 weslambert
|
34717fb65e
|
Add note regarding DNS resolver
|
2023-10-18 13:44:09 -04:00 |
|
|
weslambert
|
7cb9b5f257
|
Add the blank line that was removed from the previous commit
|
2023-09-25 14:41:20 -04:00 |
|
|
weslambert
|
c95af6b992
|
Add a note about testing analyzers outside of the Sensoroni Docker container
|
2023-09-25 14:39:33 -04:00 |
|
|
Wes
|
c205438771
|
Update dependencies
|
2023-06-14 02:35:29 +00:00 |
|
|
Wes
|
841d0b4b1f
|
Update dependencies after git add
|
2023-06-05 15:42:55 +00:00 |
|
|
Wes
|
272f97e2d7
|
Update dependencies
|
2023-06-05 15:42:38 +00:00 |
|
|
Wes
|
eac9a3fc86
|
Update requests and whoisit
|
2023-06-05 15:41:01 +00:00 |
|
 Jason Ertel
|
a881cab469
|
use the same requests version that's already packaged with the analyzer
|
2023-05-19 23:54:30 -04:00 |
|
|
Jason Ertel
|
03f97b309a
|
fix lib dependency issue with whoisit
|
2023-05-19 14:18:19 -04:00 |
|
 m0duspwnens
|
d1f7e5f4a7
|
fix and rename timeout_ms and parallel_limit
|
2023-05-12 14:57:55 -04:00 |
|
|
m0duspwnens
|
00d1ca0b62
|
configure and enable/disable sensoroni via ui
|
2023-05-12 14:26:46 -04:00 |
|
|
Jason Ertel
|
ec2e923530
|
Add proper spacing between headers and content
|
2023-01-24 10:28:39 -05:00 |
|
|
Wes
|
3ab8a0be60
|
Update tests to account for change in 'file_path' value verification
|
2022-12-13 16:29:18 +00:00 |
|
|
Wes
|
eae05e83e6
|
Use new list verification function for 'file_path'
|
2022-12-13 16:28:50 +00:00 |
|
|
Wes
|
117d230b9d
|
Add new test for list value verification function
|
2022-12-13 16:28:22 +00:00 |
|
|
Wes
|
5422c5b3e2
|
Add new function to verify list value
|
2022-12-13 16:27:58 +00:00 |
|
|
weslambert
|
9477f29432
|
Remove double quotes to fix issue with file path sourcing from 'localfile.py'
|
2022-12-08 17:06:43 -05:00 |
|
 Doug Burks
|
632464335f
|
fix descriptions in files related to analyzers
|
2022-11-12 13:14:02 -05:00 |
|
|
Doug Burks
|
f77db78219
|
fix descriptions in files related to analyzers
|
2022-11-12 13:13:30 -05:00 |
|
|
Doug Burks
|
2f4ce91678
|
fix descriptions in files related to analyzers
|
2022-11-12 13:12:58 -05:00 |
|
|
Doug Burks
|
154dff98de
|
fix descriptions in files related to analyzers
|
2022-11-12 13:12:23 -05:00 |
|
|
Doug Burks
|
a15ca3cc49
|
fix descriptions in files related to analyzers
|
2022-11-12 13:11:38 -05:00 |
|
|
weslambert
|
0ede5a7313
|
Remove JA3er references
|
2022-10-26 10:24:25 -04:00 |
|
|
Wes
|
803d2d4d75
|
Add PyYAML .whl files back since they were 'deleted' in the previous commit
|
2022-10-25 19:15:54 +00:00 |
|
|
Wes
|
0267ece4bf
|
Fix PyYAML .whl file name and remove JA3er analyzer
|
2022-10-25 19:11:52 +00:00 |
|
 Mike Reeves
|
aa8ce074f7
|
Fix sensoroni Agent
|
2022-09-19 10:43:05 -04:00 |
|
|
Mike Reeves
|
e3e6e7b4e8
|
Fix sensoroni Agent
|
2022-09-19 10:41:01 -04:00 |
|
|
Mike Reeves
|
f4508aa534
|
Fix sensoroni Agent
|
2022-09-19 10:22:32 -04:00 |
|
|
Mike Reeves
|
2bd9dd80e2
|
Move In Day
|
2022-09-07 09:06:25 -04:00 |
|
|
Jason Ertel
|
9d43b7ec89
|
Rollback string manipulation in favor of fixed unit tests
|
2022-07-05 16:21:27 -04:00 |
|
|
Jason Ertel
|
f6266b19cc
|
Fix unit test issues
|
2022-07-05 16:20:24 -04:00 |
|
|
Wes Lambert
|
e96206d065
|
Strip quotes and ensure file_path is typed as a list
|
2022-07-05 14:25:54 +00:00 |
|
|
weslambert
|
568b43d0af
|
Ensure file_path uses jinja to derive the value(s) from the pillar
|
2022-06-27 10:10:13 -04:00 |
|
|
Wes Lambert
|
7f30a364ee
|
Make sure everything is added back after renaming mhr to malwarehashregistry
|
2022-05-31 11:44:35 +00:00 |
|
|
Wes Lambert
|
c82aa89497
|
Fix Malware Hash Registry naming so it's more descriptive in SOC
|
2022-05-31 11:41:48 +00:00 |
|
|
Wes Lambert
|
b93512eb01
|
Adjust verbiage around pillar configuration
|
2022-05-24 12:36:32 +00:00 |
|
|
Wes Lambert
|
92dee14ee8
|
Add configuration requirements for various analyzers
|
2022-05-24 12:29:14 +00:00 |
|
|
weslambert
|
a6f1bf3aef
|
Create Virustotal README
|
2022-05-23 11:39:44 -04:00 |
|
|
Wes Lambert
|
429ccb2dcc
|
Only import yaml module when config is loaded
|
2022-05-18 02:07:39 +00:00 |
|
|
weslambert
|
d3206a048f
|
Add information for MHR and WhoisLookup, and other minor updates
|
2022-05-17 12:49:16 -04:00 |
|
|
weslambert
|
ff855eb8f7
|
Merge pull request #7958 from Security-Onion-Solutions/feature/mhr_analyzer
Add Team Cymru Malware Hash Registry Analyzer
|
2022-05-17 12:42:01 -04:00 |
|
|
Wes Lambert
|
8af1f19ac3
|
Another no_results change
|
2022-05-17 16:12:43 +00:00 |
|
|
Wes Lambert
|
e4a7e3cba6
|
Change 'No results found.' to 'no_results'
|
2022-05-17 16:11:58 +00:00 |
|
|
Wes Lambert
|
766e9748c5
|
Add Whoislookup RDAP-based analyzer
|
2022-05-17 15:52:12 +00:00 |
|
|
weslambert
|
3761b491c0
|
Remove whitespace
|
2022-05-17 10:50:33 -04:00 |
|
|
Wes Lambert
|
e8fc3ccdf4
|
Add Team Cymru Malware Hash Registry Analyzer
|
2022-05-17 14:44:53 +00:00 |
|
|
Jason Ertel
|
b45b6b198b
|
Improved unit test coverage of new analyzers; Utilize localized summaries; Require 100% code coverage on analyzers
|
2022-05-12 16:32:47 -04:00 |
|
|
Wes Lambert
|
3dc266cfa9
|
Add test for when indicator is not found
|
2022-05-12 19:02:41 +00:00 |
|
|
Wes Lambert
|
a233c08830
|
Update logic to handle indicators that are not present in database.
|
2022-05-12 19:02:02 +00:00 |
|
|
Jason Ertel
|
35e47c8c3e
|
Add support for analyzers in airgapped environments
|
2022-05-10 16:51:00 -04:00 |
|