Граф коммитов

22 Коммитов

Автор SHA1 Сообщение Дата
Arcadia Rose 8d6cf3d6bf
Make ip_source_enrichment's registration a list to be consistent with others (#1632) 2020-05-26 15:09:28 -05:00
Jan Andre Ikenmeyer 51822417a3
Update MPL license to https 2019-08-02 01:41:37 +02:00
Brandon Myers 211ab423e7
Update regex strings 2019-07-31 18:01:26 -05:00
Brandon Myers 9d7ea147a9
Add check for details on alert in plugin 2019-07-16 15:19:02 -04:00
Brandon Myers fc3bd5e770
Add registration to alert plugins 2019-07-16 12:23:50 -05:00
Brandon Myers 3c394a1365
Update map to list for ipv6 2019-06-28 17:45:21 -05:00
Emma Rose 749979280b
Add missing json import... again? 2019-05-29 16:29:03 -04:00
Emma Rose e191cb2e4a
Resolving PEP 8 errors 2019-05-21 20:43:41 -04:00
Emma Rose 88a43b942a
Implement _load_config to just naively try to open and parse the config file specified; not going to supply a default because we probably want to know if the file doenst exist 2019-05-21 20:42:40 -04:00
Emma Rose c4ac61f24d
Satisfy tests 2019-05-16 13:54:18 -04:00
Emma Rose 91d7fe21e3
Document and test for a more detailed format for listing sites 2019-05-16 13:45:18 -04:00
Emma Rose 3fb2c046ee
Make 'site' a parameter to format 2019-05-14 19:25:28 -04:00
Emma Rose b6f48f50a6
Add the name of the office/vpn/whatever to details.site 2019-05-13 17:26:50 -04:00
Emma Rose 27f80e4477
removed unused ipVersion from config; add 'site' field that will be made distinct entry in alert details 2019-05-13 17:19:57 -04:00
Emma Rose e2e5978ea8
Follow standard for json config file naming 2019-05-13 17:18:05 -04:00
Emma Rose 5a6cc454cb
Fixed syntax 2019-05-13 12:35:53 -04:00
Emma Rose 1d95a8f25e
IPv6 regex returns a tuple, so we need to parse the first item out 2019-05-08 12:56:17 -04:00
Emma Rose 3148479ffd
Fixup 2019-05-06 18:45:12 -04:00
Emma Rose 58d6da7d31
Fixed up syntax, removed self argument from enrich function 2019-04-30 20:34:18 -04:00
Emma Rose 46c2979d8e
Implement some simple code to find IP addresses in strings using regular expressions 2019-04-29 21:45:44 -04:00
Emma Rose d3ba77a886
Refactoring code to match the preferred interface 2019-04-29 20:42:37 -04:00
Emma Rose 1b5a3066fe
Started to lay out a new alert plugin for enriching alerts with information about the physical source of IPs 2019-04-25 20:46:46 -04:00