GoogleCloudPlatform/security-analytics issues and pull requests

#57 - Documentation CICD Cloudbuild

Issue - State: open - Opened by nik-kel 5 months ago

#56 - CICD cloudbuild.yaml

Issue - State: open - Opened by nik-kel 5 months ago

#55 - Add new Dataform repo for vector search over audit logs

Pull Request - State: closed - Opened by rarsan 6 months ago

#54 - Update rules.py

Pull Request - State: closed - Opened by railroadmanuk 7 months ago

#53 - Rename Chronicle to Google SecOps

Pull Request - State: closed - Opened by rarsan 7 months ago - 1 comment

#52 - Bump protobufjs from 7.2.4 to 7.2.6 in /dataform

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies

#51 - Add sample query to show top LLM users grouped by LLM model

Pull Request - State: closed - Opened by rarsan 9 months ago

#50 - Fix small typo in docs

Pull Request - State: closed - Opened by dragazan 10 months ago

#48 - Remove timestamp in favor of the date/time selector implemented in 2023

Pull Request - State: open - Opened by charlesbaer 10 months ago - 3 comments

#47 - [question] How do you use "alert's" views?

Issue - State: open - Opened by pfilourenco about 1 year ago - 2 comments

#46 - fix "Array cannot have a null element" dataform summary queries

Pull Request - State: closed - Opened by pfilourenco about 1 year ago - 1 comment

#45 - Configure Renovate

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment

#44 - Csa workflow

Pull Request - State: closed - Opened by AfvanJaffer about 1 year ago - 1 comment

#43 - Removing sed command

Pull Request - State: closed - Opened by railroadmanuk about 1 year ago

#42 - URGENT: Github Actions failing to read SA_CREDENTIAL

Issue - State: closed - Opened by dalakija about 1 year ago - 2 comments
Labels: documentation

#41 - Update Dataform README and set UA to Dataform API calls

Pull Request - State: closed - Opened by rarsan about 1 year ago

#40 - Fixing typo in JSON parameter name

Pull Request - State: closed - Opened by railroadmanuk about 1 year ago

#39 - Fix Dataform and CICD READMEs

Pull Request - State: closed - Opened by rarsan about 1 year ago

#38 - CI/CD Readme file points to the wrong folder for Github action workflow

Issue - State: closed - Opened by archyufa about 1 year ago - 1 comment
Labels: documentation

#37 - Incorrect use of operator OR in file

Issue - State: closed - Opened by tszebeni over 1 year ago - 3 comments
Labels: bug

#36 - Add Cloud Workflows templates

Pull Request - State: closed - Opened by sam-fourgeaud-onix over 1 year ago - 2 comments

#35 - Add Dataform support to CSA

Pull Request - State: closed - Opened by rarsan over 1 year ago

#34 - fix 4_20 and 4_21 log analytics queries

Pull Request - State: closed - Opened by pfilourenco over 1 year ago
Labels: bug

#33 - add 6.01 log analytics sql query

Pull Request - State: closed - Opened by pfilourenco over 1 year ago
Labels: enhancement

#32 - fix capitalization in 1.03 SQL queries

Pull Request - State: closed - Opened by zbjornson over 1 year ago - 1 comment

#31 - Fix CSA 6.15 logic to determine if IP corresponds to internal entity

Pull Request - State: closed - Opened by rarsan over 1 year ago

#30 - Add CSAs 4.20-4.21 to report cloud usage of certain actor, such as a compromised service account

Pull Request - State: closed - Opened by rarsan over 1 year ago

#29 - Fix incorrect regex

Pull Request - State: closed - Opened by patriknordlen over 1 year ago - 2 comments

#28 - Add new CSA 6.15 to help monitor IP address space used

Pull Request - State: closed - Opened by rarsan over 1 year ago

#27 - Add new CSA 1.30 to audit Cloud Console accesses

Pull Request - State: closed - Opened by rarsan over 1 year ago

#26 - Update table format to match Log Analytics format

Pull Request - State: closed - Opened by charlesbaer over 1 year ago

#25 - Add CSA 5.31 query for Log Analytics

Pull Request - State: closed - Opened by rarsan over 1 year ago

#24 - Expand CSA 2.20-2.22 detections to include permissions granted at par…

Pull Request - State: closed - Opened by rarsan almost 2 years ago

#23 - Implement CSA 5.30 for BigQuery and Log Analytics

Pull Request - State: closed - Opened by rarsan almost 2 years ago

#22 - Remove JSON_VALUE when retrieving caller_ip as request_metadata is ST…

Pull Request - State: closed - Opened by rarsan almost 2 years ago

#21 - Modify SQL with window functions as a workaround for Log Analytics wh…

Pull Request - State: closed - Opened by rarsan almost 2 years ago

#20 - Add Log Analytics SQL queries for some CSA 5.* and 6.*

Pull Request - State: closed - Opened by rarsan almost 2 years ago

#19 - fixed broken link

Pull Request - State: closed - Opened by sce-taid almost 2 years ago

#18 - Round 2 Log Analytics query additions

Pull Request - State: closed - Opened by charlesbaer almost 2 years ago

#17 - Round 1 Log Analytics query additions

Pull Request - State: closed - Opened by charlesbaer almost 2 years ago

#16 - Added Azure DevOps pipeline file and instructions for CICD

Pull Request - State: closed - Opened by railroadmanuk about 2 years ago

#15 - fixed typo in link for cloudbuild.yaml

Pull Request - State: closed - Opened by railroadmanuk about 2 years ago

#14 - Terraform module to Set the Export filters in chronicle in GCP.

Issue - State: closed - Opened by itskkmgit about 2 years ago - 3 comments
Labels: question, wontfix

#13 - Updated to support cloud build

Pull Request - State: closed - Opened by railroadmanuk about 2 years ago

#12 - Added python script for CICD

Pull Request - State: closed - Opened by railroadmanuk about 2 years ago

#11 - Add use case 3.02

Pull Request - State: closed - Opened by dianakramer about 2 years ago - 1 comment
Labels: enhancement

#10 - Standardize BigQuery backend table formatting for multiple tables

Issue - State: closed - Opened by jacks-reid about 2 years ago - 2 comments
Labels: question

#9 - Fix BigQuery SQL FROM statement typos

Pull Request - State: closed - Opened by jacks-reid over 2 years ago - 1 comment

#8 - Move location of queries & rules

Pull Request - State: closed - Opened by rarsan over 2 years ago

#7 - Develop

Pull Request - State: closed - Opened by olivierba over 2 years ago - 1 comment

#6 - Update rule names and time range.

Pull Request - State: closed - Opened by shapor over 2 years ago

#5 - Additional Yara rules added

Pull Request - State: closed - Opened by R1shal1n over 2 years ago

#4 - add: 5 new rules

Pull Request - State: closed - Opened by sailingd over 2 years ago

#3 - feat(mapping): initial version of attack mapping

Pull Request - State: closed - Opened by m3mike over 2 years ago - 1 comment

#2 - feat(mapping): initial version of attack mapping

Pull Request - State: closed - Opened by m3mike over 2 years ago - 1 comment

#1 - Addition of Chronicle Detection Rules

Pull Request - State: closed - Opened by R1shal1n over 2 years ago

GitHub / GoogleCloudPlatform/security-analytics issues and pull requests