[TI_Cybersixgill] Change from API to TAXII for the integration#2771
[TI_Cybersixgill] Change from API to TAXII for the integration#2771P1llus merged 5 commits intoelastic:mainfrom
Conversation
|
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
|
Awaiting feedback from Cybersixgill on a replacement for the |
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
🤖 GitHub commentsTo re-run your PR in the CI, just comment with:
|
|
I have now tested this with 90 days worth of data working successfully, it is fully ready for review |
efd6
left a comment
There was a problem hiding this comment.
Need reformatting, check is complaining.
|
I have a demo scheduled sometime tomorrow and will proceed with merging after that |
What does this PR do?
The initial integration used to communicate with a third party python script, in collaboration with Cybersixgill we have converted this integration to rather use the TAXII server directly, this removes all third party tools requirements instead.
Checklist
changelog.ymlfile.The dashboards and fields are the same, but the ingest pipeline had to be rewritten to replace the functionality initially found in the python script