713 Commits

Author SHA1 Message Date
Lou Stella c857f761bd fix of generate 2021-09-23 13:33:56 -05:00
Lou Stella c3ed16c6cd Revert "testing investigation alternative"
This reverts commit d209fcdf97.
2021-09-23 13:17:50 -05:00
Lou Stella d209fcdf97 testing investigation alternative 2021-09-23 12:22:29 -05:00
Bhavin Patel fe9b9ae95a Branch was auto-updated. 2021-09-20 02:42:55 -07:00
Lou Stella 9119157f07 Update to test 2021-09-17 14:07:08 -05:00
Lou Stella c7c7583ec8 Added demo playbook for development 2021-09-16 10:21:27 -05:00
P4T12ICK a3cc73a53d add new alert action 2021-09-13 13:48:46 +02:00
P4T12ICK 8cae9d0130 add new alert action 2021-09-13 12:56:16 +02:00
P4T12ICK 079349c90a change enrichment 2021-09-09 13:01:13 +02:00
P4T12ICK 13f072766b change custom command 2021-09-09 09:57:47 +02:00
P4T12ICK f60ebe6f66 updated detections 2021-09-06 15:00:02 +02:00
P4T12ICK 890b46cb22 Merge branch 'develop' into dev_sec_ops_package 2021-09-03 11:35:31 +02:00
patel-bhavin 3d80496f79 if victim then risk 2021-08-31 10:49:39 -07:00
P4T12ICK 9a16c0fc26 update generate 2021-08-30 17:03:34 +02:00
P4T12ICK 2b72209896 update generate 2021-08-30 16:50:39 +02:00
P4T12ICK 489dc38e15 solve merge conflicts 2021-08-30 09:21:57 +02:00
pyth0n1c 34f7199ac8 Removed commented-out autoescape setting and removed unused import 2021-08-27 11:26:31 -07:00
pyth0n1c b869caefe4 Removed autoescape=True from jinja2 environment calls which caused errors in generating outputs from templates. Semgrep error does not apply to us since we are not generating html. Added #nosemgrep to each call to prevent semgrep from giving an error. 2021-08-27 11:05:04 -07:00
github-actions[bot] 445ca303cc Branch was auto-updated. 2021-08-27 16:07:19 +00:00
divious1 33df34d50c remove baseline code 2021-08-27 12:05:28 -04:00
divious1 faa645fd14 added new dm for risk 2021-08-27 12:03:52 -04:00
P4T12ICK 98f98b0ccb bug fix 2021-08-27 16:51:26 +02:00
P4T12ICK ca54947ede fix merge conflict 2021-08-27 16:35:44 +02:00
github-actions[bot] 03285ed8aa Branch was auto-updated. 2021-08-27 14:31:08 +00:00
P4T12ICK 2385fdf544 fixed generate 2021-08-27 16:06:35 +02:00
P4T12ICK c284310f05 updated generate to support collect 2021-08-27 15:18:45 +02:00
patel-bhavin 57a8034586 removed net_traffic 2021-08-26 11:42:28 -07:00
patel-bhavin 6391ec32aa remove type from story and delete baseline 2021-08-26 11:19:24 -07:00
patel-bhavin 4f409f850c minor 2021-08-26 10:51:42 -07:00
P4T12ICK 8509ecb3f9 support for devsecops pacckage 2021-08-26 14:59:59 +02:00
patel-bhavin 742b597137 tst 2021-08-24 14:02:43 -07:00
pyth0n1c 5b0b552498 Pull and merge from upstream, mostly version number updates, timestamps, and some other detection related updates and new detections. 2021-08-23 10:48:42 -07:00
patel-bhavin 19fad3da58 fix for type 2021-08-18 09:13:13 -07:00
pyth0n1c 169a192f2b Removed baselines from the pretty_yaml.py script. 2021-08-17 13:13:23 -07:00
pyth0n1c fa7ac7bfbf Removed a line from pretty_yaml that was causing an error because the format of the file changed. 2021-08-17 13:10:27 -07:00
pyth0n1c 33640f3b7d Added missing autoescape to new code in generate.py 2021-08-17 11:48:32 -07:00
pyth0n1c b3f7e10005 Apparently I forgot to save the files after changing them, so that changes actually weren't committed. Let's try again... 2021-08-17 11:36:24 -07:00
pyth0n1c 0b3569d714 Massive merge from upstream. Should be good now. 2021-08-17 11:31:24 -07:00
pyth0n1c 9fb490a816 Intentionally ignore one of the pieces of feedback from semgrep (not validating TLS Certificate) because it is a service running locally. 2021-08-12 15:57:02 -07:00
pyth0n1c 7ba36644bf As suggested by semgrep: Replaced a call to os.system with a call to subprocess.call. Fixed csv quoting to QUOTE_ALL in one of the files that was missed. 2021-08-12 15:31:36 -07:00
pyth0n1c c0107fde5e Fixed other semgrep recommendations - for certain uses of urllib (getting content from a dynamic URI/URL), use the python requests library instead. 2021-08-12 15:07:27 -07:00
pyth0n1c 54bde203c3 Changed QUOTE_MINIMAL to QUOTE_ALL in Python CSV Writer calls in response to semgrep recommendations. 2021-08-12 14:04:26 -07:00
pyth0n1c 6f938863e7 validate caught a syntax error in one of the python files. 2021-08-12 13:48:32 -07:00
pyth0n1c c1d144e0d5 auto_escape fix with either not picked up by semgrep because it was changing a global jinja2 configuration or because it didn't actually fix what we thought it would. Setting the global default is probably the best idea since if another function call doesn't explicitly set it, then it won't be set. However, we leave it like this for now. 2021-08-12 13:43:54 -07:00
pyth0n1c 88b2a47a4c Converted humvee md5 check to sha256 check for increased integrity in response to semgrep recommendation. 2021-08-12 13:35:18 -07:00
pyth0n1c b6b5f9317f Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results. 2021-08-12 13:26:29 -07:00
P4T12ICK 6607ca9508 Merge branch 'develop' into analytic_types 2021-08-10 11:02:18 +02:00
pyth0n1c 4270461242 Was not printing out the report correctly. 2021-08-09 18:10:23 -07:00
pyth0n1c 07bc3664a3 Merged all the new changes into my personal repo. 2021-08-09 17:04:05 -07:00
peter-cg 23b22e95d4 Event delimiting bugfix and some event upload error checking 2021-08-03 14:53:11 -05:00