-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Filebeat] Add ThreatQuotient to Threat Intel Module elastic#27423 #28314
Conversation
This pull request doesn't have a |
This pull request is now in conflicts. Could you fix it? 🙏
|
This pull request does not have a backport label. Could you fix it @wanusmaximus? 🙏
NOTE: |
Thank you @wanusmaximus . This looks like it would work better :) will give it a go today! |
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
💚 Flaky test reportTests succeeded. 🤖 GitHub commentsTo re-run your PR in the CI, just comment with:
|
/test |
- name: attributes | ||
type: flattened | ||
description: > | ||
These provide additional context about an object |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit: .editorconfig asks for final newlines (also in config/config.yml).
This pull request is now in conflicts. Could you fix it? 🙏
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, but can you please update the documentation to include threatq and include any screenshots of the dashboards if you have them.
Okay I will go ahead and try to add that before merging |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM other than the extra changelog 👍
Co-authored-by: Marc Guasch <marc-gr@users.noreply.github.com>
run tests |
…lastic#28314) * [Filebeat] Add ThreatQuotient to Threat Intel Module elastic#27423 * generating golden files * updating pipeline, adding some more configuration options and such * updating dashboard import, and adding filter to dashboard * mage update * update docs and add image * Update CHANGELOG.next.asciidoc Co-authored-by: Marc Guasch <marc-gr@users.noreply.github.com> Co-authored-by: Marius Iversen <marius.iversen@elastic.co> Co-authored-by: Marc Guasch <marc-gr@users.noreply.github.com>
What does this PR do?
This PR adds the integration with the ThreatQ Threat Intel Platform to export security indicators from ThreatQ to Elastic.
Why is it important?
This is a new integration within the threatintel module.
Checklist
CHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Related issues