Commit Graph

159 Commits

Author SHA1 Message Date
Wes cd3a661dd6 Set malwarebazaar.py to be executable 2023-12-15 14:17:33 +00:00
weslambert 55c957170d Reduce complexity 2023-12-15 09:00:31 -05:00
Jackson d41daa37f1 malwarebazaar 2023-12-15 03:00:43 -05:00
Jackson b59896bb47 ThreatFox and EchoTrail 2023-12-15 02:47:54 -05:00
Jackson c59a6516fc fix Elasticsearch lint 2023-12-15 02:34:45 -05:00
Jackson 977081b6e7 update Readme.md 2023-12-14 10:37:04 -05:00
Elijah Gibson d5edf57ccb Update elasticsearch.py 2023-12-13 23:04:44 -05:00
Elijah Gibson 94b9089b79 Update elasticsearch.json 2023-12-13 23:03:42 -05:00
Jackson 81e4fe78e7 pushing everything at once 2023-12-13 13:45:48 -05:00
weslambert 7f21bee0d4 Add README 2023-12-06 13:14:17 -05:00
weslambert ade3a46a9a Add LocalFile link 2023-12-06 12:58:44 -05:00
weslambert e6a2e49d37 Add Sublime Platform 2023-12-06 12:57:59 -05:00
Wes 51fa4922b9 Fix indentation for rule_results 2023-12-06 17:37:07 +00:00
Wes 6fff05b444 Remove pytest.ini 2023-12-05 20:14:17 +00:00
Wes b3e78c9cc3 Update live flow option 2023-12-05 19:55:23 +00:00
Wes d871b61150 Change author 2023-12-05 18:36:25 +00:00
Wes 3d1eecfad6 Add Sublime Platform analyzer 2023-12-05 18:31:50 +00:00
Jason Ertel 209e237d0d re-add source pkgs from accidental commit 2023-11-09 00:34:52 -05:00
Jason Ertel 33a8ef1568 add yaml helper script; refactor python testing 2023-11-08 18:24:23 -05:00
weslambert 34717fb65e Add note regarding DNS resolver 2023-10-18 13:44:09 -04:00
weslambert 7cb9b5f257 Add the blank line that was removed from the previous commit 2023-09-25 14:41:20 -04:00
weslambert c95af6b992 Add a note about testing analyzers outside of the Sensoroni Docker container 2023-09-25 14:39:33 -04:00
Wes c205438771 Update dependencies 2023-06-14 02:35:29 +00:00
Wes 841d0b4b1f Update dependencies after git add 2023-06-05 15:42:55 +00:00
Wes 272f97e2d7 Update dependencies 2023-06-05 15:42:38 +00:00
Wes eac9a3fc86 Update requests and whoisit 2023-06-05 15:41:01 +00:00
Jason Ertel a881cab469 use the same requests version that's already packaged with the analyzer 2023-05-19 23:54:30 -04:00
Jason Ertel 03f97b309a fix lib dependency issue with whoisit 2023-05-19 14:18:19 -04:00
Jason Ertel ec2e923530 Add proper spacing between headers and content 2023-01-24 10:28:39 -05:00
Wes 3ab8a0be60 Update tests to account for change in 'file_path' value verification 2022-12-13 16:29:18 +00:00
Wes eae05e83e6 Use new list verification function for 'file_path' 2022-12-13 16:28:50 +00:00
Wes 117d230b9d Add new test for list value verification function 2022-12-13 16:28:22 +00:00
Wes 5422c5b3e2 Add new function to verify list value 2022-12-13 16:27:58 +00:00
weslambert 9477f29432 Remove double quotes to fix issue with file path sourcing from 'localfile.py' 2022-12-08 17:06:43 -05:00
Doug Burks 632464335f fix descriptions in files related to analyzers 2022-11-12 13:14:02 -05:00
Doug Burks f77db78219 fix descriptions in files related to analyzers 2022-11-12 13:13:30 -05:00
Doug Burks 2f4ce91678 fix descriptions in files related to analyzers 2022-11-12 13:12:58 -05:00
Doug Burks 154dff98de fix descriptions in files related to analyzers 2022-11-12 13:12:23 -05:00
Doug Burks a15ca3cc49 fix descriptions in files related to analyzers 2022-11-12 13:11:38 -05:00
weslambert 0ede5a7313 Remove JA3er references 2022-10-26 10:24:25 -04:00
Wes 803d2d4d75 Add PyYAML .whl files back since they were 'deleted' in the previous commit 2022-10-25 19:15:54 +00:00
Wes 0267ece4bf Fix PyYAML .whl file name and remove JA3er analyzer 2022-10-25 19:11:52 +00:00
Jason Ertel 9d43b7ec89 Rollback string manipulation in favor of fixed unit tests 2022-07-05 16:21:27 -04:00
Jason Ertel f6266b19cc Fix unit test issues 2022-07-05 16:20:24 -04:00
Wes Lambert e96206d065 Strip quotes and ensure file_path is typed as a list 2022-07-05 14:25:54 +00:00
weslambert 568b43d0af Ensure file_path uses jinja to derive the value(s) from the pillar 2022-06-27 10:10:13 -04:00
Wes Lambert 7f30a364ee Make sure everything is added back after renaming mhr to malwarehashregistry 2022-05-31 11:44:35 +00:00
Wes Lambert c82aa89497 Fix Malware Hash Registry naming so it's more descriptive in SOC 2022-05-31 11:41:48 +00:00
Wes Lambert b93512eb01 Adjust verbiage around pillar configuration 2022-05-24 12:36:32 +00:00
Wes Lambert 92dee14ee8 Add configuration requirements for various analyzers 2022-05-24 12:29:14 +00:00