airbnb/streamalert

Issues

• athena column name sanitization fix

  #1110 opened 2 years ago by vynu
  0

• [bug][alert_merger] changes to rules `merge_window_mins` will not take affect immediately

  #1113 opened 3 years ago by jack1902
  0

• [feature] Ability to send one Alert then Merge

  #1104 opened 3 years ago by jack1902
  4

• [terraform] element(concat()) should always have an empty list

  #1092 opened 3 years ago by jack1902
  0

• [feature] Utilise sphinx-argparse for the CLI documentation

  #1126 opened 3 years ago by jack1902
  2

• [core] inconsistent builds - version requirement not met

  #1098 opened 4 years ago by jack1902
  4

• Classifier Lambda not able to recognize kinesis aggregated logs

  #1111 opened 5 years ago by vynu
  0

• [bug] Error deleting CloudWatch Log Metric Filter: ResourceNotFoundException

  #1094 opened 5 years ago by chunyong-lin
  0

• [bug] ProtocolError in classifier s3 transfer

  #1097 opened 5 years ago by ryandeivert
  0

• support configurable aws x-ray for lambda functions

  #1032 opened 5 years ago by ryandeivert
  0

• update threat intel downloader function to leverage lookuptables

  #1056 opened 5 years ago by ryandeivert
  0

• modify threat intel downloader to support arbitrary intel sources

  #1061 opened 5 years ago by ryandeivert
  0

• New AWS account sending CloudTrail logs causes classifier error

  #1006 opened 4 years ago by 0xdabbad00
  1

• [terraform] update the tf_lambda module to remove complexity

  #1119 opened 4 years ago by ryandeivert
  1

• Unstable Terraform configuration, keeps switching between two states.

  #1090 opened 5 years ago by dgrenner
  5

• Migrate athena_partition_refresh lambda function to tf_lambda module

  #1144 opened 5 years ago by chunyong-lin
  1

• [publishers] decouple alert publishers and tests

  #1149 opened 5 years ago by ryandeivert
  2

• migrate threat_intel_downloader function to tf_lambda module

  #1055 opened 5 years ago by ryandeivert
  1

• [RFC ] Backward compatibility discussion for Parquet format support

  #1143 opened 5 years ago by chunyong-lin
  2

• Scheduled Queries

  #1116 opened 5 years ago by Ryxias
  7

• [conf] remove need to configure the prefix in multiple places

  #1086 opened 5 years ago by ryandeivert
  2

• [feature] Ability to configure outputs using a .json file

  #1118 opened 5 years ago by jack1902
  2

• Alert merger lambda times out every 60 seconds

  #1099 opened 5 years ago by Jwalin-Thaker
  3

• [bug] dynamic_outputs and publishers not playing nicely

  #1124 opened 5 years ago by jack1902
  1

• [classifier] cloudtrail:events not classifying correctly

  #1100 opened 5 years ago by jack1902
  1

• [Feature Request] Dynamic Routing of Alerts to Output

  #1075 opened 5 years ago by jack1902
  6

• [output] Microsoft Teams

  #1078 opened 5 years ago by jack1902
  2

• [Feature Request][output] AWS SES (simple email service)

  #1080 opened 5 years ago by jack1902
  4

• [release-3-0-0] Error when running terraform init

  #1083 opened 5 years ago by jack1902
  0

• [bug] S3 bucket for terraform remote state file got deleted before destroy completed

  #1048 opened 5 years ago by chunyong-lin
  2

• [bug] "unknown module referenced" errors when re-init StreamAlert

  #1047 opened 5 years ago by chunyong-lin
  4

• leftover module module.metric_filters_Classifier... (likely a terraform version issue)

  #1091 opened 5 years ago by jack1902
  2

• [Bug][Classifier] TypeError: unhashable type: 'dict' when processing raw event encapsulated in a string

  #1084 opened 5 years ago by chunyong-lin
  1

• [Enhancement] Create rule for Access Analyzer

  #1073 opened 5 years ago by 0xdabbad00
  0

• cloudtrail_public_resources missing actions

  #1072 opened 5 years ago by 0xdabbad00
  0

• [feature] Dead letter queue for records that fail classification

  #1068 opened 5 years ago by blakemotl
  0

• Add s3:PutAccountPublicAccessBlock to the rule cloudtrail_critical_api_calls

  #1016 opened 5 years ago by 0xdabbad00
  1

• [improvement] Lock terraform remote state on deployment

  #1054 opened 5 years ago by blakemotl
  0

• Community CloudTrail rules should ingest cloudwatch:cloudtrail

  #1058 opened 5 years ago by libertyy
  0

• [apps] box admin app: requests.exceptions.ReadTimeout

  #1040 opened 5 years ago by ryandeivert
  1

• [bug] terraform s3_events module proper s3 event notification support

  #1026 opened 5 years ago by ryandeivert
  1

• [bug][test] AttributeError: 'Namespace' object has no attribute 'stats' when run classifier test

  #1044 opened 5 years ago by chunyong-lin
  1

• Gsuite Ggroups "applicationName" value "groups" is not allowed

  #1036 opened 5 years ago by Ryxias
  1

• [apps] Duo Admin app: TypeError: can only concatenate str (not "int") to str

  #1038 opened 5 years ago by ryandeivert
  1

• [bug] roles missing prefix

  #1011 opened 5 years ago by ryandeivert
  2

• slack app throws JSONDecodeError

  #998 opened 5 years ago by chunyong-lin
  3

• python3 throws TypeError: '<' not supported between instances of 'str' and 'int'

  #1000 opened 5 years ago by chunyong-lin
  1

• Add Unit Test Coverage for StreamAlert CLI Component

  #995 opened 5 years ago by Ryxias
  0

• Create a custom metric to track number of failing rules

  #985 opened 5 years ago by ryandeivert
  0

• Configuration for Streamalert Apps

  #973 opened 5 years ago by blakemotl
  0