Code

Fetch assets within iris alert#162

Code

Merged

taylorwalton merged 47 commits intomainsocfortress/CoPilot:mainfrom fetch-assets-within-iris-alertsocfortress/CoPilot:fetch-assets-within-iris-alertCopy head branch name to clipboardFeb 20, 2024

+5,996-229

Commits

Commits on Feb 15, 2024

• Add endpoint to fetch assets by alert ID

  taylorwalton

  committed
  60d00f6

• Update CaseModel state_id and state_name fields

  taylorwalton

  committed
  b99e9b7

Commits on Feb 16, 2024

• Add stack provisioning router

  taylorwalton

  committed
  e18ddf5

• Update rotate_empty_index_set field to be optional

  taylorwalton

  committed
  e170f22

• send sap siem to shuffle endpoint

  taylorwalton

  committed
  0eab4c1

• Add command to retrieve admin password

  taylorwalton

  committed
  f6e9ae4

• some precommit fixes

  taylorwalton

  committed
  7a964dc

• Refactor provision_wazuh_content_pack route in Graylog

  taylorwalton

  committed
  3cee9cc

• Add function to load content pack JSON file

  taylorwalton

  committed
  e7dfa60

• Add insert_content_pack function to Graylog content_packs service

  taylorwalton

  committed
  7c85af3

Commits on Feb 17, 2024

• wazuh content pack change

  taylorwalton

  committed
  8e24777

• Fix bug in login functionality

  taylorwalton

  committed
  6efcec8

• Update Wazuh Content Pack name

  taylorwalton

  committed
  d3d3436

• Add logging for POST request response and implement content pack installation and graylog system checking to ensure graylog version supports the content pack

  taylorwalton

  committed
  079d2e7

• add active-response readme

  taylorwalton

  committed
  5a1ab5b

Commits on Feb 18, 2024

• active response testing

  taylorwalton

  committed
  d37df2b

• Add windows firewall active response

  taylorwalton

  committed
  8d96859

• Refactor firewall script and add block_ip function

  taylorwalton

  committed
  27de27b

• precommit fixes

  taylorwalton

  committed
  b60dac9

• Update Windows Firewall script to include IP unblocking

  taylorwalton

  committed
  33677de

• Add wait_for_complete parameter to provision_wazuh_content_pack_route()

  taylorwalton

  committed
  22cecf9

• Add firewall.spec to .gitignore

  taylorwalton

  committed
  c038552

• Update active response command and add IP blocking action

  taylorwalton

  committed
  6277c0f

• full path for netsh

  taylorwalton

  committed
  9df7a8c

• Fix Windows firewall script and update README.md

  taylorwalton

  committed
  5b7134c

• Update Wazuh configuration in readme

  taylorwalton

  committed
  2447632

• Update action to unblock IP and add agents list parameter

  taylorwalton

  committed
  f3722cb

Commits on Feb 19, 2024

• add active response markdowns

  taylorwalton

  committed
  e9a8b86

• Add InvokeActiveResponseRequest model and update provision_wazuh_content_pack_route

  taylorwalton

  committed
  cca5aba

• precommit fixes

  taylorwalton

  committed
  8c5aac4

• Refactor active response validation and alert creation

  taylorwalton

  committed
  1b81ade

• precommit fixes

  taylorwalton

  committed
  bca3608

• precommit fixes

  taylorwalton

  committed
  f73f710

• README updates

  taylorwalton

  committed
  952f48f

• updated dependencies

  Linko91

  committed
  02613bc

• updated vite config

  Linko91

  committed
  c62d3b0

• Handle exception when creating customer in provision_wazuh_customer

  taylorwalton

  committed
  7a1593c

• readme install python

  taylorwalton

  committed
  41d4fd3

• add to windows_firewall ar logging

  taylorwalton

  committed
  6bf127c

Commits on Feb 20, 2024

• updated npm scripts

  Linko91

  committed
  afa17d2

• updated assets types

  Linko91

  committed
  727f297

• updated soc assets apis

  Linko91

  committed
  918beb1

• added soc alert assets component

  Linko91

  committed
  69a3b69

• Merge branch 'fetch-assets-within-iris-alert' of https://github.com/socfortress/CoPilot into fetch-assets-within-iris-alert

  Linko91

  committed
  b403334

• updated soc asset description

  Linko91

  committed
  cdd044b

• ready for prod build

  taylorwalton

  committed
  5171ba9

• precommit fixes

  taylorwalton

  committed
  048778a