cefd9349b1
Ensure that each lookup contains
...
either a filename or a collection
field defined in its yml. Make sure
that is a filename is declared, then
that file actually exists in the
lookups folder. Make sure that
every csv declared in the
lookups folder is actually
used by at least one lookup.
If it is not, then print a
warning but do not cause
a failure.
2023-05-26 16:27:31 -07:00
72792fc2a0
Update to detection tags validator
2023-04-28 14:49:00 +02:00
97a1ec3bd5
bug fix validation
2023-04-28 13:53:52 +02:00
29c841b945
adding a field
2023-04-25 13:30:37 -07:00
d6514a32ad
rebase with develop
2023-04-05 08:41:48 +02:00
449643aa0d
Branch was auto-updated.
2023-03-15 01:37:29 -07:00
cf199e49b9
improvements ssa detections
2023-03-15 09:36:56 +01:00
33f8071c5c
Branch was auto-updated.
2023-03-03 04:28:37 -08:00
2861d04434
merged with ba ocsf work
2023-03-03 13:28:14 +01:00
43c92975d5
Converted SSA detection to OCSF
2023-03-02 08:31:22 +01:00
d115bfd4e0
converted ssa detections to ocsf
2023-02-28 12:00:16 +01:00
768258a237
updates
2023-02-24 14:51:15 +01:00
a5ec4f97ce
updates
2023-02-24 14:06:43 +01:00
f3841eb846
updates for testing
2023-02-24 13:54:13 +01:00
5264515a3d
Remove filename printouts in factory.
...
Add reason why file will not be tested in
GitHub service. This could be the wrong type
or the wrong status.
2023-02-03 15:03:57 -08:00
13ccdc1e16
Add validators to automatically set the
...
deprecated and experimental boolean
fields of a detection. Should these fields
still exist given that there is a status
field? Also added enum to help with
validation.
2023-02-03 14:38:19 -08:00
561c60df26
Attempt at adding proper experimental and
...
manual_test parsing support to
detection_testing.
2023-02-03 11:48:05 -08:00
ffa1210a00
merged with develop
2023-02-02 09:15:59 +01:00
58c6987122
update finding report generation
2023-01-30 14:08:14 +01:00
a1bc51a4e8
ocsf ba
2023-01-26 16:12:24 +01:00
eec8968a85
Added sigma detections into dev folder
2023-01-20 13:24:15 +01:00
08bf8f82ed
Add drilldown searches
2023-01-09 12:46:04 +01:00
b352a1418e
add new deployment functionality
2023-01-04 13:37:44 +01:00
5ae53c9368
Migrated all detections to v4
2023-01-03 13:42:10 +01:00
524766e532
updated detections
2022-12-22 17:18:19 +01:00
0b97fd423e
fixed bug TR-2687
2022-12-01 14:34:23 +01:00
76f4eb5377
Branch was auto-updated.
2022-11-01 07:20:42 -07:00
43faff68da
updated given feedback
2022-10-13 13:58:10 -04:00
d3fe59a15c
adding data_schema tag
2022-10-12 18:50:39 -04:00
e033d17e23
add validation for missing detection tags cis20 and nist
2022-10-04 16:51:23 -07:00
a794604853
Branch was auto-updated.
2022-09-30 10:37:00 -07:00
fe36f9f5bc
Re-Added and improved duplicate ID checking
...
for ESCU and BA detections.
2022-09-29 14:35:21 -07:00
9657101fc3
Fixes for more robust catching of duplicate ids.
2022-09-29 13:46:52 -07:00
f171cd0089
Branch was auto-updated.
2022-09-29 11:20:08 -07:00
c02e8a9314
Branch was auto-updated.
2022-09-29 11:20:02 -07:00
bd85a2be5a
Branch was auto-updated.
2022-09-29 11:16:36 -07:00
42655d9b0d
Branch was auto-updated.
2022-09-29 11:16:32 -07:00
64c354f963
Branch was auto-updated.
2022-09-29 11:16:31 -07:00
52214ba9ee
Updated validation error message for
...
nist category. Updated the regex used
to check CIS20 numbers so that it does
not allow invalid numbers/lines to
pass validation and provided a more
verbose error message.
2022-09-28 12:45:53 -07:00
63822221ba
Added validation to NIST tags
2022-09-28 12:19:49 -07:00
bb84ef752b
One more change to substitution string
2022-09-15 16:30:32 -07:00
d84aba8af0
Fixed another issue with the filename.
2022-09-15 13:28:36 -07:00
af16d25ca2
Fixed file name find and replace issue
2022-09-15 13:27:48 -07:00
6fe804f8ed
changed one more location where the path to escu is hardcoded.
2022-09-15 13:18:00 -07:00
a4d143d4f1
better app name valdiation message
2022-09-15 12:58:52 -07:00
b5bfc29fb5
Basic validation on the app_name
2022-09-15 12:57:12 -07:00
444026f32b
Another small modification to replace
...
static ESCU name with the name of
your app
2022-09-15 12:53:29 -07:00
49f0d7ac0c
Branch was auto-updated.
2022-09-15 11:33:13 -07:00
2ab2821d0d
Branch was auto-updated.
2022-09-15 11:33:09 -07:00
124fd0d465
Fix search string to be more broad
2022-09-15 11:22:05 -07:00
pyth0n1c