Skip to content

Commit 9e04b37

Browse files
jpipkin1jpipkin1
authored
Merge branch 'main' into docs-235-historical-baselines
2 parents 50ccd5d + f51fefd commit 9e04b37

File tree

7 files changed

+134
-38
lines changed

7 files changed

+134
-38
lines changed

‎.github/workflows/build_and_deploy.yml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: Build and Deploy
22

3+
permissions:
4+
contents: read
5+
36
on:
47
workflow_call:
58
inputs:
@@ -13,7 +16,7 @@ on:
1316
default: "/"
1417
type: string
1518
environment:
16-
description: GHA environment name
19+
description: GitHub Actions environment name (used for scoping secrets and deployment)
1720
required: true
1821
type: string
1922
secrets:
@@ -35,6 +38,7 @@ jobs:
3538
env:
3639
CI: true
3740
NODE_ENV: production
41+
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
3842
AWS_PAGER: ""
3943
HOSTNAME: ${{ inputs.hostname }}
4044
BASE_URL: ${{ inputs.base_url }}
@@ -53,16 +57,14 @@ jobs:
5357
uses: actions/cache@v3
5458
with:
5559
path: node_modules/.cache
56-
key: ${{ runner.os }}-webpack-cache
60+
key: ${{ runner.os }}-webpack-cache-${{ hashFiles('yarn.lock') }}
5761
- name: Install awscli
5862
uses: unfor19/install-aws-cli-action@v1
5963
- name: Install jq
6064
run: sudo apt-get install -y jq
6165
- name: Install dependencies
6266
run: yarn install --frozen-lockfile
6367
- name: Build the Docusaurus site
64-
env:
65-
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
6668
run: yarn build
6769
- name: Deploy the Docusaurus site
6870
env:

‎.github/workflows/delete-review.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: delete-review
22

3+
permissions:
4+
contents: read
5+
36
on: delete
47

58
jobs:
@@ -9,6 +12,7 @@ jobs:
912
name: review/${{ github.ref_name }}
1013
env:
1114
CI: true
15+
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
1216
AWS_PAGER: ""
1317
BASE_URL: /${{ github.ref_name }}/
1418
AWS_DEFAULT_REGION: us-east-1
@@ -23,6 +27,7 @@ jobs:
2327
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
2428
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
2529
run: |
30+
echo "Removing files at s3://${S3_BUCKET_NAME}${BASE_URL}"
2631
aws s3 rm --recursive s3://${S3_BUCKET_NAME}${BASE_URL}
2732
export INVALIDATION_ID=$(
2833
aws cloudfront create-invalidation \

‎.github/workflows/pr.yml‎

Lines changed: 36 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,44 @@
11
name: Pull Request Checks
22

3+
permissions:
4+
contents: read
5+
pull-requests: read
6+
37
on:
4-
pull_request:
5-
branches:
6-
- main
7-
merge_group:
8-
types:
9-
- checks_requested
8+
pull_request:
9+
branches:
10+
- main
11+
merge_group:
12+
types:
13+
- checks_requested
14+
15+
env:
16+
CI: true
17+
NODE_ENV: production
18+
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
1019

1120
jobs:
12-
build-and-deploy:
13-
runs-on: ubuntu-latest
14-
env:
15-
CI: true
16-
NODE_ENV: production
17-
steps:
18-
- uses: actions/checkout@v4
19-
- name: Set up Node.js
20-
uses: actions/setup-node@v3
21-
with:
22-
node-version: '20.x'
23-
cache: 'yarn'
24-
- name: Docusaurus Webpack cache
25-
uses: actions/cache@v3
26-
with:
27-
path: node_modules/.cache
28-
key: ${{ runner.os }}-webpack-cache
29-
- name: Install dependencies
30-
run: yarn install --frozen-lockfile
31-
- name: Build the Docusaurus site
32-
env:
33-
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
34-
run: yarn build
35-
spellcheck:
36-
runs-on: ubuntu-latest
37-
steps:
21+
build-and-deploy:
22+
runs-on: ubuntu-latest
23+
steps:
24+
- uses: actions/checkout@v4
25+
- name: Set up Node.js
26+
uses: actions/setup-node@v3
27+
with:
28+
node-version: '20.x'
29+
cache: 'yarn'
30+
- name: Docusaurus Webpack cache
31+
uses: actions/cache@v3
32+
with:
33+
path: node_modules/.cache
34+
key: ${{ runner.os }}-webpack-cache-${{ hashFiles('yarn.lock') }}
35+
- name: Install dependencies
36+
run: yarn install --frozen-lockfile
37+
- name: Build the Docusaurus site
38+
run: yarn build
39+
spellcheck:
40+
runs-on: ubuntu-latest
41+
steps:
3842
- uses: actions/checkout@v4
3943
- uses: codespell-project/actions-codespell@master
4044
name: Check spelling

‎.github/workflows/production.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: deploy-to-production
22

3+
permissions:
4+
contents: read
5+
36
on:
47
push:
58
branches:

‎blog-cse/2025-05-30-content.md‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
---
2+
title: May 30, 2025 - Content Release
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- log mappers
6+
- parsers
7+
- rules
8+
hide_table_of_contents: true
9+
---
10+
11+
import useBaseUrl from '@docusaurus/useBaseUrl';
12+
13+
This content release includes:
14+
- Rule updates.
15+
- New log parsers and mappers to support Akamai CPC and Contrast Security ADR.
16+
- New and updated log mappers for Azure Event Hub - Windows Defender logs, Cisco ISE, Microsoft Office 365, and Snowflake.
17+
- Modifications to existing parsers for Microsoft Azure JSON, Nginx Syslog, and Snowflake to support additional formats and events.
18+
19+
Changes are enumerated below.
20+
21+
### Rules
22+
- [Updated] MATCH-S00068 O365 - Users Password Changed
23+
- Updated entity selectors to include both `user_username` and `targetUser_username`
24+
- [Updated] MATCH-S00069 O365 - Users Password Reset
25+
- Updated entity selectors to include both `user_username` and `targetUser_username`
26+
27+
### Log Mappers
28+
- [New] Akamai CPC
29+
- [New] Azure Event Hub - Windows Defender Audit events
30+
- [New] Azure Event Hub - Windows Defender Audit file events
31+
- [New] Azure Event Hub - Windows Defender Authentication events
32+
- [New] Azure Event Hub - Windows Defender Email events
33+
- [New] Azure Event Hub - Windows Defender Endpoint Process events
34+
- [New] Azure Event Hub - Windows Defender Network events
35+
- [New] Contrast Security ADR Default Mapping
36+
- [New] Snowflake Query History
37+
- [New] Snowflake Session
38+
- [Updated] Azure Event Hub - Windows Defender Logs - DeviceAlertEvents
39+
- [Updated] Azure Event Hub - Windows Defender Logs and Azure Alert
40+
- [Updated] Cisco ISE Catch All
41+
- [Updated] Microsoft Office 365 Active Directory Authentication Events
42+
- [Updated] Snowflake Catch All
43+
- [Updated] Snowflake Login
44+
45+
### Parsers
46+
- [New] /Parsers/System/Akamai/Akamai CPC
47+
- [New] /Parsers/System/Contrast Security/Contrast ADR
48+
- [Updated] /Parsers/System/Cisco/Cisco ISE
49+
- [Updated] /Parsers/System/Microsoft/Microsoft Azure JSON
50+
- [Updated] /Parsers/System/Nginx/Nginx Syslog
51+
- [Updated] /Parsers/System/Microsoft/Office 365
52+
- [Updated] /Parsers/System/Snowflake/Snowflake
53+
- [Updated] /Parsers/System/Microsoft/Windows PowerShell-JSON
54+
- [Updated] /Parsers/System/Microsoft/Windows-JSON-Open Telemetry

‎blog-service/2025-05-30-apps.md‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
title: Apps, Solutions, and Collection Integrations - May Release
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- apps
6+
- may-release
7+
hide_table_of_contents: true
8+
---
9+
10+
import useBaseUrl from '@docusaurus/useBaseUrl';
11+
12+
### Enhancements
13+
14+
- **Classic Apps to Next-Gen Apps Migration**. [ActiveMQ](/docs/integrations/containers-orchestration/activemq/), [IIS 7/8](/docs/integrations/microsoft-azure/iis-7/), [Kafka](/docs/integrations/containers-orchestration/kafka/), [RabbitMQ](/docs/integrations/containers-orchestration/rabbitmq/), [Squid Proxy](/docs/integrations/web-servers/squid-proxy/), [Strimzi Kafka](/docs/integrations/containers-orchestration/strimzi-kafka/), and [Varnish](/docs/integrations/web-servers/varnish/).
15+
16+
- **Updated 13 Azure apps**. [Azure Application Gateway](/docs/integrations/microsoft-azure/azure-application-gateway/), [Azure App Service Plan](/docs/integrations/microsoft-azure/azure-app-service-plan/), [Azure API Management](/docs/integrations/microsoft-azure/azure-api-management/), [Azure Cache for Redis](/docs/integrations/microsoft-azure/azure-cache-for-redis/), [Azure Container Instances](/docs/integrations/microsoft-azure/azure-container-instances/), [Azure Cosmos DB](/docs/integrations/microsoft-azure/azure-cosmos-db/), [Azure Database for MySQL](/docs/integrations/microsoft-azure/azure-database-for-mysql/), [Azure Database for PostgreSQL](/docs/integrations/microsoft-azure/azure-database-for-postgresql/), [Azure Functions](/docs/integrations/microsoft-azure/azure-functions/), [Azure Kubernetes Service (AKS) - Control Plane](/docs/integrations/microsoft-azure/kubernetes/), [Azure Load Balancer](/docs/integrations/microsoft-azure/azure-load-balancer/), [Azure Virtual Machine](/docs/integrations/microsoft-azure/azure-virtual-machine/), and [Azure WebApps](/docs/integrations/microsoft-azure/web-apps/).
17+
18+
- **Updated 12 OpenTelemetry apps**. [ActiveMQ - OpenTelemetry](/docs/integrations/containers-orchestration/opentelemetry/activemq-opentelemetry/), [Apache Tomcat - OpenTelemetry](/docs/integrations/web-servers/opentelemetry/apache-tomcat-opentelemetry/), [Cassandra - OpenTelemetry](/docs/integrations/databases/opentelemetry/cassandra-opentelemetry/), [Elasticsearch - OpenTelemetry](/docs/integrations/databases/opentelemetry/elasticsearch-opentelemetry/), [JMX - OpenTelemetry](/docs/integrations/app-development/opentelemetry/jmx-opentelemetry/), [MongoDB - OpenTelemetry](/docs/integrations/databases/opentelemetry/mongodb-opentelemetry/), [MySQL - OpenTelemetry](/docs/integrations/databases/opentelemetry/mysql-opentelemetry/), [Oracle - OpenTelemetry](/docs/integrations/databases/opentelemetry/oracle-opentelemetry/), [PostgreSQL - OpenTelemetry](/docs/integrations/databases/opentelemetry/postgresql-opentelemetry/), [RabbitMQ - OpenTelemetry](/docs/integrations/containers-orchestration/opentelemetry/rabbitmq-opentelemetry/), [Redis - OpenTelemetry](/docs/integrations/databases/opentelemetry/redis-opentelemetry/), and [VMWare - OpenTelemetry](/docs/integrations/containers-orchestration/opentelemetry/vmware-opentelemetry/).
19+
20+
- **Updated AWS Lambda**. New use cases added for CloudTrail logs and CloudWatch metrics.
21+
22+
- **Source Template updates**. [Linux](/docs/send-data/opentelemetry-collector/remote-management/source-templates/linux/), [Mac](/docs/send-data/opentelemetry-collector/remote-management/source-templates/mac/), and [Windows](/docs/send-data/opentelemetry-collector/remote-management/source-templates/windows/).
23+
24+
- **Source Template bug fix**. [Apache](/docs/send-data/opentelemetry-collector/remote-management/source-templates/apache/), [Docker](/docs/send-data/opentelemetry-collector/remote-management/source-templates/docker/), [Kafka](/docs/send-data/opentelemetry-collector/remote-management/source-templates/kafka/), and [Nginx](/docs/send-data/opentelemetry-collector/remote-management/source-templates/nginx/).

‎docs/platform-services/automation-service/app-central/integrations/hatching-triage.md‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
66

77
<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/hatching-triage.png')} alt="hatching-triage" width="100"/>
88

9-
***Version: 1.2
10-
Updated: Jul 06, 2023***
9+
***Version: 1.3
10+
Updated: June 02, 2024***
1111

1212
Detonate files with Hatching Triage Malware Sandbox.
1313

@@ -37,3 +37,7 @@ For information about Recorded Future Triage ([formerly Hatching Triage](https:/
3737
* June 19, 2020 - First upload
3838
* August 30, 2020 - New actions added
3939
* July 6, 2023 (v1.2) - Updated the integration with Environmental Variables
40+
* June 2, 2024 (v1.3) - Updated API calls for the following actions:
41+
+ Get Static Report
42+
+ Get Triage Report
43+
+ Get Summary Report

0 commit comments

Comments
 (0)