Updating Sysdig Classifier, Incident fields and Layout

[S3B4SZ17]

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

• In Progress
• Ready
• In Hold - (Reason for hold)

Related Issues

Description

Updating the Sysdig default Classifier, Incident fields and Layout
Updated the overall docs and release notes to reflect current state and changes

Must have

• Tests
• Documentation

[content-bot]

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @YaelShamai will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

[content-bot]

Hi @S3B4SZ17, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

[Benimanela]

Hi @S3B4SZ17, Thank you for the work on this contribution. The implementation looks good overall.

General

• Please run demisto-sdk format on all files to ensure consistency with XSOAR standards.

Incident Fields

• Avoid changing the type of existing incident fields. This introduces breaking changes and may cause issues for users.
• Use common fields where possible instead of creating new ones. For example:
  • Use the common Event ID field instead of creating a new Sysdig Event ID.
  • Use the common Category field instead of Sysdig Category.

Let me know once you've addressed the feedback so I can review again!

[merit-maita]

@S3B4SZ17 any update?

[merit-maita]

@S3B4SZ17 i'll close the pr for lack of update, once you have some update feel free to reopen