a23eb85f4f
Removed printout from python code. Committed detection in dist with status validation.
2023-10-02 16:45:06 -07:00
95f836d4f6
Support for 'status: validation' to be used ONLY for BA Detections. If this is used with a non-ba detection, an exception will be generated.
2023-10-02 16:42:39 -07:00
1b26692ee2
converted detections to SPL2
2023-08-08 14:54:08 +02:00
7ad6a04f8f
Branch was auto-updated.
2023-07-11 13:03:14 -07:00
1243ee3e59
Update error message to be more descriptive for newline validation.
2023-07-11 12:57:22 -07:00
7ade494863
check for howto
2023-07-11 14:16:33 -05:00
a9dc524ad9
Make changes to lookup validation to
...
ensure that the structure of .csv files,
along with their quoting and number of
fields, is correct.
2023-06-27 12:07:55 -07:00
76fa47ef07
Branch was auto-updated.
2023-06-23 10:46:03 -07:00
bcee80029d
new line check
2023-06-22 16:26:43 -07:00
ec0770604e
Add content changer
2023-06-20 18:56:36 +02:00
cefd9349b1
Ensure that each lookup contains
...
either a filename or a collection
field defined in its yml. Make sure
that is a filename is declared, then
that file actually exists in the
lookups folder. Make sure that
every csv declared in the
lookups folder is actually
used by at least one lookup.
If it is not, then print a
warning but do not cause
a failure.
2023-05-26 16:27:31 -07:00
72792fc2a0
Update to detection tags validator
2023-04-28 14:49:00 +02:00
97a1ec3bd5
bug fix validation
2023-04-28 13:53:52 +02:00
29c841b945
adding a field
2023-04-25 13:30:37 -07:00
d6514a32ad
rebase with develop
2023-04-05 08:41:48 +02:00
449643aa0d
Branch was auto-updated.
2023-03-15 01:37:29 -07:00
cf199e49b9
improvements ssa detections
2023-03-15 09:36:56 +01:00
33f8071c5c
Branch was auto-updated.
2023-03-03 04:28:37 -08:00
2861d04434
merged with ba ocsf work
2023-03-03 13:28:14 +01:00
43c92975d5
Converted SSA detection to OCSF
2023-03-02 08:31:22 +01:00
d115bfd4e0
converted ssa detections to ocsf
2023-02-28 12:00:16 +01:00
768258a237
updates
2023-02-24 14:51:15 +01:00
a5ec4f97ce
updates
2023-02-24 14:06:43 +01:00
f3841eb846
updates for testing
2023-02-24 13:54:13 +01:00
5264515a3d
Remove filename printouts in factory.
...
Add reason why file will not be tested in
GitHub service. This could be the wrong type
or the wrong status.
2023-02-03 15:03:57 -08:00
13ccdc1e16
Add validators to automatically set the
...
deprecated and experimental boolean
fields of a detection. Should these fields
still exist given that there is a status
field? Also added enum to help with
validation.
2023-02-03 14:38:19 -08:00
561c60df26
Attempt at adding proper experimental and
...
manual_test parsing support to
detection_testing.
2023-02-03 11:48:05 -08:00
ffa1210a00
merged with develop
2023-02-02 09:15:59 +01:00
58c6987122
update finding report generation
2023-01-30 14:08:14 +01:00
a1bc51a4e8
ocsf ba
2023-01-26 16:12:24 +01:00
eec8968a85
Added sigma detections into dev folder
2023-01-20 13:24:15 +01:00
08bf8f82ed
Add drilldown searches
2023-01-09 12:46:04 +01:00
b352a1418e
add new deployment functionality
2023-01-04 13:37:44 +01:00
5ae53c9368
Migrated all detections to v4
2023-01-03 13:42:10 +01:00
524766e532
updated detections
2022-12-22 17:18:19 +01:00
0b97fd423e
fixed bug TR-2687
2022-12-01 14:34:23 +01:00
76f4eb5377
Branch was auto-updated.
2022-11-01 07:20:42 -07:00
43faff68da
updated given feedback
2022-10-13 13:58:10 -04:00
d3fe59a15c
adding data_schema tag
2022-10-12 18:50:39 -04:00
e033d17e23
add validation for missing detection tags cis20 and nist
2022-10-04 16:51:23 -07:00
a794604853
Branch was auto-updated.
2022-09-30 10:37:00 -07:00
fe36f9f5bc
Re-Added and improved duplicate ID checking
...
for ESCU and BA detections.
2022-09-29 14:35:21 -07:00
9657101fc3
Fixes for more robust catching of duplicate ids.
2022-09-29 13:46:52 -07:00
f171cd0089
Branch was auto-updated.
2022-09-29 11:20:08 -07:00
c02e8a9314
Branch was auto-updated.
2022-09-29 11:20:02 -07:00
bd85a2be5a
Branch was auto-updated.
2022-09-29 11:16:36 -07:00
42655d9b0d
Branch was auto-updated.
2022-09-29 11:16:32 -07:00
64c354f963
Branch was auto-updated.
2022-09-29 11:16:31 -07:00
52214ba9ee
Updated validation error message for
...
nist category. Updated the regex used
to check CIS20 numbers so that it does
not allow invalid numbers/lines to
pass validation and provided a more
verbose error message.
2022-09-28 12:45:53 -07:00
63822221ba
Added validation to NIST tags
2022-09-28 12:19:49 -07:00
pyth0n1c