Jasper Jürgensen

Finding status concept

1

The Finding Status is currently only a text field. Furthermore, there is no workflow followed by findings (new, confirmed, patched, mitigated, closed, false positive). Currently, the only option is to...

Logrotate config invalid

2

The logrotate config based on the `splunk_facl.j2` template created by the `configure_facl.yml` task seems to be invalid: ``` logrotate[685980]: error: splunk_facl:1 lines must begin with a keyword or a filename...

Correct schema for network-traffic http-request-ext request_header

1

The STIX2.1 standard states for network-traffic http-request-ext request_header: > The corresponding value for each dictionary key MUST always be a list of type string to support when a header field...

The standard for STIX2.1 specifies for the http-request-ext for the request_header field: > The corresponding value for each dictionary key MUST always be a list of type string to support...

Store init state failure error message is using wrong variable

5

https://github.com/opencontainers/runc/blob/main/libcontainer/process_linux.go#L551 The error message uses the `err` variable, but the error is stored in `uerr`. If an error occurs while updating the state, the resulting error message is not helpful:...

The compiled yara-python is missing a python interface file (.pyi). Without such an interface definition, support in IDEs is quite limited (no type hinting, no code completion). I've created a...