Commit graph

142 commits

Author SHA1 Message Date
Kevin Logan
3c71408690
[Security Solution] Correct the default user notification messages and tooltip text for Memory and Behavior (#111806)
* [Security Solution] Correct the default user notification messages and tooltip text for Memory and Behavior
2021-09-10 07:30:38 -04:00
Paul Tavares
73540277e5
[Security Solution][Trusted Apps] New ArtifactEntryCard and refactor of Trusted Apps list to use it (#111051)
* New `ArtifactEntryCard` component
* Refactored ContextMenuItemNavByRouter and moved it to top-level components + new ActionsContextMenu component + add context menu to card
* Refactor Trusted App grid to use new ArtifactEntryCard
* new Trusted Apps generator + refactor existing of TA script to use it
* policy details support for custom back link
* bug fix: paginated content should not trigger a change to adjust paging settings unless loading is done
2021-09-09 18:47:40 -04:00
Esteban Beltran
a9e77fdfdb
Remove skip from flaky test. (#110494) 2021-09-01 09:04:33 +02:00
Jonathan Budzenski
ce1df5c69e skip suite failing es promotion. #110309 2021-08-26 12:54:04 -05:00
Candace Park
7a1ece68a2
[Security Solution][Endpoint][TrustedApps] Update trusted apps ui (#108583) 2021-08-18 03:49:06 -04:00
Candace Park
e1843f9252
[Security Solution][Endpoint][Admin] Endpoint List UI update (#106568) 2021-08-11 13:16:54 -04:00
Paul Tavares
a3119a5541
[Security Solution][Roles] Add Read-Only Endpoint indexes to the (Detections) role creation scripts + FTR improvements (#107086)
* Add needed indexes to the role scripts
* Moved/renamed detection engine roles and user utility to `x-pack/test/common/security_solution`
* removed duplicate code in rule_registry and instead exported same methods from `common/services/security_solution`
* new endpoint FTR service that includes methods for loading and unloading data (uses existing data indexer methods)
* Transforms: Added additional methods to the FTR Test service
2021-08-09 16:24:58 -04:00
Esteban Beltran
10efecf585
[Security Solution] Adds behavior protection support for mac and linux (#107749)
* Add behaviour-protection-for-mac-and-linux

* Display the correct os names in the OS section

* Fix policy config returning windows values
2021-08-09 13:03:27 +02:00
Esteban Beltran
56593b831c
[Security Solution] Behavior protection configuration card for policies integration (#106247) 2021-07-29 09:34:36 +02:00
Nicolas Chaulet
8924ff3219
[Fleet] Replace hash router by router with scoped history (#106267) 2021-07-26 07:50:29 -04:00
Joey F. Poon
5b0d679c60
[Security Solution] fix metadata api tests (#106340) 2021-07-22 10:04:49 -05:00
Esteban Beltran
ebc02741b3
[Security Solution]Memory protection configuration card for policies integration. (#101365) 2021-07-19 12:42:11 -04:00
Alejandro Fernández Gómez
cd5cd65fb2
[Fleet] Improve performance of Fleet setup (#102219)
* Remove endpoint from the default packages

* Change the default spinner for the initial load

* Export fleet endpoint package as a constant

* Use constants for special packages

* Simplify type signature of `isRequiredPackage`

* Remove unused types

* Simplify required and default package definitions

* Treat REQUIRED_PACKAGES as independent from DEFAULT_PACKAGES

We want to keep the assumption that the lists contain the same packages
only in `epm/constants.ts`

* Install all default packages, not only the required ones

* Document the purpose of each package list

* Handle auto-update for non-default packages

* Make `endpoint` non-removable

* Make endpoint package be installed by default in tests

* Rename requiredPackages to unremovablePackages

* Fix type check

* Add Endpoint to be installed by default on Fleet tests too

Co-authored-by: Jen Huang <its.jenetic@gmail.com>
2021-06-17 11:58:41 -07:00
spalger
3e723045a0 remove nested skip (#100296) 2021-06-16 10:14:15 -07:00
spalger
f4e0895b17 skip flaky suite (#100296) 2021-06-16 10:10:38 -07:00
Joey F. Poon
4b3adfda5f
[Security Solution] restyle endpoint details flyout (#102092) 2021-06-15 08:57:12 -05:00
Spencer
f466ebf1a3
[esArchiver] drop support for --dir, use repo-relative paths instead (#101345)
Co-authored-by: spalger <spalger@users.noreply.github.com>
2021-06-08 17:37:42 -04:00
Kyle Pollich
dc1d98ba17
[Fleet] Move integrations to a separate app (#99848)
* WIP: Re-create separation of integrations app

* Fix breadcrumbs

* Fix add integration button/routing

* Fix integrations test paths

* Fix failing policy tab tests

* Fix type errors

* Fix more type errors

* Fix integrations home page redirect

* Fix circular import

* Fix i18n errors

* Fix FTR paths

* Fix more deep fleet import paths

* Remove unneeded state set

* Fix more type errors

* Fix failing security_solutions tests

* Address redirect back path todo

* Fix page path in FTR

* Fix type error

* 🤞 Fix FTR failures

* Fix package details path in endpoint tests

* Fix test import

* Fix add integration route + breadcrumbs

* Fix missing layout for create package policy page

* Fixup Kibana feature declaration + fix app registry arrays

* Fix Kibana startup error from feature registration

* Fix telemetry schema

* Remove integrations from privilege tests

* Increase Fleet bundle limit by 20kb to fix CI error

* Use correct updated Fleet bundle limit

* Update limits.yml via script

* Address design feedback

* Fix i18n error

* Fix failing security solution tests

* Fix type error

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-06-07 10:43:44 -04:00
David Sánchez
ca324c63be
Removes event filters feature flag and exposes this feature by default (#100389)
* Removes event filters feature flag and expose this feature by default

* Fixes manifest unit test

* Fixes functional test adding event filter list case

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-05-25 15:19:42 +02:00
Kevin Logan
00479968a1
[Security Solution] Add linux malware config options and migration (#100166) 2021-05-19 17:37:43 -04:00
Kevin Logan
9da1a707d7
[Security Solution] Add supported field to ransomware (#100135) 2021-05-19 11:43:18 -04:00
Tiago Costa
8f1bf66a7b
skip flaky suite (#100296) 2021-05-19 13:13:07 +01:00
Kevin Logan
79c94d33fb
[Security Solution] Fix policy details test (#100260) 2021-05-18 13:14:31 -04:00
Brian Seeders
f1a2e6f251 skip flaky suite (#100236) 2021-05-17 15:53:20 -04:00
Spencer
808b44f2c1
[kbn/test] move types/ftr into src (#99555)
* [kbn/test] move types/ftr into src

* Apply eslint updates

* fix import of Lifecycle type

Co-authored-by: spalger <spalger@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-05-17 09:51:53 -07:00
Spencer
21c54d38c3
[ftr] auto assign ciGroupDocker to suites with dockerServers (#99393)
Co-authored-by: spalger <spalger@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-05-06 12:42:29 -07:00
Kevin Logan
f2bb74e996
[Security Solution][Detections] Add linux artifact for exception lists (#99104) 2021-05-06 09:13:37 -04:00
Spencer
61eb3f0685
[ftr] validate that suites are not in multiple ciGroups (#99398)
* [ftr] validate that suites are not in multiple ciGroups

* remove unused import

* include filename in error message

* remove redundant ciGroup tags

* fix more duplicate ciGroups

Co-authored-by: spalger <spalger@users.noreply.github.com>
2021-05-05 14:50:07 -07:00
Brian Seeders
f404305eaa
[CI] Create a ciGroup just for tests that use Docker (#98535) 2021-05-03 13:53:22 -04:00
Ross Wolf
1925cea9a2
[Security][Fleet] Install the security_detection_engine package automatically (#97191)
* Automatically install the security_detection_engine package via fleet
* Update dockerImage to include the security_detection_engine package
* Update api/fleet/setup install test
* Update test data for Endpoint package
* Fix JSON token
* Update firis json entry in destination_index
* Update destination_index structure
* Update destination_index structure
* Change KQL query to unblock testing
* Restore KQL and fix JSON instead
* update timestamps to pass tests
2021-04-20 13:07:11 -04:00
Nicolas Chaulet
78937e3bb4
[Fleet] Remove fleet agent routes and related services (#97206) 2021-04-15 17:15:43 -04:00
Tiago Costa
50313f75f6
chore(NA): enable preserve symlinks for ts without breaking packages development (#95433)
* chore(NA): move elastic-datemath into a ts package

* chore(NA): finish elastic-datemath

* chore(NA): finish elastic-datemath

* chore(NA): source folder for elastic-datemath

* chore(NA): add source-maps ace, analytics, apm-config-loader and apm-utils packages

* chore(NA): add sourcemaps to packages on typescript

* chore(NA): move test fixtures within source

* chore(NA): correct exclusions on packages

* chore(NA): correct package.json on all packages

* chore(NA): correct package.json on all packages

* chore(NA): complete kbn pm

* chore(NA): default export on elastic-datemath

* chore(NA): include logs on kbn-logging

* chore(NA): update bundle ref module to last code used in the webpack upstream

* chore(NA): update bundle ref module to last code used in the webpack upstream - refactored

* chore(NA): remove override method for exportsArgument

* fix(NA): typechecking problems by use @internal at javascript import sources on kbn-test package

* fix(NA): typescript projects check

* fix(NA): run optimizer integration tests from source

* chore(NA): fix usage from target for kbn optimizer

* chore(NA): path on tsconfig

* chore(NA): move tsignore into ts-expect-error

* chore(NA): include souce maps on kbn cli dev

* chore(NA): include souce maps on kbn-crypto, kbn-server-http-tools and kbn-telemetry-tools

* chore(NA): add issue links into the ts-expect-error comments
2021-03-31 00:02:22 +01:00
Candace Park
4ff9bfd113
[Security Solution][Endpoint][Admin] Match endpoint list host status with fleet agent status (#95243) 2021-03-26 16:17:12 -04:00
Paul Tavares
8fc5d8ba30
[FLEET][SECURITY_SOLUTION][ENDPOINT] Fleet Artifact client and refactoring of Endpoint to use it (#93776)
* Fleet: adds new service for Artifact storage management
* Fleet: Expose new `createArtifactsClient()` from Fleet `Plugin#start` interface
* Endpoint: Change Endpoint to use FleetArtifactClient and initial implementation of EndpointArtifactClient
* Endpoint: Add `fleetServerEnabled` feature flag to security solution plugin (will be used in next PR)
* Endpoint: Artifact download api adjusted to get artifact from fleet index
* Endpoint: Added new esArchive for artifacts stored in .fleet-artifacts index for API integration tests
2021-03-11 12:17:18 -05:00
Michael Olorunnisola
ebd92a6e5d
[Security_Solution][Telemetry] - Update endpoint usage to use agentService (#93829)
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-03-10 15:10:27 -05:00
Jonathan Buttner
6044f8a8bf
Removing resolver functional tests (#94331) 2021-03-10 14:06:47 -05:00
Candace Park
1a3bbbf917
[Security Solution][Endpoint][Admin] Fixes policy sticky footer save test (#92919)
* commented code to close out toast
2021-03-01 15:31:05 -05:00
Candace Park
33b24c5d89
[Security Solution][Endpoint][Admin] Fixes 7.12 ransomware migration and mac bug (#92639) 2021-03-01 15:27:02 -05:00
Brian Seeders
d9417635e8 skip flaky suite (#92567) 2021-02-24 10:32:04 -05:00
Jen Huang
c2b41c484b
[Fleet] Revamp integration detail page (#90887)
* Extract integration detail page changes from POC

* Remove unneccessary link wrappers

* Remove unused import

* Fix method name

* Fix linting
2021-02-10 12:03:34 -08:00
Brandon Kobel
4584a8b570
Elastic License 2.0 (#90099)
* Updating everything except the license headers themselves

* Applying ESLint rules

* Manually replacing the stragglers
2021-02-03 18:12:39 -08:00
Dan Panzarella
b7b9ca75d7
[Security Solution] Change Endpoint queries to be independent of HostDetails key in schema (#88012) 2021-02-03 16:22:08 -05:00
Candace Park
074003d4b4
[Security Solution][Endpoint][Admin] Ransomware card (#87945)
* [Security Solution][Endpoint][Admin] Ransomware card, package policy 7.12 migration
2021-01-28 13:35:06 -05:00
Candace Park
cf641f7303
[Security Solution][Endpoint][Admin] malware custom notify user message tests (#87603) 2021-01-07 13:44:51 -05:00
Paul Tavares
14df31b6a0
[SECURITY_SOLUTION][ENDPOINT] Trusted Apps List page Empty State when no trusted apps exist (#87252)
* Show loading spinner while trying to determine if entries exist
* Handle display of the 3 conditions: loading, entries exist, no entries
2021-01-07 11:22:23 -05:00
Paul Tavares
e067f557de
[SECURITY_SOLUTION][ENDPOINT] Delete Endpoint Policy List code (#87063)
* Remove Endpoint Policy List code from security_solution plugin
2020-12-30 15:08:29 -05:00
Matthew Kime
c129f93083
[index patterns] Fleep app - Keep saved object field list until field caps provides fields (#85370) 2020-12-19 21:56:06 -06:00
Candace Park
73068e755c
[Security Solution][Endpoint][Admin] Remove spaces in custom malware message brackets (#86393) 2020-12-18 14:45:29 -05:00
Xavier Mouligneau
0586c06ffc
[Security Solution] Add Pinned Event tabs on Timeline (#85905)
* wip

* finish drag & drop from pinned events + fix top n

* Fix types

* update cypress

* Fix unit tests

* fix cypress test

* fix filter out/in

* remove unused components

* fix pagination cypress test

* cypress timelines selectors

* review and skip cypress test

* more to skip

* fix type

* skip case

* Fix types

* Fix tests

* skip resolver

* only query pinned events

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Christos Nasikas <christos.nasikas@elastic.co>
Co-authored-by: Angela Chuang <yi-chun.chuang@elastic.co>
2020-12-16 18:44:37 +00:00
Jonathan Buttner
d4a631cf8e
[Security Solution][Resolver] Fixing resolver functional tests (#85647)
* Fixing resolver functional tests

* Import the animation constant

* Only check specific nodes instead of all the ones in view

* Removing check for link text

* updating test description

* Adding comments
2020-12-15 08:31:59 -05:00