Tags: Security-Experts-Community/vscode-xp
Tags
Merged PR for updating envelope fields Merged PR for automatically selecting the KBT version The logic for receiving correlation events for a new KBT version when clicking buttons in integration tests has been updated The SIEMJ version is now remembered when loading the plugin and changing KBT to avoid multiple unnecessary SIEMJ launches
Updated tag when wrapping in an envelope, now the value 'vscode_xp' i… …s set Added scope_id field when wrapping a raw event in an envelope Added default values for descriotion in localizations of correlation and normalization rules Temporarily disabled checking that descriptions in localization are not empty
For new versions of KBT, the TABLES_SCHEMA metarunner is supported, w… …hich launches a new version of the mktables utility Fixed an error when determining the SIEMJ version on Windows Additional fields were added to the view with integration tests to display information about an unsuccessful launch (appear only with the new version of KBT) Fixed an error in validation of the normalization unit test when using new utilities
Support for multiple KBT versions with switching via UI Fields for paths required for a new LSP server have appeared in the settings Automatic update of LSP server settings when changing the KBT version New utilities and config for SIEMJ are supported
Returned to a single tab with module tests due to caching the rule wh… …en opening webview Added a warning dialog when attempting to open module tests of another normalization formula Fixed the issue of double pop-up from Language Server Fixed the algorithm for generating the localization rule identifier for normalizations Changes in rule templates Updated the MITRE ATT&CK matrix to version 17
Fixed position of compositeFields to the complex_key list Fixed logic for handling empty values for defaults in tabular lists. Fixed tabulation from 2 spaces to 4 to preserve indents from PTKB The userCanEditContent property is now available only for registries Fixed test parsing problem (from issue #219) Fixed the inscription in the unit test editor Added support for the 'any' keyword in tests In the unit test editor: restored functionality for commenting lines with Ctrl+/, added auto-closing pairs of symbols and their highlighting Context menus for correlations and enrichments are rebuilded to a unified view Updated correlation rule templates Added new data sources for metainformation
The unit test editor has been rewritten in React and now contains tab… …s like in integration tests Added fields when wrapping in an envelope (special thanks @zatrahali) Added the ability to connect a custom language server Fixed bugs in the meta information view Fixed a collision when unpacking a kb file (special thanks @qwazzz0) Updated the pipeline for building and publishing the extension (special thanks @KleinQuartic)
Started migration of webviews to React SPA The tabular list editor has been rewritten in React. It was merged with the default registry values editor The unit test editor has been updated, the Codemirror editor has been replaced with Monaco, and custom syntax highlighting has been configured Added localizations (ru, en) for tabular list editors and unit tests webviews Moved from @vscode/webview-ui-toolkit to custom UIKit components, fixed a set of icons (cod icons) The latest versions of linter (ESLint 9) and formatter (more beautiful) have been added and configured Fixed the launch of the retrocorrelation view Fixed replacement of expected and actual events in the integration test editor
PreviousNext