103 Commits

Author	SHA1	Message	Date
Elijah Gibson	d5edf57ccb	Update elasticsearch.py	2023-12-13 23:04:44 -05:00
Elijah Gibson	94b9089b79	Update elasticsearch.json	2023-12-13 23:03:42 -05:00
Jackson	81e4fe78e7	pushing everything at once	2023-12-13 13:45:48 -05:00
weslambert	7f21bee0d4	Add README	2023-12-06 13:14:17 -05:00
weslambert	ade3a46a9a	Add LocalFile link	2023-12-06 12:58:44 -05:00
weslambert	e6a2e49d37	Add Sublime Platform	2023-12-06 12:57:59 -05:00
Wes	51fa4922b9	Fix indentation for rule_results	2023-12-06 17:37:07 +00:00
Wes	6fff05b444	Remove pytest.ini	2023-12-05 20:14:17 +00:00
Wes	b3e78c9cc3	Update live flow option	2023-12-05 19:55:23 +00:00
Wes	d871b61150	Change author	2023-12-05 18:36:25 +00:00
Wes	3d1eecfad6	Add Sublime Platform analyzer	2023-12-05 18:31:50 +00:00
Jason Ertel	209e237d0d	re-add source pkgs from accidental commit	2023-11-09 00:34:52 -05:00
Jason Ertel	33a8ef1568	add yaml helper script; refactor python testing	2023-11-08 18:24:23 -05:00
weslambert	34717fb65e	Add note regarding DNS resolver	2023-10-18 13:44:09 -04:00
weslambert	7cb9b5f257	Add the blank line that was removed from the previous commit	2023-09-25 14:41:20 -04:00
weslambert	c95af6b992	Add a note about testing analyzers outside of the Sensoroni Docker container	2023-09-25 14:39:33 -04:00
Wes	c205438771	Update dependencies	2023-06-14 02:35:29 +00:00
Wes	841d0b4b1f	Update dependencies after git add	2023-06-05 15:42:55 +00:00
Wes	272f97e2d7	Update dependencies	2023-06-05 15:42:38 +00:00
Wes	eac9a3fc86	Update requests and whoisit	2023-06-05 15:41:01 +00:00
Jason Ertel	a881cab469	use the same requests version that's already packaged with the analyzer	2023-05-19 23:54:30 -04:00
Jason Ertel	03f97b309a	fix lib dependency issue with whoisit	2023-05-19 14:18:19 -04:00
Jason Ertel	ec2e923530	Add proper spacing between headers and content	2023-01-24 10:28:39 -05:00
Wes	3ab8a0be60	Update tests to account for change in 'file_path' value verification	2022-12-13 16:29:18 +00:00
Wes	eae05e83e6	Use new list verification function for 'file_path'	2022-12-13 16:28:50 +00:00
Wes	117d230b9d	Add new test for list value verification function	2022-12-13 16:28:22 +00:00
Wes	5422c5b3e2	Add new function to verify list value	2022-12-13 16:27:58 +00:00
weslambert	9477f29432	Remove double quotes to fix issue with file path sourcing from 'localfile.py'	2022-12-08 17:06:43 -05:00
Doug Burks	632464335f	fix descriptions in files related to analyzers	2022-11-12 13:14:02 -05:00
Doug Burks	f77db78219	fix descriptions in files related to analyzers	2022-11-12 13:13:30 -05:00
Doug Burks	2f4ce91678	fix descriptions in files related to analyzers	2022-11-12 13:12:58 -05:00
Doug Burks	154dff98de	fix descriptions in files related to analyzers	2022-11-12 13:12:23 -05:00
Doug Burks	a15ca3cc49	fix descriptions in files related to analyzers	2022-11-12 13:11:38 -05:00
weslambert	0ede5a7313	Remove JA3er references	2022-10-26 10:24:25 -04:00
Wes	803d2d4d75	Add PyYAML .whl files back since they were 'deleted' in the previous commit	2022-10-25 19:15:54 +00:00
Wes	0267ece4bf	Fix PyYAML .whl file name and remove JA3er analyzer	2022-10-25 19:11:52 +00:00
Jason Ertel	9d43b7ec89	Rollback string manipulation in favor of fixed unit tests	2022-07-05 16:21:27 -04:00
Jason Ertel	f6266b19cc	Fix unit test issues	2022-07-05 16:20:24 -04:00
Wes Lambert	e96206d065	Strip quotes and ensure file_path is typed as a list	2022-07-05 14:25:54 +00:00
weslambert	568b43d0af	Ensure file_path uses jinja to derive the value(s) from the pillar	2022-06-27 10:10:13 -04:00
Wes Lambert	7f30a364ee	Make sure everything is added back after renaming mhr to malwarehashregistry	2022-05-31 11:44:35 +00:00
Wes Lambert	c82aa89497	Fix Malware Hash Registry naming so it's more descriptive in SOC	2022-05-31 11:41:48 +00:00
Wes Lambert	b93512eb01	Adjust verbiage around pillar configuration	2022-05-24 12:36:32 +00:00
Wes Lambert	92dee14ee8	Add configuration requirements for various analyzers	2022-05-24 12:29:14 +00:00
weslambert	a6f1bf3aef	Create Virustotal README	2022-05-23 11:39:44 -04:00
Wes Lambert	429ccb2dcc	Only import yaml module when config is loaded	2022-05-18 02:07:39 +00:00
weslambert	d3206a048f	Add information for MHR and WhoisLookup, and other minor updates	2022-05-17 12:49:16 -04:00
weslambert	ff855eb8f7	Merge pull request #7958 from Security-Onion-Solutions/feature/mhr_analyzer ... Add Team Cymru Malware Hash Registry Analyzer	2022-05-17 12:42:01 -04:00
Wes Lambert	8af1f19ac3	Another no_results change	2022-05-17 16:12:43 +00:00
Wes Lambert	e4a7e3cba6	Change 'No results found.' to 'no_results'	2022-05-17 16:11:58 +00:00