Commit Graph

693 Commits

Author SHA1 Message Date
patel-bhavin 3d80496f79 if victim then risk 2021-08-31 10:49:39 -07:00
pyth0n1c 34f7199ac8 Removed commented-out autoescape setting and removed unused import 2021-08-27 11:26:31 -07:00
pyth0n1c b869caefe4 Removed autoescape=True from jinja2 environment calls which caused errors in generating outputs from templates. Semgrep error does not apply to us since we are not generating html. Added #nosemgrep to each call to prevent semgrep from giving an error. 2021-08-27 11:05:04 -07:00
divious1 33df34d50c remove baseline code 2021-08-27 12:05:28 -04:00
divious1 faa645fd14 added new dm for risk 2021-08-27 12:03:52 -04:00
github-actions[bot] 03285ed8aa Branch was auto-updated. 2021-08-27 14:31:08 +00:00
P4T12ICK 2385fdf544 fixed generate 2021-08-27 16:06:35 +02:00
patel-bhavin 57a8034586 removed net_traffic 2021-08-26 11:42:28 -07:00
patel-bhavin 6391ec32aa remove type from story and delete baseline 2021-08-26 11:19:24 -07:00
patel-bhavin 4f409f850c minor 2021-08-26 10:51:42 -07:00
patel-bhavin 742b597137 tst 2021-08-24 14:02:43 -07:00
pyth0n1c 5b0b552498 Pull and merge from upstream, mostly version number updates, timestamps, and some other detection related updates and new detections. 2021-08-23 10:48:42 -07:00
patel-bhavin 19fad3da58 fix for type 2021-08-18 09:13:13 -07:00
pyth0n1c 169a192f2b Removed baselines from the pretty_yaml.py script. 2021-08-17 13:13:23 -07:00
pyth0n1c fa7ac7bfbf Removed a line from pretty_yaml that was causing an error because the format of the file changed. 2021-08-17 13:10:27 -07:00
pyth0n1c 33640f3b7d Added missing autoescape to new code in generate.py 2021-08-17 11:48:32 -07:00
pyth0n1c b3f7e10005 Apparently I forgot to save the files after changing them, so that changes actually weren't committed. Let's try again... 2021-08-17 11:36:24 -07:00
pyth0n1c 0b3569d714 Massive merge from upstream. Should be good now. 2021-08-17 11:31:24 -07:00
pyth0n1c 9fb490a816 Intentionally ignore one of the pieces of feedback from semgrep (not validating TLS Certificate) because it is a service running locally. 2021-08-12 15:57:02 -07:00
pyth0n1c 7ba36644bf As suggested by semgrep: Replaced a call to os.system with a call to subprocess.call. Fixed csv quoting to QUOTE_ALL in one of the files that was missed. 2021-08-12 15:31:36 -07:00
pyth0n1c c0107fde5e Fixed other semgrep recommendations - for certain uses of urllib (getting content from a dynamic URI/URL), use the python requests library instead. 2021-08-12 15:07:27 -07:00
pyth0n1c 54bde203c3 Changed QUOTE_MINIMAL to QUOTE_ALL in Python CSV Writer calls in response to semgrep recommendations. 2021-08-12 14:04:26 -07:00
pyth0n1c 6f938863e7 validate caught a syntax error in one of the python files. 2021-08-12 13:48:32 -07:00
pyth0n1c c1d144e0d5 auto_escape fix with either not picked up by semgrep because it was changing a global jinja2 configuration or because it didn't actually fix what we thought it would. Setting the global default is probably the best idea since if another function call doesn't explicitly set it, then it won't be set. However, we leave it like this for now. 2021-08-12 13:43:54 -07:00
pyth0n1c 88b2a47a4c Converted humvee md5 check to sha256 check for increased integrity in response to semgrep recommendation. 2021-08-12 13:35:18 -07:00
pyth0n1c b6b5f9317f Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results. 2021-08-12 13:26:29 -07:00
P4T12ICK 6607ca9508 Merge branch 'develop' into analytic_types 2021-08-10 11:02:18 +02:00
pyth0n1c 4270461242 Was not printing out the report correctly. 2021-08-09 18:10:23 -07:00
pyth0n1c 07bc3664a3 Merged all the new changes into my personal repo. 2021-08-09 17:04:05 -07:00
peter-cg 23b22e95d4 Event delimiting bugfix and some event upload error checking 2021-08-03 14:53:11 -05:00
pyth0n1c a69b9812cf Testing path to appinspect targets, properly quoting
tests in bash shell
2021-07-29 13:40:15 -07:00
github-actions[bot] cde8a9154a Branch was auto-updated. 2021-07-29 20:32:08 +00:00
pyth0n1c 8a4a411a4f Bad path for appinspect submission and minor change
to appinspect.sh script for package_name vs
package_path
2021-07-29 13:21:41 -07:00
pyth0n1c a3b3342140 Changes the paths used in appinspect.sh to match
Github layout and move away from CircleCI specific
paths
2021-07-29 13:06:44 -07:00
patel-bhavin 483ee87950 minor 2021-07-28 16:33:55 -07:00
patel-bhavin 4864774de7 testing risk refactor 2021-07-28 16:30:28 -07:00
peter-cg 61c6d8b3d9 Adding SSA compile_check util 2021-07-28 17:22:48 -05:00
peter-cg a38fef77ce Increase execution time limit 2021-07-28 16:40:50 -05:00
peter-cg c15909c35d Perform basic tests if no detections/tests have changed but CI code has changed 2021-07-28 14:47:42 -05:00
peter-cg 4fd8e9ec42 Move from stage to gstage 2021-07-28 14:20:08 -05:00
peter-cg 914a04abb2 Adding token validation 2021-07-28 14:20:08 -05:00
peter-cg 1a68258954 Uploading all data at once 2021-07-28 14:16:13 -05:00
peter-cg 089906ba48 Cleaning up some error reporting and adding activation-wait-loop 2021-07-28 14:16:13 -05:00
P4T12ICK c4ce0e8590 converted response_task to investigations 2021-07-26 13:49:50 +02:00
P4T12ICK 686b0b5ca4 converted response_task to investigations 2021-07-26 13:39:17 +02:00
P4T12ICK c69b8c1053 response tasks into investigations 2021-07-23 19:34:01 +02:00
P4T12ICK 618e2fbf21 test circleci 2021-07-21 15:32:25 +02:00
P4T12ICK 21f8ef2990 updated stories 2021-07-21 12:41:06 +02:00
P4T12ICK 80be6029de updated stories 2021-07-21 12:26:15 +02:00
P4T12ICK 76bbbe4609 add deployments to baselines 2021-07-21 11:31:40 +02:00