Changes
New and updated
Atom feedEverything added to the shelf and every new version, newest first.
-
- Updated · v1.0.1 PlaybookAPI helper playbooks for FortiGate and FortiManager
The api-user code step receives its inputs as escaped literals instead of pasted text, and debug logging is off on every helper so passwords stay out of run logs.
- Updated · v1.0.1 PlaybookExample playbooks for each built-in AI agent
Agent answers and alert text are HTML-escaped before they go into the comment.
- Updated · v1.0.1 PlaybookFleet-wide IP blocking with a FortiManager threat feed
Only a single valid public IP is added to the feed: the FortiEDR trigger now has the same check as the FortiNDR ones, the feed update keeps IP indicators only and drops private, invalid and CIDR values, and the feed file body is built as JSON instead of by string pasting.
- Updated · v1.0.1 PlaybookIsolate OT devices on a FortiGate
Releasing a device now waits on a real approval step instead of a plain prompt assigned to a placeholder user.
- Added WidgetAction Renderer
- Added PlaybookAdmin utilities: playbook references, connector audit, module clone
- Added ConnectorAnsible Automation
- Added PlaybookAPI helper playbooks for FortiGate and FortiManager
- Added ConnectorAWS EC2 (Extended)
- Added WidgetC3 Charts
- Added ConnectorCode Runner (Unrestricted)
- Added PlaybookExample playbooks for each built-in AI agent
- Added PlaybookExtract IOCs from alert attachments
- Added WidgetFirewall Owner Dashboard
- Added PlaybookFleet-wide IP blocking with a FortiManager threat feed
- Added ConnectorFortiGate Cloud
- Added ConnectorFortinet FortiSIEM v2
- Added ConnectorGeneric HTTP
- Added ConnectorHorizon3.ai
- Added ConnectorInoreader
- Added PlaybookIsolate OT devices on a FortiGate
- Added WidgetJinja Editor
- Added Solution packPlaybook tutorial pack
- Added PlaybookRecover FortiGates that drop off FortiManager
- Added ConnectorSMTP (Next-Gen)
- Added WidgetSOC Report
- Added Solution packVerified response playbooks for common SOC use cases
- Added WidgetZTP Automation Step Graph
- Added WidgetZTP Group Timer
- Added WidgetZTP Run Report
-
- Added PlaybookThreat feed ingestion template
-
- Added PlaybookData ingestion template
-
- Added PlaybookAsk an analyst before blocking
-
- Added PlaybookMailbox forwarding-rule triage
-
- Added PlaybookSet alert severity from AbuseIPDB score
-
- Added PlaybookIP reputation verdict with VirusTotal
-
- Added PlaybookFind and tag an existing indicator
-
- Added PlaybookRoute alerts by severity
-
- Added PlaybookParent and child playbook pattern