b4cf2a0865
Branch was auto-updated.
2022-05-23 13:01:47 -04:00
93b8f5c288
Branch was auto-updated.
2022-05-23 13:01:43 -04:00
2ef39dd6c4
Branch was auto-updated.
2022-05-20 18:08:55 -04:00
47dd6ac2ef
Branch was auto-updated.
2022-05-20 18:08:53 -04:00
36ca496458
Branch was auto-updated.
2022-05-20 18:08:50 -04:00
e12b16512a
Fixing tests
2022-05-20 12:19:21 -05:00
c16ccc1eec
Branch was auto-updated.
2022-05-19 21:21:59 -04:00
c74091184f
Branch was auto-updated.
2022-05-19 21:21:54 -04:00
1268a07a85
Branch was auto-updated.
2022-05-19 21:21:52 -04:00
441ddacfb3
adding insider threat, fixing minor display bug
2022-05-19 21:19:35 -04:00
f6790d12c3
Updated the initialize output path and
...
documentation in contentctl help.
2022-05-18 01:50:49 -07:00
ef6ef78281
Fixed output dir naming and path for
...
init.
2022-05-17 23:28:52 -07:00
e3459eaeb3
Updates to contentctl, deploy,
...
enums, and initialize to support
building the app scaffold and
removing all the content that needs
to be removed.
2022-05-17 23:13:53 -07:00
e47765f09f
Fixing error introduced when sorting steps
...
in initialize.
2022-05-17 20:01:45 -07:00
b17b224a66
Added removal of baselines during initialize.
2022-05-17 19:59:40 -07:00
a9b118a6ce
Deployment using acs is working. It is currently difficult to tell whether the acs command has failed since even an ACS failure gives a return code of 0. I have raised this issue with the ACS team and am waiting on a reponse and guidance.
2022-05-17 16:15:45 -07:00
4b8d366d08
Branch was auto-updated.
2022-05-17 18:32:22 -04:00
d63698c1a5
Branch was auto-updated.
2022-05-17 18:32:19 -04:00
3621262f6b
Branch was auto-updated.
2022-05-17 18:32:14 -04:00
c9552fcf89
Updates to deploy towards working with the ACS application for deployment of apps to Splunk Cloud using Automated Private App Vetting / APAV
2022-05-17 15:26:34 -07:00
76c039f6a4
Branch was auto-updated.
2022-05-17 18:10:43 -04:00
b1c09736a6
Branch was auto-updated.
2022-05-17 18:10:40 -04:00
8f52d443bb
Branch was auto-updated.
2022-05-17 18:10:38 -04:00
8b197cbe3f
Branch was auto-updated.
2022-05-17 18:10:36 -04:00
6c1e1fea73
remove line
2022-05-17 14:52:16 -07:00
004710a350
Renamed add generation of app configuration file as well as manifest. Successfully built, then manually deployed an app to a Splunk Cloud instance using the ACS command line. The next steps will be to integrate the command line functionality into this app via the deploy option.
2022-05-17 14:36:29 -07:00
7952f316a7
new line:
2022-05-17 14:35:26 -07:00
f1a52746c1
ughh
2022-05-17 14:32:03 -07:00
7bc9788866
new line
2022-05-17 14:10:12 -07:00
2c655f52ca
test
2022-05-17 14:07:03 -07:00
84d0f1fd7f
new test files for code testing
2022-05-17 13:55:00 -07:00
0651c540de
bumping layer version to 4.3
2022-05-17 16:50:56 -04:00
123600d2f2
Added generation of an app.manifest file based on command line arguments.
2022-05-17 13:49:29 -07:00
6d6feb9508
Name conflict on init... fixed
2022-05-17 12:47:54 -07:00
e751727b5b
Changed all of the clean terminology to init. This is in preparation for distributing the tool standalone in a separate repo as opposed to a part of the security_content repo.
2022-05-17 12:45:03 -07:00
34ae999e98
new tranforms test file
2022-05-16 15:17:12 -07:00
9de437237f
adding collections to transforms
2022-05-16 13:36:07 -07:00
93590d76f5
adding hyperlink to detection page
2022-05-16 12:41:48 -07:00
938dd6824b
Branch was auto-updated.
2022-05-16 15:09:39 -04:00
0591cf421e
Branch was auto-updated.
2022-05-16 15:09:33 -04:00
61df5c96ef
Delete cobalt_strike_named_pipes.yml
2022-05-16 13:04:05 -06:00
86391a5843
HaagCat
2022-05-16 12:59:46 -06:00
38d32c3341
Branch was auto-updated.
2022-05-16 13:06:58 -04:00
751736f5e3
Better error handling for inspect
2022-05-13 13:53:49 -04:00
3ef1542000
Added another folder to clean.
...
Updated command line arguments
for build. Improved implmentation of
inspect.
2022-05-13 12:58:53 -04:00
83c6448e6f
Fixing some paths and command line arguments for the contentctl build option.
2022-05-13 11:42:01 -04:00
29894c6d3e
Fixed broken 'clean' paths for multiple content folders.
2022-05-13 09:31:54 -04:00
926317f5c4
Updated status print information around the
...
creation of App Enrichment, CVE, and
link validator caches. Made sure to close
CVE and App Enrichment caches after
they are opened and accessed instead of
relying on Python to close them for us
when their reference count is zero.
Also tested to ensure that if a previous
validate and generate succeeded, it
can be run again with no internet access!
This is perfect not just for performance
reasons, but offline/disconnected
environments.
2022-05-13 07:51:31 -04:00
fa9179fd9a
Added the shelve/shelf functionality to the CVE Enrichment Cache as well. This also replaced plain dict functionality and simplified the code.
2022-05-11 13:51:00 -07:00
bf27f47d1f
Moved from using a pickled dictionary, loaded and written manually, to shelve.Shelf for Reference cache. The interface is nearly identical, but it results in much cleaner code. We will likely do the same in the next commit for CVE cache.
2022-05-11 12:00:47 -07:00
pyth0n1c