adaptive-card.json\",\n    \"actions\": [\n        {\n            \"type\": \"Action.Submit\",\n            \"title\": \"Submit Answer\",\n            \"style\": \"positive\",\n            \"id\": \"submit\"\n        }\n    ],\n    \"body\": [\n        {\n            \"type\": \"TextBlock\",\n            \"size\": \"large\",\n            \"weight\": \"bolder\",\n            \"text\": \"Select Detections To Download Pcap File\",\n            \"horizontalAlignment\": \"center\",\n            \"style\": \"heading\",\n            \"color\": \"accent\",\n            \"fontType\": \"Default\",\n            \"wrap\": true,\n            \"id\": \"heading\"\n        },\n{\n            \"type\": \"TextBlock\",\n            \"text\": \"Entity ID = @{variables('entity_id')}\\n\\nEntity Type = @{variables('entity_type')}\",\n            \"wrap\": true,\n            \"style\": \"default\",\n            \"color\": \"accent\",\n            \"separator\": true,\n            \"id\": \"x\"\n        },\n        {\n            \"id\": \"detection-choice\",\n            \"type\": \"Input.ChoiceSet\",\n            \"choices\": @{variables('detections')},\n            \"isRequired\": true,\n            \"label\": \"Please select detections to download pcap.\",\n            \"isMultiSelect\": true,\n            \"separator\": true,\n            \"errorMessage\": \"Select atleast one detection.\"\n        }\n    ],\n    \"type\": \"AdaptiveCard\",\n    \"version\": \"1.3\"\n}",
                                 "updateMessage": "Thanks for your response!",
                                 "recipient": {
-                                  "groupId": "96a69975-817a-4f0b-aa8f-71ed76502590",
-                                  "channelId": "19:2ZKaKGdv-lKrL26GZRwUppKDlkMdU4UGhBj4uRQjcnI1@thread.tacv2"
+                                  "channelId": "[[trim(parameters('TeamsChannelId'))]",
+                                  "groupId": "[[trim(parameters('TeamsGroupId'))]"
                                 }
                               }
                             },
diff --git a/Solutions/Vectra XDR/Playbooks/VectaDownloadPcapFileToStorage/azuredeploy.json b/Solutions/Vectra XDR/Playbooks/VectaDownloadPcapFileToStorage/azuredeploy.json
@@ -1325,8 +1325,8 @@
                                                 "messageBody":  "{\n    \"$schema\": \"http://adaptivecards.io/schemas/adaptive-card.json\",\n    \"actions\": [\n        {\n            \"type\": \"Action.Submit\",\n            \"title\": \"Submit Answer\",\n            \"style\": \"positive\",\n            \"id\": \"submit\"\n        }\n    ],\n    \"body\": [\n        {\n            \"type\": \"TextBlock\",\n            \"size\": \"large\",\n            \"weight\": \"bolder\",\n            \"text\": \"Select Detections To Download Pcap File\",\n            \"horizontalAlignment\": \"center\",\n            \"style\": \"heading\",\n            \"color\": \"accent\",\n            \"fontType\": \"Default\",\n            \"wrap\": true,\n            \"id\": \"heading\"\n        },\n{\n            \"type\": \"TextBlock\",\n            \"text\": \"Entity ID = @{variables('entity_id')}\\n\\nEntity Type = @{variables('entity_type')}\",\n            \"wrap\": true,\n            \"style\": \"default\",\n            \"color\": \"accent\",\n            \"separator\": true,\n            \"id\": \"x\"\n        },\n        {\n            \"id\": \"detection-choice\",\n            \"type\": \"Input.ChoiceSet\",\n            \"choices\": @{variables('detections')},\n            \"isRequired\": true,\n            \"label\": \"Please select detections to download pcap.\",\n            \"isMultiSelect\": true,\n            \"separator\": true,\n            \"errorMessage\": \"Select atleast one detection.\"\n        }\n    ],\n    \"type\": \"AdaptiveCard\",\n    \"version\": \"1.3\"\n}",
                                                 "updateMessage":  "Thanks for your response!",
                                                 "recipient":  {
-                                                    "groupId":  "96a69975-817a-4f0b-aa8f-71ed76502590",
-                                                    "channelId":  "19:2ZKaKGdv-lKrL26GZRwUppKDlkMdU4UGhBj4uRQjcnI1@thread.tacv2"
+                                                    "channelId": "[trim(parameters('TeamsChannelId'))]",
+                                                    "groupId": "[trim(parameters('TeamsGroupId'))]"
                                                 }
                                             }
                                         },

Original file line number	Diff line number	Diff line change
`@@ -34953,8 +34953,8 @@`
`34953`	`34953`	"messageBody": "{\n \"$schema\": \"http://adaptivecards.io/schemas/adaptive-card.json\",\n \"actions\": [\n {\n \"type\": \"Action.Submit\",\n \"title\": \"Submit Answer\",\n \"style\": \"positive\",\n \"id\": \"submit\"\n }\n ],\n \"body\": [\n {\n \"type\": \"TextBlock\",\n \"size\": \"large\",\n \"weight\": \"bolder\",\n \"text\": \"Select Detections To Download Pcap File\",\n \"horizontalAlignment\": \"center\",\n \"style\": \"heading\",\n \"color\": \"accent\",\n \"fontType\": \"Default\",\n \"wrap\": true,\n \"id\": \"heading\"\n },\n{\n \"type\": \"TextBlock\",\n \"text\": \"Entity ID = @{variables('entity_id')}\\n\\nEntity Type = @{variables('entity_type')}\",\n \"wrap\": true,\n \"style\": \"default\",\n \"color\": \"accent\",\n \"separator\": true,\n \"id\": \"x\"\n },\n {\n \"id\": \"detection-choice\",\n \"type\": \"Input.ChoiceSet\",\n \"choices\": @{variables('detections')},\n \"isRequired\": true,\n \"label\": \"Please select detections to download pcap.\",\n \"isMultiSelect\": true,\n \"separator\": true,\n \"errorMessage\": \"Select atleast one detection.\"\n }\n ],\n \"type\": \"AdaptiveCard\",\n \"version\": \"1.3\"\n}",
`34954`	`34954`	`"updateMessage": "Thanks for your response!",`
`34955`	`34955`	`"recipient": {`
`34956`		`- "groupId": "96a69975-817a-4f0b-aa8f-71ed76502590",`
`34957`		`- "channelId": "19:2ZKaKGdv-lKrL26GZRwUppKDlkMdU4UGhBj4uRQjcnI1@thread.tacv2"`
	`34956`	`+ "channelId": "[[trim(parameters('TeamsChannelId'))]",`
	`34957`	`+ "groupId": "[[trim(parameters('TeamsGroupId'))]"`
`34958`	`34958`	`}`
`34959`	`34959`	`}`
`34960`	`34960`	`},`
Original file line number	Diff line number	Diff line change
`@@ -1325,8 +1325,8 @@`
`1325`	`1325`	"messageBody": "{\n \"$schema\": \"http://adaptivecards.io/schemas/adaptive-card.json\",\n \"actions\": [\n {\n \"type\": \"Action.Submit\",\n \"title\": \"Submit Answer\",\n \"style\": \"positive\",\n \"id\": \"submit\"\n }\n ],\n \"body\": [\n {\n \"type\": \"TextBlock\",\n \"size\": \"large\",\n \"weight\": \"bolder\",\n \"text\": \"Select Detections To Download Pcap File\",\n \"horizontalAlignment\": \"center\",\n \"style\": \"heading\",\n \"color\": \"accent\",\n \"fontType\": \"Default\",\n \"wrap\": true,\n \"id\": \"heading\"\n },\n{\n \"type\": \"TextBlock\",\n \"text\": \"Entity ID = @{variables('entity_id')}\\n\\nEntity Type = @{variables('entity_type')}\",\n \"wrap\": true,\n \"style\": \"default\",\n \"color\": \"accent\",\n \"separator\": true,\n \"id\": \"x\"\n },\n {\n \"id\": \"detection-choice\",\n \"type\": \"Input.ChoiceSet\",\n \"choices\": @{variables('detections')},\n \"isRequired\": true,\n \"label\": \"Please select detections to download pcap.\",\n \"isMultiSelect\": true,\n \"separator\": true,\n \"errorMessage\": \"Select atleast one detection.\"\n }\n ],\n \"type\": \"AdaptiveCard\",\n \"version\": \"1.3\"\n}",
`1326`	`1326`	`"updateMessage": "Thanks for your response!",`
`1327`	`1327`	`"recipient": {`
`1328`		`- "groupId": "96a69975-817a-4f0b-aa8f-71ed76502590",`
`1329`		`- "channelId": "19:2ZKaKGdv-lKrL26GZRwUppKDlkMdU4UGhBj4uRQjcnI1@thread.tacv2"`
	`1328`	`+ "channelId": "[trim(parameters('TeamsChannelId'))]",`
	`1329`	`+ "groupId": "[trim(parameters('TeamsGroupId'))]"`
`1330`	`1330`	`}`
`1331`	`1331`	`}`
`1332`	`1332`	`},`