Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FIRST EPSS] Create playbook compatible internal enrichment connector #2550

Merged
merged 22 commits into from
Sep 4, 2024
Merged

[FIRST EPSS] Create playbook compatible internal enrichment connector #2550

merged 22 commits into from
Sep 4, 2024

Conversation

Powlinett
Copy link
Member

@Powlinett Powlinett commented Aug 28, 2024 •
edited
Loading

Proposed changes

  • Copy and adapt internal enrichment template
  • Check marking, scope and CVE format
  • Get data from https://api.first.org/data/v1/epss
  • Update x_opencti_epss_score and x_opencti_epss_percentile vulnerability properties
  • Test playbook compatibility

Related issues

Checklist

  • I consider the submitted work as finished
  • I tested the code for its functionality using different use cases
  • I added/update the relevant documentation (either on github or on notion)
  • Where necessary I refactored code to improve the overall quality

Further comments

I'm not sure about the documentation, feel free to tell me what I should add/fix 🤞

@Powlinett Powlinett added the do not merge Do not merge this PR until this tag will be removed label Aug 28, 2024
@Powlinett Powlinett self-assigned this Aug 28, 2024
@Powlinett
[connector] use and adapt template
03996d9
@Powlinett
[connector] set config variables
ee65970
@Powlinett
[connector] prepare collecting data from FIRST API
ca1f799
@Powlinett
[connector] collect data and create STIX objects
3a4747a
@Powlinett
[connector] clean up and logs update
b3171c0
@Powlinett
[connector] rename connector
b8235ea
@Powlinett
[connector] remove validators as dependency
3c1d4ac
@Powlinett
[connector] add util function to check CVE format
819304a
@Powlinett
[connector] split process_message function
4169562
@Powlinett
[connector] apply formatting
c34b818
@Powlinett
[connector] remove api_key config variable
4077bbe 
not need (public API)
@Powlinett
[connector] update config variables
ff3f91e
@Powlinett
[connector] update README
1e688b1
@Powlinett
[connector] change config variables default values
ef02fee
@Powlinett
[connector] use generate_id function
310164a
@Powlinett
[connector] improve error message
ca6e652
@Powlinett
[connector] ensure self.stix_objects_list is always set with message'…
579b99f 
…s entities
@Powlinett Powlinett removed the do not merge Do not merge this PR until this tag will be removed label Sep 4, 2024
@Powlinett Powlinett merged commit 64834a3 into master Sep 4, 2024
3 checks passed
@Powlinett Powlinett deleted the issue/2418-first-epss branch September 4, 2024 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Megafredo Megafredo Megafredo approved these changes

@helene-nguyen helene-nguyen Awaiting requested review from helene-nguyen

Assignees

@Powlinett Powlinett

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

[FIRST] - Create an enrichment connector for FIRST EPSS
2 participants
@Powlinett @Megafredo