From 2d09309812e42b50000c9dafb99285025d6dfa8e Mon Sep 17 00:00:00 2001
From: Sami Mokaddem <mokaddem.sami@gmail.com>
Date: Mon, 13 May 2024 09:28:00 +0200
Subject: [PATCH 1/4] chg: [analyst-data:relationship] Prevent self-referencing
 relationships

---
 app/Model/Relationship.php | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/app/Model/Relationship.php b/app/Model/Relationship.php
index 5a1bde400f8..e0cbebdc066 100644
--- a/app/Model/Relationship.php
+++ b/app/Model/Relationship.php
@@ -38,6 +38,17 @@ class Relationship extends AnalystData
     /** @var array|null */
     private $__currentUser;
 
+    public function beforeValidate($options = array())
+    {
+        parent::beforeValidate($options);
+        // Prevent self-referencing relationships
+        if ($this->data[$this->current_type]['object_uuid'] == $this->data[$this->current_type]['related_object_uuid']) {
+            return false;
+        }
+        return true;
+
+    }
+
     public function afterFind($results, $primary = false)
     {
         $results = parent::afterFind($results, $primary);

From 76322cdbfbf614dacd12b41d159d6618e4c7c7d8 Mon Sep 17 00:00:00 2001
From: Sami Mokaddem <mokaddem.sami@gmail.com>
Date: Mon, 13 May 2024 10:42:39 +0200
Subject: [PATCH 2/4] fix: [event-report:publishing] Do not reset the event
 timestamp when updating an event report

---
 app/Model/EventReport.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/Model/EventReport.php b/app/Model/EventReport.php
index 9934eef0da2..f37a0563d42 100644
--- a/app/Model/EventReport.php
+++ b/app/Model/EventReport.php
@@ -199,7 +199,9 @@ public function editReport(array $user, array $report, $eventId, $fromPull = fal
         $errors = $this->saveAndReturnErrors($report, ['fieldList' => self::CAPTURE_FIELDS], $errors);
         if (empty($errors)) {
             $this->Event->captureAnalystData($user, $report['EventReport'], 'EventReport', $report['EventReport']['uuid']);
-            $this->Event->unpublishEvent($eventId);
+            if (!$fromPull) {
+                $this->Event->unpublishEvent($eventId);
+            }
         }
         return $errors;
     }

From 05d8947386bf22b6ae5959d8ac9e286c7843ac8a Mon Sep 17 00:00:00 2001
From: Sami Mokaddem <mokaddem.sami@gmail.com>
Date: Mon, 13 May 2024 11:28:41 +0200
Subject: [PATCH 3/4] chg: [galaxy:galaxy-matrix] Respect order of tabs based
 on kill_chain_order definition

---
 app/View/Elements/view_galaxy_matrix.ctp | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/app/View/Elements/view_galaxy_matrix.ctp b/app/View/Elements/view_galaxy_matrix.ctp
index e81027ae464..f0bb5af71bf 100644
--- a/app/View/Elements/view_galaxy_matrix.ctp
+++ b/app/View/Elements/view_galaxy_matrix.ctp
@@ -67,13 +67,14 @@ if (isset($interpolation) && !empty($interpolation)) {
 <ul id="attack-matrix-tabscontroller" class="nav nav-tabs" style="margin-bottom: 2px;">
 <?php
 if (!isset($defaultTabName)) {
-    reset($tabs);
-    $defaultTabName = key($tabs); // get first key
+    reset($columnOrders);
+    $defaultTabName = key($columnOrders); // get first key
 }
 
 if (empty($static)):
-foreach($tabs as $tabName => $column):
+foreach(array_keys($columnOrders) as $tabName):
 ?>
+<?php $column = $tabs[$tabName]; ?>
     <li class="tactic <?php echo $tabName==$defaultTabName ? "active" : ""; ?>"><span href="#tabMatrix-<?php echo h($tabName); ?>" data-toggle="tab" style="padding-top: 3px; padding-bottom: 3px;"><?php echo h($tabName); ?></span></li>
 <?php endforeach; ?>
 <?php endif; ?>
@@ -125,7 +126,8 @@ foreach($tabs as $tabName => $column):
 
 <div id="matrix_container" class="fixed-table-container-inner" style="" data-picking-mode="<?php echo $pickingMode ? 'true' : 'false'; ?>">
     <div class="tab-content">
-    <?php foreach($tabs as $tabName => $column): ?>
+    <?php foreach(array_keys($columnOrders) as $tabName): ?>
+        <?php $column = $tabs[$tabName]; ?>
         <?php
         if (!empty($static) && $tabName != $defaultTabName) {
             // We cannot hide other tabs without JS. Only releave the default one for now.

From d346b6cf74388eec8f3fa4ffdbd0af775c245e01 Mon Sep 17 00:00:00 2001
From: Sami Mokaddem <mokaddem.sami@gmail.com>
Date: Tue, 14 May 2024 11:16:16 +0200
Subject: [PATCH 4/4] fix: [audit-logs:eventIndex] Fixed pagination issue while
 viewing event history

Fix #9726
---
 app/Controller/AuditLogsController.php | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/app/Controller/AuditLogsController.php b/app/Controller/AuditLogsController.php
index 6ddee8443b9..a4df3b48313 100644
--- a/app/Controller/AuditLogsController.php
+++ b/app/Controller/AuditLogsController.php
@@ -155,8 +155,14 @@ public function admin_index()
         $this->set('title_for_layout', __('Audit logs'));
     }
 
-    public function eventIndex($eventId, $org = null)
+    public function eventIndex($eventId = null, $org = null)
     {
+        $params = $this->IndexFilter->harvestParameters(['created', 'org', 'eventId']);
+        if (!empty($params['eventId'])) {
+            $eventId = $params['eventId'];
+        } else if (empty($eventId)) {
+            $eventId = -1;
+        }
         $event = $this->AuditLog->Event->fetchSimpleEvent($this->Auth->user(), $eventId);
         if (empty($event)) {
             throw new NotFoundException('Invalid event.');
@@ -164,7 +170,6 @@ public function eventIndex($eventId, $org = null)
         $this->paginate['conditions'] = $this->__createEventIndexConditions($event);
         $this->set('passedArgsArray', ['eventId' => $eventId, 'org' => $org]);
 
-        $params = $this->IndexFilter->harvestParameters(['created', 'org']);
         if ($org) {
             $params['org'] = $org;
         }