Code

Threat Intel Analytics#1098

Code

Merged

eirsep merged 59 commits intomainopensearch-project/security-analytics:mainfrom feature/threat_intelopensearch-project/security-analytics:feature/threat_intelCopy head branch name to clipboardJul 2, 2024

+17,695-386

Commits

Commits on Jun 6, 2024

• refactored classes (#1037)

  Show description for 28591eb
  

  jowg-amazon

  authored and

  eirsep

  committed
  28591eb

• ioc match model (#1038)

  Show description for 4e43caa
  eirsep

  committed
  4e43caa

• Threat Intel Feed Config Model (#1028)

  

  jowg-amazon

  authored and

  eirsep

  committed
  dbebcb5

• IOC data model and DTO. (#1029)

  Show description for 1669953
  

  AWSHurneyt

  authored and

  eirsep

  committed
  1669953

• Create TIF Source Config API (#1046)

  Show description for 3a04f02
  

  jowg-amazon

  authored and

  eirsep

  committed
  3a04f02

• Get TIF Source Config API (#1049)

  Show description for 864815d
  

  jowg-amazon

  authored and

  eirsep

  committed
  864815d

• renamed source config dao to service and service to management service (#1052)

  Show description for ce15825
  

  jowg-amazon

  authored and

  eirsep

  committed
  ce15825

• index threat intel monitor rest api (#1057)

  Show description for 63dd56c
  eirsep

  committed
  63dd56c

• Search and delete threat intel monitor api (#1058)

  Show description for dcc0e94
  eirsep

  authored
  dcc0e94

Commits on Jun 11, 2024

• TIF Job Scheduler Initial Implementation (#1054)

  Show description for b60ef59
  jowg-amazon

  authored
  b60ef59

Commits on Jun 13, 2024

• Draft of IOC service (#1048)

  Show description for 17f7074
  AWSHurneyt

  authored
  17f7074

• Implement Threat Intel Monitor Input and Triggers (#1073)

  Show description for 6766547
  

  eirsep

  and

  sbcd90

  authored
  6766547

• Search Feeds API and Store/Source Model (#1075)

  Show description for 1997575
  jowg-amazon

  authored
  1997575

• Delete threat intel source config API (#1066)

  Show description for 686d317
  jowg-amazon

  authored
  686d317

Commits on Jun 17, 2024

• Assets for IOC fetch and index service. (#1077)

  Show description for 04687cc
  AWSHurneyt

  authored
  04687cc

Commits on Jun 19, 2024

• Implemented ListIOCs API. (#1064)

  Show description for d71579c
  AWSHurneyt

  authored
  d71579c

• Refresh API and adds Update TIF Source Config logic (#1078)

  Show description for ee4ae79
  jowg-amazon

  authored
  ee4ae79

• FetchIOCService update IocStoreConfig with feedConfigId and IOC index names (#1080)

  Show description for af217bc
  AWSHurneyt

  authored
  af217bc

• fix (#1086)

  jowg-amazon

  authored
  8a6a389

Commits on Jun 20, 2024

• Fix ioc store config mappings (#1087)

  Show description for c28f84f
  jowg-amazon

  authored
  c28f84f

• Change search config api request (#1089)

  Show description for 1927009
  jowg-amazon

  authored
  1927009

Commits on Jun 21, 2024

• Fix mapping and add job parser todo (#1090)

  Show description for d5ca5f9
  jowg-amazon

  authored
  d5ca5f9

• Added "feedName" to IOC model. (#1088)

  Show description for 04ef1bc
  AWSHurneyt

  authored
  04ef1bc

• ListIOCs API support lists of feedIds, and types. (#1085)

  Show description for ee4e52d
  AWSHurneyt

  authored
  ee4e52d

Commits on Jun 24, 2024

• Implemented API to test s3 connection. (#1091)

  Show description for cc6ff7a
  AWSHurneyt

  authored
  cc6ff7a

Commits on Jun 25, 2024

• fix user mappings (#1095)

  Show description for 4d5df3a
  jowg-amazon

  authored
  4d5df3a

• Logic to delete old iocs and add ioc index rollover (#1094)

  Show description for 23a6b6d
  jowg-amazon

  authored
  23a6b6d

Commits on Jun 26, 2024

• fix threat intel monitor request in indexing flow

  Show description for ad80024
  eirsep

  committed
  ad80024

• add search ioc findings api (#1093)

  Show description for e47a6ac
  sbcd90

  authored
  e47a6ac

Commits on Jun 27, 2024

• Threat intel monitor implementation (#1092)

  Show description for ef54c62
  

  4 peopleauthored
  ef54c62

• List Ioc Api params change (#1100)

  Show description for cc7d504
  eirsep

  authored
  cc7d504

• Upload iocs through source config (#1097)

  Show description for 1c59b9f
  jowg-amazon

  authored
  1c59b9f

• adds threat intel alert status update API for Acknowledged and Completed States (#1104)

  Show description for c3440ee
  eirsep

  authored
  c3440ee

• fix search monitor to return dto and not model (#1105)

  Show description for ae53139
  eirsep

  authored
  ae53139

• add guard rail for only one threat intel monitor to exist (#1106)

  Show description for a52b7c1
  eirsep

  authored
  a52b7c1

Commits on Jun 28, 2024

• Fix API action names (#1107)

  Show description for ad35b68
  jowg-amazon

  authored
  ad35b68

• list iocs fix (#1109)

  Show description for c91fe4a
  eirsep

  authored
  c91fe4a

• Fix validation for source types (#1108)

  Show description for f3039d7
  jowg-amazon

  authored
  f3039d7

• catch ioc validation (#1110)

  Show description for 817d319
  jowg-amazon

  authored
  817d319

• fix update threat intel monitor to avoid monitor exists check before operation (#1111)

  Show description for ce6d9be
  eirsep

  authored
  ce6d9be

• fix merge conflicts

  Show description for 1bbe292
  jowg-amazon

  committed
  1bbe292

• Refactored calls to S3. Added support for consuming security analytics commons directly from project rootDir. (#1114)

  Show description for b5adadd
  AWSHurneyt

  authored
  b5adadd

Commits on Jun 29, 2024

• add source config validation (#1115)

  Show description for f6df1b7
  jowg-amazon

  authored
  f6df1b7

• add feed_name to finding model's ioc detail

  Show description for 24d8ee6
  eirsep

  committed
  24d8ee6

Commits on Jul 1, 2024

• fix last seen seqeuence number calculation

  Show description for 1523a1d
  eirsep

  committed
  1523a1d

• fix tif source config Model serde

  Show description for 88845f9
  eirsep

  committed
  88845f9

• fixed stix ioc serde

  Show description for a07e95c
  eirsep

  committed
  a07e95c

• fix tif source config DTO serde

  Show description for 8d47a48
  eirsep

  committed
  8d47a48

• apply spotless check

  Show description for 2464f64
  eirsep

  committed
  2464f64

• Adjusted IOC type enums. (#1116)

  Show description for 7a47ec4
  AWSHurneyt

  authored
  7a47ec4

• Ignore tests that can't run in github CI. (#1118)

  Show description for 4adc585
  AWSHurneyt

  authored
  4adc585

• fix ioc ids filtering in get findings api

  Show description for 3cb21c1
  eirsep

  committed
  3cb21c1

• fix enum serde in Stix2Ioc

  Show description for 67337bd
  eirsep

  committed
  67337bd

• fix mapping (#1119)

  Show description for d355bf8
  jowg-amazon

  authored
  d355bf8

• remove ioc finding tests with sleep

  Show description for adf1c33
  eirsep

  committed
  adf1c33

Commits on Jul 2, 2024

• fix ioc type enum (#1122)

  Show description for a81dda0
  

  eirsep

  and

  AWSHurneyt

  authored
  a81dda0

• Merge branch 'main' into feature/threat_intel

  Show description for 50c50f5
  AWSHurneyt

  authored
  50c50f5

• fix feed name in finding serde (#1123)

  Show description for 41c3502
  eirsep

  authored
  41c3502

• Fixed test suite. (#1128)

  Show description for 5b12588
  AWSHurneyt

  authored
  5b12588