2d4032e7a5
A number of changes to support
...
detection of test.yml files that do
not have a detection .yml file.
The reverse checking was already
in place.
Removed an outdated
and unused Python file
new_arguments.py.
Removed the unused option
detections_file from the
test_config.json - because
detections_list exists, this is
no longer required or usable.
2022-03-23 13:26:00 -07:00
372f83b673
Updating name of a summary.json field
2022-03-23 11:48:43 -07:00
af9e5e991d
Added a pass rate output to
...
the summary.json file AND the
print output to make it easier
to see the pass rate at a glance.
This means we don't have to
calculate it by hand and it's
easier to integrate into our
high-level metrics.
2022-03-23 11:09:19 -07:00
98ec30b49c
Merge branch 'develop' into deprecate_aws_batch_testing
2022-03-22 15:51:32 -04:00
cff7ba417a
cleaning up old CI jobs
2022-03-22 15:37:49 -04:00
b600bc3e8e
Branch was auto-updated.
2022-03-21 04:18:32 -07:00
86cd0e9d8d
Merge branch 'improve_validate' of github.com:splunk/security_content into improve_validate
2022-03-21 09:29:26 +01:00
510a196a0d
Improve validation
2022-03-21 09:27:53 +01:00
a70ca7d827
If a test or detection file is missing, then all of the missing files should be printed and an exception should be thrown. We must not be allowed to continue testing.
2022-03-18 13:56:51 -07:00
e87dca3aa5
Branch was auto-updated.
2022-03-18 07:04:26 -07:00
9a348b9130
Improve validation
2022-03-18 12:49:20 +01:00
a21d83d7d1
Branch was auto-updated.
2022-03-18 00:09:12 -07:00
7e297e06da
Merge branch 'search_len' of github.com:splunk/security_content into search_len
2022-03-17 15:24:54 -07:00
d99e9e58e0
name check only for ESCU
2022-03-17 15:24:40 -07:00
31cef960f4
Branch was auto-updated.
2022-03-17 12:44:45 -07:00
5b51b5d15e
Missing braces around fstring variable
2022-03-17 12:26:35 -07:00
dbd047d93f
Instead of just printing the total numbers of
...
tests, passes, fails, and errors, print out
the files that failed as well.
2022-03-17 12:11:50 -07:00
5f155e4166
SSA add risk_score to package
2022-03-17 16:03:59 +01:00
99829330c1
all the changes again
2022-03-16 13:35:48 -07:00
19a24a6ad6
Replaced PyInquirer with Questionaire
2022-03-16 11:36:08 +01:00
6cb69836e0
Branch was auto-updated.
2022-03-15 09:57:10 -07:00
994e8b51d6
Updated detection testing
2022-03-15 17:45:33 +01:00
d169636e7f
Updated detection testing
2022-03-15 17:34:48 +01:00
459e2d3fd2
Updated detection testing
2022-03-15 15:46:51 +01:00
3a0a6cf4fa
fixed a small bug in detection builder
2022-03-15 11:19:35 +01:00
5dd13ea167
fix broken detections
2022-03-14 15:51:05 +01:00
ae00b4c948
Add pytest as separate CI workflow
2022-03-14 13:24:29 +01:00
eb5609fb3b
Add pytest as separate CI workflow
2022-03-14 13:07:01 +01:00
e6c8254ede
Added automaticc generation of finding report
2022-03-14 12:12:48 +01:00
10c25b2014
Refactored security content
2022-03-10 10:27:29 +01:00
6f0ee68913
Refactored security content
2022-03-09 14:43:09 +01:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
3131db9d8c
merged with develop
2022-03-03 14:18:47 +01:00
68543a8dc1
merged with develop
2022-03-03 13:11:56 +01:00
ded483ddf0
added validation
2022-02-28 14:50:31 +01:00
5b581bc959
added validation
2022-02-28 14:16:23 +01:00
3946110a92
added specs
2022-02-28 12:47:14 +01:00
3cd94faaf9
updated ci
2022-02-25 16:21:08 +01:00
26f835751a
integrated reporting
2022-02-25 15:21:25 +01:00
8cf8fc40ac
reporting integrated
2022-02-24 16:18:56 +01:00
8b32ec772f
new_content integrated
2022-02-24 12:35:20 +01:00
743701d542
docgen ready
2022-02-23 14:46:39 +01:00
bda23e1631
Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content
2022-02-22 18:40:52 +01:00
2cda47990b
doc_gen ready
2022-02-22 18:40:36 +01:00
f906d579d9
Branch was auto-updated.
2022-02-18 14:38:58 -08:00
46e0bb0a01
Added a timeout to the CVESSEARCH_API enrichment in doc_gen. Sometimes, this was causing doc_gen to freeze. Now, when the API is not working or is extremely slow and a request takes longer than 10 seconds, a descriptive error will be thrown and the process will exit with 1
2022-02-18 14:19:57 -08:00
09c54931af
Memoizing/caching a call to CVESSEARCH_API_URL. Gives a SIGNIFICANT speedup in docgen.
2022-02-18 13:36:09 -08:00
9fc009a44d
Removed:
...
SPLUNK_SECURITY_ESSENTIALS
SPLUNK_APP_FOR_AWS
from default app baseline.
They are not required
for testing as they just
provide some dashboards.
2022-02-18 11:17:21 -08:00
382c107298
adding response section to analytic stories conf
2022-02-17 16:02:43 -08:00
ba05264c80
Branch was auto-updated.
2022-02-17 11:42:02 -08:00
pyth0n1c