Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sapi siem integration #149

Merged
merged 39 commits into from
Feb 14, 2024
Merged

Sapi siem integration #149

merged 39 commits into from
Feb 14, 2024

Conversation

taylorwalton
Copy link
Contributor

No description provided.

@taylorwalton
Fix integration name with spaces and add SAP SIEM integration and aut…
7bd06d7 
…h keys
@taylorwalton
Add SAP SIEM integration router
69f5112
@taylorwalton
Refactor auth key extraction for Mimecast and SAP SIEM integrations
e019cb9
@taylorwalton
Refactor SAP SIEM route and collect SAP SIEM request
86be686
@taylorwalton
Refactor SAP SIEM integration code to support multiple API keys
b20c852
@taylorwalton
Add SAP SIEM schema and services for collecting and checking suspicio…
8a97bff 
…us logins
@taylorwalton
Add event_timestamp and case_created fields to Result model and SapSi…
90fe6d4 
…emSource model
@taylorwalton
Update index name in find_suscpicious_logins function
4f01751
@taylorwalton
Refactor fetch_and_validate_data function to accept keyword arguments
a3fb485
@taylorwalton
Add asset schema and update case with asset information
7f6e9ae
@taylorwalton
Remove temporary code for testing
00ef85f
@taylorwalton
Add customer_code field to SapSiemSource and SuspiciousLogin models
efa9386
@taylorwalton
Add errDetails field to SapSiemSource and SuspiciousLogin models
ebd2aef
@taylorwalton
Add SAP SIEM suspicious logins analysis route
82522a2
@taylorwalton
Add scroll functionality for retrieving search results
09d2e3f
@taylorwalton
Add event_analyzed flag to Elasticsearch document
dccdff6
@taylorwalton
Add SAP SIEM multiple logins analysis route
9e43242
@taylorwalton
Convert loginID to lowercase before adding to ip_to_login_ids
daf4568
@taylorwalton
Add event_analyzed_multiple_logins field to Result class
338b391
@taylorwalton
Add SapSiemMultipleLogins model and update sap_siem_multiple_logins_s…
b0586e1 
…ame_ip function
@taylorwalton
Refactor code to improve performance and readability
8971f87
@taylorwalton
Add function to update event_analyzed_multiple_logins flag in Elastic…
ff7bc0f 
…search document
@taylorwalton
Add update_event_analyzed_multiple_logins_flag function call
93c3fc6
@taylorwalton
Update customer code and handle exception in sap_siem_multiple_logins.py
353eff6
@taylorwalton
docs
ce73aad
@taylorwalton
precommit fixes
7e87628
@taylorwalton
Update SAP SIEM integration and scheduler***
01b3dfe
@taylorwalton
Add new columns to existing tables
09ede9f
@taylorwalton
Add optional extra_data parameter to update_job function
9fdb479
@taylorwalton
Add optional threshold parameter to run_sap_siem_suspicious_logins_an…
a401ceb 
…alysis and run_sap_siem_multiple_logins_same_ip_analysis
@taylorwalton taylorwalton merged commit 094753d into main Feb 14, 2024
1 check passed
@taylorwalton taylorwalton deleted the sapi-siem-integration branch February 14, 2024 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@taylorwalton