Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Tanium threat response connector 2 #1693

Merged
merged 53 commits into from
Jul 22, 2024
Merged

Tanium threat response connector 2 #1693

merged 53 commits into from
Jul 22, 2024

Commits on Oct 27, 2023

  1. CP4S-39527 Initial Translation Code - Draft

    @DerekRushton
    DerekRushton committed Oct 27, 2023
    Configuration menu
    Copy the full SHA
    603fb68 View commit details
    Browse the repository at this point in the history

  2. Tanium Threat Response

    @DerekRushton
    DerekRushton committed Oct 27, 2023
    Configuration menu
    Copy the full SHA
    2d41003 View commit details
    Browse the repository at this point in the history

Commits on Nov 16, 2023

  1. Fix Azure log analytics results translation. (#1612) 

    Updating azure log analytics review comments.
1. Added transformer for converting int to float for latitude.
2.Updated TimestampConversion transformer to handle without milliseconds and added mappings for first and last observed.
3. Updated transformer to handle ConfidenceScore value is 'nan'.
    @thangaraj-ramesh @DerekRushton
    thangaraj-ramesh authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    6518434 View commit details
    Browse the repository at this point in the history

  2. Bump aioboto3 from 11.3.1 to 12.0.0 in /stix_shifter (#1611) 

    Bumps [aioboto3](https://github.com/terrycain/aioboto3) from 11.3.1 to 12.0.0.
- [Changelog](https://github.com/terrycain/aioboto3/blob/main/CHANGELOG.rst)
- [Commits](terricain/aioboto3@v11.3.1...v12.0.0)

---
updated-dependencies:
- dependency-name: aioboto3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @DerekRushton
    dependabot[bot] authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    2da1bb8 View commit details
    Browse the repository at this point in the history

  3. Bump pyopenssl from 23.2.0 to 23.3.0 in /stix_shifter (#1610) 

    Bumps [pyopenssl](https://github.com/pyca/pyopenssl) from 23.2.0 to 23.3.0.
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@23.2.0...23.3.0)

---
updated-dependencies:
- dependency-name: pyopenssl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @DerekRushton
    dependabot[bot] authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    65b57d0 View commit details
    Browse the repository at this point in the history

  4. table of mapping script update for to-stix dialects (#1609)

    @delliott90 @DerekRushton
    delliott90 authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    dd81972 View commit details
    Browse the repository at this point in the history

  5. Bump azure-identity from 1.14.1 to 1.15.0 in /stix_shifter (#1614) 

    Bumps [azure-identity](https://github.com/Azure/azure-sdk-for-python) from 1.14.1 to 1.15.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.14.1...azure-identity_1.15.0)

---
updated-dependencies:
- dependency-name: azure-identity
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @DerekRushton
    dependabot[bot] authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    fc72162 View commit details
    Browse the repository at this point in the history

  6. Bump flatten-json from 0.1.13 to 0.1.14 in /stix_shifter (#1613) 

    Bumps [flatten-json](https://github.com/amirziai/flatten) from 0.1.13 to 0.1.14.
- [Release notes](https://github.com/amirziai/flatten/releases)
- [Commits](https://github.com/amirziai/flatten/commits)

---
updated-dependencies:
- dependency-name: flatten-json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @DerekRushton
    dependabot[bot] authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    864df61 View commit details
    Browse the repository at this point in the history

  7. Update CHANGELOG.md for 6.3.0

    @delliott90 @DerekRushton
    delliott90 authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    5613e39 View commit details
    Browse the repository at this point in the history

  8. Cisco secure email added readme detailed file. (#1615)

    @thangaraj-ramesh @DerekRushton
    thangaraj-ramesh authored and DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    efeafa4 View commit details
    Browse the repository at this point in the history

  9. Added tested communication code for Tanium

    @DerekRushton
    DerekRushton committed Nov 16, 2023
    Configuration menu
    Copy the full SHA
    84abe79 View commit details
    Browse the repository at this point in the history

  10. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @DerekRushton
    DerekRushton authored Nov 16, 2023
    Configuration menu
    Copy the full SHA
    890b3cd View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2023

  1. Added suggestions from Azam.

    @DerekRushton
    DerekRushton committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    ff3f446 View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2023

  1. Fix parameter assignment in error handling function (#1616)

    @mdazam1942 @DerekRushton
    mdazam1942 authored and DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    cfc9ef9 View commit details
    Browse the repository at this point in the history

  2. Remove future timestamp qualifier conditions (#1619)

    @mdazam1942 @DerekRushton
    mdazam1942 authored and DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    ab45dfc View commit details
    Browse the repository at this point in the history

  3. Make sure certificate is verified when required by RestApiClientAsync (… 

    …#1620)

Deprecates selfSignedCert: false bypasss
    @mdazam1942 @DerekRushton
    mdazam1942 authored and DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    26ada3a View commit details
    Browse the repository at this point in the history

  4. Update CHANGELOG.md for 7.0.0

    @delliott90 @DerekRushton
    delliott90 authored and DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    07fbd98 View commit details
    Browse the repository at this point in the history

  5. add email-message translation to ecs (#1621)

    @subbyte @DerekRushton
    subbyte authored and DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    63a2b59 View commit details
    Browse the repository at this point in the history

  6. Update group_ref keyword documenation (#1622)

    @mdazam1942 @DerekRushton
    mdazam1942 authored and DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    9c01cd5 View commit details
    Browse the repository at this point in the history

  7. Initial To Stix mapping - Event and Transformers

    @DerekRushton
    DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    a47f9ee View commit details
    Browse the repository at this point in the history

  8. Another temporary commit to hold x-oca-event form

    @DerekRushton
    DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    d018be0 View commit details
    Browse the repository at this point in the history

  9. Finished up the to_stix mapping + test.

    @DerekRushton
    DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    3fbe023 View commit details
    Browse the repository at this point in the history

  10. Removed additional event data.

    @DerekRushton
    DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    6eb509d View commit details
    Browse the repository at this point in the history

  11. Fixing the unittest failure

    @DerekRushton
    DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    f2dad06 View commit details
    Browse the repository at this point in the history

  12. Another Attempt

    @DerekRushton
    DerekRushton committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    09b9e8e View commit details
    Browse the repository at this point in the history

  13. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @mdazam1942
    mdazam1942 authored Dec 7, 2023
    Configuration menu
    Copy the full SHA
    5c2b563 View commit details
    Browse the repository at this point in the history

  14. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @DerekRushton
    DerekRushton authored Dec 7, 2023
    Configuration menu
    Copy the full SHA
    2f19314 View commit details
    Browse the repository at this point in the history

Commits on Jan 8, 2024

  1. Added the missing fields to the Tanium API response and request.

    @DerekRushton
    DerekRushton committed Jan 8, 2024
    Configuration menu
    Copy the full SHA
    ccfe55d View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2024

  1. Updated toStix and fromStix

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    1214c8d View commit details
    Browse the repository at this point in the history

  2. Update CHANGELOG.md for 7.0.1

    @delliott90 @DerekRushton
    delliott90 authored and DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    76e9fab View commit details
    Browse the repository at this point in the history

  3. second half of email.* mapping for elastic_ecs (#1632)

    @subbyte @DerekRushton
    subbyte authored and DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    a7c8421 View commit details
    Browse the repository at this point in the history

  4. Sysdig connector (#1630)

    @thangaraj-ramesh @DerekRushton
    thangaraj-ramesh authored and DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    dde5cf2 View commit details
    Browse the repository at this point in the history

  5. Update machine ID field in QRadar module (#1634) 

    Co-authored-by: Kane Brennan <Kane.Brennan@ibm.com>
    @Alex-Kidston @KaneBrennan132 @DerekRushton
    2 people authored and DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    4ee7369 View commit details
    Browse the repository at this point in the history

  6. Sysdig Connector - Formatting issue in sysdig_supported_stix.md file … 

    …corrected (#1635)
    @thangaraj-ramesh @DerekRushton
    thangaraj-ramesh authored and DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    336df8e View commit details
    Browse the repository at this point in the history

  7. Added the readme (WIP)

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    0eeec0a View commit details
    Browse the repository at this point in the history

  8. Undid an unintended change.

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    8817460 View commit details
    Browse the repository at this point in the history

  9. Another Attempt to undo the change.

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    96c86a3 View commit details
    Browse the repository at this point in the history

  10. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @DerekRushton
    DerekRushton authored Jan 16, 2024
    Configuration menu
    Copy the full SHA
    24ad812 View commit details
    Browse the repository at this point in the history

  11. Removing one more unintended change.

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    5ee4268 View commit details
    Browse the repository at this point in the history

  12. One more unintended change.

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    a985a35 View commit details
    Browse the repository at this point in the history

  13. Updated the sample for the unit test.

    @DerekRushton
    DerekRushton committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    eaba86f View commit details
    Browse the repository at this point in the history

Commits on Jan 18, 2024

  1. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @mdazam1942
    mdazam1942 authored Jan 18, 2024
    Configuration menu
    Copy the full SHA
    89680fe View commit details
    Browse the repository at this point in the history

Commits on Jan 23, 2024

  1. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @mdazam1942
    mdazam1942 authored Jan 23, 2024
    Configuration menu
    Copy the full SHA
    027bd65 View commit details
    Browse the repository at this point in the history

  2. Azam's suggestions.

    @DerekRushton
    DerekRushton committed Jan 23, 2024
    Configuration menu
    Copy the full SHA
    33c0b37 View commit details
    Browse the repository at this point in the history

  3. Cleaned out the testing code I had left.

    @DerekRushton
    DerekRushton committed Jan 23, 2024
    Configuration menu
    Copy the full SHA
    b90148f View commit details
    Browse the repository at this point in the history

Commits on Jan 24, 2024

  1. Clean-up - Fixed up the readme.

    @DerekRushton
    DerekRushton committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    e215dab View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2024

  1. Added Azam's suggestions

    @DerekRushton
    DerekRushton committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f88f1b2 View commit details
    Browse the repository at this point in the history

  2. Cleaned the Json so it's standardized.

    @DerekRushton
    DerekRushton committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    eb14bcd View commit details
    Browse the repository at this point in the history

  3. Removed the total size from the meta data as it's not needed.

    @DerekRushton
    DerekRushton committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9d3b2b0 View commit details
    Browse the repository at this point in the history

Commits on May 28, 2024

  1. Merge branch 'develop' into Tanium_Threat_Response_Connector

    @DerekRushton
    DerekRushton authored May 28, 2024
    Configuration menu
    Copy the full SHA
    7557411 View commit details
    Browse the repository at this point in the history

Commits on May 29, 2024

  1. Cleaning up some comments+fixed observation queries. 

    Signed-off-by: DerekRushton <derek.rushton1@ibm.com>
    @DerekRushton
    DerekRushton committed May 29, 2024
    Configuration menu
    Copy the full SHA
    30235be View commit details
    Browse the repository at this point in the history

  2. Making the config values consistent. 

    Signed-off-by: DerekRushton <derek.rushton1@ibm.com>
    @DerekRushton
    DerekRushton committed May 29, 2024
    Configuration menu
    Copy the full SHA
    2ce961d View commit details
    Browse the repository at this point in the history

Commits on Jul 22, 2024

  1. Merge branch 'develop' into Tanium_Threat_Response_Connector_2

    @DerekRushton
    DerekRushton authored Jul 22, 2024
    Configuration menu
    Copy the full SHA
    17facce View commit details
    Browse the repository at this point in the history