36 Commits

Author SHA1 Message Date
Eric 1ef4a3c092 Remove separate action, which lead
to some confusing indirection
2026-05-21 15:20:08 -07:00
Eric 73c7ac9b2c Add the workflow updates 2026-05-21 11:16:50 -07:00
Lou Stella 9c183fa110 Update Analytics to Support ATT&CK v19 (#4036)
---------

Co-authored-by: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2026-05-05 17:29:28 +02:00
ljstella 75a07833e7 Quotes, ugh. 2026-04-28 11:43:00 -04:00
ljstella 4c48e608dc Pinning ATT&CK 2026-04-28 11:40:32 -04:00
dependabot[bot] 2f600e1214 Bump actions/upload-artifact from 6 to 7 (#3932)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2026-03-03 20:46:02 +00:00
xqi-splunk 3953a43f05 Concept Shippable Response Plans (#3803)
* Create response_plan directory

* Update directory name

* Copy response_templates artifacts to dist/api

* Add response-templates schema validation workflow

* Add feature branch for testing purpose

* Update endpoint to playground

* Revert back debug changes

* Move scripts to workflows

* Remove manual check in

* Add sorting for version and template name

* Raise exception when file name not match

* Add indentation for json output

* Add debug option to dump json schema

* Generate merged templates at runtime

* Rename openAPI spec yaml to yml

* Move validation to build.yml

* Use stem to get file name

* Fix python package install

* Update version sorting using int

* Update openAPI spec for version

* Move build response templates to separate workflow

* Fix naming in build-response-templates.yml

* Update response templates to the ones for first release

* Fix naming of response templates

* Response templates to be added by response plan team

* Keep response_templates directory

* Skip .gitkeep checking when check non-json files

* Remove the .gitkeep

* Initial version of Response Templates

* Initial version of Response Templates

* Initial version of Response Templates

* Revert "Initial version of Response Templates"

This reverts commit 3a174dd02e.

* Revert "Initial version of Response Templates"

This reverts commit 26fa66ddde.

* Revert "Initial version of Response Templates"

This reverts commit 6014b4870b.

* Initial version of Response Templates

* Initial version of Response Templates

* Update and rename AccountCompromise_v14.json to AccountCompromise_v2.json

* Update and rename DataBreach_v15.json to DataBreach_v2.json

* Update and rename GenericIncidentResponse_v13.json to GenericIncidentResponse_v2.json

* Update and rename NIST80061_v14.json to NIST80061_v2.json

* Update and rename NetworkIndicatorEnrichment_v6.json to NetworkIndicatorEnrichment_v2.json

* Update and rename SelfReplicatingMalware_v14.json to SelfReplicatingMalware_v2.json

* Update and rename SuspiciousEmail_v35.json to SuspiciousEmail_v2.json

* Update and rename VulnerabilityDisclosure_v10.json to VulnerabilityDisclosure_v2.json

* Add comments

---------

Co-authored-by: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Co-authored-by: Christian Cloutier <ccloutier@splunk.com>
Co-authored-by: kbouchard <47464052+kbouchardherjavecgroup@users.noreply.github.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2025-12-17 02:30:20 +05:30
dependabot[bot] 2a219fe9b6 Bump actions/upload-artifact from 5 to 6 (#3837)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2025-12-16 18:28:24 +05:30
dependabot[bot] 984e65062b Bump actions/checkout from 5 to 6 (#3804)
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 15:56:11 -08:00
dependabot[bot] 6f3c42cac5 Bump actions/upload-artifact from 4 to 5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-30 17:30:15 +00:00
dependabot[bot] 72a49baeac Bump actions/setup-python from 5 to 6
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-09 12:25:40 +00:00
dependabot[bot] c4e7747a7f Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 09:09:35 +00:00
Bhavin Patel 332e0d1047 updating commands to install contentctl 2025-05-08 15:09:43 -07:00
Bhavin Patel ebecdfd8a4 adding requirements.txt 2025-05-08 15:05:07 -07:00
Bhavin Patel 426d54d99d updating cli flags 2025-04-18 13:29:32 -07:00
research-bot b599f494fc updating if condition 2025-02-05 12:09:04 -08:00
research-bot ba8f23593a udpating ctl 2025-02-05 10:56:37 -08:00
research-bot 572cdd4346 ctl to 5.0.0 2025-01-27 14:32:06 -08:00
research-bot 2f06009310 ctl version to alpha3 2025-01-23 15:14:57 -08:00
research-bot 8bf0425187 bump to alpha2 2025-01-21 13:58:50 -08:00
research-bot d2726d6d0e specify ctl version 2025-01-17 17:14:37 -08:00
Bhavin Patel 2104b54adf updating to use new enrichments 2024-09-18 13:24:26 +05:30
Bhavin Patel 1a5526942f testing data source validation 2024-08-22 16:13:23 +05:30
Bhavin Patel f3ee1590ec rm contetnctl version 2024-08-05 13:58:00 -07:00
Bhavin Patel 22380667e4 new trigger condition 2024-08-05 13:19:20 -07:00
Bhavin Patel 2df07936f9 sample test 2024-08-05 13:07:09 -07:00
Bhavin Patel fea71b0171 remove enviroment and use repo variable 2024-07-31 15:17:23 -07:00
Bhavin Patel aa85a2a3bd updating env to prod 2024-07-31 14:54:00 -07:00
Bhavin Patel 9b96a140ba updating to use env 2024-07-31 14:51:07 -07:00
Bhavin Patel cfe5e9c926 adding app inspect and version bump all jobs 2024-07-31 12:10:05 -07:00
Bhavin Patel cc5904db73 updating contentctl 420 2024-07-25 17:25:37 -05:00
Bhavin Patel 9993148108 vrersion pinning 2024-07-24 12:24:34 -05:00
Bhavin Patel efd81aafc5 updating badge and trigger 2024-07-12 11:20:58 -07:00
Bhavin Patel b36c64f8ed remove jq 2024-07-09 17:02:32 -07:00
Bhavin Patel e16828647b updating to build 2024-07-09 14:32:29 -07:00
Bhavin Patel 847e67aaaf udpating job names 2024-07-09 14:28:15 -07:00