mozilla-services/foxsec-pipeline

Issues

• Improve alert batching for GuardDuty (within Gatekeeper)

  #503 opened 3 years ago by ajvb
  1

• Improve error handling to reduce pipeline stalls

  #507 opened 3 years ago by kkleemola
  1

• Enrich authprofile alerts

  #504 opened 4 years ago by kkleemola
  0

• Add /check_[ip/email] slack command

  #513 opened 4 years ago by kkleemola
  0

• Improve AMO multimatch heuristic

  #514 opened 4 years ago by kkleemola
  0

• Update AMO event to match new logging statement

  #510 opened 4 years ago by diox
  1

• Add metrics to AMO heuristics to help detect missing log messages

  #511 opened 4 years ago by kkleemola
  1

• Add tor exit node lookup for httprequest

  #508 opened 4 years ago by kkleemola
  0

• [authprofile] Alert on unknown users for specific systems

  #467 opened 4 years ago by kkleemola
  0

• HTTPRequest in some situations can begin to lag over time

  #470 opened 4 years ago by ameihm0912
  1

• Travis CI free usage ends Dec 3; mozilla repos should switch to other CI platforms

  #501 opened 4 years ago by hwine
  1

• Do not create alerts for reserved ip addresses

  #483 opened 4 years ago by kkleemola
  0

• Migrate all cloud functions to using sops for config files

  #364 opened 4 years ago by ajvb
  0

• Implement Private Relay comparison algorithm

  #444 opened 4 years ago by ameihm0912
  0

• Add suppression logic to Pioneer exfiltration analyzer

  #458 opened 4 years ago by ameihm0912
  1

• Include "Fraud User Guide" in slack confirmation message

  #446 opened 4 years ago by ajvb
  0

• Log when Slack alerts are acknowledged

  #412 opened 4 years ago by ameihm0912
  0

• Create custom cache module for maxmind DB reader

  #450 opened 4 years ago by ameihm0912
  1

• Reopen closed bugs in Bugzilla alert manager

  #355 opened 4 years ago by ameihm0912
  1

• [authprofile] Consider adding additional event data to bmo audit

  #441 opened 4 years ago by kkleemola
  0

• Remove exclusionary language

  #432 opened 4 years ago by kkleemola
  0

• Modify PerEndpointErrorRateAnalysis to respond more quickly and use a higher violation penalty

  #427 opened 5 years ago by ameihm0912
  0

• Support Slack notifications in AuthProfile CritObjectAnalyze

  #411 opened 5 years ago by ameihm0912
  0

• Create new encapsulation class to contain Alert and other object types

  #321 opened 5 years ago by ameihm0912
  0

• Linkify text for add-on cloud submission slack message

  #404 opened 5 years ago by wagnerand
  0

• Include link to AWS Guardduty Finding Type docs in Bugzilla alert text

  #354 opened 5 years ago by ajvb
  1

• Create parser for EventHub audit messages

  #409 opened 5 years ago by ameihm0912
  1

• Create cloud function for consuming events from Azure EventHub

  #408 opened 5 years ago by ameihm0912
  1

• Include query link with AlertSummary notification

  #345 opened 5 years ago by ameihm0912
  3

• Path specific error rate analyzer

  #385 opened 5 years ago by ameihm0912
  0

• Maxmind can also return "" as a country name

  #399 opened 5 years ago by ameihm0912
  0

• Emit metrics BQ view during CI

  #392 opened 5 years ago by ameihm0912
  0

• Include API flag in AMO cloud submission summary

  #388 opened 5 years ago by ameihm0912
  0

• AMO upload heuristics should all use NEWVERSION

  #389 opened 5 years ago by ameihm0912
  0

• Add direct dependencies to pom.xml

  #370 opened 5 years ago by kkleemola
  0

• Make AlertMeta more strictly defined

  #358 opened 5 years ago by ajvb
  1

• Improve AMO cloud submission alert summary

  #371 opened 5 years ago by ameihm0912
  1

• Create shared helper for reading config files from gcs

  #378 opened 5 years ago by kkleemola
  1

• Support initialization of DetectNat with static address list

  #373 opened 5 years ago by ameihm0912
  0

• Filter out amo_cloud_submissions alerts from PostProcessing's alert summary analysis

  #374 opened 5 years ago by ajvb
  2

• Remove legacy whitelisted IP's state code

  #357 opened 5 years ago by ajvb
  0

• Integrate code coverage tooling

  #360 opened 5 years ago by ajvb
  1

• test issue

  #365 opened 5 years ago by ajvb
  0

• Write integration tests between the pipeline and cloud functions in contrib/

  #362 opened 5 years ago by ajvb
  0

• Use event timestamps everywhere

  #359 opened 5 years ago by ajvb
  0

• Make IprepdIO.Write timeouts configurable

  #306 opened 5 years ago by ameihm0912
  0

• Alert post-processing pipeline

  #301 opened 5 years ago by ameihm0912
  0

• Create Papertrail IO transform

  #296 opened 5 years ago by ameihm0912
  0

• Replace default trigger in Customs

  #290 opened 5 years ago by ameihm0912
  0

• Refine single selector customs transforms with variance component

  #286 opened 5 years ago by ameihm0912
  0