Commit Graph

1478 Commits

Author SHA1 Message Date
pyth0n1c b24394affd Push a new github_actions test config file 2023-05-15 13:54:53 -07:00
pyth0n1c 4b04df1ff8 Updated all app baselines in validate_args 2023-05-15 13:52:12 -07:00
pyth0n1c 9e535bb5f0 Update baseline to include
suricata ta.  TA required 
for testing new detections.
Also, remove some 
duplicates apps from the 
baseline.
2023-05-15 12:49:18 -07:00
srv-rr-gh-researchbt 6c35f820ca Branch was auto-updated. 2023-05-08 08:36:30 -07:00
P4T12ICK 92d73aae24 improvements srs detections 2023-05-08 15:34:46 +02:00
P4T12ICK 43180a41bd bug fix srs detections 2023-05-08 10:56:12 +02:00
srv-rr-gh-researchbt b954ccf537 Branch was auto-updated. 2023-05-02 15:02:44 -07:00
patel-bhavin e51757ca9f conflicts 2023-05-02 14:56:38 -07:00
P4T12ICK 72792fc2a0 Update to detection tags validator 2023-04-28 14:49:00 +02:00
P4T12ICK 97a1ec3bd5 bug fix validation 2023-04-28 13:53:52 +02:00
patel-bhavin 29c841b945 adding a field 2023-04-25 13:30:37 -07:00
patel-bhavin 932b49ccfd fixes to validate 2023-04-17 16:06:37 -07:00
patel-bhavin fc34672ca4 updates to ymls 2023-04-17 15:23:53 -07:00
patel-bhavin 4a9ce12739 adding risk=other to all configs 2023-04-17 15:00:26 -07:00
pyth0n1c 3754611943 Fix a number of experimental and
deprecated detections so that
they do not raise error when run
out of the box.
2023-04-11 16:27:40 -07:00
pyth0n1c 66eb63e06c Fixing how smoketest is passed
to detection wrapper
2023-04-11 12:49:49 -07:00
pyth0n1c 94a7845f9c Add experimental support for smoketest.
That means running all detections
without replaying data or checking
correctness.
2023-04-11 12:48:49 -07:00
P4T12ICK 6c0b883df8 update reporting 2023-04-05 14:53:09 +02:00
P4T12ICK d6514a32ad rebase with develop 2023-04-05 08:41:48 +02:00
srv-rr-gh-researchbt 1738be22b7 Branch was auto-updated. 2023-03-30 23:39:21 -07:00
P4T12ICK d3f883427d updated srs detections 2023-03-31 08:38:45 +02:00
srv-rr-gh-researchbt 4ad9288052 Branch was auto-updated. 2023-03-30 01:31:04 -07:00
P4T12ICK a7394535c6 updated detections 2023-03-30 10:30:26 +02:00
srv-rr-gh-researchbt c134c49e8c Branch was auto-updated. 2023-03-27 02:05:34 -07:00
P4T12ICK a322f0119a updated srs detections 2023-03-27 11:04:52 +02:00
srv-rr-gh-researchbt bdb8ae4855 Branch was auto-updated. 2023-03-23 02:45:23 -07:00
P4T12ICK 69c9c7083a merged with develop 2023-03-23 10:45:01 +01:00
srv-rr-gh-researchbt 0720332039 Branch was auto-updated. 2023-03-20 01:19:06 -07:00
P4T12ICK db3709827e updated ssa detections 2023-03-20 09:18:29 +01:00
srv-rr-gh-researchbt 1233209de8 Branch was auto-updated. 2023-03-17 05:23:37 -07:00
P4T12ICK 0956ec8da1 add customer_uid to detection report 2023-03-17 13:22:55 +01:00
srv-rr-gh-researchbt ab28004b7e Branch was auto-updated. 2023-03-16 01:45:49 -07:00
P4T12ICK 3641d0cff0 merged with develop 2023-03-16 09:45:09 +01:00
P4T12ICK 153b2d44ae merged with develop 2023-03-16 09:44:35 +01:00
srv-rr-gh-researchbt faf877bd73 Branch was auto-updated. 2023-03-15 12:55:25 -07:00
P4T12ICK 5316ece6e0 improvements ssa detections 2023-03-15 20:54:59 +01:00
srv-rr-gh-researchbt 449643aa0d Branch was auto-updated. 2023-03-15 01:37:29 -07:00
P4T12ICK cf199e49b9 improvements ssa detections 2023-03-15 09:36:56 +01:00
srv-rr-gh-researchbt e4f20a958a Branch was auto-updated. 2023-03-07 02:27:52 -08:00
P4T12ICK 517ab37092 improved sigma converter 2023-03-07 11:27:12 +01:00
Bhavin Patel 07d1fc4a28 Merge branch 'develop' into TR_2410_Domain_Controller_Attacks 2023-03-06 10:19:45 -08:00
srv-rr-gh-researchbt 4b9933816e Branch was auto-updated. 2023-03-06 02:27:58 -08:00
P4T12ICK 684cad0ff9 update sigma ba conversion 2023-03-06 11:26:51 +01:00
pyth0n1c 2c87b92e01 Updated a few more paths for apps 2023-03-03 11:04:43 -08:00
pyth0n1c 12315feb53 Update the baseline in validate_args and test_config_github_actions to use the latest versions of all apps. Also include replay fix for windows ta data ingest via hec and upload 2023-03-03 10:23:03 -08:00
srv-rr-gh-researchbt 33f8071c5c Branch was auto-updated. 2023-03-03 04:28:37 -08:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
srv-rr-gh-researchbt 32569d2931 Branch was auto-updated. 2023-03-03 03:40:52 -08:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK bbabdeb3d8 fixed small bug 2023-03-03 12:19:41 +01:00