Skip to content

Releases: opencybersecurityalliance/stix-shifter

2.3.4

12 Jun 17:46
5f7917c
Compare
Choose a tag to compare
STIX pattern parsing (#136)

2.2.7

06 Mar 01:40
Compare
Choose a tag to compare
fix: pass aql query to qradar as data instead of urldata (#121)

2.2.6

01 Mar 20:20
a4f4b07
Compare
Choose a tag to compare
error codes as string (#120)

new stix shifter

06 Feb 16:05
fea0120
Compare
Choose a tag to compare

Splunk status refactor

new stix shifter

29 Jan 21:11
Compare
Choose a tag to compare

Fixed splunk transmission results response
Added free text search for qradar
Added default file hash support for qradar
Fixed network traffic object so only one exists if a mac and ip is present

Updating Splunk Start Stop qualifier parsing

25 Jan 14:18
26986d3
Compare
Choose a tag to compare
Updating Splunk Start Stop qualifier parsing (#105)

* Time format: START t'2016-06-01T01:30:00Z' not START '2016-06-01T01:30:00Z'

Updating the cim_data_mapping.py to be proper json.

* Time format change.  We accept milliseconds but do not use them.

Splunk only allows second precision.

updating manifest for packaging

23 Jan 20:12
38ee70d
Compare
Choose a tag to compare
Adding json files to be included in stix shifter package. (#104)

Default field selection option is select_fields

adding missing __init__

21 Jan 16:18
48ac5f5
Compare
Choose a tag to compare
2.0.4

Add __init__.py so module publisher can find the code. (#101)

Splunk import fix

21 Jan 15:26
Compare
Choose a tag to compare
Dynamic mapping for fields for splunk. (#100)

* Dynamic mapping for fields for splunk.

Updating Splunk and QRadar adaptors

18 Jan 18:31
2c04de7
Compare
Choose a tag to compare
2.0.2

create query needs to use body params not url params. (#99)