mozilla
/
MozDef
зеркало из https://github.com/mozilla/MozDef.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
5 995 коммитов 4 Ветки 53 Теги 68 MiB
Граф коммитов

49 Коммитов

Автор SHA1 Сообщение Дата
A Smith bfea37de3a
removing deprecated references to fluentd sqs (#1644) 2020-06-24 09:57:15 -05:00
Michal Purzynski bc64101e00 remove automated black formating 2019-10-03 13:55:42 -07:00
Michal Purzynski 75f63afaac cleanups 2019-09-30 14:00:44 -07:00
Michal Purzynski 05fe8c4880 Fixups for ES exception handling plus error messages when we drop events 2019-09-25 12:50:48 -07:00
Brandon Myers dbad0bb8af
Add customizable sleep option for mq workers 2019-08-26 13:06:27 -05:00
Brandon Myers 29b6f99581
Remove unused config option 2019-08-26 13:01:14 -05:00
Brandon Myers 89374b3fe6
Remove sys.path where possible from mq 2019-08-07 16:40:27 -05:00
Jan Andre Ikenmeyer 51822417a3
Update MPL license to https 2019-08-02 01:41:37 +02:00
Brandon Myers 7ce8e6147e
Merge pull request #1385 from mozilla/remove_unused_cloudtrailconfig 
Remove unused eventexchange options
 2019-07-25 10:29:11 -04:00
Brandon Myers fa7875f5c4
Fix region parameter in connect_sqs (#1383) 
* Fix region parameter in connect_sqs

* Modify parameter names to get_aws_credentials

* Clean up connect_sqs function to call get_aws_credentials

* Cleanup workers to use connect_sqs call

* Fix local import in sqs file

* Fix parameter name in cloudtrail worker

* Assert AWS region of SQS queues

Since the two SQS queues are provisioned by CloudTrail in the same region as the CloudTrail
stack, let's assert to MozDef that the region for those queus is indeed the same region.

* Update region name parameter in cloudtrail worker
 2019-07-19 17:50:58 -04:00
Brandon Myers aa03a4da57
Remove unused eventexchange options 2019-07-19 13:47:12 -04:00
Brandon Myers 8a8562fce8
Convert sqs boto use to boto3 2019-07-03 12:58:35 -05:00
Brandon Myers 63c6cbf857
Update mq workers to remove need to use RawMessage 2019-07-02 19:14:33 -05:00
Brandon Myers 1cb8709681
Fix local includes for mq and alerts 2019-06-30 16:52:32 -05:00
Brandon Myers 9a075dcbe0
Remove unicode-u keyword 2019-06-29 15:11:00 -05:00
Brandon Myers 390a3feef2
Rename unicode type to str 2019-06-28 18:21:48 -05:00
Brandon Myers bd4c48db9a
Rename iteritems to items for dictionaries 2019-06-28 16:49:30 -05:00
Brandon Myers 12b2e85b2b
Remove unnecessary whitespace from file 2019-04-11 12:42:43 -05:00
Phrozyn 4ea91f7ac0
Fixing flake8 erros 2019-03-28 11:21:23 -05:00
Phrozyn 6a9cdc3c9f
Minor tweaks to mq workers. 2019-03-25 13:14:42 -05:00
Brandon Myers e9566f614a
Merge pull request #1064 from mozilla/replace_timer_with_threads 
Replace timer with threads
 2019-02-28 12:31:49 -05:00
Brandon Myers e16ec577bf
Remove .keys() call during key exists comparison 2019-02-15 12:11:15 -06:00
Brandon Myers ea53957621
Merge remote-tracking branch 'origin/master' into replace_timer_with_threads 2019-01-30 13:22:52 -06:00
Brandon Myers 57c5dad652
Replace timer with threads 2019-01-23 11:59:31 -06:00
Brandon Myers 08749db287
Modify import for get_aws_credentials 2019-01-22 12:39:35 -06:00
Brandon Myers 7576a55ed7
Merge pull request #990 from ryandeivert/ryandeivert-dry-get-creds 
deduplicating get_aws_credentials function
 2019-01-22 12:35:23 -06:00
Brandon Myers fc771bd531
Remove unused import statements 2018-12-14 11:34:42 -06:00
Jeff Bryner 410eb27e1b explicitly accept/map 'source' field 2018-12-03 15:38:24 -05:00
Ryan Deivert 42032a99a7 deduplicating get_aws_credentials function 2018-11-29 15:37:45 -08:00
andrewkrug 440d50478d
fix flake 8 error 2018-11-21 07:43:37 -08:00
andrewkrug a14f51fd0e
standardize es_worker credential handling 2018-11-21 06:13:48 -08:00
andrewkrug 209e292bd8
fix nits 2018-10-23 10:31:27 -07:00
Zack Mullaly 71f397fd5a Fixed some broken imports 2018-10-17 16:03:00 -07:00
Zack Mullaly 13a6c7401b Replace all the imports to use mozdef_util 2018-10-16 12:45:04 -07:00
Brandon Myers fed01844d9
Modify sqs worker to drop non dict messages 2018-10-02 14:53:33 -04:00
Brandon Myers ceebae3c6c
Modify mq workers to stop when ctrl-c 2018-09-25 19:59:07 -05:00
Brandon Myers 43d499efb7
Modify sqs workers to handle network connection error 2018-09-25 19:57:39 -05:00
Brandon Myers 80e3cc78b9
Removed unused sys exit in sqs worker 2018-08-06 13:11:39 -05:00
Brandon Myers a4980a249f
Modify workers to stop bulk queue on errors 2018-08-06 13:09:58 -05:00
Brandon Myers eb7ec7ad6a
Modify workers to handle details key as non dict 2018-01-25 12:33:55 -06:00
Brandon Myers 7833800975
Modify sqs worker to use logger 2018-01-12 14:50:45 -06:00
Brandon Myers 7c602afdf9
Switch workers to use lib functions 2018-01-11 16:07:12 -06:00
Brandon Myers c60c7b8c36
Remove extra line after copywrite date 2018-01-04 17:15:35 -06:00
Yash Mehrotra 90d7e3b6d3
Remove free-form 'Contributor:' text from code. Fixes #407 2017-12-23 02:14:53 +05:30
Brandon Myers 8ef7c4fd71
Merge remote-tracking branch 'origin' into add_events_class 2017-10-10 13:15:51 -05:00
Phrozyn bc3b56d151
Corrected some typos and added syslog change to syslog filter 2017-09-05 11:58:05 -05:00
Phrozyn 1a1a892dac
Merge branch 'master' of https://github.com/Phrozyn/MozDef into replace_dots_with_underscores_in_filenames 2017-09-05 10:18:09 -05:00
Phrozyn 4f1007a134
Updated code to reflect naming convention changes. 2017-08-25 12:17:53 -05:00
Phrozyn 2c415b673b
updated dots to underscores 2017-08-25 11:58:31 -05:00