category: Network Security
provider: Gamma
sectionorder:
- Connect
- Collect
commonfields:
  id: Gamma
  version: -1
configuration:
- additionalinfo: URL of the Gamma API to query
  defaultvalue: https://app.gamma.ai
  display: Server URL (e.g. https://example.net)
  name: url
  required: true
  type: 0
  section: Connect
- display: Gamma API Key
  hidden: true
  name: api_key
  type: 4
  section: Connect
  required: false
- displaypassword: Gamma API Key
  name: credentials_api_key
  hiddenusername: true
  type: 9
  required: false
  section: Connect
- additionalinfo: Enter the violation ID to begin fetching from. If empty, the API will default to your first violation
  display: Starting Violation
  name: first_fetch
  type: 0
  section: Collect
  required: false
- additionalinfo: Enter a number of results for each fetch to return. The number must be between 1 and 100.
  defaultvalue: '10'
  display: Results per fetch
  name: max_fetch
  type: 0
  section: Collect
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Incident type
  name: incidentType
  type: 13
  section: Connect
  required: false
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  section: Collect
  advanced: true
- display: Fetch incidents
  name: isFetch
  type: 8
  section: Collect
  required: false
description: Query and update violations in Gamma.
display: Gamma
name: Gamma
script:
  commands:
  - arguments:
    - defaultValue: '1'
      description: Violation ID to begin pulling from. Defaults to the earliest existing violation for your account.
      name: minimum_violation
      required: true
    - defaultValue: '10'
      description: 'Upper limit for retrieving violations (max: 100).'
      name: limit
      required: true
    description: Get a list of violations.
    name: gamma-get-violation-list
    outputs:
    - contextPath: GammaViolation.violation_id
      description: Violation ID.
      type: Number
    - contextPath: GammaViolation.file_labels_map
      description: List of Files and corresponding DLP labels in reference to the DLP violation.
      type: Array
    - contextPath: GammaViolation.text_labels
      description: List of DLP labels in reference to the DLP violation.
      type: Array
    - contextPath: GammaViolation.violation_status
      description: Violation status, one of 'OPEN', 'RESOLVED', 'IGNORED'.
      type: String
    - contextPath: GammaViolation.violation_category
      description: Category of the violation e.g. PII, Secrets, GDPR/CCPA, etc.
      type: String
    - contextPath: GammaViolation.violation_event_timestamp
      description: Timestamp of violation in epoch milliseconds.
      type: Number
    - contextPath: GammaViolation.user
      description: JSON field containing optional information about user.
      type: String
    - contextPath: GammaViolation.dashboard_url
      description: Gamma dashboard URL.
      type: String
    - contextPath: GammaViolation.app_name
      description: Name of the application where the violation is found.
      type: String
  - arguments:
    - description: Violation ID to retrieve.
      name: violation
      required: true
    description: Get a specific violation.
    name: gamma-get-violation
    outputs:
    - contextPath: GammaViolation.violation_id
      description: Violation ID.
      type: Number
    - contextPath: GammaViolation.file_labels_map
      description: List of Files and corresponding DLP labels in reference to the DLP violation.
      type: Array
    - contextPath: GammaViolation.text_labels
      description: List of DLP labels in reference to the DLP violation.
      type: Array
    - contextPath: GammaViolation.violation_status
      description: Violation status, one of 'OPEN', 'RESOLVED', 'IGNORED'.
      type: String
    - contextPath: GammaViolation.violation_category
      description: Category of the violation e.g. PII, Secrets, GDPR/CCPA, etc.
      type: String
    - contextPath: GammaViolation.violation_event_timestamp
      description: Timestamp of violation in epoch milliseconds.
      type: Number
    - contextPath: GammaViolation.user
      description: JSON field containing optional information about user.
      type: String
    - contextPath: GammaViolation.dashboard_url
      description: Gamma dashboard URL.
      type: String
    - contextPath: GammaViolation.app_name
      description: Name of the application where the violation is found.
      type: String
  - arguments:
    - description: Violation ID to update.
      name: violation
      required: true
    - auto: PREDEFINED
      description: Status of the violation.
      name: status
      predefined:
      - OPEN
      - RESOLVED
      - IGNORED
      required: true
    - default: true
      defaultValue: None
      description: Any notes to add to a violation. It will overwrite existing notes.
      name: notes
    description: Update a specific violation.
    name: gamma-update-violation
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
tests:
- No test - unit test