demisto
diff --git a/‎Packs/GroupIB_ThreatIntelligenceAttribution/IncidentTypes/incidenttype-GIB_Brand_Protection_Domain.json
-44 b/‎Packs/GroupIB_ThreatIntelligenceAttribution/IncidentTypes/incidenttype-GIB_Brand_Protection_Domain.json
-44
diff --git a/‎Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIBTIA/GroupIBTIA.py
+8-8 b/‎Packs/GroupIB_ThreatIntelligenceAttribution/Integrations/GroupIBTIA/GroupIBTIA.py
+8-8
@@ -40,6 +40,9 @@
                     "add_fields": ["events.cnc.ipv4.asn", "events.cnc.ipv4.countryName", "events.cnc.ipv4.region"],
                     "add_fields_types": ["asn", "geocountry", "geolocation"]
                 },
+                {
+                    "main_field": "events.client.ipv4.ip",
+                }
             ]
     },
     "compromised/card": {
@@ -437,7 +440,7 @@ class Client(BaseClient):
     """
 
     def _create_update_generator(self, collection_name: str, max_requests: int,
-                                 date_from: Optional[str] = None, seq_update: Union[int, str] = None,
+                                 date_from: str | None = None, seq_update: int | str = '',
                                  limit: int = 200) -> Generator:
         """
         Creates generator of lists with feeds class objects for an update session
@@ -839,7 +842,7 @@ def calculate_dbot_score(type_):
         return Common.DBotScore(
             indicator=value,
             indicator_type=type_,
-            integration_name="GIB TI",
+            integration_name="GIB TI&A",
             score=score
         )
 
@@ -904,8 +907,8 @@ def transform_some_fields_into_markdown(collection_name, feed: dict) -> dict:
             date = i.get("dateCreated")
             # file_diff = "[https://bt.group-ib.com/api/v2/osi/git_leak]({0})".format(i.get("fileDiff"))
             # info = find_element_by_key(i,'revisions.info')
-            author_email = ''.join(find_element_by_key(i, 'revisions.info.authorEmail'))
-            author_name = ''.join(find_element_by_key(i, 'revisions.info.authorName'))
+            author_email = ''.join(str(find_element_by_key(i, 'revisions.info.authorEmail')))
+            author_name = ''.join(str(find_element_by_key(i, 'revisions.info.authorName')))
             timestamp = ''.join(str(find_element_by_key(i, 'revisions.info.timestamp')))
             # author_email, author_name, date = info.get("authorEmail"), info.get("authorName"), info.get("dateCreated")
             buffer += f"| {url} | {author_email} | {author_name} | {date} | {timestamp} |\n"
@@ -1032,16 +1035,13 @@ def fetch_incidents_command(client: Client, last_run: dict, first_fetch_time: st
     :return: next_run will be last_run in the next fetch-incidents; incidents and indicators will be created in Demisto.
     """
     incidents = []
-    next_run: dict[str, dict[str, Union[int, Any]]] = {"last_fetch": {}}
+    next_run: dict[str, dict[str, int | Any]] = {"last_fetch": {}}
     for collection_name in incident_collections:
         last_fetch = last_run.get("last_fetch", {}).get(collection_name)
 
         portions = client.create_poll_generator(collection_name=collection_name, max_requests=requests_count,
                                                 last_fetch=last_fetch, first_fetch_time=first_fetch_time)
         for portion, last_fetch in portions:
-            last_test = last_fetch
-            for last in last_test:
-                set(last)
             for feed in portion:
                 mapping = MAPPING.get(collection_name, {})
                 if collection_name == "compromised/breached":