elastic/geneve issues and pull requests

#199 - Search group solvers hierarchically

Pull Request - State: closed - Opened by cavokz over 1 year ago

#198 - Fixes and improvements

Pull Request - State: closed - Opened by cavokz over 1 year ago

#197 - Various testing related changes

Pull Request - State: closed - Opened by cavokz over 1 year ago

#196 - Migrate to `pathlib`

Pull Request - State: closed - Opened by cavokz over 1 year ago

#195 - Update to Pygolo v0.1.0

Pull Request - State: closed - Opened by cavokz over 1 year ago

#194 - Early detection of wrong number of branches

Pull Request - State: closed - Opened by cavokz over 1 year ago

#193 - Revert "Randomize timestamps a bit"

Pull Request - State: closed - Opened by cavokz over 1 year ago

#192 - Use a separate test report for each stack version

Pull Request - State: closed - Opened by cavokz over 1 year ago

#191 - Fix field path splitting

Pull Request - State: closed - Opened by cavokz over 1 year ago

#190 - Randomize timestamps a bit

Pull Request - State: closed - Opened by cavokz over 1 year ago

#189 - Update Pygolo to v0.1.0-rc

Pull Request - State: closed - Opened by cavokz over 1 year ago

#188 - Refactor solvers

Pull Request - State: closed - Opened by cavokz over 1 year ago

#187 - Revert "Fix keyword list lookup"

Pull Request - State: closed - Opened by cavokz over 1 year ago

#186 - Refactor keyword solver

Pull Request - State: closed - Opened by cavokz over 1 year ago

#185 - Fix invocations of `super`

Pull Request - State: closed - Opened by cavokz over 1 year ago

#184 - Do not optimize ASTs converted from KQL

Pull Request - State: closed - Opened by cavokz over 1 year ago

#183 - Fix keyword list lookup

Pull Request - State: closed - Opened by cavokz over 1 year ago

#182 - Fix some search-replace errors

Pull Request - State: closed - Opened by cavokz over 1 year ago

#181 - Add Event constraints solver

Pull Request - State: closed - Opened by cavokz over 1 year ago

#180 - Add `faker-datasets`

Pull Request - State: closed - Opened by cavokz over 1 year ago

#179 - Retry failed rules

Pull Request - State: closed - Opened by cavokz over 1 year ago

#178 - Add second node to the test cluster

Pull Request - State: closed - Opened by cavokz over 1 year ago - 1 comment

#177 - Improve cluster diagnostics

Pull Request - State: closed - Opened by cavokz over 1 year ago

#176 - Add stack 8.8 to the test drill

Pull Request - State: closed - Opened by cavokz over 1 year ago

#175 - Fix online tests flakiness

Pull Request - State: closed - Opened by cavokz over 1 year ago

#174 - Investigate online tests flakiness

Issue - State: closed - Opened by cavokz over 1 year ago - 2 comments

#173 - Add `scaled_factor` solver

Pull Request - State: open - Opened by cavokz over 1 year ago

#172 - Deploy to Buildkite

Issue - State: closed - Opened by cavokz over 1 year ago

#171 - Update rules used in online tests

Issue - State: closed - Opened by cavokz over 1 year ago - 1 comment

#170 - Investigate `LaunchDaemon Creation or Modification and Immediate Loading`

Issue - State: closed - Opened by cavokz over 1 year ago - 3 comments
Labels: rule

#169 - Investigate `Azure Global Administrator Role Addition to PIM User`

Issue - State: closed - Opened by cavokz over 1 year ago - 3 comments

#168 - Investigate `Azure Full Network Packet Capture Detected`

Issue - State: open - Opened by cavokz over 1 year ago - 2 comments
Labels: rule, no signals, wontfix

#167 - Investigate `Azure External Guest User Invitation`

Issue - State: closed - Opened by cavokz over 1 year ago - 3 comments

#166 - Investigate `Azure AD Global Administrator Role Assigned`

Issue - State: closed - Opened by cavokz over 1 year ago

#165 - Download Pygolo before using its `Python.mk`

Pull Request - State: closed - Opened by cavokz over 1 year ago

#164 - Adopt Ruff for linting Python

Pull Request - State: closed - Opened by cavokz over 1 year ago

#163 - Adopt Pygolo - take II

Pull Request - State: closed - Opened by cavokz over 1 year ago

#162 - Drop `grasp.getPostIgnoreParams` for `utils.DecodeRequestBody`

Pull Request - State: closed - Opened by cavokz over 1 year ago
Labels: refactoring

#161 - Add openapi spec

Pull Request - State: open - Opened by cavokz over 1 year ago

#160 - Create Geneve OpenAPI spec

Issue - State: open - Opened by cavokz over 1 year ago

#159 - Fix 'Node.js 12 actions are deprecated' CI/CD warnings

Pull Request - State: closed - Opened by cavokz over 1 year ago

#158 - Adopt Pygolo

Pull Request - State: closed - Opened by cavokz over 1 year ago

#157 - Improve robustness of `.ipynb` files

Pull Request - State: closed - Opened by cavokz over 1 year ago

#156 - Add Geneve core README

Pull Request - State: closed - Opened by cavokz over 1 year ago

#155 - Don't schedule nil rules

Pull Request - State: closed - Opened by cavokz over 1 year ago

#154 - Update "Getting started" with rules from Kibana

Pull Request - State: closed - Opened by cavokz over 1 year ago - 1 comment

#153 - Release v0.2.0

Pull Request - State: closed - Opened by cavokz over 1 year ago

#152 - Prevent double solver registration

Pull Request - State: closed - Opened by cavokz over 1 year ago

#151 - Configure rules execution schedule

Pull Request - State: closed - Opened by cavokz over 1 year ago

#150 - Create catalog-info file

Pull Request - State: closed - Opened by elastic-backstage-prod[bot] over 1 year ago - 2 comments

#149 - Add Backstage catalog-info file

Pull Request - State: closed - Opened by cavokz over 1 year ago

#148 - Kibana: data views and Security `defaultIndex`

Issue - State: open - Opened by cavokz over 1 year ago

#147 - `scripts/generate-alerts.sh` improvements

Pull Request - State: closed - Opened by cavokz over 1 year ago

#146 - Fix sink rule index

Pull Request - State: closed - Opened by cavokz over 1 year ago

#145 - Add Autonomous System group solver

Pull Request - State: closed - Opened by cavokz over 1 year ago

#144 - Add `script/generate-alerts.sh`

Pull Request - State: closed - Opened by cavokz over 1 year ago

#143 - Generation from rules improvements

Pull Request - State: closed - Opened by cavokz over 1 year ago

#142 - Unify requests body decoding

Pull Request - State: closed - Opened by cavokz over 1 year ago
Labels: refactoring

#141 - Allow fetching rules from Kibana

Pull Request - State: closed - Opened by cavokz over 1 year ago

#140 - EAH 2023 tweaks

Pull Request - State: closed - Opened by cavokz over 1 year ago

#139 - Add constraints consolidation

Pull Request - State: closed - Opened by cavokz over 1 year ago - 1 comment

#138 - Rename `Constraints` into `Document`

Pull Request - State: closed - Opened by cavokz over 1 year ago
Labels: refactoring

#137 - Fix use of variable without associated value

Pull Request - State: closed - Opened by cavokz over 1 year ago

#136 - Add helper ExpectJson for Geneve server testing

Pull Request - State: closed - Opened by cavokz over 1 year ago
Labels: refactoring

#135 - Add constraints analysis

Pull Request - State: closed - Opened by cavokz over 1 year ago

#134 - Investigate how to check if two regular expressions overlap

Issue - State: open - Opened by cavokz over 1 year ago

#133 - Propagate join values also for group solvers

Pull Request - State: closed - Opened by cavokz over 1 year ago

#132 - Improve response body output when tests fail

Pull Request - State: closed - Opened by cavokz over 1 year ago

#131 - Add stack 8.7 to the test drill

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#130 - Add a tool to support detection engine developers

Issue - State: open - Opened by cavokz almost 2 years ago - 2 comments

#129 - Update and improve the walk-through guide

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#128 - Add some documentation

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#127 - Harmonize Geneve and Faker randomness

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#126 - Some group solvers improvements

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#125 - Create documents based on pre-built rules in Kibana

Issue - State: closed - Opened by charlie-pichette almost 2 years ago - 4 comments
Labels: enhancement

#124 - Incremental document generation

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#123 - User prioritized document generation

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#122 - Add stack 8.6 to the test drill

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#121 - Add some group solvers

Pull Request - State: open - Opened by cavokz almost 2 years ago

#120 - Use Faker for geo generation

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#119 - Switch to per-group (= entity) data generation

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#118 - `*.bytes` fields are non-negative 32 bits numbers

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#117 - Implement entities generation

Issue - State: open - Opened by cavokz almost 2 years ago

#116 - Cache online resources

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#115 - Generated geo info is bogus

Issue - State: open - Opened by cavokz almost 2 years ago - 4 comments
Labels: bug

#114 - Implement `_integration` extension

Pull Request - State: closed - Opened by cavokz almost 2 years ago - 1 comment

#113 - Implement `_integration` extension

Issue - State: closed - Opened by cavokz almost 2 years ago - 1 comment

#112 - Implement CI job for checking geneve in a rally-track

Issue - State: open - Opened by cavokz almost 2 years ago

#111 - Prepare v0.1.1

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#110 - Prepare a Homebrew tap for macOS users

Issue - State: closed - Opened by cavokz almost 2 years ago - 1 comment

#109 - Prepare v0.1.0

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#108 - Add Python module version check

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#107 - Drop python CLI

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#106 - Trigger actions also on tags push

Pull Request - State: closed - Opened by cavokz almost 2 years ago

#105 - Stop generating docs if sending fails

Pull Request - State: closed - Opened by cavokz about 2 years ago

#104 - Fix cardinality in multi-document generation

Pull Request - State: open - Opened by cavokz about 2 years ago

#103 - Add IP version constraint

Pull Request - State: open - Opened by cavokz about 2 years ago

#102 - Fix cardinality in multi-branch generation

Pull Request - State: closed - Opened by cavokz about 2 years ago

#101 - Make source `_generate` deliver data progressively

Pull Request - State: closed - Opened by cavokz about 2 years ago

#100 - Various improvements

Pull Request - State: closed - Opened by cavokz about 2 years ago

GitHub / elastic/geneve issues and pull requests