f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
170 Commits 1 Branch 0 Tags
ac47315b309a17605299c0c2a3830fd908d394c6
Commit Graph

9 Commits

Author SHA1 Message Date
Guillaume BOURGEOIS 6bccbb5a50 feat(integrations): declare default ingestion (command, mapper, default type) 
cortex-xdr, crowdstrike, harfanglab and splunk now ship an `ingestion` block
(fetch command + bundled mapper + default incident type) and a bundled default
incident type under incident-types/, so the instance Collect section is pre-filled
on first configuration and the default type is created on install.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-27 10:38:09 +02:00
Guillaume BOURGEOIS f3b0f269b8 docs: remove vendor-tool wording from mapper descriptions and changelogs 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-26 15:32:30 +02:00
Guillaume BOURGEOIS 44694f6d9e fix(crowdstrike): correct search_detections OCSF mapper against Raptor alert schema 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-26 14:44:25 +02:00
Guillaume BOURGEOIS 096fa21808 feat(crowdstrike): mark search_detections as ingestion source (ingest hints) 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-26 14:41:02 +02:00
Guillaume BOURGEOIS be7d4a8b7c feat(crowdstrike): bundle exhaustive OCSF mapper for search_detections 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-26 13:57:53 +02:00
Guillaume BOURGEOIS 5251441962 feat: add test_connection command to all integrations for the instance Test button 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-26 00:00:06 +02:00
Guillaume BOURGEOIS fd6c92047a chore(crowdstrike): bump to 1.1.0 for full command set 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 23:50:13 +02:00
Guillaume BOURGEOIS 17faa01103 feat(crowdstrike): expand to full command set (81 commands) 
Adds device/IOC/process enrichment, host groups, cases, RTR
scripts/files/responders, ML/IOA exclusions, quarantine, Spotlight/CVE,
ODS scans, CSPM, users, IOA rules, CNAPP, detection resolve, workflows,
and identity (GraphQL). OAuth2 client-credentials, code-first scripts.

Excludes XSOAR-only plumbing (fetch/mirroring), deprecated legacy
commands, and binary/long-poll flows (retrieve-file, ngsiem search).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 23:49:40 +02:00
Guillaume BOURGEOIS d85a955e77 feat(crowdstrike): add CrowdStrike Falcon connector (IR enrichment, IOC, containment, RTR) 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 23:27:37 +02:00