Skip to content

Tags: DonMagee/panther-analysis

Tags

v0.0.0-test1

Toggle v0.0.0-test1's commit message
update schemas to newest definitions from Panther

v1.15.0

Toggle v1.15.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Reduce duplication in display names (panther-labs#189)

* reduce duplication in data model display names; add standard ruleset pack

* remove pack from this pr

v0.0.0-test

Toggle v0.0.0-test's commit message
Fix crowdstike reference URLs

v1.14.0

Toggle v1.14.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Global IOC Helpers (panther-labs#159)

* Initial commit of IOC Helpers

* Removed AWS.VPCFlow and CiscoUmbrella.DNS from the SHA-256 IOC log types

* Support for finding IOC matches for use in the title function. Added dynamic titles that include the matches for the Sunburst IOCs.

* Added more details to the runbook for the Sunburst IOCs

* Fixed linting issue (line too long)

* refactored to minimize repeated code

* broke out title function into two pieces

* Modified Description and added Reference for sunburst indicators

Co-authored-by: Nicholas Hakmiller <[email protected]>

v1.13.0

Toggle v1.13.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Don't alert if access is denied to S3 putbucket. (panther-labs#153)

* Don't alert if access is denied to S3 putbucket.

* Added test for failed S3 bucket

* Updated with comments as suggested in PR

v1.12.0

Toggle v1.12.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Added example of regex checking for IAM arns (panther-labs#144)

* Added example of regex checking for IAM arns

* Fixed line formatting

* Fixed lint issues

* Bugfix: role patterns

* Fix: Removed 2 lines - unnecessary return

* Added test case for role pattern

* Changed test case so it reaches the intended condition

* Fixed tests

v1.10.0

Toggle v1.10.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
box initial ruleset (panther-labs#127)

* initial set of box rules

* update a few metadata fields

* format updates

* cleaning up test cases

* format yet again...

* remove bad fields from tests; split a rule; added additional rules

* fixing last line

v1.7.0

Toggle v1.7.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
this test should return true (panther-labs#99)

v1.6.0

Toggle v1.6.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Additional gsuite rules (panther-labs#78)

* additional gsuite rules

* fixed formatting

* more rules

* final rules for now

* fixed  formatting

* removed invalid  characters

* addressed pr comments

* re-formatted example

v1.5.0

Toggle v1.5.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
ignore service linked role creation (panther-labs#70)

* ignore service linked role creation

* upgrade requirements.txt

* add test case