contentctl 5.0.3__tar.gz → 5.0.5__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {contentctl-5.0.3 → contentctl-5.0.5}/PKG-INFO +1 -1
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/constants.py +1 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/dashboard.py +19 -12
- contentctl-5.0.5/contentctl/templates/app_template/default/data/ui/nav/default.xml +7 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/pyproject.toml +1 -1
- contentctl-5.0.3/contentctl/templates/app_template/default/data/ui/nav/default.xml +0 -7
- {contentctl-5.0.3 → contentctl-5.0.5}/LICENSE.md +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/README.md +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/__init__.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/build.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/deploy_acs.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/DetectionTestingManager.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/GitService.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/generate_detection_coverage_badge.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureServer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/progress_bar.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/views/DetectionTestingView.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/views/DetectionTestingViewCLI.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/views/DetectionTestingViewFile.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/detection_testing/views/DetectionTestingViewWeb.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/doc_gen.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/initialize.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/inspect.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/new_content.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/release_notes.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/reporting.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/test.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/actions/validate.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/api.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/contentctl.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/enrichments/attack_enrichment.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/enrichments/cve_enrichment.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/enrichments/splunk_app_enrichment.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/helper/link_validator.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/helper/logger.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/helper/splunk_app.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/helper/utils.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/input/director.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/input/new_content_questions.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/input/yml_reader.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/abstract_security_content_objects/detection_abstract.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/abstract_security_content_objects/security_content_object_abstract.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/alert_action.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/annotated_types.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/atomic.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/base_test.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/base_test_result.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/baseline.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/baseline_tags.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/config.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/correlation_search.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/data_source.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment_email.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment_notable.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment_phantom.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment_rba.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment_scheduling.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/deployment_slack.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/detection.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/detection_metadata.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/detection_stanza.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/detection_tags.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/drilldown.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/enums.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/errors.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/integration_test.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/integration_test_result.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/investigation.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/investigation_tags.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/lookup.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/macro.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/manual_test.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/manual_test_result.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/mitre_attack_enrichment.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/notable_action.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/notable_event.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/playbook.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/playbook_tags.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/rba.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/risk_analysis_action.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/risk_event.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/risk_object.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/savedsearches_conf.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/security_content_object.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/story.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/story_tags.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/test_attack_data.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/test_group.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/threat_object.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/throttling.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/unit_test.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/unit_test_baseline.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/objects/unit_test_result.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/api_json_output.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/attack_nav_output.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/attack_nav_writer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/conf_output.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/conf_writer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/data_source_writer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/doc_md_output.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/jinja_writer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/json_writer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/svg_output.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/analyticstories_detections.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/analyticstories_investigations.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/analyticstories_stories.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/app.conf.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/app.manifest.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/collections.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/content-version.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/detection_count.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/detection_coverage.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_detection_page.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_detections.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_navigation.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_navigation_pages.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_playbooks.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_playbooks_page.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_stories.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/doc_story_page.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/es_investigations_investigations.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/es_investigations_stories.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/header.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/macros.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/panel.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/savedsearches_baselines.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/savedsearches_detections.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/savedsearches_investigations.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/server.conf.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/transforms.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/workflow_actions.j2 +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/yml_writer.py +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/README.md +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_default.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/README/essoc_story_detail.txt +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/README/essoc_summary.txt +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/README/essoc_usage_dashboard.txt +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/README.md +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/default/analytic_stories.conf +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/default/commands.conf +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/default/data/ui/views/escu_summary.xml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/default/data/ui/views/feedback.xml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/default/use_case_library.conf +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/lookups/mitre_enrichment.csv +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/metadata/default.meta +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIcon.png +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIconAlt.png +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIconAlt_2x.png +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIcon_2x.png +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/data_sources/sysmon_eventid_1.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/datamodels_cim.conf +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/datamodels_custom.conf +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/deployments/escu_default_configuration_anomaly.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/deployments/escu_default_configuration_baseline.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/deployments/escu_default_configuration_correlation.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/deployments/escu_default_configuration_hunting.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/deployments/escu_default_configuration_ttp.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/detections/application/.gitkeep +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/detections/cloud/.gitkeep +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/detections/endpoint/anomalous_usage_of_7zip.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/detections/network/.gitkeep +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/detections/web/.gitkeep +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/macros/security_content_ctime.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/macros/security_content_summariesonly.yml +0 -0
- {contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/stories/cobalt_strike.yml +0 -0
|
@@ -123,6 +123,7 @@ ES_MAX_STANZA_LENGTH = 99
|
|
|
123
123
|
CONTENTCTL_DETECTION_STANZA_NAME_FORMAT_TEMPLATE = (
|
|
124
124
|
"{app_label} - {detection_name} - Rule"
|
|
125
125
|
)
|
|
126
|
+
|
|
126
127
|
CONTENTCTL_BASELINE_STANZA_NAME_FORMAT_TEMPLATE = "{app_label} - {detection_name}"
|
|
127
128
|
CONTENTCTL_RESPONSE_TASK_NAME_FORMAT_TEMPLATE = (
|
|
128
129
|
"{app_label} - {detection_name} - Response Task"
|
|
@@ -1,15 +1,16 @@
|
|
|
1
|
+
import json
|
|
2
|
+
import pathlib
|
|
3
|
+
from enum import StrEnum
|
|
1
4
|
from typing import Any
|
|
2
|
-
from pydantic import Field, Json, model_validator
|
|
3
5
|
|
|
4
|
-
import pathlib
|
|
5
6
|
from jinja2 import Environment
|
|
6
|
-
import
|
|
7
|
-
|
|
7
|
+
from pydantic import Field, Json, model_validator
|
|
8
|
+
|
|
8
9
|
from contentctl.objects.config import build
|
|
9
|
-
from
|
|
10
|
+
from contentctl.objects.security_content_object import SecurityContentObject
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
<label>{{ dashboard.
|
|
12
|
+
DEFAULT_DASHBOARD_JINJA2_TEMPLATE = """<dashboard version="2" theme="{{ dashboard.theme }}">
|
|
13
|
+
<label>{{ dashboard.name }}</label>
|
|
13
14
|
<description></description>
|
|
14
15
|
<definition><![CDATA[
|
|
15
16
|
{{ dashboard.pretty_print_json_obj() }}
|
|
@@ -31,7 +32,7 @@ class DashboardTheme(StrEnum):
|
|
|
31
32
|
|
|
32
33
|
class Dashboard(SecurityContentObject):
|
|
33
34
|
j2_template: str = Field(
|
|
34
|
-
default=
|
|
35
|
+
default=DEFAULT_DASHBOARD_JINJA2_TEMPLATE,
|
|
35
36
|
description="Jinja2 Template used to construct the dashboard",
|
|
36
37
|
)
|
|
37
38
|
description: str = Field(
|
|
@@ -48,9 +49,6 @@ class Dashboard(SecurityContentObject):
|
|
|
48
49
|
..., description="Valid JSON object that describes the dashboard"
|
|
49
50
|
)
|
|
50
51
|
|
|
51
|
-
def label(self, config: build) -> str:
|
|
52
|
-
return f"{config.app.label} - {self.name}"
|
|
53
|
-
|
|
54
52
|
@model_validator(mode="before")
|
|
55
53
|
@classmethod
|
|
56
54
|
def validate_fields_from_json(cls, data: Any) -> Any:
|
|
@@ -98,7 +96,16 @@ class Dashboard(SecurityContentObject):
|
|
|
98
96
|
return json.dumps(self.json_obj, indent=4)
|
|
99
97
|
|
|
100
98
|
def getOutputFilepathRelativeToAppRoot(self, config: build) -> pathlib.Path:
|
|
101
|
-
|
|
99
|
+
if self.file_path is None:
|
|
100
|
+
raise FileNotFoundError(
|
|
101
|
+
f"Dashboard {self.name} file_path was None. Dashboards must be backed by a file."
|
|
102
|
+
)
|
|
103
|
+
# Prefix with the appLabel__ in order to make a search for these easy with match="__"
|
|
104
|
+
# in the default.xml file
|
|
105
|
+
filename = f"{config.app.label}__{self.file_path.stem}.xml".lower().replace(
|
|
106
|
+
" ", "_"
|
|
107
|
+
)
|
|
108
|
+
|
|
102
109
|
return pathlib.Path("default/data/ui/views") / filename
|
|
103
110
|
|
|
104
111
|
def writeDashboardFile(self, j2_env: Environment, config: build):
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/analyticstories_detections.j2
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/analyticstories_investigations.j2
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/analyticstories_stories.j2
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/es_investigations_stories.j2
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/savedsearches_baselines.j2
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/savedsearches_detections.j2
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/output/templates/savedsearches_investigations.j2
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/README/essoc_summary.txt
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/default/commands.conf
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/lookups/mitre_enrichment.csv
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/metadata/default.meta
RENAMED
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIconAlt.png
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIconAlt_2x.png
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/app_template/static/appIcon_2x.png
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/data_sources/sysmon_eventid_1.yml
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/macros/security_content_ctime.yml
RENAMED
|
File without changes
|
{contentctl-5.0.3 → contentctl-5.0.5}/contentctl/templates/macros/security_content_summariesonly.yml
RENAMED
|
File without changes
|
|
File without changes
|