removed agentix from event collectors by Shir2611 · Pull Request #43748 · demisto/content

Shir2611 · 2026-03-30T14:52:51Z

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

In Progress
Ready
In Hold - (Reason for hold)

Related Issues

fixes: CIAC-15886

Description

removed agentix from event collectors

119 event collectors
4 are fixed here 43744
5 remain unchanged
102 changed in this pr
4 dont have supported modules but marketplace is plaftorm then added in this pr the all of the supported modules but agentix
4 dont have supported modules and marketplace is not plaftorm , this is not part of this pr, @DeanArbel 's team effort here

Must have

Tests
Documentation

github-actions · 2026-03-30T14:54:15Z

Your contributed AbnormalSecurity pack has been modified on files:

Packs/AbnormalSecurity/pack_metadata.json
Packs/AbnormalSecurity/ReleaseNotes/2_4_4.md
Packs/AbnormalSecurity/Integrations/AbnormalSecurityEventCollector/AbnormalSecurityEventCollector.yml
Please review the changes here

@fraankwang

content-bot · 2026-03-30T14:54:16Z

🤖 AI-Powered Code Review Available

You can leverage AI-powered code review to assist with this PR!

Available Commands:

@marketplace-ai-reviewer start review - Initiate a full AI code review
@marketplace-ai-reviewer re-review - Incremental review for new commits

marketplace-ai-reviewer · 2026-03-30T15:01:03Z

🤖 Analysis started. Please wait for results...

github-actions · 2026-03-30T15:11:44Z

Tests	Skipped	Failures	Errors	Time
951	0 💤	0 ❌	0 🔥	27876427m 17s ⏱️

marketplace-ai-reviewer · 2026-03-30T15:25:06Z

🤖 AI Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

marketplace-ai-reviewer

Hi! Thanks for your work on updating these event collectors and integrations. I've taken a look through the changes and noticed a recurring theme regarding the module categorizations. Across several platforms (like Salesforce, Mimecast, and Shodan), tags such as edr, cloud, and cloud_runtime_security are being applied to tools where they don't quite fit, such as SaaS or email security products. Please review and adjust these modules to ensure they accurately reflect each product's primary function. Thanks again for the contribution!

@Moish-Gilboa, @noydavidi, @BEAdi, @JudahSchwartz, @jbabazadeh, @dantavori please review and approve the results generated by the AI Reviewer by responding 👍 on this comment.

marketplace-ai-reviewer · 2026-03-30T15:25:02Z

 - No tests
+supportedModules:
+- xsiam
+- edr


Are you sure edr, cloud, and cloud_runtime_security are appropriate modules for Salesforce? Salesforce is a SaaS platform, not an Endpoint Detection and Response (EDR) or Cloud infrastructure tool.

marketplace-ai-reviewer · 2026-03-30T15:25:02Z

 tests:
 - No tests (auto formatted)
+supportedModules:
+- cloud


Are you sure cloud and cloud_runtime_security are appropriate modules for Monday.com? Monday is a SaaS platform.

marketplace-ai-reviewer · 2026-03-30T15:25:02Z

 - No tests
+supportedModules:
+- xsiam
+- edr


Are you sure edr, cloud, and cloud_runtime_security are appropriate modules for Mimecast? Mimecast is an email security platform, not an EDR or Cloud infrastructure tool.

marketplace-ai-reviewer · 2026-03-30T15:25:02Z

 - No tests
+supportedModules:
+- xsiam
+- edr


Are you sure edr, cloud, and cloud_runtime_security are appropriate modules for Mimecast? Mimecast is an email security platform, not an EDR or Cloud infrastructure tool.

marketplace-ai-reviewer · 2026-03-30T15:25:03Z

 - No tests (auto formatted)
+supportedModules:
+- xsiam
+- edr


Are you sure edr, cloud, and cloud_runtime_security are appropriate modules for Proofpoint Threat Response? Proofpoint is primarily an email security platform.

marketplace-ai-reviewer · 2026-03-30T15:25:03Z

 fromversion: 5.0.0
+supportedModules:
+- xsiam
+- edr


Are you sure edr, cloud, cloud_runtime_security, and cloud_posture are appropriate modules for Shodan? Shodan is primarily an Attack Surface Management (ASM) tool.

marketplace-ai-reviewer · 2026-03-30T15:25:03Z

 - No tests (auto formatted)
+supportedModules:
+- xsiam
+- edr


Are you sure edr, cloud, and cloud_runtime_security are appropriate modules for ExtraHop Reveal(x)? ExtraHop is primarily a Network Detection and Response (NDR) tool.

content-bot · 2026-04-05T13:47:18Z

This PR was automatically updated by a GitHub Action

iManageThreatManager pack version was bumped to 1.0.2.
Halcyon pack version was bumped to 1.0.3.
HelloWorld pack version was bumped to 4.0.2.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

content-bot · 2026-04-06T09:42:27Z

This PR was automatically updated by a GitHub Action

FireEyeHX pack version was bumped to 2.4.1.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

# Conflicts: # Packs/ManageEngine/ReleaseNotes/1_0_6.md

BEAdi · 2026-04-12T08:23:53Z

No need- it already has only xsiam supportedModules in pack metadata

here you need to remove the release notes and pack new version

BEAdi · 2026-04-12T10:08:29Z

 marketplaces:
 - marketplacev2
 - platform
+supportedModules:


Remove the 4 packs

added all supported but agentix as we have platfrom in marketplace but done have supported modules

BEAdi · 2026-04-12T10:15:58Z

 fromversion: 8.3.0
 tests:
 - No tests (auto formatted)
+supportedModules:


No need, pack doesn't have agentix

BEAdi · 2026-04-12T10:34:01Z

added all supported but agentix as we have platfrom in marketplace but done have supported modules

BEAdi · 2026-04-12T10:42:12Z

@@ -107,3 +107,5 @@ marketplaces:
 fromversion: 8.4.0
 tests:
  - No tests (auto formatted)
+supportedModules:
+- xsiam


no need, pack doesn't have agentix

Shir2611 · 2026-04-12T12:27:12Z

force merge as an effort to remove agentix from all event collectors

# Conflicts: # Packs/HelloWorld/ReleaseNotes/4_0_2.md

# Conflicts: # Packs/CyberArkEPM/ReleaseNotes/1_1_4.md

content-bot · 2026-04-12T19:22:42Z

This PR was automatically updated by a GitHub Action

ServiceNow pack version was bumped to 2.9.5.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

content-bot · 2026-04-12T19:40:42Z

Validate summary
The following errors were reported as warnings: BC117 (Approved).
✅ BC117 validation has been approved by PM review (supported-modules-approved label present).
The following errors were thrown as a part of this pr: DS104, DO106, ST111, BC115.
The following errors cannot be ignored: DS104, DO106, ST111, BC115.
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.
The following errors don't run as part of the nightly flow and therefore can be force merged: DS104, DO106, ST111, BC115.

Verdict: PR can be force merged from validate perspective? ✅

* removed agentix from event collectors * Bump pack from version iManageThreatManager to 1.0.2. * Bump pack from version Halcyon to 1.0.3. * Bump pack from version HelloWorld to 4.0.2. * Bump pack from version FireEyeHX to 2.4.1. * merge from master * added supported modules * code review * code review * code review * code review * merge from master * merge from master * Bump pack from version ServiceNow to 2.9.5. --------- Co-authored-by: Content Bot <bot@demisto.com>

removed agentix from event collectors

d755100

Shir2611 requested review from BEAdi and jbabazadeh March 30, 2026 14:52

Shir2611 self-assigned this Mar 30, 2026

Shir2611 requested review from JudahSchwartz, Moish-Gilboa, dantavori and noydavidi as code owners March 30, 2026 14:52

Shir2611 added docs-approved ready-for-pipeline-running Whether the pr is ready for running the whole pipeline, including testing on SAAS machines supported-modules-approved ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. labels Mar 30, 2026

marketplace-ai-reviewer removed the ready-for-ai-review The PR is ready for reviewing the PR with the AI Reviewer. label Mar 30, 2026

marketplace-ai-reviewer reviewed Mar 30, 2026

View reviewed changes

Content Bot added 4 commits April 5, 2026 13:47

Merged master into current branch.

9a5bf5b

Bump pack from version iManageThreatManager to 1.0.2.

61f0c3c

Bump pack from version Halcyon to 1.0.3.

4346fd7

Bump pack from version HelloWorld to 4.0.2.

6c490e9

Content Bot added 2 commits April 6, 2026 09:42

Merged master into current branch.

b40f03f

Bump pack from version FireEyeHX to 2.4.1.

6d2c24d

Merge branch 'master' into remove-agentix-from-event-collectors-part-2

df200c8

Shir2611 added the bypass.url Whether to create build bucket, add this label for marketplace.bootstrap.bypass.url label Apr 6, 2026

Merge branch 'master' into remove-agentix-from-event-collectors-part-2

268ad08

# Conflicts: # Packs/ManageEngine/ReleaseNotes/1_0_6.md

merge from master

20f5bac

BEAdi reviewed Apr 12, 2026

View reviewed changes

Shir2611 added 2 commits April 12, 2026 13:49

added supported modules

17dae53

code review

55cb052

Shir2611 added the ForceMerge Forcing the merge of the PR despite the build status label Apr 12, 2026

Shir2611 added 3 commits April 12, 2026 15:14

code review

9173e43

code review

cfd2e54

code review

8730bc1

BEAdi approved these changes Apr 12, 2026

View reviewed changes

Shir2611 and others added 6 commits April 12, 2026 15:58

Merge branch 'master' into remove-agentix-from-event-collectors-part-2

6332308

# Conflicts: # Packs/HelloWorld/ReleaseNotes/4_0_2.md

merge from master

33d1985

Merge branch 'master' into remove-agentix-from-event-collectors-part-2

d20af75

# Conflicts: # Packs/CyberArkEPM/ReleaseNotes/1_1_4.md

merge from master

44b87b1

Merged master into current branch.

3cd788c

Bump pack from version ServiceNow to 2.9.5.

b2bc8c5

jbabazadeh merged commit c791659 into master Apr 13, 2026
20 of 21 checks passed

jbabazadeh deleted the remove-agentix-from-event-collectors-part-2 branch April 13, 2026 08:12

Conversation

Shir2611 commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Contributing to Cortex XSOAR Content

Status

Related Issues

Description

Must have

Uh oh!

github-actions bot commented Mar 30, 2026

Your contributed AbnormalSecurity pack has been modified on files:

Uh oh!

content-bot commented Mar 30, 2026

🤖 AI-Powered Code Review Available

Uh oh!

marketplace-ai-reviewer commented Mar 30, 2026

Uh oh!

github-actions bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

marketplace-ai-reviewer commented Mar 30, 2026

Uh oh!

marketplace-ai-reviewer left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

content-bot commented Apr 5, 2026

This PR was automatically updated by a GitHub Action

Uh oh!

content-bot commented Apr 6, 2026

This PR was automatically updated by a GitHub Action

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Shir2611 commented Apr 12, 2026

Uh oh!

content-bot commented Apr 12, 2026

This PR was automatically updated by a GitHub Action

Uh oh!

content-bot commented Apr 12, 2026

Uh oh!

Uh oh!

Reviewers

Shir2611 commented Mar 30, 2026 •

edited

Loading

github-actions bot commented Mar 30, 2026 •

edited

Loading