6fd0f7724f
selectively lowercase eval'd fields
2023-10-05 16:50:34 -05:00
f512d5dab8
convert sigma values to lowercase
2023-10-05 08:16:26 -07:00
c668947873
Add lower to evals
2023-10-04 18:06:19 -05:00
fcb174d163
bug fix
2023-08-18 13:34:14 +02:00
da3d925adf
converted detections to SPL2
2023-08-09 14:11:24 +02:00
01aec84d9a
converted detections to SPL2
2023-08-09 11:42:41 +02:00
1b26692ee2
converted detections to SPL2
2023-08-08 14:54:08 +02:00
6c35f820ca
Branch was auto-updated.
2023-05-08 08:36:30 -07:00
92d73aae24
improvements srs detections
2023-05-08 15:34:46 +02:00
43180a41bd
bug fix srs detections
2023-05-08 10:56:12 +02:00
97a1ec3bd5
bug fix validation
2023-04-28 13:53:52 +02:00
932b49ccfd
fixes to validate
2023-04-17 16:06:37 -07:00
fc34672ca4
updates to ymls
2023-04-17 15:23:53 -07:00
4a9ce12739
adding risk=other to all configs
2023-04-17 15:00:26 -07:00
a7394535c6
updated detections
2023-03-30 10:30:26 +02:00
a322f0119a
updated srs detections
2023-03-27 11:04:52 +02:00
3641d0cff0
merged with develop
2023-03-16 09:45:09 +01:00
153b2d44ae
merged with develop
2023-03-16 09:44:35 +01:00
5316ece6e0
improvements ssa detections
2023-03-15 20:54:59 +01:00
517ab37092
improved sigma converter
2023-03-07 11:27:12 +01:00
684cad0ff9
update sigma ba conversion
2023-03-06 11:26:51 +01:00
2861d04434
merged with ba ocsf work
2023-03-03 13:28:14 +01:00
78909f6429
merged with develop
2023-03-03 12:40:16 +01:00
43c92975d5
Converted SSA detection to OCSF
2023-03-02 08:31:22 +01:00
d115bfd4e0
converted ssa detections to ocsf
2023-02-28 12:00:16 +01:00
768258a237
updates
2023-02-24 14:51:15 +01:00
f3841eb846
updates for testing
2023-02-24 13:54:13 +01:00
edb111c9b9
update
2023-02-17 17:53:51 +01:00
8cc5b11302
update
2023-02-17 17:29:50 +01:00
ecf25b566f
updates
2023-02-17 17:21:55 +01:00
5ced9e1a1e
update
2023-02-17 12:03:33 +01:00
b12011f0d7
remove observables from annnotations
2023-02-13 11:01:35 -08:00
58c6987122
update finding report generation
2023-01-30 14:08:14 +01:00
a1bc51a4e8
ocsf ba
2023-01-26 16:12:24 +01:00
b352a1418e
add new deployment functionality
2023-01-04 13:37:44 +01:00
5ae53c9368
Migrated all detections to v4
2023-01-03 13:42:10 +01:00
524766e532
updated detections
2022-12-22 17:18:19 +01:00
b0543d4749
updated
2022-12-01 14:49:32 +01:00
0b97fd423e
fixed bug TR-2687
2022-12-01 14:34:23 +01:00
7056578d21
Fix generate API. Also, return nonzero error
...
code when contentctl action raises an
uncaught error
2022-10-13 10:08:12 -07:00
23b140e8e6
A few more changes in the story builder to get references working properly.
2022-09-15 17:18:50 -07:00
c8a7c61b74
Changes to apss the name of the app to the story builder, since it is required for generate.
2022-09-15 16:26:34 -07:00
bc331db06c
Print error instead of bailing out on enrichment failure
2022-08-16 11:04:24 -05:00
236f0ce71f
Branch was auto-updated.
2022-07-19 12:36:12 -07:00
1cdfb1916f
Fixed paths in content generation to use the input path instead of hardcoded relative paths.
2022-07-15 08:02:17 -07:00
0c41f0a2f8
Branch was auto-updated.
2022-07-07 17:08:03 -07:00
8ed9372401
On CVESearch API failure, added a
...
brief sleep to allow the API to
begin working again before trying
to resolve it again.
2022-07-07 14:40:39 -07:00
80af56d397
Fixing the rare case where enrichment fails
...
due to CVESearch API failure, causing the
entire workflow to fail. Now, we will retry
enrichment up to a total of 3 times. This should
virtually eliminate all CVE Enrichment failures.
If they do still occur, we will receive a
descriptive message indicating why there was
a failure instead of the cryptic message
that we were getting before.
2022-07-07 14:33:57 -07:00
52abbc9408
Changing enrichment failures from
...
error prints to error prints AND
failures.
2022-06-30 15:47:29 -07:00
45736b5ed7
Updated CI/CD Workflow and
...
python code in contentctl so that
progress update are not output
when running in CICD environment.
Outputting all of this data
causes thousands of lines of output
logs to be generated in CICD.
This info is only relevant when
running locally in a tty.
2022-06-30 10:52:00 -07:00
ljstella