124fd0d465
Fix search string to be more broad
2022-09-15 11:22:05 -07:00
50a2d18163
fixing missing test
2022-09-14 19:20:57 -04:00
e027f13add
removing risk objects from correlation searches on savedsearchesconf to avoid circular risk loop
2022-09-14 18:33:15 -04:00
940598b6c2
pass CI testing
2022-09-13 16:52:39 -04:00
64908593d4
adds RBA to correlation rule titles
2022-09-13 13:11:51 -04:00
157a434a53
Merge pull request #2335 from yaleman/patch-1
...
Grammar correction in documentation template
2022-08-23 15:02:11 -05:00
729574b236
grammar correction in template
2022-08-18 13:32:34 +10:00
bc331db06c
Print error instead of bailing out on enrichment failure
2022-08-16 11:04:24 -05:00
4f6c1f20d3
Fixed template files that were modified in error
2022-08-12 13:15:41 -07:00
a17b44daf7
Remove lookups from copied ESCU directory.
2022-08-12 12:09:17 -07:00
f632813720
Changes to a number of files to make them suitable for use in an app by a different name.
2022-08-11 16:54:05 -07:00
f8e3fb6d4a
code to update templates files that must change for an app with different name to work
2022-08-11 15:14:17 -07:00
2c0888a090
Merge branch 'develop' into Clean_and_Deploy
2022-08-11 11:12:49 -07:00
97bc95f773
bug fix
2022-08-04 14:55:21 +02:00
1ee1b76968
Branch was auto-updated.
2022-08-04 00:42:05 -07:00
0fb17dd617
bug fix
2022-08-04 09:28:56 +02:00
939493337d
adding research site links
2022-08-03 17:34:32 -04:00
87a8bc0442
Merged develop into this branch and resolved merge conflicts.
2022-08-03 06:47:22 -07:00
9dac698c46
solve merge conflicts
2022-08-01 11:39:02 +02:00
bcb943d150
fix tests
2022-08-01 11:31:23 +02:00
b21d754be3
attack_data_helper
2022-07-20 10:54:59 +02:00
72c1153383
Branch was auto-updated.
2022-07-19 12:40:38 -07:00
236f0ce71f
Branch was auto-updated.
2022-07-19 12:36:12 -07:00
bf4c565f79
Branch was auto-updated.
2022-07-19 12:36:08 -07:00
d4779f44ad
Branch was auto-updated.
2022-07-19 11:16:25 -07:00
03ccafe319
Branch was auto-updated.
2022-07-19 11:16:21 -07:00
d04c5e49f5
Branch was auto-updated.
2022-07-19 11:16:17 -07:00
ad975d46c2
Updating a few more links in test files from Fireeye
...
to Mandiant to match the source files.
2022-07-19 10:14:21 -07:00
7554992aa0
Updates to reduce duplication in the check_references code. Other updates to fix a number of issues introduced which cause Pytests to fail
2022-07-18 15:58:12 -07:00
b71e570891
Update cobalt_strike_named_pipes.yml
...
Updated to Hunting
2022-07-15 10:16:14 -06:00
1cdfb1916f
Fixed paths in content generation to use the input path instead of hardcoded relative paths.
2022-07-15 08:02:17 -07:00
97ad9beaa2
Fixed the pathing issue for reporting.
2022-07-15 06:44:25 -07:00
20ab9f27ce
Moved id collision checking into
...
the Utils module since it will
be used by the Factory and the
BA Factory. Updated a duplicate
UUID to mitigate the collision
issue raised on GitHub.
2022-07-12 15:06:35 -07:00
9b21029bea
Added logic for checking to
...
see if there are duplicate ids
for any/all kinds of content that
have an ID associated with it.
2022-07-12 14:26:34 -07:00
0c41f0a2f8
Branch was auto-updated.
2022-07-07 17:08:03 -07:00
8ed9372401
On CVESearch API failure, added a
...
brief sleep to allow the API to
begin working again before trying
to resolve it again.
2022-07-07 14:40:39 -07:00
80af56d397
Fixing the rare case where enrichment fails
...
due to CVESearch API failure, causing the
entire workflow to fail. Now, we will retry
enrichment up to a total of 3 times. This should
virtually eliminate all CVE Enrichment failures.
If they do still occur, we will receive a
descriptive message indicating why there was
a failure instead of the cryptic message
that we were getting before.
2022-07-07 14:33:57 -07:00
52abbc9408
Changing enrichment failures from
...
error prints to error prints AND
failures.
2022-06-30 15:47:29 -07:00
cb1ba3c884
Added slightly more verbose printing
...
to track high-level progress in CICD.
2022-06-30 11:12:50 -07:00
45736b5ed7
Updated CI/CD Workflow and
...
python code in contentctl so that
progress update are not output
when running in CICD environment.
Outputting all of this data
causes thousands of lines of output
logs to be generated in CICD.
This info is only relevant when
running locally in a tty.
2022-06-30 10:52:00 -07:00
8b7f7d20eb
in-memory optimization for fetching CVE enrichment and app enrichment, even if skip_enrichment or cached_and_offline are disabled.
2022-06-29 16:53:17 -07:00
5eda0215e4
Branch was auto-updated.
2022-06-29 12:59:29 -07:00
1403223486
small bug fix
2022-06-28 20:12:46 +02:00
4d613e3aad
default
2022-06-27 16:18:47 -07:00
047eafe9fa
pytest
2022-06-27 16:18:00 -07:00
bb3a73b0dd
array
2022-06-27 15:26:45 -07:00
5c1e44eb32
adding more technologieas
2022-06-27 13:49:44 -07:00
d5ab2bd9c8
CI
2022-06-24 14:42:57 -07:00
690021590a
add MS windows
2022-06-24 14:30:58 -07:00
e92699f315
st
2022-06-24 14:27:27 -07:00
pyth0n1c