From 57549cab3d2d2495dab14fbdbdf0fc18881d0704 Mon Sep 17 00:00:00 2001 From: Patryk Kostek Date: Thu, 4 Dec 2025 08:51:44 -0800 Subject: [PATCH] Fix 'Management' Folder directory, Fix SDL API Routing on Workflows - Moved Management from root to worksflows > community - Fixed /api/query to /sdl/api/query for proper routing to SDL API --- .../[Abnormal Security] Threat Log Ingestion.json | 2 +- workflows/community/M365/[M365] Disable User.json | 2 +- workflows/community/M365/[M365] Enable User.json | 2 +- .../[M365] Remove All Mail Forwarding Rules from Mailbox.json | 2 +- workflows/community/M365/[M365] Reset Password.json | 2 +- workflows/community/M365/[M365] Revoke User Session.json | 2 +- .../Management}/[MGMT] N-1 Automatic Upgrade Policy.json | 0 7 files changed, 6 insertions(+), 6 deletions(-) rename {Management => workflows/community/Management}/[MGMT] N-1 Automatic Upgrade Policy.json (100%) diff --git a/workflows/community/Abnormal Security/[Abnormal Security] Threat Log Ingestion.json b/workflows/community/Abnormal Security/[Abnormal Security] Threat Log Ingestion.json index f84732d..5a727db 100644 --- a/workflows/community/Abnormal Security/[Abnormal Security] Threat Log Ingestion.json +++ b/workflows/community/Abnormal Security/[Abnormal Security] Threat Log Ingestion.json @@ -675,7 +675,7 @@ "retry_on_status_codes": [], "ssl_verification": true, "timeout": 30, - "url": "{{Connection.protocol}}{{Connection.url}}/api/addEvents", + "url": "{{Connection.protocol}}{{Connection.url}}/sdl/api/addEvents", "url_path": null, "url_prefix": null, "use_authentication_data": true, diff --git a/workflows/community/M365/[M365] Disable User.json b/workflows/community/M365/[M365] Disable User.json index ea2c362..bfb693f 100644 --- a/workflows/community/M365/[M365] Disable User.json +++ b/workflows/community/M365/[M365] Disable User.json @@ -76,7 +76,7 @@ "action_type": "http_request", "public_action_id": "5864fb04-634a-4cf9-96e8-6b898f26880a", "method": "post", - "url": "{{Connection.protocol}}{{Connection.url}}/api/query", + "url": "{{Connection.protocol}}{{Connection.url}}/sdl/api/query", "url_path": "/sdl/api/query", "url_prefix": null, "payload": "{\n \"filter\": \"\\\"{{singularity-response-trigger.data.indicators[0].id}}\\\"\",\n \"startTime\": \"{{singularity-response-trigger.data.firstSeenAt}}\",\n \"endTime\": \"{{singularity-response-trigger.data.createdAt}}\"\n}", diff --git a/workflows/community/M365/[M365] Enable User.json b/workflows/community/M365/[M365] Enable User.json index 779e77e..4d7ba33 100644 --- a/workflows/community/M365/[M365] Enable User.json +++ b/workflows/community/M365/[M365] Enable User.json @@ -76,7 +76,7 @@ "action_type": "http_request", "public_action_id": "5864fb04-634a-4cf9-96e8-6b898f26880a", "method": "post", - "url": "{{Connection.protocol}}{{Connection.url}}/api/query", + "url": "{{Connection.protocol}}{{Connection.url}}/sdl/api/query", "url_path": "/sdl/api/query", "url_prefix": null, "payload": "{\n \"filter\": \"\\\"{{singularity-response-trigger.data.indicators[0].id}}\\\"\",\n \"startTime\": \"{{singularity-response-trigger.data.firstSeenAt}}\",\n \"endTime\": \"{{singularity-response-trigger.data.createdAt}}\"\n}", diff --git a/workflows/community/M365/[M365] Remove All Mail Forwarding Rules from Mailbox.json b/workflows/community/M365/[M365] Remove All Mail Forwarding Rules from Mailbox.json index 70519ef..bf7f2ff 100644 --- a/workflows/community/M365/[M365] Remove All Mail Forwarding Rules from Mailbox.json +++ b/workflows/community/M365/[M365] Remove All Mail Forwarding Rules from Mailbox.json @@ -66,7 +66,7 @@ "action_type": "http_request", "public_action_id": "5864fb04-634a-4cf9-96e8-6b898f26880a", "method": "post", - "url": "{{Connection.protocol}}{{Connection.url}}/api/query", + "url": "{{Connection.protocol}}{{Connection.url}}/sdl/api/query", "url_path": "/sdl/api/query", "url_prefix": null, "payload": "{\n \"filter\": \"\\\"{{singularity-response-trigger.data.indicators[0].id}}\\\"\",\n \"startTime\": \"{{singularity-response-trigger.data.firstSeenAt}}\",\n \"endTime\": \"{{singularity-response-trigger.data.createdAt}}\"\n}", diff --git a/workflows/community/M365/[M365] Reset Password.json b/workflows/community/M365/[M365] Reset Password.json index c0b3db1..e3e44fc 100644 --- a/workflows/community/M365/[M365] Reset Password.json +++ b/workflows/community/M365/[M365] Reset Password.json @@ -76,7 +76,7 @@ "action_type": "http_request", "public_action_id": "5864fb04-634a-4cf9-96e8-6b898f26880a", "method": "post", - "url": "{{Connection.protocol}}{{Connection.url}}/api/query", + "url": "{{Connection.protocol}}{{Connection.url}}/sdl/api/query", "url_path": "/sdl/api/query", "url_prefix": null, "payload": "{\n \"filter\": \"\\\"{{singularity-response-trigger.data.indicators[0].id}}\\\"\",\n \"startTime\": \"{{singularity-response-trigger.data.firstSeenAt}}\",\n \"endTime\": \"{{singularity-response-trigger.data.createdAt}}\"\n}", diff --git a/workflows/community/M365/[M365] Revoke User Session.json b/workflows/community/M365/[M365] Revoke User Session.json index 0991ed7..c0ea9e2 100644 --- a/workflows/community/M365/[M365] Revoke User Session.json +++ b/workflows/community/M365/[M365] Revoke User Session.json @@ -76,7 +76,7 @@ "action_type": "http_request", "public_action_id": "5864fb04-634a-4cf9-96e8-6b898f26880a", "method": "post", - "url": "{{Connection.protocol}}{{Connection.url}}/api/query", + "url": "{{Connection.protocol}}{{Connection.url}}/sdl/api/query", "url_path": "/sdl/api/query", "url_prefix": null, "payload": "{\n \"filter\": \"\\\"{{singularity-response-trigger.data.indicators[0].id}}\\\"\",\n \"startTime\": \"{{singularity-response-trigger.data.firstSeenAt}}\",\n \"endTime\": \"{{singularity-response-trigger.data.createdAt}}\"\n}", diff --git a/Management/[MGMT] N-1 Automatic Upgrade Policy.json b/workflows/community/Management/[MGMT] N-1 Automatic Upgrade Policy.json similarity index 100% rename from Management/[MGMT] N-1 Automatic Upgrade Policy.json rename to workflows/community/Management/[MGMT] N-1 Automatic Upgrade Policy.json