124fd0d465
Fix search string to be more broad
2022-09-15 11:22:05 -07:00
a17b44daf7
Remove lookups from copied ESCU directory.
2022-08-12 12:09:17 -07:00
f632813720
Changes to a number of files to make them suitable for use in an app by a different name.
2022-08-11 16:54:05 -07:00
f8e3fb6d4a
code to update templates files that must change for an app with different name to work
2022-08-11 15:14:17 -07:00
2c0888a090
Merge branch 'develop' into Clean_and_Deploy
2022-08-11 11:12:49 -07:00
1ee1b76968
Branch was auto-updated.
2022-08-04 00:42:05 -07:00
939493337d
adding research site links
2022-08-03 17:34:32 -04:00
87a8bc0442
Merged develop into this branch and resolved merge conflicts.
2022-08-03 06:47:22 -07:00
9dac698c46
solve merge conflicts
2022-08-01 11:39:02 +02:00
b21d754be3
attack_data_helper
2022-07-20 10:54:59 +02:00
72c1153383
Branch was auto-updated.
2022-07-19 12:40:38 -07:00
236f0ce71f
Branch was auto-updated.
2022-07-19 12:36:12 -07:00
bf4c565f79
Branch was auto-updated.
2022-07-19 12:36:08 -07:00
d4779f44ad
Branch was auto-updated.
2022-07-19 11:16:25 -07:00
03ccafe319
Branch was auto-updated.
2022-07-19 11:16:21 -07:00
d04c5e49f5
Branch was auto-updated.
2022-07-19 11:16:17 -07:00
7554992aa0
Updates to reduce duplication in the check_references code. Other updates to fix a number of issues introduced which cause Pytests to fail
2022-07-18 15:58:12 -07:00
b71e570891
Update cobalt_strike_named_pipes.yml
...
Updated to Hunting
2022-07-15 10:16:14 -06:00
97ad9beaa2
Fixed the pathing issue for reporting.
2022-07-15 06:44:25 -07:00
20ab9f27ce
Moved id collision checking into
...
the Utils module since it will
be used by the Factory and the
BA Factory. Updated a duplicate
UUID to mitigate the collision
issue raised on GitHub.
2022-07-12 15:06:35 -07:00
9b21029bea
Added logic for checking to
...
see if there are duplicate ids
for any/all kinds of content that
have an ID associated with it.
2022-07-12 14:26:34 -07:00
0c41f0a2f8
Branch was auto-updated.
2022-07-07 17:08:03 -07:00
cb1ba3c884
Added slightly more verbose printing
...
to track high-level progress in CICD.
2022-06-30 11:12:50 -07:00
45736b5ed7
Updated CI/CD Workflow and
...
python code in contentctl so that
progress update are not output
when running in CICD environment.
Outputting all of this data
causes thousands of lines of output
logs to be generated in CICD.
This info is only relevant when
running locally in a tty.
2022-06-30 10:52:00 -07:00
5eda0215e4
Branch was auto-updated.
2022-06-29 12:59:29 -07:00
bb3a73b0dd
array
2022-06-27 15:26:45 -07:00
e92699f315
st
2022-06-24 14:27:27 -07:00
d40ca09d61
Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface.
2022-06-23 14:19:17 -07:00
a74ebee88f
Added the --skip_enrichment option to the
...
contentctl tool. This can save a huge amount
of time when generating an app. Also
added a progress meter when the documentation
is being generated. Finally, correctly initialized
the default values of some class member fields
in order to get all the contentctl steps working.
2022-06-22 13:44:17 -07:00
c7ad4a013b
Updating DM enum
2022-05-31 10:58:08 -05:00
f6790d12c3
Updated the initialize output path and
...
documentation in contentctl help.
2022-05-18 01:50:49 -07:00
ef6ef78281
Fixed output dir naming and path for
...
init.
2022-05-17 23:28:52 -07:00
e3459eaeb3
Updates to contentctl, deploy,
...
enums, and initialize to support
building the app scaffold and
removing all the content that needs
to be removed.
2022-05-17 23:13:53 -07:00
e47765f09f
Fixing error introduced when sorting steps
...
in initialize.
2022-05-17 20:01:45 -07:00
b17b224a66
Added removal of baselines during initialize.
2022-05-17 19:59:40 -07:00
a9b118a6ce
Deployment using acs is working. It is currently difficult to tell whether the acs command has failed since even an ACS failure gives a return code of 0. I have raised this issue with the ACS team and am waiting on a reponse and guidance.
2022-05-17 16:15:45 -07:00
c9552fcf89
Updates to deploy towards working with the ACS application for deployment of apps to Splunk Cloud using Automated Private App Vetting / APAV
2022-05-17 15:26:34 -07:00
004710a350
Renamed add generation of app configuration file as well as manifest. Successfully built, then manually deployed an app to a Splunk Cloud instance using the ACS command line. The next steps will be to integrate the command line functionality into this app via the deploy option.
2022-05-17 14:36:29 -07:00
123600d2f2
Added generation of an app.manifest file based on command line arguments.
2022-05-17 13:49:29 -07:00
6d6feb9508
Name conflict on init... fixed
2022-05-17 12:47:54 -07:00
e751727b5b
Changed all of the clean terminology to init. This is in preparation for distributing the tool standalone in a separate repo as opposed to a part of the security_content repo.
2022-05-17 12:45:03 -07:00
61df5c96ef
Delete cobalt_strike_named_pipes.yml
2022-05-16 13:04:05 -06:00
86391a5843
HaagCat
2022-05-16 12:59:46 -06:00
751736f5e3
Better error handling for inspect
2022-05-13 13:53:49 -04:00
3ef1542000
Added another folder to clean.
...
Updated command line arguments
for build. Improved implmentation of
inspect.
2022-05-13 12:58:53 -04:00
83c6448e6f
Fixing some paths and command line arguments for the contentctl build option.
2022-05-13 11:42:01 -04:00
29894c6d3e
Fixed broken 'clean' paths for multiple content folders.
2022-05-13 09:31:54 -04:00
926317f5c4
Updated status print information around the
...
creation of App Enrichment, CVE, and
link validator caches. Made sure to close
CVE and App Enrichment caches after
they are opened and accessed instead of
relying on Python to close them for us
when their reference count is zero.
Also tested to ensure that if a previous
validate and generate succeeded, it
can be run again with no internet access!
This is perfect not just for performance
reasons, but offline/disconnected
environments.
2022-05-13 07:51:31 -04:00
bf27f47d1f
Moved from using a pickled dictionary, loaded and written manually, to shelve.Shelf for Reference cache. The interface is nearly identical, but it results in much cleaner code. We will likely do the same in the next commit for CVE cache.
2022-05-11 12:00:47 -07:00
e7580faf5f
Added caching of the results of link-verification to the --cached_and_offline argument. This means that if a link returns successfully and you run the tool again, the link won't be checked again. However, this means that if that cache sticks around for a long time, the link may actually stop returning but we won't continue checking it. Still, this makes it significantly easier to quickly find broken links, fix the broken links, and then run the tool again in a short period of time, only re-checking the broken links that have been fixed. This makes repairing and checking broken links a must faster workflow.
2022-05-10 17:08:24 -07:00
pyth0n1c