search

SmartResponse-Framework / SmartResponse.Framework

PowerShell module for developing LogRhythm SmartResponse Plugins
Other
8 stars 2 forks source link

Development - Additional LogRhythm/Case Functions #2

Closed Jt3kt closed 4 years ago

Jt3kt commented 4 years ago

Two new functions for the LogRhythm/Case module. Let me know which points may not meet the coding standard, I went to match your examples.

New Functions: Get-LrCaseEarliestEvidence Update-LrCaseEarliestEvidenceFromDrilldown

GeneCupstid commented 4 years ago

Thank you so much! I’ll review these either tonight or tomorrow afternoon, this is what I was hoping for. 👍👍

Jt3kt commented 4 years ago

Looking at it, I'm going to split the function Update-LrCaseEarliestEvidenceFromDrilldown into two functions.

Update-LrCaseEarliestEvidenceFromDrilldown and Update-LrCaseEarliestEvidence

With that change the FromDrilldown function will make use of the Update-LrCaseEarliestEvidence function while adding the ability to directly update a cases evidence marker for other scenarios.

Jt3kt commented 4 years ago

Going to send an updated pull request for these functions. No need to muddy the waters.