Casey McGinley comments

Repositories
Issues
Comments

Results 4 comments of


                                            Casey McGinley

Adding risk message validation++

~~Some detections seem to be generating false positives (test failures that are not actual failures); e.g.: Windows Excessive Disabled Services Event~~ Resolved as of 8/7/24

Refactor the `risk` property of `detection_abstract` to handle observable/risk/threat mappings more transparently

E.g. streamline to use a similar `TYPE_MAP` as seen in `risk_event.py`

Consider deploying sphinx for autodocs

https://sphinx-pydantic.readthedocs.io/en/latest/ or https://github.com/mansenfranzen/autodoc_pydantic

Mapping for mailbox rule events

@eliraz-levi Sorry, meant to chime in here last Friday. We don't have a GitLab issue tracking this (tracking it internally), but @mikeradka and I are indeed running into the same...