Commit Graph

16351 Commits

Author SHA1 Message Date
pyth0n1c 97e63010fb Branch was auto-updated. 2022-07-19 10:04:04 -07:00
Bhavin Patel 3f64bc5bf0 Merge pull request #2294 from splunk/issue_2254_remove_cloud_datamodel_detections
fixing issue 2254 removing deprecated datamodel detections
2022-07-19 10:03:40 -07:00
d1vious 3c62e835df removing 2022-07-19 12:59:03 -04:00
pyth0n1c 4d4cad48e6 Branch was auto-updated. 2022-07-19 09:57:29 -07:00
Bhavin Patel 3b689d2ba2 Merge pull request #2047 from splunk/4104allday
Converted all 4104 Analytics to XML log Format
2022-07-19 09:56:47 -07:00
pyth0n1c 2183543236 Branch was auto-updated. 2022-07-12 17:52:46 -07:00
pyth0n1c fa2c0a6a40 Branch was auto-updated. 2022-07-12 17:52:37 -07:00
Bhavin Patel 3bd256120f Merge pull request #2242 from splunk/azorult-sfx-package
azorult-sfx-package
2022-07-12 17:52:18 -07:00
pyth0n1c 20ab9f27ce Moved id collision checking into
the Utils module since it will
be used by the Factory and the
BA Factory.  Updated a duplicate
UUID to mitigate the collision
issue raised on GitHub.
2022-07-12 15:06:35 -07:00
pyth0n1c 9b21029bea Added logic for checking to
see if there are duplicate ids
for any/all kinds of content that
have an ID associated with it.
2022-07-12 14:26:34 -07:00
pyth0n1c 3841520566 Branch was auto-updated. 2022-07-12 12:33:21 -07:00
pyth0n1c 5369103dd6 Branch was auto-updated. 2022-07-12 12:33:18 -07:00
Bhavin Patel debf5ddda6 Merge pull request #2275 from splunk/fix-join-issue2
fix-join-issue2
2022-07-12 12:32:55 -07:00
pyth0n1c 85d8b50be9 Branch was auto-updated. 2022-07-12 12:14:23 -07:00
pyth0n1c 0a9404d737 Branch was auto-updated. 2022-07-12 12:14:20 -07:00
pyth0n1c b9cb41d763 Branch was auto-updated. 2022-07-12 12:14:18 -07:00
Bhavin Patel 3da5f6c6c8 Merge pull request #2284 from splunk/resolve_local_gha_delta
Resolve local gha delta
2022-07-12 12:13:55 -07:00
pyth0n1c f8ac5616a0 Reverting the workflow and all of the detections that were touched to their original versions. 2022-07-12 10:08:07 -07:00
pyth0n1c ae4208c489 Branch was auto-updated. 2022-07-12 10:01:17 -07:00
pyth0n1c 025477394a Branch was auto-updated. 2022-07-12 10:01:12 -07:00
pyth0n1c ed5bb40174 Branch was auto-updated. 2022-07-12 10:01:07 -07:00
P4T12ICK 32c29963ac Merge pull request #2283 from splunk/add_gitpod
Add gitpod config
2022-07-12 19:00:41 +02:00
P4T12ICK ed713c24da Add gitpod config 2022-07-12 16:52:25 +00:00
pyth0n1c bf127dc0c0 Updating authorize.conf to allow us to delete from internal indexes. Reordering how delete works. 2022-07-12 08:39:08 -07:00
pyth0n1c d8458b882e Quick hack to get everything
tested in GHA using this verison
of the CI/CD code.
2022-07-11 14:31:02 -07:00
pyth0n1c 71b7c5d45c Forgot to specify the host that data
was being uploaded from.  This means
that delete does not work as expected,
causing a large number of tests to fail
and slower searches.
2022-07-11 14:06:01 -07:00
pyth0n1c ccbe770e21 Modify all tests that fail in gha
but pass in local testing for easier
troubleshooting.
2022-07-11 12:53:51 -07:00
pyth0n1c 1e6f2d79b0 Don't modify the original search variable.
This can cause problems if we need to run
the search again.
2022-07-11 12:48:25 -07:00
pyth0n1c d461a5b5ed Branch was auto-updated. 2022-07-07 17:12:29 -07:00
pyth0n1c b970026483 Branch was auto-updated. 2022-07-07 17:12:26 -07:00
pyth0n1c 9a139e1cb9 Branch was auto-updated. 2022-07-07 17:12:20 -07:00
pyth0n1c 8f0e5be32d Merge pull request #2279 from splunk/retry_failed_detections_in_cicd
Small changes to CI/CD detection testing system. We merge these in now so that we can examine the results of the nightly scheduled run.
2022-07-07 17:11:56 -07:00
pyth0n1c b1ba36517e Updated wait time
and fixed typo in print
statement.
2022-07-07 17:09:51 -07:00
pyth0n1c d2ecec653f Branch was auto-updated. 2022-07-07 17:08:07 -07:00
pyth0n1c edba7b08d1 Branch was auto-updated. 2022-07-07 17:08:02 -07:00
pyth0n1c 6722d936f8 Branch was auto-updated. 2022-07-07 17:08:00 -07:00
pyth0n1c 4bae19f854 Merge pull request #2277 from splunk/contentctl_inmemory_cache_and_bugfix
Minor changes that we want to be in effect for tonight's CI/CD Scheduled Run.  These changes have been tested locally and look good.  If there are any issues, we can roll back this PR.
2022-07-07 17:07:40 -07:00
pyth0n1c 81324ddb00 A number of detections are passing locally
but failing in CI/CD.  I believe this is because
they are not being given enough time to finish
their data ingest completely.  If a search fails,
wait some time and run it a few more times to
see if it will complete.
2022-07-07 15:58:46 -07:00
pyth0n1c f2b7f155eb Faster container startup when launching
a single container. Same wait time
between containers when launching
multiple containers.  This gets us
to startup much faster for the most
common testing case, a single
container.
2022-07-07 15:30:24 -07:00
pyth0n1c 8ed9372401 On CVESearch API failure, added a
brief sleep to allow the API to
begin working again before trying
to resolve it again.
2022-07-07 14:40:39 -07:00
pyth0n1c 80af56d397 Fixing the rare case where enrichment fails
due to CVESearch API failure, causing the
entire workflow to fail.  Now, we will retry
enrichment up to a total of 3 times. This should
virtually eliminate all CVE Enrichment failures.
If they do still occur, we will receive a
descriptive message indicating why there was
a failure instead of the cryptic message
that we were getting before.
2022-07-07 14:33:57 -07:00
pyth0n1c e8299b4726 Branch was auto-updated. 2022-07-07 09:47:25 -07:00
pyth0n1c 4aff29e922 Branch was auto-updated. 2022-07-07 09:47:20 -07:00
pyth0n1c d68dadb7ab Branch was auto-updated. 2022-07-07 09:47:17 -07:00
mvelazco 236ea67d30 Merge pull request #2270 from splunk/TR-2210_Edit_Windows_PowerView_Kerberos_Service_Ticket_Request
Edit windows_powerview_kerberos_service_ticket_request detection
2022-07-07 12:47:00 -04:00
tccontre 10aa2d0a0a Update office_product_writing_cab_or_inf.yml 2022-07-07 17:55:57 +02:00
tccontre cb7523dfd9 fix-join-issue2 2022-07-07 17:46:24 +02:00
pyth0n1c d8a24be09a Branch was auto-updated. 2022-07-07 08:12:36 -07:00
pyth0n1c 1f4af38d5e Branch was auto-updated. 2022-07-07 08:12:33 -07:00
pyth0n1c 39a18f02d9 Branch was auto-updated. 2022-07-07 08:12:29 -07:00