Skip to content

IOC Query Builder and ASR Custom Plugins#115

Open
alfonso-greenbrook wants to merge 14 commits intoAzure:mainfrom
alfonso-greenbrook:NewCustomPlugins
Open

IOC Query Builder and ASR Custom Plugins#115
alfonso-greenbrook wants to merge 14 commits intoAzure:mainfrom
alfonso-greenbrook:NewCustomPlugins

Conversation

@alfonso-greenbrook
Copy link
Contributor

Two custom plugins:

  1. GPT - IOC query builder (just KQL for now, but scope to extend to other SIEM query languages).
  2. KQL - Summary of ASR rules based on DeviceEvents table.

@alfonso-greenbrook
Copy link
Contributor Author

@KwachSean another 2 plugins for review.

@KwachSean
Copy link
Collaborator

@alfonso-greenbrook provide sample prompts to use the plugin

@KwachSean KwachSean self-requested a review October 29, 2024 09:56
Copy link
Collaborator

@KwachSean KwachSean left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@alfonso-greenbrook provide sample prompts to use the plugin

@alfonso-greenbrook
Copy link
Contributor Author

Have added example prompts to both readme.md and .yaml files.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants