admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

remove explicit deployment check for Mustang

Browse Source
This commit is contained in:
bpatel
2021-02-04 10:57:48 -08:00
parent f4ed009d16
commit 8bbfbdadb4
1 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/generate.py
+13 -10
View File
@@ -339,22 +339,25 @@ def get_deployments(object, deployments):
if 'analytics_story' in object['tags']:
if deployment['tags']['analytics_story'] == object['tags']['analytics_story'] or deployment['tags']['analytics_story']=='all':
matched_deployments.append(deployment)
else:
for story in deployment['tags']['analytics_story']:
if story == object['tags']['analytics_story']:
matched_deployments.append(deployment)
continue
if 'product' in deployment['tags']:
if type(deployment['tags']['product']) is str:
if 'product' in object['tags']:
if deployment['tags']['product'] == object['tags']['product'] or deployment['tags']['product']=='Splunk Security Analytics for AWS':
matched_deployments.append(deployment)
else:
for story in deployment['tags']['product']:
if story == object['tags']['product']:
matched_deployments.append(deployment)
continue
# Remove this check since deployment files are numbered and detections for Splunk Security Analytics for AWS will only get risk configs.
# if 'product' in deployment['tags']:
# if type(deployment['tags']['product']) is str:
# if 'product' in object['tags']:
# if deployment['tags']['product'] == object['tags']['product'] or deployment['tags']['product']=='Splunk Security Analytics for AWS':
# matched_deployments.append(deployment)
# else:
# for story in deployment['tags']['product']:
# if story == object['tags']['product']:
# matched_deployments.append(deployment)
# continue
if 'detection_name' in deployment['tags']: