CoPilot commits | Ecosyste.ms: OpenCollective

Stack provisioning (#167)

* Update provision_content_pack_route description

* added stack provisioning api/types

* F...

github.com/socfortress/CoPilot - 8fa4f66207ef3f73383d8cb50a8030ade7acf5d3 authored 7 months ago by taylor_socfortress <[email protected]>

Update Wazuh active response configuration for Windows endpoint

github.com/socfortress/CoPilot - 4c582db4f233b6df969972fc984279f81abcb7ba authored 7 months ago by Taylor <[email protected]>

Custom alerting (#166)

* Add custom alert provisioning functionality

* Refactor custom field name validation and pro...

github.com/socfortress/CoPilot - 4c83fc2703aefe2fddcc6eaffd80133f51a0ccdd authored 7 months ago by taylor_socfortress <[email protected]>

Custom default settings (#165)

* Update error message for existing customer provisioning default settings

* office365 exchan...

github.com/socfortress/CoPilot - fdef46e64a9fb58d0a70e2a9a5cb4d1a5cbfcee3 authored 7 months ago by taylor_socfortress <[email protected]>

updated overview page (#164)

Co-authored-by: Davide Di Modica <[email protected]>

github.com/socfortress/CoPilot - 8e3abbcbbbbe47b348428dde1d117e6d4fb4fee7 authored 7 months ago by taylor_socfortress <[email protected]>

Update docker-compose.yml to version v0.0.4

github.com/socfortress/CoPilot - 66f6812c085ac76f411f06f31701fc4419ee4beb authored 7 months ago by Taylor <[email protected]>

Active response (#163)

* local-dev url change

* Update ActiveResponse API response model

* for wazuh content pack...

github.com/socfortress/CoPilot - 4756dc9bfc9a93269b9feeac583759c92c1043c8 authored 7 months ago by taylor_socfortress <[email protected]>

Fetch assets within iris alert (#162)

* Add endpoint to fetch assets by alert ID

* Update CaseModel state_id and state_name fields
...

github.com/socfortress/CoPilot - dc5fda1b7bd58974162822e6de8faf8c5ca36ba7 authored 7 months ago by taylor_socfortress <[email protected]>

instead of raising error, return no results found (#160)

github.com/socfortress/CoPilot - 20eee2cc0bad165f6d243ff837f0b71ad318c886 authored 7 months ago by taylor_socfortress <[email protected]>

Refactor agent retrieval in wazuh.py to get agent by hostname rather than agent id (#159)

github.com/socfortress/CoPilot - 8fba867d74d644381cdd9e31830d524bda873b1b authored 7 months ago by taylor_socfortress <[email protected]>

Update query in provision_wazuh_monitoring_alert function

github.com/socfortress/CoPilot - c7ee35057011d486f2e78aa3bfb7f034c239eadf authored 7 months ago by Taylor <[email protected]>

Alert provisioning fixes (#158)

* Update monitoring alert URL in provision.py

* Add ALERT_FORWARDING_IP configuration

* Up...

github.com/socfortress/CoPilot - 6cbbaaf31b3b6b159bc1f935faf195e3caa95791 authored 7 months ago by taylor_socfortress <[email protected]>

Update GraylogEventNotificationsNotification config type

github.com/socfortress/CoPilot - a0cb6f4083be6d23278291d27710c3332177412e authored 7 months ago by Taylor <[email protected]>

Add customer meta table update functionality*** (#157)

* Add customer meta table update functionality***

* precommit fixes

github.com/socfortress/CoPilot - e86e4161229acc19e8213ad04a01345729bd38ca authored 7 months ago by taylor_socfortress <[email protected]>

precommit fixes

github.com/socfortress/CoPilot - e4203b5399419b50504a7548883a78e7ca499b6e authored 7 months ago by Taylor <[email protected]>

Add 'verify' parameter to construct_grafana_url function (#156)

github.com/socfortress/CoPilot - fec4a30f1715d184f97d902e3884e6fad6b09e27 authored 7 months ago by taylor_socfortress <[email protected]>

Add verify_ssl=False to InfluxDB client configuration

github.com/socfortress/CoPilot - 5ef9b1f06119cc204709d29050013400c89c206f authored 7 months ago by Taylor <[email protected]>

Update GrafanaApi instantiation to disable SSL verification (#154)

github.com/socfortress/CoPilot - 33df2ede56f7d2c4dac3766d452c53a730709360 authored 7 months ago by taylor_socfortress <[email protected]>

Add session parameter to get_all_alerts_assigned_to_user function

github.com/socfortress/CoPilot - bf47def2c2cebc3790abcb423cc747bdf7ab9a26 authored 7 months ago by Taylor <[email protected]>

Update InfluxDB organization in verify_influxdb_credentials() function

github.com/socfortress/CoPilot - e5629b23566115d5b2b5eabc1986898e8124a6df authored 7 months ago by Taylor <[email protected]>

Add verify_ssl=False to InfluxDB client creation (#153)

github.com/socfortress/CoPilot - df3e4ea212681d1750df0c2260c4a1ec1febcc15 authored 7 months ago by taylor_socfortress <[email protected]>

Update README.md (#152)

github.com/socfortress/CoPilot - 95bcd5b5c504140a7437a21d140a49b016f900b8 authored 7 months ago by taylor_socfortress <[email protected]>

Delete soc alerts bug fix (#151)

* Add session parameter to purge_alerts_route() function

* precommit fixes

github.com/socfortress/CoPilot - 9ed255fb421beddb56210460d411d37e527507eb authored 7 months ago by taylor_socfortress <[email protected]>

Create SECURITY.md

github.com/socfortress/CoPilot - 3b081e1b0fd721b5adfa7de6dc6ef26998418116 authored 7 months ago by taylor_socfortress <[email protected]>

Remove provision Praeco Alert Application link

github.com/socfortress/CoPilot - ba955bcfc22a69504b077d1d8ee317d01bd8d461 authored 7 months ago by Taylor <[email protected]>

Update upgrade instructions for Copilot containers

github.com/socfortress/CoPilot - c11328dd552a4b27f7d68a11eab81e586d2afdbe authored 7 months ago by Taylor <[email protected]>

Update index names in SAP SIEM services

github.com/socfortress/CoPilot - 6a8c58fc84d1669bd6189e4ae8445b43d044857f authored 7 months ago by Taylor <[email protected]>

Add SAP SIEM integration documentation and update backend API target

github.com/socfortress/CoPilot - 9672314e6b375f485e96b7849ddf446cd213e7c1 authored 7 months ago by Taylor <[email protected]>

Sapi siem integration (#149)

* Fix integration name with spaces and add SAP SIEM integration and auth keys

* Add SAP SIEM ...

github.com/socfortress/CoPilot - 094753d954af6c32715c06d8bf917fac916aeafc authored 7 months ago by taylor_socfortress <[email protected]>

Update user authentication logic

github.com/socfortress/CoPilot - 180a76791e524e852aed826dc968715ac93ecb25 authored 7 months ago by Taylor <[email protected]>

Update API target in vite.config.mts for local dev no containers

github.com/socfortress/CoPilot - f3ad6214b6b661d60fd208a123f0a5328d355e8f authored 7 months ago by Taylor <[email protected]>

Update GitHub Sponsors link

github.com/socfortress/CoPilot - 4eae9f744aa86434cdd4a4021274ba111f2e9328 authored 7 months ago by Taylor <[email protected]>

Add .env file to copilot-backend service

github.com/socfortress/CoPilot - 985dde815a2a58de7397fe0403479f9a083a3b1a authored 7 months ago by Taylor <[email protected]>

Suricata alerts (#146)

* add iris customer id to the alert search within iris to only filter on alert basaed on the cus...

github.com/socfortress/CoPilot - daaef99813abc81e0cb9eadde5e655e4d02517be authored 7 months ago by taylor_socfortress <[email protected]>

Deployment changes (#144)

* Move environment variables and defaults to backend

* Remove pre-built certs

* Move every...

github.com/socfortress/CoPilot - 0be979afc230cba41786c3cea50f836b6f80da42 authored 7 months ago by Terry Smith <[email protected]>

Enable timefield (#145)

* fallback to `timefield` if `timestamp_utc` cannot be mapped

* precommit fixes

github.com/socfortress/CoPilot - d9203195a7b24e3dbe0dabbf718e5009dfea7fa2 authored 7 months ago by taylor_socfortress <[email protected]>

Create file-store directory in backend container (#139)

github.com/socfortress/CoPilot - e9743ced690732f9b43095948b6045715114703d authored 7 months ago by taylor_socfortress <[email protected]>

Fetch more wazuh agents (#138)

* Update agent collection limit based on total affected items

* Refactor agent collection log...

github.com/socfortress/CoPilot - d7867fa1d18e5fa687a5b2ba80d78fe04201aa60 authored 7 months ago by taylor_socfortress <[email protected]>

Additional upgrade commands

github.com/socfortress/CoPilot - fb5a3e9f5c7103560e92653ff13bcbee140fa4ca authored 7 months ago by Taylor <[email protected]>

Update YouTube Tutorial link in README

github.com/socfortress/CoPilot - 902bd885992e5964e0f67795158046aa1b0b93fe authored 7 months ago by Taylor <[email protected]>

Update FUNDING.yml

github.com/socfortress/CoPilot - 0fcd0a406a16390d2f1a6201e5470adc407906f3 authored 7 months ago by taylor_socfortress <[email protected]>

Precommit fixes (#137)

* precommits

* precommit adjustments

github.com/socfortress/CoPilot - c599b707aee65b5c49f5ea028cb8daa1f26eba74 authored 7 months ago by taylor_socfortress <[email protected]>

precommit fixes

github.com/socfortress/CoPilot - 46da51ca73ac55c7bb2edb9d6e91449707e5a076 authored 7 months ago by Taylor <[email protected]>

Refactor (#136)

* Split Dockerfile into two containers

* split project (be/fe)

* updated docker

* Updat...

github.com/socfortress/CoPilot - b3f39683269d57d9d24b84cf9e7a577e49623ac9 authored 7 months ago by taylor_socfortress <[email protected]>

Suricata alert (#134)

* provision suricata alert within graylog

* Add get_notification_id function to retrieve noti...

github.com/socfortress/CoPilot - cea2786fa1ae17dc3ef27149c1c7c0084c860be1 authored 8 months ago by taylor_socfortress <[email protected]>

Update monitoring alert URL in provision service

github.com/socfortress/CoPilot - 208da5ffdfa97d5ec43079ee3ffbbb9f6e4733c4 authored 8 months ago by Taylor <[email protected]>

Fix job_metadata query in invoke_wazuh_monitoring_alert()

github.com/socfortress/CoPilot - a8f2f22ff1626b1e3d4bb561a1804c5e60f6579b authored 8 months ago by Taylor <[email protected]>

Alert processing (#133)

* Add alert removal in analyze_wazuh_alerts function

* Add MonitoringWazuhAlertsRequestModel ...

github.com/socfortress/CoPilot - 2d054ad505863877d9a22dcac9734d240fd3cc4e authored 8 months ago by taylor_socfortress <[email protected]>

Agent sync changes (#130)

* Handle exception when fetching Velociraptor Agent

* Add verification after saving file for ...

github.com/socfortress/CoPilot - 366c36ed37ac7bd0077dfe4235febae8f1230c4c authored 8 months ago by taylor_socfortress <[email protected]>

Add GitHub Sponsors badge to README

github.com/socfortress/CoPilot - 51f70db10f8ca178802567a5228540acea67792b authored 8 months ago by Taylor <[email protected]>

Create FUNDING.yml

github.com/socfortress/CoPilot - 8fec10c1eaa5b096a3229296989d3a8f12396e1e authored 8 months ago by taylor_socfortress <[email protected]>

Add instructions for upgrading Copilot

github.com/socfortress/CoPilot - 581c8a4ad9606b1c48b3699bedf5bbe857c6bc12 authored 8 months ago by Taylor <[email protected]>

Alert limiting (#128)

* Add MonitoringAlerts model

* Add monitoring alert router to app.include_router()

* Add G...

github.com/socfortress/CoPilot - 1cebd2ef26dc8cdfce82963579f63e1e7aba37e0 authored 8 months ago by taylor_socfortress <[email protected]>

Enable mimecast (#127)

* Migrate integration auth key lookups to utils for universal use

* delete customer integrati...

github.com/socfortress/CoPilot - eb2054bb4d85f077c45e7bd44dd564cf1aae49c6 authored 8 months ago by taylor_socfortress <[email protected]>

Remove logging statement in get_connectors function (#126)

github.com/socfortress/CoPilot - 92a3108a34155ce4b3265ea460f0c35f2c9a3bcd authored 8 months ago by taylor_socfortress <[email protected]>

add link to youtube playlist (#122)

github.com/socfortress/CoPilot - 0ea4fdc16231835acfae15a81aaa9a363569677b authored 8 months ago by taylor_socfortress <[email protected]>

Add helpful docker DNS setting

github.com/socfortress/CoPilot - 9272c8acca1ac63b125195f5918660a3ed8d3eb4 authored 8 months ago by Taylor <[email protected]>

Update YouTube tutorial link in README

github.com/socfortress/CoPilot - 0f206ae69af3c42a5336de05839248ef303f4960 authored 8 months ago by Taylor <[email protected]>

Update connector descriptions

github.com/socfortress/CoPilot - 488445d15e29cc7b2880cac6a2678304eef8393f authored 8 months ago by Taylor <[email protected]>

Update environment variables in docker-compose.yml

github.com/socfortress/CoPilot - 42b6383fa705a2da5e9b2c14bd54bbd44a14558c authored 8 months ago by Taylor <[email protected]>

Update connector URLs to use 1.1.1.1

github.com/socfortress/CoPilot - 4e81874f296245975472aebf66ec1e63e42d84de authored 8 months ago by Taylor <[email protected]>

Add error handling for unconfigured Wazuh Indexer connector

github.com/socfortress/CoPilot - eb93826f257773e0106a4e334df613de93592c9e authored 8 months ago by Taylor <[email protected]>

Update environment variable names in docker-compose.yml

github.com/socfortress/CoPilot - 26a48c947a113e1a79ab6da311ab495d4dfa22d4 authored 8 months ago by Taylor <[email protected]>

Update hello message in copilot.py

github.com/socfortress/CoPilot - 8226a42eff92fa7aaa93065d2d4757d256532ecc authored 8 months ago by Taylor <[email protected]>

Fix integration name in MimecastRequest class

github.com/socfortress/CoPilot - 7192b035cdd87965bb42cbd2092f255be625bb73 authored 8 months ago by Taylor <[email protected]>

Update server IP and API URLs

github.com/socfortress/CoPilot - de0f5f651053679ac52b4ae176ffc6dcd30ba0d9 authored 8 months ago by Taylor <[email protected]>

updated soc alert card

github.com/socfortress/CoPilot - 9c0a87f58872e2a243851c0409dc2880c8502e21 authored 8 months ago by Davide Di Modica <[email protected]>

added customer code to /soc/alerts

github.com/socfortress/CoPilot - 08d3fecc16d87ab66fa9b62f2e88d7896f3b5f31 authored 8 months ago by Taylor <[email protected]>

Update docker compose command to run in detached mode and add related repositories

github.com/socfortress/CoPilot - d6d5381e1cd98fe85864f984d2832c3ac60c2e1d authored 8 months ago by Taylor <[email protected]>

Update WAZUH_INDEXER_URL in .env.example

github.com/socfortress/CoPilot - 4446c3ce55a251eeb6fb0e8ecca860747a6a7c86 authored 8 months ago by Taylor <[email protected]>

precommit fixes

github.com/socfortress/CoPilot - c16de0167f33c33d33592bf45a6cd6914dc23a69 authored 8 months ago by Taylor <[email protected]>

mimecast provision start scheduler

github.com/socfortress/CoPilot - 2bea5093f502f1f2a38d4a93de2bb23d1d457ab7 authored 8 months ago by Taylor <[email protected]>

mimecast integration deployment

github.com/socfortress/CoPilot - 37199dbe458f617aff79433976a533f623886988 authored 8 months ago by Taylor <[email protected]>

add get_customer_code to get soc alert by id

github.com/socfortress/CoPilot - ad3a89f5089f0a19917ae981a77c4e9a4c5051c7 authored 8 months ago by Taylor <[email protected]>

Merge branch 'main' of https://github.com/socfortress/CoPilot

github.com/socfortress/CoPilot - ce54c1855210e9a9399dc03698b3ed8ac0fb6c9d authored 8 months ago by Taylor <[email protected]>

add get_ttp_urls to mimecast integration

github.com/socfortress/CoPilot - 0edfa97e01f8c2b05faa11a96729a1439ba70319 authored 8 months ago by Taylor <[email protected]>

updated lint

github.com/socfortress/CoPilot - 8ded76ad6f6a2c5c0e00bccf46e3aba9b521b005 authored 8 months ago by Davide Di Modica <[email protected]>

updated soc case modal

github.com/socfortress/CoPilot - c5f700d4f54cb492b01ea5a60462244af8a18cce authored 8 months ago by Davide Di Modica <[email protected]>

Add customer code to get_single_case_route

github.com/socfortress/CoPilot - 55cb7c043a7e421de26ba12c09c7603d144dc309 authored 8 months ago by Taylor <[email protected]>

refactor

github.com/socfortress/CoPilot - 5d2500dc05b3018b95f6d129f7d3d89c078e1d40 authored 8 months ago by Davide Di Modica <[email protected]>

precommit fixes

github.com/socfortress/CoPilot - 95ca16c7d67e69d0af52e495528bd4651c5aa139 authored 8 months ago by Taylor <[email protected]>

Remove unnecessary comment and improve case retrieval in get_all_cases() function

github.com/socfortress/CoPilot - 97fe464937929d9d8b12e0efc9dbaaf36739c696 authored 8 months ago by Taylor <[email protected]>

Remove unnecessary logging statements in get_customer_code function

github.com/socfortress/CoPilot - 25d6d48f9bdee9e6c4a70c83b80e832fd23fe177 authored 8 months ago by Taylor <[email protected]>

Add customer code to case response

github.com/socfortress/CoPilot - d5443d21358b258efd002dd02225a9052f13cdae authored 8 months ago by Taylor <[email protected]>

Precommit fixes (#120)

* Remove unused import statement

* more precommit fixes

* precommit fixes

* added asset...

github.com/socfortress/CoPilot - a8faa66098fba3c9e05e568b9b2c7392592508a9 authored 8 months ago by taylor_socfortress <[email protected]>

Pre commits (#119)

* precommit-syntax changes

* Add CoPilot documentation and fix session dependency

* Update...

github.com/socfortress/CoPilot - 9a908ce4a94f4d4e8cf51d0d0d05a6157edb1901 authored 8 months ago by taylor_socfortress <[email protected]>

Remove ci.yml workflow file

github.com/socfortress/CoPilot - c5ec8a1d623ab8594145c018a65de35a64641ac1 authored 8 months ago by Taylor <[email protected]>

Connector update (#118)

* Add connector_extra_data field to UpdateConnector class

* Add Event Shipper Service to Conn...

github.com/socfortress/CoPilot - 2f64d8b486ae77b1a3289bd19afd3fb45230db38 authored 8 months ago by taylor_socfortress <[email protected]>

Update issue templates

github.com/socfortress/CoPilot - 4ff2fe07ec23a3c4c6fd7b860c7b523adc81d826 authored 8 months ago by taylor_socfortress <[email protected]>

added delete integration feature

github.com/socfortress/CoPilot - 04e1626b6e5b25f5e9af79eba31c5d863d482c31 authored 8 months ago by Davide Di Modica <[email protected]>

Integrations (#117)

* add security to routes

* Add integration details to available integrations

* Add endpoin...

github.com/socfortress/CoPilot - 3fa404c6afec3a9d41d66598fdd7cecc52690b84 authored 8 months ago by taylor_socfortress <[email protected]>

Soc alerts delete (#116)

* Add delete_alert_route to alerts.py and implement delete_alert function in services.py

* Ad...

github.com/socfortress/CoPilot - 29fbfb55583d7277da47c75f487bafe729eba77c authored 8 months ago by taylor_socfortress <[email protected]>

Agent cases (#115)

* Add close case route and service

* Add reopen case functionality

* added agent case list...

github.com/socfortress/CoPilot - ba629f0ceee803b6fdbcf997e8d3a8afeb5467bc authored 8 months ago by taylor_socfortress <[email protected]>

Refactor collect_agent_soc_cases function to filter cases by agent ID

github.com/socfortress/CoPilot - e3ea78ed1a78bb9e6fe5b99d06155824991d5a3e authored 8 months ago by Taylor <[email protected]>

Add purge single case route and schema

github.com/socfortress/CoPilot - 33360b689163b313f5190006d06501893c7dbdee authored 8 months ago by Taylor <[email protected]>

Add SOC cases endpoint and purge cases functionality

github.com/socfortress/CoPilot - bd421df5bcc2647db558a8182f54e4893142b6d8 authored 8 months ago by Taylor <[email protected]>

Fix alert creation API and update asset tags

github.com/socfortress/CoPilot - 7b3bf7020e72a286fe80cfedcacf1c0788f559fa authored 8 months ago by Taylor <[email protected]>

Add dotenv and use environment variable for server IP

github.com/socfortress/CoPilot - aadffae17459ad9bbf4420df572dae884ec804f6 authored 8 months ago by Taylor <[email protected]>

Recap (#114)

* begin password reset token

* return 401 if User is `None`

* Implement password reset log...

github.com/socfortress/CoPilot - b94098300ae7ca783d03a79c59c696e63b561006 authored 8 months ago by taylor_socfortress <[email protected]>

Overview page (#113)

* added overview page

* Add check for unique ports in customer provisioning

* Add wazuh AP...

github.com/socfortress/CoPilot - a019579d05e99f486363631e44073e5f79ea2bb1 authored 9 months ago by taylor_socfortress <[email protected]>