Commit Graph

601 Commits

Author SHA1 Message Date
Yugoslavskiy Daniil
9b4b5e4ac6 fix #156 2020-04-07 05:10:56 +02:00
Yugoslavskiy Daniil
4d79a25830 fix #173 2020-04-05 08:17:52 +02:00
Yugoslavskiy Daniil
7f6c0a1758 Removed submodule 2020-04-05 07:31:12 +02:00
Yugoslavskiy Daniil
f101bb07fd update confluence and md kb 2020-03-23 04:13:43 +01:00
Yugoslavskiy Daniil
743e7a8783 add new commits from sigma and art 2020-03-23 01:51:10 +01:00
yugoslavskiy
e1d480f46c
Merge pull request #168 from WuerthIT/dev_paramConfigDirs
use config parameters for directories
2020-03-23 01:41:54 +01:00
yugoslavskiy
982062c195
Merge pull request #167 from WuerthIT/dev_DNlistsorted
sort the list of DNs in DR
2020-03-23 01:41:38 +01:00
yugoslavskiy
0033a97ae1
Merge pull request #166 from WuerthIT/dev_secureshellcall
put parameters in quote marks
2020-03-23 01:41:25 +01:00
Yugoslavskiy Daniil
f181e09b92 Merge branch 'WuerthIT-dev_doubletags' into develop 2020-03-23 01:40:47 +01:00
Yugoslavskiy Daniil
81aa8076fa fix conflicts 2020-03-23 01:40:37 +01:00
yugoslavskiy
a5e8ff7ec8
Merge pull request #164 from WuerthIT/dev_confluenceupdate
update confluence page only if changed
2020-03-23 01:30:22 +01:00
yugoslavskiy
106da23f65
Merge pull request #163 from WuerthIT/dev_paramdetectionqueries
use det_queries for confluence
2020-03-23 01:30:03 +01:00
wn00127702
3e67ee11fe use det_queries for confluence 2020-03-03 13:20:21 +01:00
wn00127702
eabf3c7c83 use config parameters for directories 2020-03-03 13:18:31 +01:00
wn00127702
969b9c66f8 remove doubling other tags 2020-03-02 16:39:30 +01:00
wn00127702
076fca399b update confluence page only if changed 2020-02-28 15:59:38 +01:00
wn00127702
12ea4a1eb1 put parameters in quote marks 2020-02-28 11:07:23 +01:00
wn00127702
7abb73867d sort the list of DNs in DR 2020-02-28 10:03:37 +01:00
yugoslavskiy
f9cfe7035b
Merge pull request #160 from atc-project/amitt
3rd PR for [AMITT] add AMITT Tactics and Technique tags
2020-02-19 03:20:00 +03:00
yugoslavskiy
1b49c19c67 roll back setup_repo, even tho it is kinda broken right now. details in #155 2020-02-19 03:19:26 +03:00
Roger Johnston
cf37134c6c
Merge pull request #161 from VVX7/amitt
chg: [template] conditionally list IR phases in RP body
2020-02-18 19:10:21 -05:00
VVX7
02efcce879 chg: [RP stages] add JP3-12 terms to response playbook phases 2020-02-18 19:11:23 -05:00
VVX7
36a9756dbd chg: [amitt_mapping] update AMITT STIX repo to permanent URL 2020-02-18 18:44:33 -05:00
VVX7
79bb2de6d6 chg: [template] conditionally list IR phases in RP body 2020-02-18 18:25:22 -05:00
yugoslavskiy
c492c501da comment out personal link in update_amitt_mapping.py 2020-02-19 01:36:18 +03:00
yugoslavskiy
ce8b658075
Merge pull request #157 from atc-project/amitt
second PR for [AMITT] add AMITT Tactics and Technique tags
2020-02-19 01:24:12 +03:00
VVX7
f71d127f16 add: [template] conditional incident response phases. add additional phase names based on JP3-12, JP3-13 2020-02-16 22:55:32 -05:00
VVX7
23fc882372 chg: [template] AM!TT tactic/technique no longer displayed on ATT&CK-only playbooks 2020-02-16 22:36:20 -05:00
VVX7
408724246a chg: [template] conditional insert of ATT&CK and AM!TT tactics/techniques in response playbooks 2020-02-16 21:51:53 -05:00
Daniil Yugoslavskiy
4400d0a9b8 Merge branch 'develop' into 'master'
fix #159

See merge request krakow2600/atomic-threat-coverage!97
2020-02-16 21:28:43 +00:00
yugoslavskiy
d4ddce3ea3 merge new DN/DR markdown templates 2020-02-17 00:26:27 +03:00
yugoslavskiy
6aab9a3e07 fix #159 2020-02-17 00:22:47 +03:00
yugoslavskiy
4d85686919 fix conflicts 2020-02-15 23:42:27 +03:00
yugoslavskiy
efcad3968b Merge branch 'VVX7-amitt' 2020-02-15 23:24:03 +03:00
Daniil Yugoslavskiy
ea6cda337f Merge branch 'develop' into 'master'
update DN md template, fix #153

See merge request krakow2600/atomic-threat-coverage!96
2020-01-14 07:14:09 +00:00
Yugoslavskiy Daniil
3dae842b40 update DN md template, fix #153 2020-01-14 10:12:24 +03:00
Daniil Yugoslavskiy
877269f7a1 Merge branch 'develop' into 'master'
update es_index_export.py

See merge request krakow2600/atomic-threat-coverage!95
2019-12-24 02:01:10 +00:00
yugoslavskiy
cacdeacfc3 update es_index_export.py 2019-12-24 03:00:47 +01:00
Daniil Yugoslavskiy
a774201a63 Merge branch 'develop' into 'master'
Develop

See merge request krakow2600/atomic-threat-coverage!94
2019-12-23 02:27:58 +00:00
yugoslavskiy
4fdebee0f8 updated es index export 2019-12-23 03:26:21 +01:00
VVX7
0f8457f7c1 chg: [amitt] confluence and markdown now render AM!TT Tactics and Techniques correctly 2019-12-07 22:54:57 -05:00
VVX7
bb5c3da09d new [amitt framework]: add partial support for AMITT misinformation framework. Playbooks and detection rules can now be tagged using AMITT Tactic and Techniques IDs. 2019-12-05 19:28:45 -05:00
sn0w0tter
8ba60aab59 markdown + analytics regenerated 2019-11-21 02:07:40 +01:00
sn0w0tter
8254d1b486 markdown regenerated 2019-11-21 01:08:20 +01:00
sn0w0tter
d2262f0730 templates fix 2019-11-21 01:05:23 +01:00
sn0w0tter
83b657bb3e attack mapping update 2019-11-21 00:59:53 +01:00
sn0w0tter
a71dc6f76c fix for issue #143 2019-11-21 00:57:51 +01:00
Yugoslavskiy Daniil
a975fc2442 fix wrong link 2019-11-03 23:41:51 +03:00
Daniil Yugoslavskiy
c28e1dde12 Merge branch 'develop' into 'master'
add EN_0004 and EN_0005

See merge request krakow2600/atomic-threat-coverage!93
2019-10-27 00:28:49 +00:00
yugoslavskiy
d279b7721f add EN_0004 and EN_0005 2019-10-27 03:28:12 +03:00