-
Hi,
With most data moving to data_stream.dataset, please can you add data_stream.dataset to the security alert mapping?
Also copy the data_stream.dataset from the parent event when it exists.
…
-
Currently, `episoap` is geared toward easily generating template RMarkdown reports, which is great for analysts that don't want to get into code. However, analysts that are happy to get into code coul…
-
https://github.com/cisagov/vulnrichment/blob/6a33bf2996451d4f5ebadba4d04509d7d4f3f70b/2023/38xxx/CVE-2023-38831.json#L113
Suppose that I wish to quickly check whether CVE-2023-38831 is used in ransom…
-
### Issue description
When a domain is removed from the registry, its status is "deleted." To ensure it's information is preserved for historical reference, we do not want analysts to make modificati…
-
*Please ensure your feature request is not already on the roadmap or associated with an issue. This can be checked [here](https://github.com/orgs/dfir-iris/projects/1/views/4).*
**Is your feature r…
-
#### Tasks:
Monday-Wednesday checkins include project overview meetings with analysts
- [x] Review the SOW/contract.
- [Proposal_PBQETOQG_Scott (2).pdf](https://github.com/user-attachments/fil…
-
# CDN 2024
![CDN illustration](https://raw.githubusercontent.com/HTTPArchive/almanac.httparchive.org/main/src/static/images/2019/cdn/hero_lg.jpg)
If you're interested in contributing to the CDN …
nrllh updated
1 month ago
-
This could be relevant for analysts (I suppose a real usecase) and in general for us out of interest (the important usecase).
vmcj updated
2 months ago
-
Como ahora se está uniendo un equipo de QA Analysts, debemos:
- [ ] Agregar más flujos de pruebas sencillas.
- [ ] Documentar mejor el paso a paso de las pruebas que ya estan
https://www.notion…
-
**Describe the feature**:
Provides a feature to display relationships (either directed or undirected) between security rules such that those relationships correspond to the relationships between th…