diff --git a/.circleci/config.yml b/.circleci/config.yml index 1dacae4d2e..2309db1e1e 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -496,14 +496,22 @@ workflows: filters: tags: only: /.*/ - + - detection-testing: + # build always + requires: + - validate-content + - build-sources + - build-package + filters: + tags: + only: /^v.*/ - run-appinspect: # build always requires: - validate-content - build-sources - build-package - + - detection-testing filters: tags: only: /^v.*/ @@ -514,7 +522,7 @@ workflows: - validate-content - build-sources - build-package - + - detection-testing - run-appinspect filters: tags: @@ -527,7 +535,7 @@ workflows: - validate-content - build-sources - build-package - + - detection-testing - run-appinspect - create-report filters: @@ -541,7 +549,7 @@ workflows: - validate-content - build-sources - build-package - + - detection-testing - run-appinspect - create-report - update-sources-github @@ -556,7 +564,7 @@ workflows: - validate-content - build-sources - build-package - + - detection-testing - run-appinspect - create-report - update-sources-github @@ -571,7 +579,8 @@ workflows: requires: - validate-content - build-sources - - build-package + - build-package + - detection-testing - run-appinspect - create-report - update-sources-github diff --git a/automated_detection_testing/ci/detection_testing_batch/modules/testing_service.py b/automated_detection_testing/ci/detection_testing_batch/modules/testing_service.py index 9b6fa4e552..cdb2502b3e 100644 --- a/automated_detection_testing/ci/detection_testing_batch/modules/testing_service.py +++ b/automated_detection_testing/ci/detection_testing_batch/modules/testing_service.py @@ -51,7 +51,12 @@ def test_detections(ssh_key_name, private_key, splunk_ip, splunk_password, test_ def test_detection(ssh_key_name, private_key, splunk_ip, splunk_password, test_file, test_index, uuid_test, uuid_var): - test_file_obj = load_file("security_content/" + test_file[2:]) + try: + test_file_obj = load_file("security_content/" + test_file[2:]) + except Exception as e: + print('Error: ' + str(e)) + return + if not test_file_obj: return #print(test_file_obj) diff --git a/detections/endpoint/anomalous_usage_of_7zip.yml b/detections/endpoint/anomalous_usage_of_7zip.yml index 4de347be93..38a56f4a0c 100644 --- a/detections/endpoint/anomalous_usage_of_7zip.yml +++ b/detections/endpoint/anomalous_usage_of_7zip.yml @@ -54,3 +54,5 @@ tags: - Processes.process_id - Processes.parent_process_id security_domain: endpoint + + \ No newline at end of file