Ania Kacewicz
Ania Kacewicz
Create a `domain` object which contains information about the domain registrar, creation date, etc. Replace uses of `domain` `string_t` type dictionary attribute with `hostname`. Also, create a domain profile to...
Determine whether we need the storage event class or any additional classes within the cloud category or whether the cloud api class suffices.
#### Related Issue: #989 #### Description of changes: - Added `List`, `Encrypt` and `Decrypt` activities to `datastore` event class.
Issue 985: Adding file profile to api activity, web_resources_activity and all network event classes
#### Related Issue: #985 #### Description of changes: - Created file profile - Added `file` profile to `api activity`, `web_resources_activity` and all `network` event classes.
The logs within the network and API category event classes could have enriched file information. Create a file profile and apply to these categories.
Add additional activity ids such as `Enumerate`, `Encrypt` and `Decrypt` to the datastore event class.
Per @zschmerber `Looks like JA3 is static, with JA4 coming out how do we want to accommodate the new fingerprints? https://blog.foxio.io/ja4-network-fingerprinting-9376fe9ca637`. In the network sync we discussed creating a new...