Mock time (#2)

This commit is contained in:
Jonas Plum
2021-12-27 00:17:44 +01:00
committed by GitHub
parent 0286574692
commit 1fade14ba5
19 changed files with 916 additions and 969 deletions

View File

@@ -488,7 +488,7 @@
},
"test" : {
"example" : [ {
"created" : "2021-10-02T16:05:00.334+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"creator" : "bob",
"message" : "Fail run account resist lend solve incident centre priority temperature. Cause change distribution examine location technique shape partner milk customer. Rail tea plate soil report cook railway interpretation breath action. Exercise dream accept park conclusion addition shoot assistance may answer. Gold writer link stop combine hear power name commitment operation. Determine lifespan support grow degree henry exclude detail set religion. Direct library policy convention chain retain discover ride walk student. Gather proposal select march aspect play noise avoid encourage employ. Assessment preserve transport combine wish influence income guess run stand. Charge limit crime ignore statement foundation study issue stop claim.",
"reference" : "tickets/294511"
@@ -1107,13 +1107,13 @@
"name" : "Phishing",
"tasks" : {
"block-iocs" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"type" : "task"
},
"block-sender" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -1122,7 +1122,7 @@
"type" : "task"
},
"board" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -1144,13 +1144,13 @@
"type" : "input"
},
"escalate" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"type" : "task"
},
"extract-iocs" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -1172,7 +1172,7 @@
"type" : "input"
},
"mail-available" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -1210,7 +1210,7 @@
"type" : "input"
},
"search-email-gateway" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -1308,9 +1308,9 @@
},
"test" : {
"example" : {
"created" : "1985-04-12T23:20:50.520+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"id" : 123,
"modified" : "1985-04-12T23:20:50.520+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "Wannacry infection",
"owner" : "bob",
"schema" : "{}",
@@ -1463,9 +1463,9 @@
},
"test" : {
"example" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"id" : 8125,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "phishing from selenafadel@von.org detected",
"owner" : "demo",
"references" : [ {
@@ -1566,7 +1566,7 @@
} ],
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8123,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "live zebra",
"owner" : "demo",
"playbooks" : {
@@ -1575,7 +1575,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -1583,7 +1583,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -1594,7 +1594,7 @@
},
"board" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -1618,7 +1618,7 @@
},
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -1626,7 +1626,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -1650,7 +1650,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -1690,7 +1690,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -1770,7 +1770,7 @@
} ],
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8123,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "live zebra",
"owner" : "demo",
"playbooks" : {
@@ -1779,7 +1779,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -1787,7 +1787,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -1798,7 +1798,7 @@
},
"board" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -1822,7 +1822,7 @@
},
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -1830,7 +1830,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -1854,7 +1854,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -1894,7 +1894,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -2038,7 +2038,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -2046,7 +2046,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -2057,7 +2057,7 @@
},
"board" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -2081,7 +2081,7 @@
},
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -2089,7 +2089,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -2113,7 +2113,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -2153,7 +2153,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -2243,7 +2243,7 @@
}, {
"enrichments" : {
"hash.sha1" : {
"created" : "2021-10-03T16:44:06.489+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"data" : {
"hash" : "b7a067a742c20d07a7456646de89bc2d408a1153"
},
@@ -2264,7 +2264,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -2272,7 +2272,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -2283,7 +2283,7 @@
},
"board" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -2307,7 +2307,7 @@
},
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -2315,7 +2315,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -2339,7 +2339,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -2379,7 +2379,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -2497,13 +2497,13 @@
"test" : {
"example" : {
"comments" : [ {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"creator" : "bob",
"message" : "My first comment"
} ],
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8125,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "phishing from selenafadel@von.com detected",
"owner" : "demo",
"references" : [ {
@@ -2599,7 +2599,7 @@
} ],
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8123,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "live zebra",
"owner" : "demo",
"playbooks" : {
@@ -2608,7 +2608,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -2616,7 +2616,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -2627,7 +2627,7 @@
},
"board" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -2651,7 +2651,7 @@
},
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -2659,7 +2659,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -2683,7 +2683,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -2723,7 +2723,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -2806,7 +2806,7 @@
"name" : "document.doc"
} ],
"id" : 8125,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "phishing from selenafadel@von.com detected",
"owner" : "demo",
"references" : [ {
@@ -2891,9 +2891,9 @@
},
"test" : {
"example" : {
"created" : "1985-04-12T23:20:50.520+0000",
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8125,
"modified" : "1985-04-12T23:20:50.520+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "phishing from selenafadel@von.com detected",
"owner" : "demo",
"playbooks" : {
@@ -2902,7 +2902,7 @@
"tasks" : {
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to malware team",
"order" : 2,
@@ -2911,7 +2911,7 @@
"hash" : {
"active" : false,
"automation" : "hash.sha1",
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Hash the malware",
"next" : {
@@ -2925,7 +2925,7 @@
},
"input" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Upload malware if possible",
"next" : {
@@ -3035,9 +3035,9 @@
"name" : "leadreintermediate.io",
"status" : "malicious"
} ],
"created" : "1985-04-12T23:20:50.520+0000",
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8123,
"modified" : "1985-04-12T23:20:50.520+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "live zebra",
"owner" : "demo",
"references" : [ {
@@ -3131,7 +3131,7 @@
} ],
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8123,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "live zebra",
"owner" : "demo",
"playbooks" : {
@@ -3140,7 +3140,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -3148,7 +3148,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -3159,7 +3159,7 @@
},
"board" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"data" : {
"boardInvolved" : true
},
@@ -3186,7 +3186,7 @@
},
"escalate" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -3194,7 +3194,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -3218,7 +3218,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -3258,7 +3258,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -3362,7 +3362,7 @@
} ],
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8123,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "live zebra",
"owner" : "demo",
"playbooks" : {
@@ -3371,7 +3371,7 @@
"tasks" : {
"block-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"order" : 6,
@@ -3379,7 +3379,7 @@
},
"block-sender" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -3390,8 +3390,8 @@
},
"board" : {
"active" : false,
"closed" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-10-02T16:04:59.078+0000",
"closed" : "2021-12-12T12:12:12.000+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"data" : {
"boardInvolved" : true
},
@@ -3418,7 +3418,7 @@
},
"escalate" : {
"active" : true,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"order" : 1,
@@ -3426,7 +3426,7 @@
},
"extract-iocs" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -3450,7 +3450,7 @@
},
"mail-available" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -3490,7 +3490,7 @@
},
"search-email-gateway" : {
"active" : false,
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {
@@ -3614,7 +3614,7 @@
"example" : {
"created" : "2021-10-02T16:04:59.078+0000",
"id" : 8125,
"modified" : "2021-10-02T16:04:59.078+0000",
"modified" : "2021-12-12T12:12:12.000+0000",
"name" : "phishing from selenafadel@von.com detected",
"owner" : "demo",
"references" : [ {
@@ -3885,13 +3885,13 @@
"name" : "Phishing",
"tasks" : {
"block-iocs" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block IOCs",
"type" : "task"
},
"block-sender" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Block sender",
"next" : {
@@ -3900,7 +3900,7 @@
"type" : "task"
},
"board" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Board Involvement?",
"next" : {
@@ -3922,13 +3922,13 @@
"type" : "input"
},
"escalate" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Escalate to CISO",
"type" : "task"
},
"extract-iocs" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Extract IOCs",
"next" : {
@@ -3950,7 +3950,7 @@
"type" : "input"
},
"mail-available" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Mail available",
"next" : {
@@ -3988,7 +3988,7 @@
"type" : "input"
},
"search-email-gateway" : {
"created" : "2021-10-02T16:04:59.078+0000",
"created" : "2021-12-12T12:12:12.000+0000",
"done" : false,
"name" : "Search email gateway",
"next" : {