cisagov / untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

Creative Commons Zero v1.0 Universal

904 stars 77 forks source link

fix date filters in config parsing #61

Closed alexgoedeke closed 4 weeks ago

alexgoedeke commented 4 months ago

Fix date filters

🗣 Description

This pull request fixes the parsing of the date filters in the config file.

💭 Motivation and context

There is a bug in the parsing of the config file regards the date filter.

🧪 Testing

I dumped UAL and SignIn logs on an azure test tenant with an E5 license.

✅ Pre-approval checklist

[x] This PR has an informative and human-readable title.
[x] Changes are limited to a single goal - eschew scope creep!
[x] All relevant type-of-change labels have been added.
[x] I have read the CONTRIBUTING document.
[x] These code changes follow cisagov code standards.
[x] All relevant repo and/or project documentation has been updated to reflect the changes in this PR.

✅ Pre-merge checklist

[x] Revert dependencies to default branches.
[x] Finalize version.

✅ Post-merge checklist

[ ] Create a release.

nkantor-snl commented 4 weeks ago

Hi! Thanks for your pull request. The date filters issue has been addressed in the latest goose version so I'm going to close this pull request.