7 Commits

Author	SHA1	Message	Date
David Dorsey	90b2a8c487	Added search_window macros to searches	2019-10-17 09:28:41 -07:00
David Dorsey	61c3f18ece	Updated generate to output for ASX ... Fixed macros	2019-10-16 20:54:13 -07:00
David Dorsey	13af78c6d8	Added macro for the time window	2019-10-16 18:42:02 -07:00
Patrick Bareiss	af66ed5fe3	Changed json to yml	2019-10-16 16:38:05 +02:00
David Dorsey	2a4b29e4c4	New investigation macros ... Updated validate to check for macro and lookup existence in both baselines and investigation searches	2019-10-07 22:14:12 -05:00
David Dorsey	9034599d6f	Added in exception handling to cloud compute activity in new region ... Added a bunch of lookup manifests Added a bunch of macro manifests Updated validate to make sure macros listed in detection search have a macro manifest	2019-10-07 21:50:13 -05:00
David Dorsey	3d25c40bf7	Updated macro definition in detections, investigations, and baselines to just be a list ... Broke out macros definition into it's own manifest Created macro manifests for all of current macros that we ship Created lookup file manifest Created lookup file manifests for all current lookup files that we ship	2019-09-30 13:53:25 -07:00