patel-bhavin
483ee87950
minor
2021-07-28 16:33:55 -07:00
patel-bhavin
4864774de7
testing risk refactor
2021-07-28 16:30:28 -07:00
Bhavin Patel
a452677ee1
Merge branch 'develop' into attacker_tools
2021-07-13 14:24:01 -05:00
patel-bhavin
4f44401252
adding lookup files
2021-07-13 13:30:48 -05:00
patel-bhavin
c3db579480
lookup bug in generate
2021-07-13 11:52:17 -05:00
divious1
63d2581343
Merge branch 'develop' into rba_poc
2021-06-30 16:10:23 -04:00
divious1
8c150335fd
readding mitre lookup it was a mistake I left in here
2021-06-22 15:56:14 -04:00
divious1
6efe49882f
added attacker logic
2021-06-22 14:21:25 -04:00
patel-bhavin
400d591059
minor
2021-06-21 14:06:25 -05:00
divious1
ba2fa59b5e
adding 3 rba examples
2021-06-19 22:15:49 -04:00
divious1
6c518294ed
minor update
2021-06-17 21:44:20 -04:00
divious1
c1f4cae5b6
working example of risk object as well as threat object with ses annotations
2021-06-17 21:43:50 -04:00
divious1
3134df2380
added deprecated label as well as description annotation
2021-06-16 11:59:31 -04:00
divious1
59ffaf8c25
adding deprecation to generate
2021-06-16 10:31:30 -04:00
divious1
ee7826b0ae
Merge branch 'develop' into deprecation_of_detections
2021-05-18 19:31:53 -04:00
divious1
bcd1c5153f
skeleton of deprecation
2021-05-18 18:26:41 -04:00
Thomas Nicholson
8d22e9934f
Update generate.py
2021-04-29 12:48:12 +01:00
Thomas Nicholson
fbf3edaa11
Update generate.py
2021-04-29 12:39:56 +01:00
Thomas Nicholson
581bd1b3a7
Update generate.py
2021-04-29 11:59:38 +01:00
Thomas Nicholson
e9e1be755f
Update generate.py
2021-04-29 11:44:25 +01:00
Thomas Nicholson
d7cece2f53
Update generate.py
2021-04-29 10:48:01 +01:00
Thomas Nicholson
8389cce2c0
Rearranged generate
...
Put all objects in objects dictionary.
Split up the importing, computing and output logic into different functions
2021-04-29 09:48:06 +01:00
bpatel
c6803f1a88
remove print
2021-04-13 14:40:44 -07:00
divious1
4f71b64d2b
fixing merge conflicts
2021-04-12 18:06:42 -04:00
divious1
3450f5a6b0
fixing bug with deployment where escu package has notables off by default
2021-04-12 18:00:59 -04:00
divious1
3dfb0c502a
removed mustang and replaced with saaws
2021-04-08 13:58:41 -04:00
bpatel
a7c98107f2
enabled mustang searches by default
2021-04-06 12:23:11 -07:00
bpatel
fbdcfa96dc
mustang detections enabled
2021-04-06 12:12:20 -07:00
mvelazco
549d9374ea
tagging response tasks
...
adding the 'Splunk Security Analytics for AWS' tag where appropriate
2021-03-31 18:42:17 -04:00
mvelazco
39f22f2b1a
update variable name
...
replacing 'category' for 'product'
2021-03-30 17:14:58 -04:00
mvelazco
b7f69fd895
updating contentctl.py
...
support for the new category variable that allows to create a MUSTAN specific package
2021-03-30 11:07:45 -04:00
mvelazco
c0b95aa075
adding package type support
...
- Updates to generate.py introduce an extra parameter that defines the type of package to be created.
- Tagging analytics stories related to AWS/O365 detections.
2021-03-29 16:27:20 -04:00
bpatel
2afdf445ce
minor
2021-03-18 16:05:27 -07:00
github-actions[bot]
adc6ec0f87
Branch was auto-updated.
2021-03-10 02:55:05 +00:00
Michael Hart
3288eb7571
If there is a story that is only for streaming, and all detections with that story are streaming as well, it will cause an error later in this code
2021-03-05 09:14:13 -05:00
bpatel
57871e4886
testing
2021-03-01 13:12:18 -08:00
P4T12ICK
721afd048b
improvements contentctl
2021-02-25 10:06:52 +01:00
divious1
702a0bc932
skeleton
2021-02-15 08:25:52 -05:00
divious1
eef01502f3
renamed stories
2021-02-08 10:18:57 -05:00
divious1
b4c31d718a
fixing minor generate bug, since we added response type action
2021-02-08 10:10:05 -05:00
divious1
6c950af9d4
Merge branch 'develop' into TR-380_reuse_type
2021-02-04 21:24:00 -05:00
bpatel
8bbfbdadb4
remove explicit deployment check for Mustang
2021-02-04 10:57:48 -08:00
divious1
a390051bdd
fixing but I hit in generate
2021-02-04 11:22:34 -05:00
divious1
8b5aef2b1b
fixing templates to use the ESCU name prefix
2021-02-02 17:58:48 -05:00
divious1
782f762059
fixed up generate to use type batch
2021-02-02 17:23:32 -05:00
github-actions[bot]
a301fb1037
Branch was auto-updated.
2021-01-27 09:02:14 +00:00
P4T12ICK
a4a07eab95
Merge branch 'develop' into issue_1101
2021-01-27 09:03:25 +01:00
github-actions[bot]
aafb5088b4
Branch was auto-updated.
2021-01-27 01:51:16 +00:00
bpatel
c67d577df2
whole lot of changes
2021-01-26 17:43:32 -08:00
bpatel
7d5322a812
more updates and testing
2021-01-26 16:34:30 -08:00