Skip to content

Commit

Permalink
CSOAR-2947: Updated the Doc for Aws EC2 & Any.Run (#5039)
Browse files Browse the repository at this point in the history
* CSOAR-2947: Updated the Doc for Aws EC2 & Any.Run

* Updates from review

---------

Co-authored-by: John Pipkin <[email protected]>
  • Loading branch information
rishav-sumo-dev and jpipkin1 authored Feb 4, 2025
1 parent b461b42 commit 3e622fe
Show file tree
Hide file tree
Showing 2 changed files with 22 additions and 19 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/any.run.png')} alt="any.run" width="80"/>

***Version: 1.3
Updated: Jun 15, 2023***
***Version: 1.4
Updated: Feb 04, 2025***

Gather detonation data for files and URL using `ANY.RUN`.

Expand All @@ -23,8 +23,8 @@ Sign in to ANY.RUN. Click on your profile on the left menu. In the API and Limit

## ANY.RUN in Automation Service and Cloud SOAR

1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
1. After the list of the integrations appears, search for the integration and click on the row.
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
1. After the list of the integrations appears, search for the integration and click on the row.
1. The integration details will appear. Click on the **"+"** button to add new Resource.<br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/any.run/any.run-3.png')} style={{border:'1px solid gray'}} alt="any.run-3" width="400"/>
1. Populate all the required fields (\*):
* **URL**. 'https://api.any.run'
Expand All @@ -39,3 +39,4 @@ Sign in to ANY.RUN. Click on your profile on the left menu. In the API and Limit
* February 21, 2020 - First upload
* February 13, 2023 - Integration refactored
* June 15, 2023 (v1.3) - Updated the integration with Environmental Variables
* February 04, 2025 (v1.4) - Updated the action Get Report with Environmental Variables
Original file line number Diff line number Diff line change
Expand Up @@ -6,36 +6,37 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/aws.png')} alt="aws" width="50"/>

***Version: 1.4
Updated: July 04, 2024***
***Version: 1.5
Updated: Feb 04, 2025***

Using the integration with EC2, you can enrich incidents with specific EC2 data, create and delete snapshots, work with elastic addresses and instances, and manipulate security groups.

## Actions

* **Describe Regions** (*Enrichment*) - Describes the Regions that are enabled for an account, or all Regions.
* **Describe Instances** (*Enrichment*) - Describes the specified instances or all of AWS account's instances.
* **Authorize Security Group Ingress Rule** (*Containment*) - Adds the specified ingress rules to a security group.
* **Create Snapshot** (*Containment*) - Creates a new snapshot.
* **Delete Security Group** (*Containment*) - Delete a security group.
* **Delete Snapshot** (*Containment*) - Deletes an existing snapshot.
* **Describe Addresses** (*Enrichment*) - Describes the specified Elastic IP addresses or all Elastic IP addresses.
* **Describe Volumes** (*Enrichment*) - Describes the specified EBS volumes or all EBS volumes.
* **Describe Instances** (*Enrichment*) - Describes the specified instances or all of AWS account's instances.
* **Describe Instances V2** (*Enrichment*) - Describes the specified instances or all of AWS account's instances with pagination.
* **Describe Key Pairs** (*Enrichment*) - Describes the specified key pairs or all key pairs.
* **Describe VPCs** (*Enrichment*) - Describes one or more VPCs.
* **Describe Regions** (*Enrichment*) - Describes the Regions that are enabled for an account, or all Regions.
* **Describe Subnets** (*Enrichment*) - Describes one or more subnets.
* **Describe Security Groups** (*Enrichment*) - Describes the specified security groups or all security groups.
* **Describe Snapshots** (*Enrichment*) - Describes a specified EBS snapshots or all of the EBS snapshots available.
* **Get Password Data** (*Enrichment*) - Retrieves the encrypted administrator password for a running Windows instance.
* **Create Snapshot** (*Containment*) - Creates a new snapshot.
* **Delete Snapshot** (*Containment*) - Deletes an existing snapshot.
* **Describe Volumes** (*Enrichment*) - Describes the specified EBS volumes or all EBS volumes.
* **Describe VPCs** (*Enrichment*) - Describes one or more VPCs.
* **Disassociate Address** (*Containment*) - Disassociates an Elastic IP address from an instance or network interface it's associated with.
* **Get Password Data** (*Enrichment*) - Retrieves the encrypted administrator password for a running Windows instance.
* **Monitor Instance** (*Containment*) - Monitor a specific instance.
* **Release Address** (*Containment*) - Releases the specified Elastic IP address.
* **Reboot Instances** (*Containment*) - Reboot instances.
* **Revoke Security Group Ingress Rule** (*Containment*) - Removes the specified ingress rules from a security group.
* **Start Instance** (*Containment*) - Start an instance.
* **Stop Instance** (*Containment*) - Stop an instance.
* **Terminate Instance** (*Containment*) - Terminate an instance.
* **Delete Security Group** (*Containment*) - Delete a security group.
* **Monitor Instance** (*Containment*) - Monitor a specific instance.
* **Unmonitor Instances** (*Containment*) - Discontinue monitoring of a specified instances.
* **Reboot Instances** (*Containment*) - Reboot instances.
* **Authorize Security Group Ingress Rule** (*Containment*) - Adds the specified ingress rules to a security group.
* **Revoke Security Group Ingress Rule** (*Containment*) - Removes the specified ingress rules from a security group.

**Supported Versions**

Expand All @@ -54,4 +55,5 @@ Using the integration with EC2, you can enrich incidents with specific EC2 data,
+ Updated action: Stop Instance (Resolved bug related to checkbox fields)
+ July 04, 2024 (v1.4)
+ Updated action: Describe Instances (Resolved bug related to Instance ID field)

+ February 04, 2025 (v1.5)
+ Added action: Describe Instances V2

0 comments on commit 3e622fe

Please sign in to comment.