Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[AlienVault OTC] Populate Related IP and Related Hash Fields #8323

Merged
merged 7 commits into from Dec 5, 2023
Merged

[AlienVault OTC] Populate Related IP and Related Hash Fields #8323

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
db9f5ee
Append hashes and IPs to related.*
MakoWish Oct 27, 2023
b25c52b
Merge branch 'ti_alienvault_related_fields' of https://github.com/Mak…
MakoWish Oct 27, 2023
7922cfd
Re-run tests
MakoWish Oct 27, 2023
9311ba8
Merge branch 'ti_alienvault_related_fields' of https://github.com/Mak…
MakoWish Oct 27, 2023
e85b0e2
Add entry to changelog and increment version in manifest
MakoWish Oct 27, 2023
9077f64
Merge branch 'ti_alienvault_related_fields' of https://github.com/Mak…
MakoWish Oct 27, 2023
d7528c7
Merge branch 'main' into ti_alienvault_related_fields
MakoWish Nov 29, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
5 changes: 5 additions & 0 deletions packages/ti_otx/changelog.yml
View file
Open in desktop
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.23.0"
changes:
- description: Append hash and IP values to related.* fields
type: enhancement
link: https://github.com/elastic/integrations/pull/8323
- version: "1.22.0"
changes:
- description: Limit request tracer log count to five.
Expand Down
25 changes: 25 additions & 0 deletions ...i_otx/data_stream/threat/_dev/test/pipeline/test-otx-no-preserve-ndjson.log-expected.json
View file
Open in desktop
Expand Up @@ -14,6 +14,11 @@
]
},
"otx": {},
"related": {
"ip": [
"89.160.20.156"
]
},
"threat": {
"indicator": {
"ip": "89.160.20.156",
Expand All @@ -38,6 +43,11 @@
"description": "MD5 of a5725af4391d21a232dc6d4ad33d7d915bd190bdac9b1826b73f364dc5c1aa65",
"title": "Win32:Hoblig-B"
},
"related": {
"hash": [
"90421f8531f963d81cf54245b72cde80"
]
},
"threat": {
"indicator": {
"file": {
Expand Down Expand Up @@ -86,6 +96,11 @@
]
},
"otx": {},
"related": {
"ip": [
"89.160.20.156"
]
},
"threat": {
"indicator": {
"ip": "89.160.20.156",
Expand All @@ -107,6 +122,11 @@
]
},
"otx": {},
"related": {
"hash": [
"d8c70ca70fd3555a0828fede6cc1f59e2c320ede80157039b6a2f09c336d5f7a"
]
},
"threat": {
"indicator": {
"file": {
Expand Down Expand Up @@ -134,6 +154,11 @@
"otx": {
"description": "MD5 of df9b37477a83189cd4541674e64ce29bf7bf98338ed0d635276660e0c6419d09"
},
"related": {
"hash": [
"f8e58af3ffefd4037fef246e93a55dc8"
]
},
"threat": {
"indicator": {
"file": {
Expand Down