Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New Wazuh module to collect Office365 audit logs #8957

Merged
merged 124 commits into from
Jun 24, 2021
Merged

New Wazuh module to collect Office365 audit logs #8957

merged 124 commits into from
Jun 24, 2021

Conversation

TomasTurina
Copy link
Member

@TomasTurina TomasTurina commented Jun 10, 2021 •
edited
Loading

Related issue
#4983

Description

Office 365 module implementation to collect API logs.

Tests

  • Compilation without warnings in every supported platform
    • Linux
    • Windows
    • MAC OS X
  • Source installation
  • Package installation
  • Source upgrade
  • Package upgrade
  • Review logs syntax and correct language
  • Memory tests for Linux
    • Scan-build report
    • Coverity
    • Valgrind (memcheck and descriptor leaks check)
  • Configuration on demand reports new parameters
  • Added unit tests (for new features)

Nicogp and others added 30 commits May 7, 2021 15:03
@Nicogp
Add UT to wurl_http_get_with_header function
c900421
@Nicogp
Add structure for Office365 module
73d47bb
Added parse module
c8bb7f2
@Nicogp
Fix headers date and remove include
de7b1ea
@TomasTurina
Merge pull request #8712 from wazuh/8678-module-structure
31c0e96 
Add structure for Office365 module
Merge branch '8678-module-structure' into 8679-module-parser
2b04de4
Added test to increase coverage
ff2606b
Fixed a problem with the module name
65ced45
Merge branch 'dev-office365-module' into 8679-module-parser
2c30692
Changed 'logs' for 'events'
3c956ec
Changed 'github' for 'Office365'
b8ba685
Added '__attribute__((unused))' to wm_office365_read()
8a72ca0
Added '#endif' at the end
1d9f025
Added 60 new office365 rules
2ee9cd5
@TomasTurina
Merge branch 'master' into dev-office365-module
8acde5c
Added only_future_events as parameter
07305d4
@cborla
Added new rules
8a1c927
@cborla
Added Office 365 into description
f7b5946
@cborla
Fixed level value
beeddeb
@cborla
Added test ini file
cf707c2
Fixed number of 'rule' and 'alert'
f987607
@TomasTurina
Merge pull request #8726 from wazuh/8679-module-parser
d07865a 
Define options and write configuration parser for Office365 wodle
@TomasTurina
Added 60 new office365 rules
6b441c8
@cborla @TomasTurina
Added new rules
9ea7582
@cborla @TomasTurina
Added Office 365 into description
80ad047
@cborla @TomasTurina
Fixed level value
e7c16c4
@cborla @TomasTurina
Added test ini file
6f793fd
@TomasTurina
Fixed number of 'rule' and 'alert'
ebe9a8f
Modified rules level
f3ccd0e
Merge branch '8681-audit-logs-rules' of github.com:wazuh/wazuh into 8…
94fccb2 
…681-audit-logs-rules
@TomasTurina TomasTurina marked this pull request as ready for review June 11, 2021 04:07
TomasTurina and others added 15 commits June 11, 2021 10:40
@TomasTurina
Merge pull request #8768 from wazuh/8681-audit-logs-rules
2ef7af7 
Rules for Office365 audit-logs
@TomasTurina
Tests for wm_office365_execute_scan initial cases
8e97cf9
@cborla
Added UT wm_office365_execute_scan_content_blobs
5772f5a
Added test to wm_office365_get_logs_from_blob()
3e6d703
Merge branch '8888_dev-office365-module_ut' of github.com:wazuh/wazuh…
1e8d758 
… into 8888_dev-office365-module_ut
@TomasTurina
Add tests for main office365
1dad179
@TomasTurina
Merge branch '8888_dev-office365-module_ut' of github.com:wazuh/wazuh…
a5a08d2 
… into 8888_dev-office365-module_ut
@cborla
Added scan fail UT
8e76781
@cborla
Merge branch '8888_dev-office365-module_ut' of https://github.com/waz…
efa8e94 
…uh/wazuh into 8888_dev-office365-module_ut
@Nicogp
UT to wm_office365_execute_scan function get_logs_from_blob response …
8456791 
…null case
Fixed errors in test_wm_office365_execute_scan_all() UT
09328bc
Merge branch '8888_dev-office365-module_ut' of github.com:wazuh/wazuh…
8a21302 
… into 8888_dev-office365-module_ut
@TomasTurina
Increase coverage
d3a6b0e
@TomasTurina
Skip tests in Windows
4aff661
@TomasTurina
Merge pull request #8955 from wazuh/8888_dev-office365-module_ut
4684564 
Unit tests for Office365 module
@TomasTurina TomasTurina changed the title Dev office365 module New Wazuh module to collect Office365 audit logs Jun 11, 2021
@vikman90 vikman90 merged commit e1b9d16 into master Jun 24, 2021
@vikman90 vikman90 deleted the dev-office365-module branch June 24, 2021 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@vikman90 vikman90 vikman90 approved these changes

Assignees

@TomasTurina TomasTurina

@Nicogp Nicogp

@cborla cborla

@javabalm javabalm

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
5 participants
@TomasTurina @vikman90 @Nicogp @cborla @javabalm