Prepared by: {{ data.author }}
Prepared For: {{ data.customer }}
Prepared at: {{ data.date }}
Purpose
This Document covers all of the custom configuration and content that has been deployed following
the engagement of Palo Alto professional services.
This document specifically covers the implementation of the provided use case/playbook, and collates
the dependencies and artefacts implemented to complete it.
This document only includes the dependencies used by the playbook, which may not include other configurations
such as:
- Incident Classifiers
- Incident Mappers
Document Overview
This document has been auto-generated using the XSOAR Automation !GenerateAsBuilt, with a
specific
playbook ({{ playbook_name }}) provided.
Project Details
Contact Details
Corporate Headquarters
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054
{{ data.playbooks.as_html(["name","pack"]) }}
Playbook dependencies are subplaybooks consumed by the parent use case.
{% if data.integrations %}
{{ data.integrations.as_html(["name","pack"]) }}
Integration dependencies are those that implement commands required by this use case.
The above integrations may not all be configured in this environment, but are referenced by the use case.
{% endif %}
{% if data.incidenttypes %}
{{ data.incidenttypes.as_html(["name","pack"]) }}
Incident types are the types of incidents generated or used by this use-case.
{% endif %}
{% if data.automations %}
{{ data.automations.as_html(["name","pack"]) }}
Automations are scripts used to perform tasks. They may be custom, or OOTB.
{% endif %}
{% if data.incidentfields %}
{{ data.incidentfields.as_html(["name","pack"]) }}
Incident fields are the fields that this use case relies on to populate or consume information.
{% endif %}
""" # noqa: E501
HTML_DOCUMENT_TEMPLATE = """
Prepared by: {{ author }}
Prepared For: {{ customer }}
Prepared at: {{ date }}
Purpose
This Document covers all of the custom configuration and content that has been deployed following
the engagement of Palo Alto professional services.
Document Overview
This document has been auto-generated using the XSOAR Automation !GenerateAsBuilt.
Project Details
Contact Details
Corporate Headquarters
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054
Project Statistics Summary
{{ open_incidents }}
{{ closed_incidents }}
{{ playbook_stats }}
The playbook statistics represent how many incidents have been ingested and associated with
a given playbook.
This is a good indicator of how each use case is being consumed.
All Installed Content
{{ integrations_table }}
The system configuration above represents the server configuration of XSOAR, including advanced
server config parameters such as HTTP proxy. This configuration is accessible via
settings->about->troubleshooting.
{% if installed_packs_table %}
{{ installed_packs_table }}
The installed packs are all the content packs currently installed on the server. Content packs
include playbooks, automations, and in some cases, integrations.
{% endif %}
{% if playbooks_table %}
{{ playbooks_table }}
Custom playbooks are written specifically for this deployment, or adapted from existing OOTB playbooks.
The tasks in each playbook represent the overall size and complexity of each developed playbook.
{% endif %}
{% if automations_table %}
{{ automations_table }}
Custom automations are used to add additional logic and support to playbooks and use cases.
{% endif %}
{% if reports %}
{{ reports }}
Custom reports can be scheduled or manually initiated reports that report any statistic available through
XSOAR.
{% endif %}
{% if dashboards %}
{{ dashboards }}
Custom dashboards are a dynamic way to visualize statistics within XSOAR.
XSOAR ships with a number of Out Of the Box dashboards, the above respresent only
those that have been created as part of this PS engagement.
{% endif %}
{{ system_config }}
The system configuration changes the behavior of the XSOAR server/application itself, including
keys and the published hostname.
""" # noqa: E501
class TableData:
def __init__(self, data, name):
self.data = data
self.name = name
def as_markdown(self, headers=None):
if not headers:
return tableToMarkdown(self.name, self.data, removeNull=True)
else:
return tableToMarkdown(self.name, self.data, headers=headers, removeNull=True)
def as_html(self, headers=None):
template = jinja2.Template(HTML_TABLE_TEMPLATE)
rows = self.data
if type(self.data) is dict:
rows = []
for k, v in self.data.items():
rows.append({k: v})
return template.render(headers=headers, rows=rows, name=self.name)
def total(self):
return len(self.data)
def search(self, search_key, search_value):
for row in self.data:
if search_key in row:
value = row.get(search_key)
if value == search_value:
return row
return None
class SortedTableData(TableData):
def __init__(self, data, name, sort_key):
sorted_data = sorted(data, key=lambda i: i[sort_key].lower())
super().__init__(sorted_data, name)
class SingleFieldData:
def __init__(self, name, data):
self.data = data
self.name = name
def __bool__(self):
return True
def as_markdown(self):
return f"### {self.name}\n{self.data}"
def as_html(self):
return f"""