Skip to content

[Pack] DECTRAX: Autonomous Cyber Deception & Line-Rate Firewall Interdiction (v1.0.0) - #46370

Open
Sadman-TheDentian wants to merge 2 commits into
demisto:contrib/Sadman-TheDentian_feature/dectrax-cortex-xsoar-packfrom
Sadman-TheDentian:feature/dectrax-cortex-xsoar-pack
Open

Sadman-TheDentian wants to merge 2 commits into
demisto:contrib/Sadman-TheDentian_feature/dectrax-cortex-xsoar-packfrom
Sadman-TheDentian:feature/dectrax-cortex-xsoar-pack

Conversation

@Sadman-TheDentian

@Sadman-TheDentian Sadman-TheDentian commented Oct 22, 2026 •

Copy link
Copy Markdown

Summary

This pull request contributes the official DECTRAX integration pack to Palo Alto Networks Cortex XSOAR (Packs/DECTRAX/).

DECTRAX is an autonomous deception and active interdiction platform that exposes lightweight synthetic lures across corporate subnets (Active Directory LDAP, Windows RDP, SMB, Modbus, SSH) with 0.00% false-positive accuracy and publishes line-rate External Dynamic Lists (EDL) for automated perimeter blocking in under 1.5 seconds.

Commands Implemented

  • !dectrax-get-blocked-ips: Retrieves active attacker IPs interdicted across the network.
  • !dectrax-check-ip: Instant lookup whether an IP observable has interacted with internal decoys.
  • !dectrax-block-ip: Playbook action to push suspicious IPs directly to the live firewall drop feed.

Pack Layout

Packs/DECTRAX/
├── pack_metadata.json
├── README.md
├── ReleaseNotes/
│   └── 1_0_0.md
└── Integrations/
    └── DECTRAX/
        ├── DECTRAX.yml
        ├── DECTRAX.py
        ├── DECTRAX_test.py
        └── README.md

Verification & Testing

  • Unit tests executed:
    pytest apps/cortex-xsoar/Packs/DECTRAX/Integrations/DECTRAX/DECTRAX_test.py
    Result: 3 passed, 0 failures, 0 warnings.
  • Context outputs and schema follow standard Demisto CommonServer standards.

relates: link to the issue

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Community Support Level Indicates that the contribution is for Community supported pack labels Oct 22, 2026
@content-bot
content-bot changed the base branch from master to contrib/Sadman-TheDentian_feature/dectrax-cortex-xsoar-pack October 22, 2026 22:14
@content-bot
content-bot requested a review from kamalq97 October 22, 2026 22:14
@content-bot

Copy link
Copy Markdown
Contributor

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot

Copy link
Copy Markdown
Contributor

Hi @Sadman-TheDentian, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

@content-bot

Copy link
Copy Markdown
Contributor

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

  • @marketplace-ai-reviewer start review - Initiate a full AI code review
  • @marketplace-ai-reviewer re-review - Incremental review for new commits

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@content-bot content-bot added Community Contribution Form Filled Whether contribution form filled or not. labels Oct 24, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Community Support Level Indicates that the contribution is for Community supported pack Community Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! External PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants