Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove endhoursago=1 from drilldown searches #3173

Merged
merged 5 commits into from
Oct 28, 2024
Merged

remove endhoursago=1 from drilldown searches #3173

merged 5 commits into from
Oct 28, 2024

Conversation

patel-bhavin
Copy link
Contributor

@patel-bhavin patel-bhavin commented Oct 24, 2024

Remove endhoursago=1 as it doesnt work on our testing. Rely on $info_max_time$ for the latest offset. Screenshot to show the _time span (highlighted)

Also update name for better formatting on Incident Review

image

@patel-bhavin patel-bhavin requested review from pyth0n1c and removed request for ljstella October 24, 2024 01:28
Copy link
Collaborator

@pyth0n1c pyth0n1c left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Despite the first apparent failure, the search GPUpdate with no Command Line Arguments with Network passes when retesting:
image

The second failed search Potentially malicious code on commandline passes after installing Python for Scientific Computing. I recommend adding this to our testing baseline. Note this this is a more time-consuming app to install. Here is evidence of the search passing:
image

@patel-bhavin patel-bhavin merged commit c000869 into develop Oct 28, 2024
5 of 6 checks passed
@patel-bhavin patel-bhavin deleted the fix_dd branch October 28, 2024 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants