v1.9.2 New Connectors & Improvements #372

sfc-gh-afedorov · 2020-01-09T22:13:25Z

Data Connectors

the new Azure Inventory & Configuration Connector gathers configuration and inventory into 23 tables for a given Azure Tenant, deprecating the Azure VM and Azure Subscription Connectors. The original set is intended to support upcoming CIS coverage, but Collecting Intune Device Management data #373 adds MS Intune support, as well.
the new Salesforce Event Log gathers event logs from the Salesforce API, written and documented by @hh-jamesweakley, thank you kindly!
the AWS Inventory & Configuration Connector has new documentation and some improvements to support collecting logs from multiple organizations, deprecating the AWS Inventory, Config, and Account Connectors. many thanks to @blackstatic (jeff.fellinge@outreach.io) for his tireless help getting the documentation in order.
the AWS Inventory & Configuration Connector can now collect from a single account (just include it as a "master" account and errors in organizations list-accounts fall back to collecting from that account alone)
4e88c05 fixes the Jamf Connector to ignore intermittent errors from the API

WebUI

a9008b6 adds the ability for the web operator to set a default user role and database instead of using the individual users' Snowflake defaults, creating a smoother onboarding experience. Many thanks to @jamesweakley for both thinking of this improvement, implementing, and documenting it!
large chunk of tech debt has been processed, with all deprecated frontend dependencies upgraded or replaced
a few minor UX tweets like b2795ac to fix text overflow in rule titles

with a little refactoring, as well

adds resource groups adds hosting environments adds webapps

- adds list storage accounts

- adds loading of log_profiles - uncomment logging for dev

Allow setting of Role, Database and Warehouse for OAuth users

Move non-sensitive parameters out of SSM Fix IAM permissons on alert runner Run all on alert runner Support OAuth configuration on WebUI

rm subscription_id for managed_devices

Andrey Fedorov and others added 30 commits December 6, 2019 14:50

[docs] Update styling on OAuth page

7bcfeee

[docs] Now with more Cloud Data Platform

5bd22da

[dc] fix handling Jamf collection errors

4e88c05

[dc] Adds list-policies to AWS Collect

3dd78a5

[dc] Adds role policies to AWC Collect

8e66270

[dc] Fixes iam.get_role_policy in AWSC

a784093

[dc] Remove vestigial print in Okta

26193c6

Bump version in WebUI

0a9d638

[dc] Remove vestigial connectors + minor refactoring

9053537

[dc] Remove connectors from init

81119ef

[dc] Add Azures Collect Connector

24b2f46

[dc] ACC bugfix

efec216

[dc] AAC type fix

2ff02a8

[dc] Adds subscription_id cols to Azure Collect

8463141

[dc] Adds vault inventory to Azure Connect

2d8f671

with a little refactoring, as well

Update azure_collect.py

a5366cf

adds resource groups adds hosting environments adds webapps

Update azure_collect.py

7b82baa

- adds list storage accounts

Update azure_collect.py

86ab8d7

- adds loading of log_profiles - uncomment logging for dev

[dc] Adds usgov support to Azure Collect

fa5dfec

[dc] Adds storage list container to Azure Collect

9ae3fee

[dc] Adds list disks to Azure Collect

870b4f3

Update mypy.ini

d2ce254

Allow OAuth connection overrides

a9008b6

Allow setting of Role, Database and Warehouse for OAuth users

[dc] Adds role definition to Azure Collect

79f59fa

[helpers] Add columns to db dryrun print

aa37c32

[dc] Adds AD Users, Groups, and SP's to Azure Collect

5b8b0f9

[dc] Adds Network Watchers and NSGs to AC

6f42a6c

Fixes to Cloudformation template

f577ed6

Move non-sensitive parameters out of SSM Fix IAM permissons on alert runner Run all on alert runner Support OAuth configuration on WebUI

Support new OAuth WebUI parameter overrides

6038f7e

Implement Salesforce Event Log data connector

28438ac

Andrey Fedorov and others added 26 commits January 13, 2020 18:43

Update azure_collect.py

5fb22af

rm subscription_id for managed_devices

Update azure_collect.py

ba76243

Update azure_collect.py

c6ecc27

Update azure_collect.py

cdf8c5e

Update azure_collect.py

92e0ec5

Update azure_collect.py

0186f51

[webui] Update & cleanup frontend dependencies

038c64c

[dc] Azure Collect cleanup & bug fixes

1aff740

[webui] Remove vestigial dep's

781c55b

[dc] Add AWS Inventory & Configuration docs

c47904c

[webui] Update node version in webui container

cca53bf

[dc] Adds docs for azure_collect

ee73a88

[dc] Minor cleanup & fix in Azure_collect

ac5e515

[script] Cleanup vestigial ingestion script

c2f15c3

[dc] Adds functionality to scan single account (fixes error)

01548eb

[dc] Fixes AWS Collect to work with a single account

3bcf706

[dc] Fixes pagination in Azure C&I

da78a8b

[dc] Update aws_collect docs

af44246

[dc] Update test_aws_collect.py

8782ee6

[db] Better Azure I&C Collector logging

347baac

[dc] Fixes tenable_io to collect agents without group

e6f8d79

[dc] Limits how often Azure connector runs

577406e

[dc] Minor reformat in AC

a913326

[dc] Fixes azure connect ingest run

7f263e8

Update tenable_io.py

8eacf8a

[dc] Fixes AWSC option Reader EID to be optional

91d7fff

sfc-gh-afedorov merged commit c16d968 into master Jan 21, 2020

sfc-gh-afedorov deleted the v1.9.2 branch January 21, 2020 17:45

sfc-gh-afedorov restored the v1.9.2 branch January 21, 2020 18:09

sfc-gh-afedorov deleted the v1.9.2 branch January 28, 2020 00:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

v1.9.2 New Connectors & Improvements #372

v1.9.2 New Connectors & Improvements #372

sfc-gh-afedorov commented Jan 9, 2020 •

edited

Loading

v1.9.2 New Connectors & Improvements #372

v1.9.2 New Connectors & Improvements #372

Conversation

sfc-gh-afedorov commented Jan 9, 2020 • edited Loading

Data Connectors

WebUI

sfc-gh-afedorov commented Jan 9, 2020 •

edited

Loading