 pyth0n1c
|
2f06facd23
|
Lots of testing changes.... lots of progress. Need to clean up and test entire set of detections properly with sleeps and diagnose how long sleep should be or if there is a way to block while input data is processed entirely.
|
2021-10-11 17:05:28 -07:00 |
|
|
pyth0n1c
|
06a9c0f15e
|
Lots more changes to how we run. Now based off of the splunk/splunk container on docker hub as much as possible. We use ENV arguments to install required apps. Still only at 50% pass rate, so we need more troubleshooting to figure out why.
|
2021-10-11 10:23:42 -07:00 |
|
|
pyth0n1c
|
e0961ad0d3
|
Still some issues when running more than one container in parallel. Might be a management port issue, but needs debugging.
|
2021-09-20 17:21:46 -07:00 |
|
|
pyth0n1c
|
f30a4c6997
|
Re-added rebuild code for full test.
|
2021-09-20 11:05:17 -07:00 |
|
|
pyth0n1c
|
0cd2cd850f
|
Duplicate folder names were clobbering each other. Also commented around initial steps to speed up testing time. We will re use the docker containers that we initially built each time for testing.
|
2021-09-20 11:01:06 -07:00 |
|
|
pyth0n1c
|
ba78e372e2
|
Changed a port back to the original since it's run inside the docker container as part of a playbook
|
2021-09-17 18:12:02 -07:00 |
|
|
pyth0n1c
|
2a3e220249
|
Made the splunk management port dynamic for uploading replay data.
|
2021-09-17 17:51:27 -07:00 |
|
|
pyth0n1c
|
5588eeabe1
|
Fixed ugly multi line comment
|
2021-09-17 17:35:50 -07:00 |
|
|
pyth0n1c
|
94f05e573c
|
Added some error handling so that the show can go on while we debug. Fixed another bad variable naming error
|
2021-09-17 17:33:20 -07:00 |
|
|
pyth0n1c
|
ebb00af725
|
Forgot to declare results_queue before using it.
|
2021-09-17 16:58:14 -07:00 |
|
|
pyth0n1c
|
4d1c456a33
|
Removed some aws calls which should no longer be made
|
2021-09-17 16:49:05 -07:00 |
|
|
pyth0n1c
|
e5c87027c1
|
Lots more changes building out the skeleton of the docker testing framework. Needs testing, breakup into simpler files, documentation, etc. But a good start.
|
2021-09-17 16:45:05 -07:00 |
|
|
pyth0n1c
|
dc8b704332
|
Initial changes and testing for local dockerized detection testing service
|
2021-09-17 15:14:17 -07:00 |
|
|
pyth0n1c
|
7ba36644bf
|
As suggested by semgrep: Replaced a call to os.system with a call to subprocess.call. Fixed csv quoting to QUOTE_ALL in one of the files that was missed.
|
2021-08-12 15:31:36 -07:00 |
|
|
P4T12ICK
|
a91762555e
|
bug fix detection testing
|
2021-07-14 11:45:33 +02:00 |
|
|
P4T12ICK
|
3b02e61c43
|
fix escu stanzas errors
|
2021-07-13 11:43:03 +02:00 |
|
|
P4T12ICK
|
e900cbd2a3
|
fix escu stanzas errors
|
2021-07-13 11:01:22 +02:00 |
|
|
P4T12ICK
|
e21e2a6304
|
bug fix in detection testing
|
2021-07-12 11:21:23 +02:00 |
|
|
P4T12ICK
|
63f857481e
|
bug fix detection testing
|
2021-07-06 13:18:10 +02:00 |
|
|
P4T12ICK
|
f713a7b854
|
Merge branch 'labeled_data_for_ml' into automated_detections_testing_2
|
2021-07-06 11:03:23 +02:00 |
|
|
P4T12ICK
|
4dc8e879c7
|
small change
|
2021-07-06 11:00:33 +02:00 |
|
|
P4T12ICK
|
74214a1339
|
labeled data for ml
|
2021-07-06 10:57:18 +02:00 |
|
|
P4T12ICK
|
432ae1c0c4
|
small bug fix
|
2021-07-02 14:59:44 +02:00 |
|
|
P4T12ICK
|
d58ccc5e0b
|
WIP
|
2021-07-02 14:58:37 +02:00 |
|
|
P4T12ICK
|
d6a3edaa38
|
small change
|
2021-06-21 08:53:48 +02:00 |
|
|
P4T12ICK
|
865a488f45
|
wip
|
2021-06-18 14:43:34 +02:00 |
|
|
P4T12ICK
|
4a1d53b749
|
wip
|
2021-06-18 14:13:07 +02:00 |
|
|
P4T12ICK
|
dfe21c1da8
|
wip labeled data
|
2021-06-18 13:24:50 +02:00 |
|
|
P4T12ICK
|
c90b2093ce
|
wip
|
2021-06-18 09:17:36 +02:00 |
|
|
P4T12ICK
|
9f8dc333b7
|
new detection testing
|
2021-06-15 15:47:24 +02:00 |
|
|
P4T12ICK
|
7f6219d104
|
new detection testing
|
2021-06-14 17:28:05 +02:00 |
|
|
P4T12ICK
|
da67ba271a
|
new detection testing
|
2021-06-14 10:10:10 +02:00 |
|
|
P4T12ICK
|
dd3e2cc21f
|
new detection testing
|
2021-06-14 09:41:40 +02:00 |
|
|
P4T12ICK
|
e7a144bd2d
|
new detection testing
|
2021-06-09 12:50:53 +02:00 |
|
|
P4T12ICK
|
8fe77347ad
|
wip
|
2021-06-09 11:02:10 +02:00 |
|
|
P4T12ICK
|
5c7a311f7f
|
new detection testing
|
2021-06-09 10:36:58 +02:00 |
|
|
P4T12ICK
|
f77eb50c2b
|
new detection testing
|
2021-06-01 13:37:06 +02:00 |
|