patel-bhavin
|
3d80496f79
|
if victim then risk
|
2021-08-31 10:49:39 -07:00 |
|
pyth0n1c
|
34f7199ac8
|
Removed commented-out autoescape setting and removed unused import
|
2021-08-27 11:26:31 -07:00 |
|
pyth0n1c
|
b869caefe4
|
Removed autoescape=True from jinja2 environment calls which caused errors in generating outputs from templates. Semgrep error does not apply to us since we are not generating html. Added #nosemgrep to each call to prevent semgrep from giving an error.
|
2021-08-27 11:05:04 -07:00 |
|
divious1
|
33df34d50c
|
remove baseline code
|
2021-08-27 12:05:28 -04:00 |
|
divious1
|
faa645fd14
|
added new dm for risk
|
2021-08-27 12:03:52 -04:00 |
|
github-actions[bot]
|
03285ed8aa
|
Branch was auto-updated.
|
2021-08-27 14:31:08 +00:00 |
|
P4T12ICK
|
2385fdf544
|
fixed generate
|
2021-08-27 16:06:35 +02:00 |
|
patel-bhavin
|
57a8034586
|
removed net_traffic
|
2021-08-26 11:42:28 -07:00 |
|
patel-bhavin
|
6391ec32aa
|
remove type from story and delete baseline
|
2021-08-26 11:19:24 -07:00 |
|
patel-bhavin
|
4f409f850c
|
minor
|
2021-08-26 10:51:42 -07:00 |
|
patel-bhavin
|
742b597137
|
tst
|
2021-08-24 14:02:43 -07:00 |
|
pyth0n1c
|
5b0b552498
|
Pull and merge from upstream, mostly version number updates, timestamps, and some other detection related updates and new detections.
|
2021-08-23 10:48:42 -07:00 |
|
patel-bhavin
|
19fad3da58
|
fix for type
|
2021-08-18 09:13:13 -07:00 |
|
pyth0n1c
|
169a192f2b
|
Removed baselines from the pretty_yaml.py script.
|
2021-08-17 13:13:23 -07:00 |
|
pyth0n1c
|
fa7ac7bfbf
|
Removed a line from pretty_yaml that was causing an error because the format of the file changed.
|
2021-08-17 13:10:27 -07:00 |
|
pyth0n1c
|
33640f3b7d
|
Added missing autoescape to new code in generate.py
|
2021-08-17 11:48:32 -07:00 |
|
pyth0n1c
|
b3f7e10005
|
Apparently I forgot to save the files after changing them, so that changes actually weren't committed. Let's try again...
|
2021-08-17 11:36:24 -07:00 |
|
pyth0n1c
|
0b3569d714
|
Massive merge from upstream. Should be good now.
|
2021-08-17 11:31:24 -07:00 |
|
pyth0n1c
|
9fb490a816
|
Intentionally ignore one of the pieces of feedback from semgrep (not validating TLS Certificate) because it is a service running locally.
|
2021-08-12 15:57:02 -07:00 |
|
pyth0n1c
|
7ba36644bf
|
As suggested by semgrep: Replaced a call to os.system with a call to subprocess.call. Fixed csv quoting to QUOTE_ALL in one of the files that was missed.
|
2021-08-12 15:31:36 -07:00 |
|
pyth0n1c
|
c0107fde5e
|
Fixed other semgrep recommendations - for certain uses of urllib (getting content from a dynamic URI/URL), use the python requests library instead.
|
2021-08-12 15:07:27 -07:00 |
|
pyth0n1c
|
54bde203c3
|
Changed QUOTE_MINIMAL to QUOTE_ALL in Python CSV Writer calls in response to semgrep recommendations.
|
2021-08-12 14:04:26 -07:00 |
|
pyth0n1c
|
6f938863e7
|
validate caught a syntax error in one of the python files.
|
2021-08-12 13:48:32 -07:00 |
|
pyth0n1c
|
c1d144e0d5
|
auto_escape fix with either not picked up by semgrep because it was changing a global jinja2 configuration or because it didn't actually fix what we thought it would. Setting the global default is probably the best idea since if another function call doesn't explicitly set it, then it won't be set. However, we leave it like this for now.
|
2021-08-12 13:43:54 -07:00 |
|
pyth0n1c
|
88b2a47a4c
|
Converted humvee md5 check to sha256 check for increased integrity in response to semgrep recommendation.
|
2021-08-12 13:35:18 -07:00 |
|
pyth0n1c
|
b6b5f9317f
|
Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results.
|
2021-08-12 13:26:29 -07:00 |
|
P4T12ICK
|
6607ca9508
|
Merge branch 'develop' into analytic_types
|
2021-08-10 11:02:18 +02:00 |
|
pyth0n1c
|
4270461242
|
Was not printing out the report correctly.
|
2021-08-09 18:10:23 -07:00 |
|
pyth0n1c
|
07bc3664a3
|
Merged all the new changes into my personal repo.
|
2021-08-09 17:04:05 -07:00 |
|
peter-cg
|
23b22e95d4
|
Event delimiting bugfix and some event upload error checking
|
2021-08-03 14:53:11 -05:00 |
|
pyth0n1c
|
a69b9812cf
|
Testing path to appinspect targets, properly quoting
tests in bash shell
|
2021-07-29 13:40:15 -07:00 |
|
github-actions[bot]
|
cde8a9154a
|
Branch was auto-updated.
|
2021-07-29 20:32:08 +00:00 |
|
pyth0n1c
|
8a4a411a4f
|
Bad path for appinspect submission and minor change
to appinspect.sh script for package_name vs
package_path
|
2021-07-29 13:21:41 -07:00 |
|
pyth0n1c
|
a3b3342140
|
Changes the paths used in appinspect.sh to match
Github layout and move away from CircleCI specific
paths
|
2021-07-29 13:06:44 -07:00 |
|
patel-bhavin
|
483ee87950
|
minor
|
2021-07-28 16:33:55 -07:00 |
|
patel-bhavin
|
4864774de7
|
testing risk refactor
|
2021-07-28 16:30:28 -07:00 |
|
peter-cg
|
61c6d8b3d9
|
Adding SSA compile_check util
|
2021-07-28 17:22:48 -05:00 |
|
peter-cg
|
a38fef77ce
|
Increase execution time limit
|
2021-07-28 16:40:50 -05:00 |
|
peter-cg
|
c15909c35d
|
Perform basic tests if no detections/tests have changed but CI code has changed
|
2021-07-28 14:47:42 -05:00 |
|
peter-cg
|
4fd8e9ec42
|
Move from stage to gstage
|
2021-07-28 14:20:08 -05:00 |
|
peter-cg
|
914a04abb2
|
Adding token validation
|
2021-07-28 14:20:08 -05:00 |
|
peter-cg
|
1a68258954
|
Uploading all data at once
|
2021-07-28 14:16:13 -05:00 |
|
peter-cg
|
089906ba48
|
Cleaning up some error reporting and adding activation-wait-loop
|
2021-07-28 14:16:13 -05:00 |
|
P4T12ICK
|
c4ce0e8590
|
converted response_task to investigations
|
2021-07-26 13:49:50 +02:00 |
|
P4T12ICK
|
686b0b5ca4
|
converted response_task to investigations
|
2021-07-26 13:39:17 +02:00 |
|
P4T12ICK
|
c69b8c1053
|
response tasks into investigations
|
2021-07-23 19:34:01 +02:00 |
|
P4T12ICK
|
618e2fbf21
|
test circleci
|
2021-07-21 15:32:25 +02:00 |
|
P4T12ICK
|
21f8ef2990
|
updated stories
|
2021-07-21 12:41:06 +02:00 |
|
P4T12ICK
|
80be6029de
|
updated stories
|
2021-07-21 12:26:15 +02:00 |
|
P4T12ICK
|
76bbbe4609
|
add deployments to baselines
|
2021-07-21 11:31:40 +02:00 |
|