-
Notifications
You must be signed in to change notification settings - Fork 429
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[TI_Cybersixgill] Change from API to TAXII for the integration #2771
Conversation
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
Awaiting feedback from Cybersixgill on a replacement for the |
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
🤖 GitHub commentsTo re-run your PR in the CI, just comment with:
|
I have now tested this with 90 days worth of data working successfully, it is fully ready for review |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Need reformatting, check is complaining.
I have a demo scheduled sometime tomorrow and will proceed with merging after that |
…ic#2771) * Changes Cybersixgill from http_endpoint to httpjson and using the TAXII Service * update changelog * changing typo in manifest icon * adding pagination support * update docs
What does this PR do?
The initial integration used to communicate with a third party python script, in collaboration with Cybersixgill we have converted this integration to rather use the TAXII server directly, this removes all third party tools requirements instead.
Checklist
changelog.yml
file.The dashboards and fields are the same, but the ingest pipeline had to be rewritten to replace the functionality initially found in the python script