6607ca9508
Merge branch 'develop' into analytic_types
2021-08-10 11:02:18 +02:00
483ee87950
minor
2021-07-28 16:33:55 -07:00
4864774de7
testing risk refactor
2021-07-28 16:30:28 -07:00
c4ce0e8590
converted response_task to investigations
2021-07-26 13:49:50 +02:00
686b0b5ca4
converted response_task to investigations
2021-07-26 13:39:17 +02:00
21f8ef2990
updated stories
2021-07-21 12:41:06 +02:00
96ed5691ea
updated generate
2021-07-20 16:17:07 +02:00
a452677ee1
Merge branch 'develop' into attacker_tools
2021-07-13 14:24:01 -05:00
4f44401252
adding lookup files
2021-07-13 13:30:48 -05:00
c3db579480
lookup bug in generate
2021-07-13 11:52:17 -05:00
63d2581343
Merge branch 'develop' into rba_poc
2021-06-30 16:10:23 -04:00
8c150335fd
readding mitre lookup it was a mistake I left in here
2021-06-22 15:56:14 -04:00
6efe49882f
added attacker logic
2021-06-22 14:21:25 -04:00
400d591059
minor
2021-06-21 14:06:25 -05:00
ba2fa59b5e
adding 3 rba examples
2021-06-19 22:15:49 -04:00
6c518294ed
minor update
2021-06-17 21:44:20 -04:00
c1f4cae5b6
working example of risk object as well as threat object with ses annotations
2021-06-17 21:43:50 -04:00
3134df2380
added deprecated label as well as description annotation
2021-06-16 11:59:31 -04:00
59ffaf8c25
adding deprecation to generate
2021-06-16 10:31:30 -04:00
ee7826b0ae
Merge branch 'develop' into deprecation_of_detections
2021-05-18 19:31:53 -04:00
bcd1c5153f
skeleton of deprecation
2021-05-18 18:26:41 -04:00
8d22e9934f
Update generate.py
2021-04-29 12:48:12 +01:00
fbf3edaa11
Update generate.py
2021-04-29 12:39:56 +01:00
581bd1b3a7
Update generate.py
2021-04-29 11:59:38 +01:00
e9e1be755f
Update generate.py
2021-04-29 11:44:25 +01:00
d7cece2f53
Update generate.py
2021-04-29 10:48:01 +01:00
8389cce2c0
Rearranged generate
...
Put all objects in objects dictionary.
Split up the importing, computing and output logic into different functions
2021-04-29 09:48:06 +01:00
c6803f1a88
remove print
2021-04-13 14:40:44 -07:00
4f71b64d2b
fixing merge conflicts
2021-04-12 18:06:42 -04:00
3450f5a6b0
fixing bug with deployment where escu package has notables off by default
2021-04-12 18:00:59 -04:00
3dfb0c502a
removed mustang and replaced with saaws
2021-04-08 13:58:41 -04:00
a7c98107f2
enabled mustang searches by default
2021-04-06 12:23:11 -07:00
fbdcfa96dc
mustang detections enabled
2021-04-06 12:12:20 -07:00
549d9374ea
tagging response tasks
...
adding the 'Splunk Security Analytics for AWS' tag where appropriate
2021-03-31 18:42:17 -04:00
39f22f2b1a
update variable name
...
replacing 'category' for 'product'
2021-03-30 17:14:58 -04:00
b7f69fd895
updating contentctl.py
...
support for the new category variable that allows to create a MUSTAN specific package
2021-03-30 11:07:45 -04:00
c0b95aa075
adding package type support
...
- Updates to generate.py introduce an extra parameter that defines the type of package to be created.
- Tagging analytics stories related to AWS/O365 detections.
2021-03-29 16:27:20 -04:00
2afdf445ce
minor
2021-03-18 16:05:27 -07:00
adc6ec0f87
Branch was auto-updated.
2021-03-10 02:55:05 +00:00
3288eb7571
If there is a story that is only for streaming, and all detections with that story are streaming as well, it will cause an error later in this code
2021-03-05 09:14:13 -05:00
57871e4886
testing
2021-03-01 13:12:18 -08:00
721afd048b
improvements contentctl
2021-02-25 10:06:52 +01:00
702a0bc932
skeleton
2021-02-15 08:25:52 -05:00
eef01502f3
renamed stories
2021-02-08 10:18:57 -05:00
b4c31d718a
fixing minor generate bug, since we added response type action
2021-02-08 10:10:05 -05:00
6c950af9d4
Merge branch 'develop' into TR-380_reuse_type
2021-02-04 21:24:00 -05:00
8bbfbdadb4
remove explicit deployment check for Mustang
2021-02-04 10:57:48 -08:00
a390051bdd
fixing but I hit in generate
2021-02-04 11:22:34 -05:00
8b5aef2b1b
fixing templates to use the ESCU name prefix
2021-02-02 17:58:48 -05:00
782f762059
fixed up generate to use type batch
2021-02-02 17:23:32 -05:00
P4T12ICK