3d80496f79
if victim then risk
2021-08-31 10:49:39 -07:00
34f7199ac8
Removed commented-out autoescape setting and removed unused import
2021-08-27 11:26:31 -07:00
b869caefe4
Removed autoescape=True from jinja2 environment calls which caused errors in generating outputs from templates. Semgrep error does not apply to us since we are not generating html. Added #nosemgrep to each call to prevent semgrep from giving an error.
2021-08-27 11:05:04 -07:00
2385fdf544
fixed generate
2021-08-27 16:06:35 +02:00
33640f3b7d
Added missing autoescape to new code in generate.py
2021-08-17 11:48:32 -07:00
b3f7e10005
Apparently I forgot to save the files after changing them, so that changes actually weren't committed. Let's try again...
2021-08-17 11:36:24 -07:00
0b3569d714
Massive merge from upstream. Should be good now.
2021-08-17 11:31:24 -07:00
54bde203c3
Changed QUOTE_MINIMAL to QUOTE_ALL in Python CSV Writer calls in response to semgrep recommendations.
2021-08-12 14:04:26 -07:00
6f938863e7
validate caught a syntax error in one of the python files.
2021-08-12 13:48:32 -07:00
c1d144e0d5
auto_escape fix with either not picked up by semgrep because it was changing a global jinja2 configuration or because it didn't actually fix what we thought it would. Setting the global default is probably the best idea since if another function call doesn't explicitly set it, then it won't be set. However, we leave it like this for now.
2021-08-12 13:43:54 -07:00
b6b5f9317f
Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results.
2021-08-12 13:26:29 -07:00
6607ca9508
Merge branch 'develop' into analytic_types
2021-08-10 11:02:18 +02:00
483ee87950
minor
2021-07-28 16:33:55 -07:00
4864774de7
testing risk refactor
2021-07-28 16:30:28 -07:00
c4ce0e8590
converted response_task to investigations
2021-07-26 13:49:50 +02:00
686b0b5ca4
converted response_task to investigations
2021-07-26 13:39:17 +02:00
21f8ef2990
updated stories
2021-07-21 12:41:06 +02:00
96ed5691ea
updated generate
2021-07-20 16:17:07 +02:00
a452677ee1
Merge branch 'develop' into attacker_tools
2021-07-13 14:24:01 -05:00
4f44401252
adding lookup files
2021-07-13 13:30:48 -05:00
c3db579480
lookup bug in generate
2021-07-13 11:52:17 -05:00
63d2581343
Merge branch 'develop' into rba_poc
2021-06-30 16:10:23 -04:00
8c150335fd
readding mitre lookup it was a mistake I left in here
2021-06-22 15:56:14 -04:00
6efe49882f
added attacker logic
2021-06-22 14:21:25 -04:00
400d591059
minor
2021-06-21 14:06:25 -05:00
ba2fa59b5e
adding 3 rba examples
2021-06-19 22:15:49 -04:00
6c518294ed
minor update
2021-06-17 21:44:20 -04:00
c1f4cae5b6
working example of risk object as well as threat object with ses annotations
2021-06-17 21:43:50 -04:00
3134df2380
added deprecated label as well as description annotation
2021-06-16 11:59:31 -04:00
59ffaf8c25
adding deprecation to generate
2021-06-16 10:31:30 -04:00
ee7826b0ae
Merge branch 'develop' into deprecation_of_detections
2021-05-18 19:31:53 -04:00
bcd1c5153f
skeleton of deprecation
2021-05-18 18:26:41 -04:00
8d22e9934f
Update generate.py
2021-04-29 12:48:12 +01:00
fbf3edaa11
Update generate.py
2021-04-29 12:39:56 +01:00
581bd1b3a7
Update generate.py
2021-04-29 11:59:38 +01:00
e9e1be755f
Update generate.py
2021-04-29 11:44:25 +01:00
d7cece2f53
Update generate.py
2021-04-29 10:48:01 +01:00
8389cce2c0
Rearranged generate
...
Put all objects in objects dictionary.
Split up the importing, computing and output logic into different functions
2021-04-29 09:48:06 +01:00
c6803f1a88
remove print
2021-04-13 14:40:44 -07:00
4f71b64d2b
fixing merge conflicts
2021-04-12 18:06:42 -04:00
3450f5a6b0
fixing bug with deployment where escu package has notables off by default
2021-04-12 18:00:59 -04:00
3dfb0c502a
removed mustang and replaced with saaws
2021-04-08 13:58:41 -04:00
a7c98107f2
enabled mustang searches by default
2021-04-06 12:23:11 -07:00
fbdcfa96dc
mustang detections enabled
2021-04-06 12:12:20 -07:00
549d9374ea
tagging response tasks
...
adding the 'Splunk Security Analytics for AWS' tag where appropriate
2021-03-31 18:42:17 -04:00
39f22f2b1a
update variable name
...
replacing 'category' for 'product'
2021-03-30 17:14:58 -04:00
b7f69fd895
updating contentctl.py
...
support for the new category variable that allows to create a MUSTAN specific package
2021-03-30 11:07:45 -04:00
c0b95aa075
adding package type support
...
- Updates to generate.py introduce an extra parameter that defines the type of package to be created.
- Tagging analytics stories related to AWS/O365 detections.
2021-03-29 16:27:20 -04:00
2afdf445ce
minor
2021-03-18 16:05:27 -07:00
adc6ec0f87
Branch was auto-updated.
2021-03-10 02:55:05 +00:00
patel-bhavin