e7b854b7e6
validate risk score
2021-06-29 13:15:56 -05:00
b817eddb95
small update vlidate
2021-05-18 11:12:00 +02:00
3afbc4432d
ssa testing usage docs
2021-04-26 10:59:51 +02:00
3e44ef77fa
validate check for search length name
2021-04-20 12:49:32 -07:00
7a9f57dbfc
Updated jsonschema validation
2021-03-20 17:22:42 +01:00
70e25e225a
Updated jsonschema validation
2021-03-20 17:18:43 +01:00
a48e0fcdbb
Fixed error handling
2021-03-20 17:09:48 +01:00
43d8947d92
Branch was auto-updated.
2021-03-12 16:49:57 +00:00
020f02bd9a
add check for security_domain
2021-03-11 17:53:27 +01:00
c81fd82c03
WIP
2021-03-10 15:50:26 +01:00
2dc5927495
added logic to check for orphaned tests as well as a initial test schema
2021-03-08 14:24:47 -05:00
721afd048b
improvements contentctl
2021-02-25 10:06:52 +01:00
702a0bc932
skeleton
2021-02-15 08:25:52 -05:00
7615d5ec81
fixing merge conflicts
2021-02-12 12:27:00 -05:00
7cb093cd0b
adding risk score values
2021-02-08 09:46:18 -05:00
bbdd2bd860
add products to responses, added new type response, also new checks for product tag and mitre_attack_id in validate
2021-02-04 22:28:19 -05:00
25a0f1fa56
updated valudate.py to use the new type
2021-02-02 12:54:43 -05:00
df8dbab12d
udpated all bins to include new name
2021-01-26 15:01:49 -05:00
3aa06e82b6
Merge branch 'develop' into mustang_beta
2020-11-10 09:59:18 -08:00
2ecead4232
added additional checks to validate
2020-11-06 18:32:56 -05:00
0cce001a42
merge with develop
2020-10-19 11:19:41 -07:00
4a81866045
adjusted validate to use sub folders
2020-10-07 23:11:11 -04:00
9f3ff7c5e4
Merge branch 'develop' into TR-41_aws_ec2_mods
2020-09-29 16:58:02 -07:00
cc031f1b9e
fixing a mistake
2020-09-25 16:39:29 -04:00
e268e9643f
Need to ignore the filter check for input filters
2020-09-23 11:46:19 -05:00
9f54f90aee
Merge branch 'develop' into TR-41_aws_ec2_mods
2020-09-14 14:12:25 -07:00
637ec487df
risk validation
2020-09-03 11:30:09 -07:00
11db020423
risk validation
2020-09-03 11:09:52 -07:00
0db46f89dc
[TR-82] first cut of validation logic for risk scoring.
2020-09-01 17:55:14 -07:00
e2f786ef0a
Fixed a horrible bug that Patrick introduced in the validate script
2020-08-26 23:42:50 -05:00
9a50a74ee7
bug in generate
2020-05-14 10:00:55 +02:00
cc464c87db
updated content
2020-05-05 12:58:56 +02:00
2ee6da2cda
validate script
2020-04-30 16:56:33 +02:00
909806896e
validate script
2020-04-30 16:52:38 +02:00
442a575e1d
WIP validate script
2020-04-30 15:51:16 +02:00
4217266952
WIP
2020-04-30 12:53:55 +02:00
7cbc9a9ba6
WIP
2020-04-30 10:34:18 +02:00
e610e87ee0
WIP
2020-04-30 10:14:38 +02:00
20c4a18215
moving validate to python3
2019-11-21 20:17:15 -05:00
541b72fd71
merge with develop and testing
2019-11-05 12:22:01 -08:00
af66ed5fe3
Changed json to yml
2019-10-16 16:38:05 +02:00
c9effaf169
Merge branch 'develop' into cloud_cryptominig
2019-10-08 08:40:51 -04:00
9c6c794b81
Merge pull request #215 from splunk/drilldown
...
Added drilldown search and name to the detection spec.
2019-10-08 08:32:49 -04:00
2a4b29e4c4
New investigation macros
...
Updated validate to check for macro and lookup existence in both
baselines and investigation searches
2019-10-07 22:14:12 -05:00
9034599d6f
Added in exception handling to cloud compute activity in new region
...
Added a bunch of lookup manifests
Added a bunch of macro manifests
Updated validate to make sure macros listed in detection search have
a macro manifest
2019-10-07 21:50:13 -05:00
2a8b470241
Added drilldown search and name to the detection spec.
...
Added these fields to the suspicious wevtutil manifest
Updated validate to make sure both entries are there or neither are
Updated generate to output those fields if they are there
2019-10-01 17:31:11 -07:00
1bda6248ea
Added code to validate macros manifest and lookups manifest
...
Lookup manifest validation also checks to make sure either filename or collection is there
If a filename is listed, it makes sure the file exists as well
2019-09-30 16:08:54 -07:00
b82eaa7750
fixing merge conflicts
2019-08-06 17:45:35 -04:00
5836446617
fixed channel in stories, minor tweaks to detections.
...
Also - updated spec to allow validation to pass for UBA detection, as well as updated validation script
2019-08-06 14:58:39 -06:00
bfef6024fe
more tweaks/fixes to manifests - also adjustments to validation script and spec files. Successfully validates with exception of usecase in stories
2019-07-25 14:56:40 -06:00
patel-bhavin