airbnb / streamalert

98%

LAST BUILD ON BRANCH master

branch: master

CHANGE BRANCH

x

Reset

• master
• ryandeivert-coveralls-updates
• jacknaglieri-s3-events-json-clusters
• ryandeivert-live-alert-testing
• ryandeivert-alert-proc-docs-updates
• ryandeivert-cli-tests
• jacknaglieri-fix-travis-
• abb--errors-sum
• ryandeivert-testing-fixes
• ryandeivert-lambda-handler-generator-fix
• ryandeivert-lambda-tf-fix
• ryandeivert-bug-fix-200
• mf-carbonblack-schema-modifications
• mf-carbonblack-schemas-round-2
• jacknaglieri-cloudtrail-patterns
• ryandeivert-carbonblack-watchlist.hit.binary-log-fix
• ryandeivert-outputs-bug
• ryandeivert-unit-test-update
• jacknaglieri-osquery-schema-mod
• jacknaglieri-rules-testing-debug-statements
• jacknaglieri-cli-descriptions-update
• ryandeivert-1.4.0-doc-updates
• ryandeivert-one-last-doc-update
• ryandeivert-s3-output-bug
• ryandeivert-doc-readme-update
• jacknagz-cli-bug-fix-folder-structure
• ryandeivert-doc-build-ci
• ryandeivert-invalid-print-fix
• ryandeivert-another-logger-tweak
• 1.4.0
• ryandeivert-osquery-status-schema-update
• ryandeivert-autoflake-script
• ryandeivert-drop-sns-publish-for-lambda-invoke
• ryandeivert-rp-imports-fix
• jacknaglieri-single-alert-bucket
• ryandeivert-cb-schema-updates
• ryandeivert-cb-feed-query-hit-process
• jacknaglieri-flatten-alert-structure
• jacknaglieri-athena-partition-updater
• ryandeivert-logs-schema-mismatch-errors
• ryandeivert-schema-matching-error-reporting
• ryandeivert-athena-logger-bug-fix
• jacknaglieri-athena-sqs-cloudwatch-docs
• ryandeivert-rp-logger-centralizing
• jacknaglieri-fix-init-bug
• ryandeivert-payload-refactor
• jacknaglieri-athena-docs
• ryandeivert-initial-metrics-support
• abb--pylint
• ryandeivert-gzip-logging-fix
• jacknaglieri-tf-cli-bug-fixes
• abb--fix-prefix-cli
• ryandeivert-metrics-update
• ryandeivert-rollback-fix
• missing_close_angle_bracket
• ryandeivert-rule-engine-test-bug-fix
• ryandeivert-metrics-toggle-enable
• jacknaglieri-s3-cloudtrail
• ryandeivert-athena-minor-updates
• ryandeivert-timing-decorator
• jacknaglieri-update-docs-kinesis-scale-and-diagram
• jacknaglieri-athena-refresh-interval
• jacknaglieri-remove-debug-statements
• ryandeivert-multi-proc-poc
• ryandeivert-output-bug-fix
• jacknaglieri-athena-refresh-2.0
• ryandeivert-schema-match-no-rule
• jacknaglieri-lambda-to-firehose
• mimeframe-streamalert-schemas-update
• ryandeivert-metric-filters
• ryandeivert-cred-enc-failure-fix
• new_data_normalization
• ryandeivert-phantom-tweaks
• ryandeivert-phantom-container-lookup
• ryandeivert-policy-perm-fix
• ryandeivert-revert-policy-perm-fix
• ryandeivert-log-triggered-rule
• ryandeivert-phantom-test-mock-fix
• ryandeivert-metric-alarms-cli
• mimeframe-streamalert-tests-update-desc
• mime-frame-streamalert-fix-github-unicorn-schema
• mimeframe-git-unicorn-schema-fix
• mimeframe-streamalert-osquery-prefix-upstream
• mimeframe-cb-schema-fixes-again
• mimeframe-streamalert-schemas-vpc-fix
• mimeframe-streamalert-suppress-rule-trigger-info-for-local-testing
• mime-frame-streamalert-types-wrong-cb-value
• remove_log_source_constrain
• ryandeivert-cb-feed-query-hit-process-fix
• mimeframe-streamalert-logs-vpc-fix
• ryandeivert-multiple-schema-tweak
• ryandeivert-test-cov-cli
• ryandeivert-metric-default-value-bug
• ryandeivert-osquery-snapshot-fix
• ryandeivert-cb-watchlist-schema-update
• mimeframe-streamalert-flow-logs-account-type
• ryandeivert-cb-alert-watchlist-hit-feedsearch-binary-update
• jacknaglieri-lambda-to-firehose-wip
• v1.5.0
• jacknaglieri-lambda-to-firehose-pt-2
• threat_intel
• ryandeivert-log-poll-function-wip
• jacknaglieri-lambda-to-firehose-pt-3
• add_condition_to_include_threat_intel_dir
• cl-rd-extract_threat_intel_to_helper
• jacknaglieri-bug-fixes-from-firehose
• ryandeivert-duo-auth-rules
• jacknaglieri-athena-data-bucket-support
• ryandeivert-stream-alert-app-fixes
• ryandeivert-app-logger-change
• mimeframe-streamalert-osquery-batch-schema
• ryandeivert-log-suppression-addition
• ryandeivert-app-function-base-tweak
• mimeframe-streamalert-duo-threat-intel
• normalized_nested_field_bug
• abb--kinesis-timeout
• ryandeivert-metric-doc-updates
• mimeframe-streamalert-ghe-rules-public
• mimeframe-streamalert-rules-github-part-deux
• ryandeivert-app-integration-docs
• jacknaglieri-firehose-backoff-
• jacknaglieri-update-cb-cwe-schemas
• ryandeivert-kinesis-outputs-bug
• jacknaglieri-firehose-backoff-pt-2
• jacknaglieri-fix-firehose-logger-regression
• mimeframe-vpc-fix
• javuto-streamalert-onelogin-app
• jacknaglieri-bug-fix-live-test
• javuto-unit-tests-show-lines
• jacknaglieri-pr-templates
• jacknaglieri-fix-classifier-typererror
• jacknaglieri-athena-table-creation-enhancements
• jacknaglieri-cli-bug-fixes
• ryandeivert-rule-testing-framework-mods
• insert_normalized_types_to_record_copy
• ryandeivert-cb-log-schema
• ryandeivert-testing-doc-updates
• ryandeivert-tf-ssm-overwrite-fix
• mimeframe-streamalert-cloudtrail-ingress-sg
• ryandeivert-duo-no-log-bug
• ryandeivert-header-line-fix
• mimeframe-streamalert-rule-duo-bypass
• ryandeivert-app-logger-update
• ryandeivert-cli-log-type-bug
• jacknaglieri-nested-json-parser
• improve_datatypes_checking
• ryandeivert-sorted-tests-fix
• ryandeivert-cb-feed-storage-hit-binary
• jacknaglieri-json-key-regex-fixes
• ioc-matching-case-insensitive
• javier-streamalert-onelogin-types
• ryandeivert-app-date-tweak
• jacknaglieri-more-bug-fixes-json
• ryandeivert-minor-doc-updates
• mime-frame-onelogin-nit
• ryandeivert-unit-test-improvements
• jacknaglieri-optional-envelope-keys
• javier-streamalert-onelogin-fixes
• javier-streamalert-onelogin-app-docs
• ryandeivert-test-fix-no-alerts
• ryandeivert-cli-test-event-source-checking
• javier-streamalert-onelogin-proxy-ip
• javier-streamalert-rule-rtlo
• javier-streamalert-tf-changes
• ryandeivert-live-test-fix
• jacknaglieri-json-regex-key-fixes
• javier-streamalert-setupcfg-coveragerc
• ryandeivert-app-perpetual-invoke
• javier-streamalert-onelogin-fix-tests
• ryandeivert-formatting-bug
• mimeframe-ghe-req-status-checks-off
• ryandeivert-app-config-not-failing
• jacknaglieri-update-docs-october
• ryandeivert-test-source-fix
• ryandeivert-app-check-order-change
• javier-streamalert-shard-metrics
• ryandeivert-gsuite-app-support
• mimeframe-streamalert-github-more-rules
• ryandeivert-gsuite-docs
• jacknaglieri-doc-creds
• ryandeivert-mock-create-bucket-fix
• prefix_streamalert_to_normalized_types
• javier-streamalert-pagerdutyv2
• jacknaglieri-rebuild-partitions-athena
• javier-streamalert-requests-output
• ryandeivert-cb-schema-update
• ryandeivert-apps-updates
• javier-streamalert-requests-timeout
• ryandeivert-box-app
• ryandeivert-secrets-cleanup
• ryandeivert-apps-timeout-catch
• javier-streamalert-fix-requests-things
• ryandeivert-fix-invalid-json-path
• ryandeivert-apps-bump-version
• jacknaglieri-firehose-output
• ryandeivert-cb-feed-query-hit-binary-schema
• ryandeivert-classifier-convert-type-bug
• javier-streamalert-add-pagerdutyv2
• ryandeivert-small-cli-bug-fix
• ryandeivert-request-mock-fixes
• ryandeivert-new-helpers
• ryandeivert-box-bug-fixes
• javier-streamalert-pagerduty-incidents
• 1.5.0
• jacknaglieri-global-alert-firehose
• javier-streamalert-onelogin-check-response
• ryandeivert-box-pre-package-crypto
• mimeframe-cloudtrail-put-object-new
• jacknaglieri-cross-acct-s3-events-and-more
• ryandeivert-box-doc-updates
• ryandeivert-box-deps-readme
• ryandeivert-athena-package
• javier-streamalert-gitignore-vscode
• ryandeivert-box-opt-key
• jacknaglieri-top-level-reqs
• jacknaglieri-misc-bug-fixes-from-changes
• ryandeivert-box-max-limit-increase
• ryandeivert-mock-firehose-tests
• jacknaglieri-fix-connection-reset-err
• ryandeivert-box-timeout-requests
• threat_intel_downloader
• ryandeivert-apps-class-factory
• javier-streamalert-pagerduty-incidents-bugs
• ryandeivert-output-class-breakout
• jacknaglieri-s3-cross-account-cloudtrail
• ryandeivert-output-method-fix
• jacknaglieri-s3-events-prefix-suffix-options
• javier-streamalert-priorities
• javier-streamalert-pagerduty-backoff
• javier-streamalert-onelogin-response-content
• ryandeivert-gsuite-tweaks
• javier-streamalert-jira-backoff
• javier-streamalert-slack-backoff
• javier-streamalert-phantom-backoff
• javier-streamalert-jira-backoff-tests
• threat_intel_threat_detection
• remove_sort_key_from_dynamodb_ioc_table
• jacknaglieri-cloudtrail-event-patterns-fix
• ryandeivert-gsuite-update
• jacknaglieri-flow-log-cross-account-support
• ryandeivert-max-recursion-fix
• ryandeivert-cw-control-message-schema
• javier-streamalert-backoff-increase
• ryandeivert-cb-watchlist-hit-binary-update
• ryandeivert-gsuite-data-normalization
• javier-streamalert-pagerduty-service-name
• javier-streamalert-fixes-incident-output
• update_table_primary_key
• jacknaglieri-deploy-by-cluster
• ryandeivert-box-data-normalization
• ryandeivert-gsuite-app-socket-catch
• jacknaglieri-groups-for-users
• javier-streamalert-modify-context
• jacknaglieri-upgrade-tf-provider
• jacknaglieri-init-deplpy-bug-fix
• add_dynamodb_domain_md5_mocking
• javier-streamalert-incident-test-email
• javier-streamalert-cred-requirements
• ryandeivert-limit-app-state-save-fix
• apply_dynamodb_autoscale
• jacknaglieri-athena-enable-disable-improvement
• ryandeivert-gsuite-catch-ssl-timeout
• jacknaglieri-shard-level-metrics
• threat_intel_error_handling
• cast_ioc_value_to_str
• fix_read_capacity_overload_issue
• jacknaglieri-firehose-table-creation-bug-fixes
• avoid_duplicating_normalized_records
• ryandeivert-more-accurate-record-count-metric
• ryandeivert-cb-log-update
• add_threat_intel_flag_in_clusters
• ryandeivert-test-cy-branch
• ryandeivert-gsuite-catch-error
• jacknaglieri-athena-overrides
• javier-streamalert-pagerduty-incident-mock
• ignore_ddb_read_capacity
• austin-add-ba-schema
• filter_non_public_ip
• ryandeivert-gsuite-fix
• jacknaglieri-update-roadmap
• ryandeivert-logs-fixup
• austin-bandit
• austin-sqs-tags
• javier-streamalert-threatintel-unit-tests
• catch_value_error_in_threat_intel
• javier-streamalert-timer-tests
• javier-streamalert-pagerduty-rich-incidents
• austin-allow-non-rules-files
• javier-streamalert-key-added-to-incident
• jacknaglieri-sqs-fix-jan-2017
• jacknaglieri-default-cluster-update
• update_new_opt_key_cb_watchlist_hit_binarys_schema
• jacknaglieri-docs-refresh-jan-2018
• jacknaglieri-firehose-req-id-and-configurable-monitoring
• ryandeivert-1.6.0-bump
• v1.6.0
• ryandeivert-ti-test-updates
• bandit_ignore_b108
• change_repo_id_to_string_in_ghe_schema
• ryandeivert-athena-default-output
• add_debug_for_sqs_delete_type_error
• javier-streamalert-pagerduty-note
• release-2.0.0
• austin-alert-decluster
• fix_firehose_connection_reset_issue
• fix_sqs_delete_type_error
• ryandeivert-athena-default-opt
• austin-alert-global
• austin-consolidate-alert
• austin-fastdeploy
• release-sync-master
• austin-dynamo-alerts
• austin-dynamo
• ryandeivert-test-brnach
• javier-pagerduty-merge-fix
• austin-rebase
• javier-fix-bug-put-json
• austin-sns-sqs
• jacknaglieri-s3-do-not-dl-empty-files-and-more
• javier-streamalert-tf-json-files
• austin-small-fixes
• jacknaglieri-req-subkeys-fix
• austin-sns-subject
• catch_requests_read_timeout
• release-rebase
• jacknaglieri-fix-various-s3-bugs
• jacknaglieri-cb-audit-schema
• ryandeivert-rebase-into-release-2
• austin-alert-merger
• ryandeivert-fix-key-name
• ryandeivert-release-1.6.1
• stable
• 1.6.1
• v1.6.1
• ryandeivert-fix-tag-name
• austin-severance
• ryandeivert-fix-table-creation
• austin-batch-write
• jacknaglieri-rule-test-templates
• austin-merger
• ryandeivert-default-output
• ryandeivert-fix-cloudtrail-tf
• ryandeivert-fix-init-in-tests
• jacknaglieri-rule-template-fix
• austin-rule-tests
• ryandeivert-firehose-optimization
• jacknaglieri-cloudwatch-log-retention
• austin-eventuality
• javier-pagerduty-less-api-calls
• allow_multirounds_normalization
• ryandeivert-add-app-alarms
• ryandeivert-fix-open-files-issue
• ryandeivert-cli-fixup
• javier-fix-alert-cli-tests
• jacknaglieri-helpers-fix
• ryandeivert-doc-updaates
• rp_mem_leak_due_to_copy
• ryandeivert-tf-lambda-generation
• revert_allow_multirounds_normalization
• austin-alert-class
• fix_data_normalization_exhausts_memory_issue
• update_glue_permissions
• ryandeivert-alert-table-rebuilding
• salesforce_app
• austin-slack-bugfix
• austin-enable-merging
• ryandeivert-add-execution-id-to-logger
• ryandeivert-fix-athena-overwrite
• ryandeivert-fix-cli-command
• ryandeivert-add-athena-log
• ryandeivert-add-rules-table
• ryandeivert-fix-docstrings
• ryandeivert-backoff-app-ssm
• jamie/threat_intel_filtering
• ryandeivert-add-rule-stats
• threat_intel_filtering_2
• ryandeivert-config-removal
• ryandeivert-rule-rework
• ryandeivert-fix-typing-bug
• ryandeivert-rule-rework-with-path-import
• ryandeivert-consolidate-code
• ryandeivert-test-b-2
• set_salesforce_last_timestamp
• reduce_backoff_verbose
• austin-sqs-record
• ryandeivert-rules-to-dynamo
• ryandeivert-fix-error-message
• ryandeivert-rule-table-update-on-deploy
• ryandeiver-doc-update
• ryandeivert-checksum-rule
• ryandeivert-stage-deploy-updates
• ryandeivert-rule-table-stage
• ryandeivert-add-stage-flag
• jamie/threat_intel_exclude
• ryandeivert-remove-cruft
• ryandeivert-cli-refactor
• ryandeivert-cli-deploy-flag
• ryandeivert-config-consolidation
• jamie/threat_intel_dict
• ryandeivert-rp-staging-check
• ryandeivert-athena-updates
• ryandeivert-fix-staging-bugs
• cb
• ryandeivert-use-table-arn-output
• handle_ip_address_value_error
• ryandeivert-athena-shared-client
• improve_data_normalization_perf
• ryandeiver-adding-ti-mock-record
• austin-better-merging
• jamie/internal_sync
• austin-fix-outputs
• cb_update
• jacknaglieri-support-terraform-11
• ryandeivert-better-ap-output-logging
• jacknaglieri-update-reqs
• austin-max-merging
• ryandeivert-threatstream-dl-class-updates
• ryandeivert-threatstream-dl-class-update
• jacknaglieri-s3-events-mod
• ryandeivert-fix-slack-message-split
• jacknagz-shred-s3-downloaded-files
• ryandeivert-fix-slow-tests
• jacknaglieri-cloudwatch-ok-actions
• catch_key_error_in_classifier
• ryandeivert-shorten-fh-timeout
• jacknaglieri-public-image-comm-rules
• ryandeivert-fh-only-retry-failed
• hand_firehose_read_timeout
• ryandeivert-fix-logger-rec-count
• jacknaglieri-csv-parser-bug-fix
• jacknaglieri-flow-log-retention-bug
• jacknaglieri-kv-parser-v2
• ryandeivert-add-cloudwatch-xaccount-support
• ryandeivert-add-cloudtrail-via-cw-support
• ryandeivert-shorten-resource-name
• jbussing_add_path_matches_helper_function
• vscode-git-ignore
• jbussing_add_pathlib2_to_lambda_config
• ryandeivert-fix-tf-bug
• support_lookup_tables
• ryandeivert-ct-to-cw-support
• ryandeivert-fix-some-bugs
• ryandeivert-support-rds-aurora-via-cloudwatch
• ryandeivert-csv-quote-char
• austin-base-helpers
• ryandeivert-fix-app-deploy-bug
• austin-sse
• ryandeivert-fix-app-import
• austin-remove-source-bucket
• austin-remove-versions
• fix_threat_intel_downloader_permission
• remove_alarm_recover_from_invocation_errors
• handle_lookup_table_read_timeout

Build # 4258

Build Type

push

travis-ci

Committed by ryandeivert

Commit Message

Add a slack streamalert app (#764)

* Initial skeleton in place

* basic skeleton in place with unit tests, schema added for endpoints

* Pagination handling in place, plus additional unit tests

* Collection of team.accessLog entries updated to only return entries with new data.
Unit test of entry filtering added

* Unit tests, plus fixes as a result of unit tests

* Schema validation tests in place for slack logs

* documentation for slack app setup added to README in the app directory

* typo fix in readme

* add slack apps to test_get_all_apps unit test

* Reformat to satisfy the linter
Added unit tests to get 100 percent coverage for the slack app

* updates per PR feedback

* Added a section on Slack authorization to the App Configuration documentation

Run Details

4111 of 4210 relevant lines covered (97.65%)

0.98 hits per line