import demistomock as demisto # noqa: F401 from CommonServerPython import * # noqa: F401 PANEL_NAME = "ReGenAI Intel Agents" def create_intel_agents_html(intel_agents_summary: list, alert_url: str) -> str: """ Create HTML content for the intel agents. :type intel_agents_summary: ``list`` :param intel_agents_summary: Intel Agents summary data. :type alert_url: ``str`` :param alert_url: Alert URL. :rtype: ``str`` :return: HTML content for the intel agent. """ cyber_intel_agent_summary = [] for summary in intel_agents_summary: if "CYBER" in summary.get("type", []): cyber_intel_agent_summary.append(summary) if not cyber_intel_agent_summary: return "" html_content = ['

Cyber Context

', '
'] for section in cyber_intel_agent_summary: title = section.get("title", "") contents = section.get("content", []) for content in contents: html_content.append('
') html_content.append('
') html_content.append(f'
{title}: {content}
') # noqa: E231,E702 html_content.append("
") html_content.append("
") incident_footer = ( "

View more context, supporting information, and explore entities in Dataminr Pulse: " f'{alert_url}' ) html_content.append(incident_footer) intel_agents_html = "".join(html_content) return intel_agents_html def main(): try: intel_agents_summary_data = demisto.incident().get("CustomFields", {}).get("dataminrpulseintelagentssummary", "") alert_url = demisto.incident().get("CustomFields", {}).get("dataminrpulseexpandalerturl", "") theme = demisto.callingContext.get("context", {}).get("User", {}).get("theme", "") if not intel_agents_summary_data: return_results( { "ContentsFormat": EntryFormat.HTML, "Type": EntryType.NOTE, "Contents": f'

{PANEL_NAME}

N/A

', # noqa: E231,E702 } ) return else: try: intel_agents_summary = json.loads(intel_agents_summary_data) except json.JSONDecodeError: raise ValueError('Failed to parse "Dataminr Pulse Intel Agents Summary" JSON string.') if isinstance(intel_agents_summary, dict): intel_agents_summary = [intel_agents_summary] intel_agents_cyber_context = create_intel_agents_html(intel_agents_summary, alert_url) if not intel_agents_cyber_context: return_results( { "ContentsFormat": EntryFormat.HTML, "Type": EntryType.NOTE, "Contents": f'

{PANEL_NAME}

N/A

', # noqa: E231,E702 } ) return html_content_start = ( '
' '

' f"{PANEL_NAME}

" ) data = [] if theme == "": html_content_start = html_content_start.format("", "", "#53DFCD", "") elif theme != "light": html_content_start = html_content_start.format("#082223", "#FFFFFF", "#53DFCD", "#53DFCD") else: html_content_start = html_content_start.format("#E9FBF9", "#000000", "#016558", "#016558") data.append(html_content_start) data.append(intel_agents_cyber_context) data.append("
") html_content = "".join(data) return_results( { "ContentsFormat": EntryFormat.HTML, "Type": EntryType.NOTE, "Contents": html_content, } ) except Exception as e: return_error(f"Failed to render data: {str(e)}") if __name__ in ("__builtin__", "builtins", "__main__"): main()