pyth0n1c
|
cd6f4c66de
|
More cleanup...
|
2022-05-23 17:00:20 -07:00 |
|
pyth0n1c
|
f771ad3a5f
|
More restructuring and cleanup of the cleaner code - refactoring larger blocks of code into smaller, simplet functions.
|
2022-05-23 16:50:13 -07:00 |
|
pyth0n1c
|
bd3ef0e51b
|
Removed unused imports.
|
2022-05-23 16:20:45 -07:00 |
|
pyth0n1c
|
bd90976ef2
|
Removed huge chunk of dead, unused code.
|
2022-05-23 16:20:05 -07:00 |
|
pyth0n1c
|
e386a690d2
|
Updated the returns of some function so that if a function is not successful, it returns an empty dict instead of a modified dict representing the detection. Second, updated the text printed out in some errors.
|
2022-05-23 16:17:43 -07:00 |
|
pyth0n1c
|
b02b9f096c
|
Added the update functionality. About to perform some testing...
|
2022-05-23 15:09:23 -07:00 |
|
pyth0n1c
|
dd1003cc04
|
Fixing and improving support for updating the datamodel field of the detection.
|
2022-05-23 14:54:01 -07:00 |
|
pyth0n1c
|
e3725e5d22
|
Quoted large number of strings in detections to address the problem of these strings, which are values, being misidentified by the tool as submodel.fieldname format. Committing these changes and reviewing automated testing to make sure none of these changes broke the detections.
|
2022-04-15 15:23:04 -07:00 |
|
pyth0n1c
|
403348f895
|
Progress towards validating individual fields. Huge number of false positives due to unquoted strings which will be addressed in the next series of commits.
|
2022-04-15 14:46:23 -07:00 |
|
pyth0n1c
|
12645e62db
|
Properly pulling out and checking models and submodels. Properly pulling out fields, but not fully validating them yet.
|
2022-04-15 13:58:12 -07:00 |
|
pyth0n1c
|
91ba823a79
|
More progress towards properly architecting the required_fields_cleaner.
|
2022-04-14 16:14:14 -07:00 |
|
pyth0n1c
|
ff32813382
|
Updates to validate datasets listed in test and detection files more cleanly.
|
2022-04-12 16:10:59 -07:00 |
|
pyth0n1c
|
c0ec004980
|
Updated the tool to include argparse and added the base datamodel in CIM v5.0.1
|
2022-04-12 13:17:47 -07:00 |
|
pyth0n1c
|
fe02a26698
|
Updated required fields cleaner to make updates to the dataset if it is missing in the detection or differs between the detection and the test. The test will be used as the ground truth.
|
2022-03-11 14:03:32 -08:00 |
|
pyth0n1c
|
68af15f493
|
Updates to field cleaner. Added Hunting as one of the types. Parse out false positive failures
|
2022-03-02 16:56:46 -08:00 |
|
pyth0n1c
|
20d1a46772
|
Update to the cleaner.
|
2022-03-02 16:39:48 -08:00 |
|
pyth0n1c
|
fdcdb61298
|
Forgot to include the small change to the required_fields_cleaner.py that resulted in the full model.submodel.fieldname being included in required_fields.
|
2022-01-12 17:13:16 -08:00 |
|
pyth0n1c
|
7effe85ae2
|
Previous commit overwrote things we did not want to, like fields besides required_fields in the tags section. Now we are more careful.
|
2022-01-10 15:50:17 -08:00 |
|
pyth0n1c
|
3df196b43d
|
Updated code to make changes to files after scanning.
|
2022-01-10 15:43:23 -08:00 |
|
pyth0n1c
|
97e9cda0ca
|
We now properly complete the required_fields under tags. We just need to write this data back out to the relevant files.
|
2022-01-10 14:52:02 -08:00 |
|
pyth0n1c
|
4a34f4445d
|
Updated a large number of searches which uses datamodels from 'datamodel=datamodel' to 'datamodel=datamodel.submodel'. This is more explicit and allows us to better enumerate and check required_fields and declared datamodels
|
2022-01-10 12:52:16 -08:00 |
|
pyth0n1c
|
af3c38d10b
|
Progress towards matching tokens with datamodels. still a number of false positive misses that we need to work through.
|
2022-01-10 10:09:42 -08:00 |
|
pyth0n1c
|
fb91aaaa68
|
Progress on cleaning up the required fields. We can now pull out the datamodel fields, but it includes the datamodel itself too.
|
2022-01-06 17:48:30 -08:00 |
|