IROH

lead

Guillaume Buisson [1]

iroh [1]

• Initial XDR Incident Manager Response 1.1 Draft Spec #7847

data

Mario Aquino [4]

iroh [4]

• Fix flaky test #7971
• Partition and batch threat hunt observables #7958

>1w

• Establish a task timeout option for async work #7948
• Issue 7823/incident summary mapping #7907

Guillaume Erétéo [2]

iroh [2]

• Update risk-score.md #7974

>1w

• adding org mode for calculating data volume #7941

Ambrose Bonnaire-Sergeant [1]

ctia [1]

>1w

• Disable /metric/average route for irrelevant entities #1372

integrations

Matthieu Sprunck [2]

tenzin-config [2]

>1w

• Share the same module configurations in iroh and iroh-async in PROD #905
• Disable HTTP Proxy in IROH proxy (PROD)#903

Kirill Chernyshov [8]

iroh [3]

• Remove try/catch for better error handling #7980
• Fix NullPointerException #7961

>1w

• Use event id for the key of kafka record #7923

tenzin-config [5]

• Enable KafkaServices on INT #921
• Disable KafkaServices once again #918
• Enable Kafka related services on INT #916

>1w

• Temporary disable services #914
• Set SSL kafka security protocol on INT #912

Shafiq [1]

iroh [1]

• Creating iroh-events datastream should succeed even if it exists already #7959

auth

bartuka [1]

iroh [1]

• [IROH Auth] RBAC JWT Revocation on role change #7875

Yann Esposito [16]

iroh [4]

• Upgrade SX to XDR org via provisioning #7981
• feature-flag scopes are considered as special #7985
• fix local dev environment to be able to start locally without docker #7944

>1w

• Use org to display the roles as expected #7952

ring-jwt-middleware [3]

• Version 1.1.4-SNAPSHOT
• Version 1.1.3
• Support external error via is-revoked-fn

tenzin-config [9]

• Enable XDR roles in PROD #919
• factorize PROD #917
• Add role-web-service config everywhere #911

>1w

• Canonicalize the configs (#913) #915
• Canonicalize the configs #913
• Add missing role-web-service everywhere #910
• Gen configs git pre-commit hook #908
• Factorisation iroh/iroh-async confs #904
• Tree config structures to prevent config duplication. #901

Olivier Barbeau [7]

iroh [7]

• Upgrade Babashka #7967
• add missing exclusions for uberjar #7963
• fix bug when Org has no entitlement #7956
• [IROH configuration]: Generate service diagram #7872
• GH pages updates #7960

>1w

• fix alias arguments #7954
• Issue 7930 GitHub pages styling #7932

(Yogsototh) [3]

ring-jwt-middleware [3]

• Version 1.1.4-SNAPSHOT
• Version 1.1.3
• Support external error via is-revoked-fn

iroh-ops

Jerome Schneider [1]

tenzin [1]

• Kafka Connect: fixed cluster conf and use our own cacerts file

Patrick Patat [1]

iroh-ops [1]

• Merge pull request #75 from advthreat/squid

Patrick Patat [1]

iroh-ops [1]

• add squid server for vector in public subnet

Other

Other

Robert Levy [2]

iroh [1]

>1w

• user and team mean time tiles #7873

tenzin-config [1]

>1w

• add migration for iroh issue #7819 to TEST and PROD environments #902

Devin Walters [2]

tenzin-config [2]

• Add config.edn for other conure-distributor environments #920

>1w

• Reduce conure-distributor worker count #906

Mia [3]

iroh [1]

• Snapshot for risk score #7964

iroh-engine [2]

>1w

• Merge pull request #1394 from advthreat/v0.15.6-rc
• Merge pull request #1393 from advthreat/save-asset-snapshot

Scott McLeod [1]

tenzin-config [1]

>1w

• Config changes supporting IROH PR #7934 #899

krishna Ganugapenta [4]

tenzin [4]

• COnure-distributor PROD ASG modules fix #3062
• ops_vpncidr removal from TEST and other backup regions as ops vpn not present there #3061
• Conure-distributor setup config for TEST/PROD #3049

>1w

• Conure_distributor terraform modules config updates #3027

milehrer [2]

iroh-engine [2]

>1w

• prepare for v0.15.6
• Remove sightings from asset enrichment response, save snapshot instead

Martin Bruchanov [2]

tenzin [2]

• Clean-up of the old ES5 deployment code #3053

>1w

• Fix for consul registration of ops-openvpn service #2968

Kirill Chernyshov [1]

tenzin-config [1]

>1w

• IROH Events migration to Elasticsearch #909

John Jardine [2]

tenzin [2]

• Add endpoint generation procedure and update endpoints. #3058
• SXOPS-792: QA complaining of long queue times for incidents enrichment #3054

Sofiia Mykytiuk [9]

tenzin [9]

• Update ASG for ES metrics in NAM and EU #3063
• Update vpnator list #3050

>1w

• Remove CSIRT_Investigator role #3045
• Policy to allow access to DynamoDB items for ROAdmin #3043
• Remove jbusboom ssh configs #3042
• Dmarc record for STAGE #3040
• Remove ssh access for Michael Simonson #3035
• Update OPS vpnator list #3034
• Consul fix for ops vpn #3032

muhammad-xdr-ops [4]

tenzin [4]

• SXOPS-805 - adding CNAMEs for secure-client-forms MFE #3065
• enabled trendmicro and defender in all prod regions #3055
• SXOPS-763 - updating integrations version #3052

>1w

• SXOPS-702 removing INT access to PROD S3 bucket #3024

Dmytro Budko [5]

tenzin [5]

• SXOPS-191 Terraform: Bring INT and Test into sync with AWS #3056

>1w

• SXOPS-766 [PROD] Fix 'docs' related Terraform Delta #3046
• SXOPS-636 Docs XDR Deployment, Publish and Host #3048
• SXOPS-636 Docs XDR Deployment, Publish and Host #3041
• SXOPS-636 Docs XDR Deployment, Publish and Host #3016

Scott McLeod [1]

iroh [1]

>1w

• Use filter-map-search directly from CRUDStoreService #7934

Rekha Gupta [2]

tenzin-config [2]

• fix: to port 4008 because ribbon uses 4007 #925
• feat: port for new client management MFE #924

Jerome Schneider [1]

tenzin [1]

• SXOPS 801: Kafka connect open port 8083 and use static port in Nomad #3059

Yurii Ivanisenko [2]

tenzin [2]

>1w

• connected self-hosted runner #3038
• added wokeignore file #3036

Gayan Jayasundara [2]

tenzin [2]

• Add Adam as codeowner to Tenzin repo #3060

>1w

• SXOPS-472 & SXOPS-498 - Enable sentinelone and crowdstrike in Production for v1.122 Release #3031