4b04df1ff8
Updated all app baselines in validate_args
2023-05-15 13:52:12 -07:00
9e535bb5f0
Update baseline to include
...
suricata ta. TA required
for testing new detections.
Also, remove some
duplicates apps from the
baseline.
2023-05-15 12:49:18 -07:00
94a7845f9c
Add experimental support for smoketest.
...
That means running all detections
without replaying data or checking
correctness.
2023-04-11 12:48:49 -07:00
07d1fc4a28
Merge branch 'develop' into TR_2410_Domain_Controller_Attacks
2023-03-06 10:19:45 -08:00
2c87b92e01
Updated a few more paths for apps
2023-03-03 11:04:43 -08:00
12315feb53
Update the baseline in validate_args and test_config_github_actions to use the latest versions of all apps. Also include replay fix for windows ta data ingest via hec and upload
2023-03-03 10:23:03 -08:00
55850fe25e
adding custom app
2023-02-22 13:28:41 -05:00
9f0394613d
updating microsoft cloud services app metadata
2023-01-26 11:13:28 -05:00
0117d03428
fixing wrong URL
2022-11-15 11:15:49 -08:00
feb1c94d11
add crowdstrike fdr to baseline
2022-11-15 11:11:08 -08:00
bdaf3ebcf9
updating amazon S3 url
2022-10-17 12:11:19 -04:00
cd70fb50e7
adding gcp configs
2022-10-12 18:09:41 -07:00
b0c3232991
adding microsoft cloud services ta
2022-08-22 17:38:49 -04:00
93cf4d1d3f
Merge branch 'develop' into 20220715_app_baseline
2022-07-19 12:57:52 -07:00
9a3302512a
Update Office 365 AddOn to 4.0
2022-07-15 09:13:10 -07:00
ea70270940
Update CIM and MS Sysmon as well
2022-07-15 09:04:21 -07:00
e993ff1dce
Updating baseline to latest apps as of
...
20220715. Apps have already been
uploaded to S3.
2022-07-15 08:48:32 -07:00
d5d0868005
merge from develop
2022-06-21 14:53:25 -07:00
26f6bbfc92
Adding the URL_TOOLBOX app to
...
the application baseline.
2022-06-21 14:29:11 -07:00
5762b4e373
Updated the app baseline as well as
...
the python code for generating the
default config. Also updated the
print behavior for when files are
downloaded.
App baseline is now current, and
files are hosted on S3, as
of 06/21/2022.
2022-06-21 13:53:26 -07:00
8ca9ac7b57
adding urltoolbox and spl updates
2022-06-21 12:05:52 -07:00
ecc896bd11
Forgot to include updates to the the valdiate_args file as well.
2022-05-27 14:56:02 -07:00
a5f9241650
Added Palo Alto TA in support of CRITICAL CVE 2022-1388 Detection.
2022-05-10 10:31:16 -07:00
6804803c8b
Add application folder to tests & detections
2022-03-28 12:30:57 -05:00
2d4032e7a5
A number of changes to support
...
detection of test.yml files that do
not have a detection .yml file.
The reverse checking was already
in place.
Removed an outdated
and unused Python file
new_arguments.py.
Removed the unused option
detections_file from the
test_config.json - because
detections_list exists, this is
no longer required or usable.
2022-03-23 13:26:00 -07:00
cff7ba417a
cleaning up old CI jobs
2022-03-22 15:37:49 -04:00
pyth0n1c