Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fixing requirements for certain functions #385

Merged
merged 4 commits into from
Oct 19, 2023
Merged

Fixing requirements for certain functions #385

merged 4 commits into from
Oct 19, 2023

Conversation

grantjoy
Copy link
Contributor

@grantjoy grantjoy commented Oct 19, 2023 •
edited
Loading

Background

Recent changes were too strict around validating AWS connections as opposed to using an API key. This fixes those requirements.

Changes

  • Reverts get_backend, adds a new get_api_backend, and calls the new get_api_backend just for validate and benchmark.

Testing

Using AWS creds:

> pipenv run panther_analysis_tool upload --skip-tests --batch                 7:51:19
[INFO][botocore.credentials]: Found credentials in environment variables.
[INFO][root]: Zipping analysis items in . to .
[INFO][root]: Uploading Batch 1...
[INFO][root]: Uploading items to Panther

> pipenv run panther_analysis_tool validate                                 7:51:2
[ERROR][root]: Backend not found: "This function requires an API token. API token not found."

@grantjoy grantjoy requested a review from a team October 19, 2023 16:19
@grantjoy grantjoy enabled auto-merge (squash) October 19, 2023 16:22
@grantjoy grantjoy merged commit 7e7798e into master Oct 19, 2023
@grantjoy grantjoy deleted the aws_creds_bugfix branch October 19, 2023 16:24
ben-githubs added a commit to ben-githubs/patdb that referenced this pull request Feb 16, 2024
@ben-githubs @grantjoy
@panther-bot-automation @nskobov @stedrow @darwayne @yusufak-panther @zacbrown @kostaspap @maxrichie5 @melenevskyi @LucySuddenly @dependabot
Merge/0.40.0 (#1)
9adf0ac 
* Detections Inheritance (panther-labs#375)

* Validation for derived detections.

* Auto-format files

* refactor

* Auto-format files

* progress

* progress

* progress

* Auto-format files

* progress

* Auto-format files

* test

* hmm

* trying something else

* Auto-format files

* progress

* progress

* Auto-format files

* progress

* Auto-format files

* prog

* progress

* Progress?

* Auto-format files

* progress

* Auto-format files

* progress

* Auto-format files

* PR feedback.

* Auto-format files

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* progress (panther-labs#378)

* adds option to skip version check (panther-labs#379)

* adds option to skip version check

* Auto-format files

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* Check that backend was set successfully (panther-labs#380)

* Better validation of backend for benchmark and validate.

* Auto-format files

* bug fix

* Auto-format files

* bug fix

* Update panther_analysis_tool/command/benchmark.py

* Update panther_analysis_tool/command/validate.py

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* version bump (panther-labs#381)

* bug fix for zip_chunker (panther-labs#383)

* bug fix for zip_chunker

* Update panther_analysis_tool/zip_chunker.py

* Update zip_chunker.py

* Fixing requirements for certain functions (panther-labs#385)

* Enforcing API token requirement better.

* Auto-format files

* Version bump.

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* bumping versions (panther-labs#386)

* version bumps (panther-labs#387)

* Allow Dependabot to update all pip package sources (panther-labs#388)

* Allow Dependabot to update all pip package sources

* Move file to .github directory

* README makeover (panther-labs#389)

* Better readme

* readme makeover

* Update README.md

* Adding github action for automating releases (panther-labs#390)

* adding github action for automating releases

* fixing steps

* fixed pr step

* adding publish_github_reelease_and_pypi job

* splitting to two gha since they both need to be manually triggered from workflow_dispatch

* Apply suggestions from code review

Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* Update .github/workflows/release_pr.yml

Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* refactored everything

* refactored everything

* removing unneeded code

* added major, minor, patch version levels

---------

Co-authored-by: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* Adding dist path for gha (panther-labs#391)

* Adding Draft flag to push PR (panther-labs#392)

* Adding body flag to version bump GHA (panther-labs#393)

* Adding [bot] to dac-bot for CLA (panther-labs#397)

* Switching to PAT for GH_TOKEN (panther-labs#399)

* Version bump to v0.31.0 (panther-labs#400)

* Bump version to 0.31.0

* Empty-Commit

---------

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: stedrow <104793655+stedrow@users.noreply.github.com>

* Updating fmt GHA logic (panther-labs#401)

* Updating GHA to main from master (panther-labs#403)

* updates panther-core (panther-labs#404)

* Updating PAT with latest regexs for validation (panther-labs#406)

* Updating PAT with latest regexs for validation

* fmt

* Version bump to v0.32.0 (panther-labs#407)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* fixes bug that prevented multiple saved queries from being uploaded (panther-labs#408)

* Bump version to 0.32.1 (panther-labs#409)

* Allowing tests to be defined in derived detection YAML (panther-labs#410)

* Add CORRELATION_RULE AnalysisType. (panther-labs#411)

* Update logic for determining if an AnalysisType is a simple detection. (panther-labs#412)

* Update logic for determining if an AnalysisType is a simple detection.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Add some tests.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Format all the things.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

---------

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Removing references to Azure.SignIn schema (panther-labs#413)

* Removed Azure.SignIn schema

* Removed from regex

* Version bump to v0.33.0 (panther-labs#414)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Add schema support for Correlation Rules (panther-labs#416)

* adds option to auto disable base (panther-labs#417)

* adds option to auto disable base

* fix lint

* formatting

* log formatting

* fmt

* Bump version to 0.34.0 (panther-labs#418)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* DAC-501 PAT can test derived detections w/ inheritance and overrides (panther-labs#420)

* can fetch base detection body when testing derived detection

* make fmt

* adds unit tests for retrieving base detections

* tests can be inherited for derived detections

* make fmt

* fix lint

* ci fix

* ci fix

* ciiiii

* MORE CI

* conditionally show correlation rule output (panther-labs#419)

* conditionally show correlation rule output

* updates

* updates

---------

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Bump version to 0.35.0 (panther-labs#424)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* pat test can fetch tests of base detection (panther-labs#423)

* pat test can fetch tests of base detection

* make fmt

* fix lint

* fix feature flags not checking for lambda exception (panther-labs#426)

* quick fix

* adds test for feature flags not erroring if using a lambda client backend

* fix lint

* Bump version to 0.35.1 (panther-labs#427)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump version to 0.36.0 (panther-labs#430)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* CreateAlert support (panther-labs#431)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Added check-packs command to check whether packs have all detections (panther-labs#421)

* Added update-packs command to check whether packs have all detections it should have

* Added test for check-pack command

* Added support for simple packs

* Added docstrings

* Bump version to 0.37.0 (panther-labs#432)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Revert "CreateAlert support" (panther-labs#434)

* Bump version to 0.37.1 (panther-labs#435)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* CreateAlert support (panther-labs#437)

* CreateAlert support

* updating packaging to have versioned deps

* updates

* regenerating lock

---------

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Bump version to 0.38.0 (panther-labs#439)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* adding pdh and removing dead code from setup (panther-labs#440)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* chore: update codeowners to DaC (panther-labs#438)

* Removing PDH because it isn't used in this project (panther-labs#441)

* fix: respect ignored files (panther-labs#442)

* Bump version to 0.38.1 (panther-labs#443)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump aiohttp from 3.8.6 to 3.9.2 (panther-labs#436)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.6 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.8.6...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lucy Suddenly <43256356+LucySuddenly@users.noreply.github.com>

* chore: version resolution (panther-labs#444)

* chore: pin panther core version

* chore: resolve versioning

* chore: update pyyaml

* chore: align pyyaml with d-e

* fixes panther-core version. (panther-labs#447)

* fixes panther-core version.

* jump versions to see if it will resolve issues

* Bump version to 0.38.2 (panther-labs#446)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: darwayne <darwaynelynch@gmail.com>

* Omit rules with Configuration Required Tag from Pack check (panther-labs#448)

* Revert pipfile changes; keep logic

* Appease the linter

* Bump version to 0.39.0 (panther-labs#449)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* adding correlation rules to async bulk upload graphql (panther-labs#450)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Update fmt.yml (panther-labs#452)

* Update fmt.yml (panther-labs#453)

* Update fmt.yml

* Update Pipfile

* Update fmt.yml

* Update Pipfile

* updates versions for release (panther-labs#454)

* Bump version to 0.40.0 (panther-labs#455)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* merged changes (with conflicts)

* updated the help text

---------

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>
Co-authored-by: nskobov <93276498+nskobov@users.noreply.github.com>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>
Co-authored-by: Scott Tedrow <104793655+stedrow@users.noreply.github.com>
Co-authored-by: panther-bot-automation <94577522+panther-bot-automation@users.noreply.github.com>
Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: darwayne <darwaynelynch@gmail.com>
Co-authored-by: yusufak-panther <87032601+yusufak-panther@users.noreply.github.com>
Co-authored-by: Zac Brown <zacbrown@users.noreply.github.com>
Co-authored-by: Kostas Papageorgiou <kostas.papageorgiou@panther.com>
Co-authored-by: Max Richmond <46904505+maxrichie5@users.noreply.github.com>
Co-authored-by: maxrichie5 <maxrichmond@panther.com>
Co-authored-by: Oleh Melenevskyi <767472+melenevskyi@users.noreply.github.com>
Co-authored-by: Lucy Suddenly <43256356+LucySuddenly@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ben-githubs added a commit to ben-githubs/patdb that referenced this pull request Mar 18, 2024
@ben-githubs @grantjoy
@panther-bot-automation @nskobov @stedrow @darwayne @yusufak-panther @zacbrown @kostaspap @maxrichie5 @melenevskyi @LucySuddenly @dependabot @le4ker
Merge/0.41.0 (#2)
5ca7b34 
* Detections Inheritance (panther-labs#375)

* Validation for derived detections.

* Auto-format files

* refactor

* Auto-format files

* progress

* progress

* progress

* Auto-format files

* progress

* Auto-format files

* test

* hmm

* trying something else

* Auto-format files

* progress

* progress

* Auto-format files

* progress

* Auto-format files

* prog

* progress

* Progress?

* Auto-format files

* progress

* Auto-format files

* progress

* Auto-format files

* PR feedback.

* Auto-format files

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* progress (panther-labs#378)

* adds option to skip version check (panther-labs#379)

* adds option to skip version check

* Auto-format files

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* Check that backend was set successfully (panther-labs#380)

* Better validation of backend for benchmark and validate.

* Auto-format files

* bug fix

* Auto-format files

* bug fix

* Update panther_analysis_tool/command/benchmark.py

* Update panther_analysis_tool/command/validate.py

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* version bump (panther-labs#381)

* bug fix for zip_chunker (panther-labs#383)

* bug fix for zip_chunker

* Update panther_analysis_tool/zip_chunker.py

* Update zip_chunker.py

* Fixing requirements for certain functions (panther-labs#385)

* Enforcing API token requirement better.

* Auto-format files

* Version bump.

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* bumping versions (panther-labs#386)

* version bumps (panther-labs#387)

* Allow Dependabot to update all pip package sources (panther-labs#388)

* Allow Dependabot to update all pip package sources

* Move file to .github directory

* README makeover (panther-labs#389)

* Better readme

* readme makeover

* Update README.md

* Adding github action for automating releases (panther-labs#390)

* adding github action for automating releases

* fixing steps

* fixed pr step

* adding publish_github_reelease_and_pypi job

* splitting to two gha since they both need to be manually triggered from workflow_dispatch

* Apply suggestions from code review

Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* Update .github/workflows/release_pr.yml

Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* refactored everything

* refactored everything

* removing unneeded code

* added major, minor, patch version levels

---------

Co-authored-by: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* Adding dist path for gha (panther-labs#391)

* Adding Draft flag to push PR (panther-labs#392)

* Adding body flag to version bump GHA (panther-labs#393)

* Adding [bot] to dac-bot for CLA (panther-labs#397)

* Switching to PAT for GH_TOKEN (panther-labs#399)

* Version bump to v0.31.0 (panther-labs#400)

* Bump version to 0.31.0

* Empty-Commit

---------

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: stedrow <104793655+stedrow@users.noreply.github.com>

* Updating fmt GHA logic (panther-labs#401)

* Updating GHA to main from master (panther-labs#403)

* updates panther-core (panther-labs#404)

* Updating PAT with latest regexs for validation (panther-labs#406)

* Updating PAT with latest regexs for validation

* fmt

* Version bump to v0.32.0 (panther-labs#407)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* fixes bug that prevented multiple saved queries from being uploaded (panther-labs#408)

* Bump version to 0.32.1 (panther-labs#409)

* Allowing tests to be defined in derived detection YAML (panther-labs#410)

* Add CORRELATION_RULE AnalysisType. (panther-labs#411)

* Update logic for determining if an AnalysisType is a simple detection. (panther-labs#412)

* Update logic for determining if an AnalysisType is a simple detection.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Add some tests.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Format all the things.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

---------

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Removing references to Azure.SignIn schema (panther-labs#413)

* Removed Azure.SignIn schema

* Removed from regex

* Version bump to v0.33.0 (panther-labs#414)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Add schema support for Correlation Rules (panther-labs#416)

* adds option to auto disable base (panther-labs#417)

* adds option to auto disable base

* fix lint

* formatting

* log formatting

* fmt

* Bump version to 0.34.0 (panther-labs#418)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* DAC-501 PAT can test derived detections w/ inheritance and overrides (panther-labs#420)

* can fetch base detection body when testing derived detection

* make fmt

* adds unit tests for retrieving base detections

* tests can be inherited for derived detections

* make fmt

* fix lint

* ci fix

* ci fix

* ciiiii

* MORE CI

* conditionally show correlation rule output (panther-labs#419)

* conditionally show correlation rule output

* updates

* updates

---------

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Bump version to 0.35.0 (panther-labs#424)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* pat test can fetch tests of base detection (panther-labs#423)

* pat test can fetch tests of base detection

* make fmt

* fix lint

* fix feature flags not checking for lambda exception (panther-labs#426)

* quick fix

* adds test for feature flags not erroring if using a lambda client backend

* fix lint

* Bump version to 0.35.1 (panther-labs#427)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump version to 0.36.0 (panther-labs#430)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* CreateAlert support (panther-labs#431)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Added check-packs command to check whether packs have all detections (panther-labs#421)

* Added update-packs command to check whether packs have all detections it should have

* Added test for check-pack command

* Added support for simple packs

* Added docstrings

* Bump version to 0.37.0 (panther-labs#432)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Revert "CreateAlert support" (panther-labs#434)

* Bump version to 0.37.1 (panther-labs#435)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* CreateAlert support (panther-labs#437)

* CreateAlert support

* updating packaging to have versioned deps

* updates

* regenerating lock

---------

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Bump version to 0.38.0 (panther-labs#439)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* adding pdh and removing dead code from setup (panther-labs#440)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* chore: update codeowners to DaC (panther-labs#438)

* Removing PDH because it isn't used in this project (panther-labs#441)

* fix: respect ignored files (panther-labs#442)

* Bump version to 0.38.1 (panther-labs#443)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump aiohttp from 3.8.6 to 3.9.2 (panther-labs#436)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.6 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.8.6...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lucy Suddenly <43256356+LucySuddenly@users.noreply.github.com>

* chore: version resolution (panther-labs#444)

* chore: pin panther core version

* chore: resolve versioning

* chore: update pyyaml

* chore: align pyyaml with d-e

* fixes panther-core version. (panther-labs#447)

* fixes panther-core version.

* jump versions to see if it will resolve issues

* Bump version to 0.38.2 (panther-labs#446)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: darwayne <darwaynelynch@gmail.com>

* Omit rules with Configuration Required Tag from Pack check (panther-labs#448)

* Revert pipfile changes; keep logic

* Appease the linter

* Bump version to 0.39.0 (panther-labs#449)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* adding correlation rules to async bulk upload graphql (panther-labs#450)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Update fmt.yml (panther-labs#452)

* Update fmt.yml (panther-labs#453)

* Update fmt.yml

* Update Pipfile

* Update fmt.yml

* Update Pipfile

* updates versions for release (panther-labs#454)

* Bump version to 0.40.0 (panther-labs#455)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump version to 0.41.0 (panther-labs#457)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Revert "Bump version to 0.41.0 (panther-labs#457)" (panther-labs#458)

This reverts commit 18d9e2a.

* format README and clear markdown linter errors (panther-labs#456)

* Ignore disabled rules during packs-check (panther-labs#459)

* Version bump to v0.41.0 (panther-labs#460)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* added debug mode checking logic

---------

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>
Co-authored-by: nskobov <93276498+nskobov@users.noreply.github.com>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>
Co-authored-by: Scott Tedrow <104793655+stedrow@users.noreply.github.com>
Co-authored-by: panther-bot-automation <94577522+panther-bot-automation@users.noreply.github.com>
Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: darwayne <darwaynelynch@gmail.com>
Co-authored-by: yusufak-panther <87032601+yusufak-panther@users.noreply.github.com>
Co-authored-by: Zac Brown <zacbrown@users.noreply.github.com>
Co-authored-by: Kostas Papageorgiou <kostas.papageorgiou@panther.com>
Co-authored-by: Max Richmond <46904505+maxrichie5@users.noreply.github.com>
Co-authored-by: maxrichie5 <maxrichmond@panther.com>
Co-authored-by: Oleh Melenevskyi <767472+melenevskyi@users.noreply.github.com>
Co-authored-by: Lucy Suddenly <43256356+LucySuddenly@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Panos Sakkos <panos.sakkos@panther.com>
ben-githubs added a commit to ben-githubs/patdb that referenced this pull request Mar 18, 2024
@ben-githubs @grantjoy
@panther-bot-automation @nskobov @stedrow @darwayne @yusufak-panther @zacbrown @kostaspap @maxrichie5 @melenevskyi @LucySuddenly @dependabot @le4ker
Merge/v0.42.0 (#3)
797bcfa 
* Detections Inheritance (panther-labs#375)

* Validation for derived detections.

* Auto-format files

* refactor

* Auto-format files

* progress

* progress

* progress

* Auto-format files

* progress

* Auto-format files

* test

* hmm

* trying something else

* Auto-format files

* progress

* progress

* Auto-format files

* progress

* Auto-format files

* prog

* progress

* Progress?

* Auto-format files

* progress

* Auto-format files

* progress

* Auto-format files

* PR feedback.

* Auto-format files

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* progress (panther-labs#378)

* adds option to skip version check (panther-labs#379)

* adds option to skip version check

* Auto-format files

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* Check that backend was set successfully (panther-labs#380)

* Better validation of backend for benchmark and validate.

* Auto-format files

* bug fix

* Auto-format files

* bug fix

* Update panther_analysis_tool/command/benchmark.py

* Update panther_analysis_tool/command/validate.py

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* version bump (panther-labs#381)

* bug fix for zip_chunker (panther-labs#383)

* bug fix for zip_chunker

* Update panther_analysis_tool/zip_chunker.py

* Update zip_chunker.py

* Fixing requirements for certain functions (panther-labs#385)

* Enforcing API token requirement better.

* Auto-format files

* Version bump.

---------

Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>

* bumping versions (panther-labs#386)

* version bumps (panther-labs#387)

* Allow Dependabot to update all pip package sources (panther-labs#388)

* Allow Dependabot to update all pip package sources

* Move file to .github directory

* README makeover (panther-labs#389)

* Better readme

* readme makeover

* Update README.md

* Adding github action for automating releases (panther-labs#390)

* adding github action for automating releases

* fixing steps

* fixed pr step

* adding publish_github_reelease_and_pypi job

* splitting to two gha since they both need to be manually triggered from workflow_dispatch

* Apply suggestions from code review

Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* Update .github/workflows/release_pr.yml

Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* refactored everything

* refactored everything

* removing unneeded code

* added major, minor, patch version levels

---------

Co-authored-by: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>

* Adding dist path for gha (panther-labs#391)

* Adding Draft flag to push PR (panther-labs#392)

* Adding body flag to version bump GHA (panther-labs#393)

* Adding [bot] to dac-bot for CLA (panther-labs#397)

* Switching to PAT for GH_TOKEN (panther-labs#399)

* Version bump to v0.31.0 (panther-labs#400)

* Bump version to 0.31.0

* Empty-Commit

---------

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: stedrow <104793655+stedrow@users.noreply.github.com>

* Updating fmt GHA logic (panther-labs#401)

* Updating GHA to main from master (panther-labs#403)

* updates panther-core (panther-labs#404)

* Updating PAT with latest regexs for validation (panther-labs#406)

* Updating PAT with latest regexs for validation

* fmt

* Version bump to v0.32.0 (panther-labs#407)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* fixes bug that prevented multiple saved queries from being uploaded (panther-labs#408)

* Bump version to 0.32.1 (panther-labs#409)

* Allowing tests to be defined in derived detection YAML (panther-labs#410)

* Add CORRELATION_RULE AnalysisType. (panther-labs#411)

* Update logic for determining if an AnalysisType is a simple detection. (panther-labs#412)

* Update logic for determining if an AnalysisType is a simple detection.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Add some tests.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Format all the things.

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

---------

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>

* Removing references to Azure.SignIn schema (panther-labs#413)

* Removed Azure.SignIn schema

* Removed from regex

* Version bump to v0.33.0 (panther-labs#414)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Add schema support for Correlation Rules (panther-labs#416)

* adds option to auto disable base (panther-labs#417)

* adds option to auto disable base

* fix lint

* formatting

* log formatting

* fmt

* Bump version to 0.34.0 (panther-labs#418)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* DAC-501 PAT can test derived detections w/ inheritance and overrides (panther-labs#420)

* can fetch base detection body when testing derived detection

* make fmt

* adds unit tests for retrieving base detections

* tests can be inherited for derived detections

* make fmt

* fix lint

* ci fix

* ci fix

* ciiiii

* MORE CI

* conditionally show correlation rule output (panther-labs#419)

* conditionally show correlation rule output

* updates

* updates

---------

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Bump version to 0.35.0 (panther-labs#424)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* pat test can fetch tests of base detection (panther-labs#423)

* pat test can fetch tests of base detection

* make fmt

* fix lint

* fix feature flags not checking for lambda exception (panther-labs#426)

* quick fix

* adds test for feature flags not erroring if using a lambda client backend

* fix lint

* Bump version to 0.35.1 (panther-labs#427)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump version to 0.36.0 (panther-labs#430)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* CreateAlert support (panther-labs#431)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Added check-packs command to check whether packs have all detections (panther-labs#421)

* Added update-packs command to check whether packs have all detections it should have

* Added test for check-pack command

* Added support for simple packs

* Added docstrings

* Bump version to 0.37.0 (panther-labs#432)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Revert "CreateAlert support" (panther-labs#434)

* Bump version to 0.37.1 (panther-labs#435)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* CreateAlert support (panther-labs#437)

* CreateAlert support

* updating packaging to have versioned deps

* updates

* regenerating lock

---------

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Bump version to 0.38.0 (panther-labs#439)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* adding pdh and removing dead code from setup (panther-labs#440)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* chore: update codeowners to DaC (panther-labs#438)

* Removing PDH because it isn't used in this project (panther-labs#441)

* fix: respect ignored files (panther-labs#442)

* Bump version to 0.38.1 (panther-labs#443)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump aiohttp from 3.8.6 to 3.9.2 (panther-labs#436)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.6 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.8.6...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lucy Suddenly <43256356+LucySuddenly@users.noreply.github.com>

* chore: version resolution (panther-labs#444)

* chore: pin panther core version

* chore: resolve versioning

* chore: update pyyaml

* chore: align pyyaml with d-e

* fixes panther-core version. (panther-labs#447)

* fixes panther-core version.

* jump versions to see if it will resolve issues

* Bump version to 0.38.2 (panther-labs#446)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: darwayne <darwaynelynch@gmail.com>

* Omit rules with Configuration Required Tag from Pack check (panther-labs#448)

* Revert pipfile changes; keep logic

* Appease the linter

* Bump version to 0.39.0 (panther-labs#449)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* adding correlation rules to async bulk upload graphql (panther-labs#450)

Co-authored-by: maxrichie5 <maxrichmond@panther.com>

* Update fmt.yml (panther-labs#452)

* Update fmt.yml (panther-labs#453)

* Update fmt.yml

* Update Pipfile

* Update fmt.yml

* Update Pipfile

* updates versions for release (panther-labs#454)

* Bump version to 0.40.0 (panther-labs#455)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Bump version to 0.41.0 (panther-labs#457)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* Revert "Bump version to 0.41.0 (panther-labs#457)" (panther-labs#458)

This reverts commit 18d9e2a.

* format README and clear markdown linter errors (panther-labs#456)

* Ignore disabled rules during packs-check (panther-labs#459)

* Version bump to v0.41.0 (panther-labs#460)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* updates panther-core to 0.8.1 (panther-labs#462)

* updates panther-core to 0.8.1

* add back lock command.

* update aiohttp to 3.9.2 and pin responses version. (panther-labs#464)

* Bump version to 0.42.0 (panther-labs#465)

Co-authored-by: dac-bot[bot] <dac-bot@panther.com>

* updates panther-core to 0.8.1 (panther-labs#466)

---------

Signed-off-by: Zac Brown <zacbrown@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Co-authored-by: panther-bot-automation <github-service-account-automation@panther.io>
Co-authored-by: nskobov <93276498+nskobov@users.noreply.github.com>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>
Co-authored-by: Scott Tedrow <104793655+stedrow@users.noreply.github.com>
Co-authored-by: panther-bot-automation <94577522+panther-bot-automation@users.noreply.github.com>
Co-authored-by: dac-bot[bot] <dac-bot@panther.com>
Co-authored-by: darwayne <darwaynelynch@gmail.com>
Co-authored-by: yusufak-panther <87032601+yusufak-panther@users.noreply.github.com>
Co-authored-by: Zac Brown <zacbrown@users.noreply.github.com>
Co-authored-by: Kostas Papageorgiou <kostas.papageorgiou@panther.com>
Co-authored-by: Max Richmond <46904505+maxrichie5@users.noreply.github.com>
Co-authored-by: maxrichie5 <maxrichmond@panther.com>
Co-authored-by: Oleh Melenevskyi <767472+melenevskyi@users.noreply.github.com>
Co-authored-by: Lucy Suddenly <43256356+LucySuddenly@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Panos Sakkos <panos.sakkos@panther.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nskobov nskobov nskobov approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@grantjoy @nskobov @panther-bot-automation