pyth0n1c 0846bb6d0b Putting download attack data into a 'temp dir' and removing attack data as soon as it's used. We need to do this when we're testing on CI/CD, otherwise we will run out of space. Should keep/remove attack data be an option instead of forced?

2021-10-22 16:42:53 -07:00

..

ansible

Changed a port back to the original since it's run inside the docker container as part of a playbook

2021-09-17 18:12:02 -07:00

modules

Putting download attack data into a 'temp dir' and removing attack data as soon as it's used. We need to do this when we're testing on CI/CD, otherwise we will run out of space. Should keep/remove attack data be an option instead of forced?

2021-10-22 16:42:53 -07:00

datamodels.conf.tar

Lots of testing changes.... lots of progress. Need to clean up and test entire set of detections properly with sleeps and diagnose how long sleep should be or if there is a way to block while input data is processed entirely.

2021-10-11 17:05:28 -07:00

detection_testing_execution.py

Putting download attack data into a 'temp dir' and removing attack data as soon as it's used. We need to do this when we're testing on CI/CD, otherwise we will run out of space. Should keep/remove attack data be an option instead of forced?

2021-10-22 16:42:53 -07:00

Dockerfile

bug fix in detection testing

2021-07-12 11:21:23 +02:00

indexes.conf.tar

Lots more changes to how we run. Now based off of the splunk/splunk container on docker hub as much as possible. We use ENV arguments to install required apps. Still only at 50% pass rate, so we need more troubleshooting to figure out why.

2021-10-11 10:23:42 -07:00

requirements.txt

Initial changes and testing for local dockerized detection testing service

2021-09-17 15:14:17 -07:00