priamai

Taxonomies are not showing in new case

4

### Request Type Bug ### Work Environment Ubuntu Scalligraph0.1.0-SNAPSHOT TheHive4.1.16-1 Play2.8.7 CORTEX local - 3.1.1-1 (OK) ### Problem Description I have imported several taxonomies from the MISP repositories but when...

Suggestion to add Praeco as elastalert visualizer

13

Hi there, is anybody working on adding Praeco to manage and visualize the Alert rules? There is a full docker configuration here: https://github.com/johnsusek/praeco My understanding is that you can simply...

Kafka enrichment for MITRE tagging via Event List

4

Hi there, I believe your colleague Miriam has an interesting project called EventList from Microsoft Security Baselines that can be used to enrich directly in Kafka the windows event logs....

what about unit test process?

4

Hi there, I haven't seen anything in the project which involves replaying winlogbeat events to make sure the events are correctly enriched and processed in ES. This will also help...

Bug explained here: https://github.com/TheHive-Project/Cortex-Analyzers/issues/835

Persist home user ssh keys into volume

1

### Proposed change When user creates their own ssh keys to interact with gitlab they will be stored in the home .ssh hidden folder. I don't want the user to...

docker notebook image is 3 years old

1

### Proposed change I have noticed that the single docker image is quite old, this commit is 3 years old. ``` # Single-user Jupyter Notebook server container image DOCKER_NOTEBOOK_IMAGE=jupyter/minimal-notebook:8ccdfc1da8d5 ```...

let's encrypt fix

1

The script uses an old syntax, it should be updated with this: ``` # Generate the cert and save it to the Docker volume docker run --rm -it \ -p...

example code for alert creation with custom fields

1

Hi there, would be nice to have an example to create an alert with the custom fields including all the main types. I think date was a new type that...

Hi there, I can't find the REST endpoint for creating an asset via API. The closest I could find is this definition ``` /assets/api/v1/delete: post: tags: - assets responses: '201':...