From 2104b54adf3e9070f088cc9d0d88a79c8ddb9814 Mon Sep 17 00:00:00 2001 From: Bhavin Patel Date: Wed, 18 Sep 2024 13:24:26 +0530 Subject: [PATCH] updating to use new enrichments --- .github/workflows/appinspect.yml | 3 ++- .github/workflows/build.yml | 3 ++- .gitignore | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/appinspect.yml b/.github/workflows/appinspect.yml index 61dea4a3fd..5762339fbf 100644 --- a/.github/workflows/appinspect.yml +++ b/.github/workflows/appinspect.yml @@ -20,7 +20,8 @@ jobs: - name: Install Python Dependencies and ContentCTL and Atomic Red Team run: | pip install contentctl>=4.0.0 - git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git + git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git external_repos/atomic-red-team + git clone --depth=1 --single-branch --branch=master https://github.com/mitre/cti external_repos/cti - name: Running appinspect with enrichments env: diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index aff5f3c37a..29d0d995d2 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -20,7 +20,8 @@ jobs: - name: Install Python Dependencies and ContentCTL and Atomic Red Team run: | pip install contentctl>=4.0.0 - git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git + git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git external_repos/atomic-red-team + git clone --depth=1 --single-branch --branch=master https://github.com/mitre/cti external_repos/cti - name: Running build with enrichments run: | diff --git a/.gitignore b/.gitignore index cfea793841..c441750030 100644 --- a/.gitignore +++ b/.gitignore @@ -6,12 +6,13 @@ detections/*/.yml.example stories/*.yml.example tests/*/*.yml.example artifacts/ -contentctl/* +contentctl/ dist/DA-ESS-ContentUpdate-*.tar.gz dist/DA-ESS-ContentUpdate.tar.gz dist/ContentPack-*.appinspect_api_results.html dist/ContentPack-*.appinspect_api_results.json atomic-red-team/ +external_repos/ # IDE .vscode/