From f260c274999a2e92327d73c49ce5f0df3c32738b Mon Sep 17 00:00:00 2001 From: divious1 Date: Mon, 15 Jun 2020 11:40:13 -0400 Subject: [PATCH 1/3] removed UI tour reload --- package/default/app.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/package/default/app.conf b/package/default/app.conf index 852676cd72..174279e9cc 100644 --- a/package/default/app.conf +++ b/package/default/app.conf @@ -12,7 +12,6 @@ reload.usage_searches = simple reload.use_case_library = simple reload.correlationsearches = simple reload.analyticstories = simple -reload.ui-tour = simple reload.governance = simple reload.managed_configurations = simple reload.postprocess = simple From 358d97b128672835a8c93be17fa6cfa40333c0b2 Mon Sep 17 00:00:00 2001 From: divious1 Date: Mon, 15 Jun 2020 16:44:08 -0400 Subject: [PATCH 2/3] removing UI tour --- package/default/ui-tour.conf | 24 ------------------------ 1 file changed, 24 deletions(-) delete mode 100644 package/default/ui-tour.conf diff --git a/package/default/ui-tour.conf b/package/default/ui-tour.conf deleted file mode 100644 index b68dadda6c..0000000000 --- a/package/default/ui-tour.conf +++ /dev/null @@ -1,24 +0,0 @@ -[escu_tour] -context = DA-ESS-ContentUpdate -doneURL = /app/DA-ESS-ContentUpdate/escu_summary?form.as_cis=*&form.as_category=*&form.cis_token=*&form.searchtype=*&form.as_kill_chain_phase=*&form.as_mitre_attack=*&form.as_data_models=*&form.kill_chain_phase=*&form.mitre_attack=*&form.data_models=* -imageCaption2 = Indicators of compromise can be difficult to stitch together to construct a bigger picture. ESCU's Analytic Stories help you monitor for common adversary tactics and techniques, which helps you decide whether to investigate further. -imageCaption3 = When you open ESCU, you’ll see the total number of Analytic Stories, the number of stories updated with the last two weeks, the categories they fall into, and the stages of the kill chain they relate to. -imageCaption4 = Each Analytic Story includes a narrative that provides deep background on the attack technique in question. The "Run Analytics" button will kick off the detection searches in the order in which they appear. -imageCaption5 = On the right are the Kill Chain and MITRE ATT&CK framework phases the story is related to. -imageCaption6 = Each search includes an “Explain it like I’m Five (ELI5)” section that breaks it down in terms that even your boss can understand. -imageCaption7 = The “How to Implement” section explains prerequisites required for the searches to work correctly. “Known False Positives” helps you understand some of the conditions that may create misleading results. -imageCaption8 = We invite you to collaborate with us by sharing your feedback and suggesting topics for Analytic Stories. Click on the “Feedback Center” tab in the green menu bar. -imageName2 = Slide2.PNG -imageName3 = Slide3.PNG -imageName4 = Slide4.PNG -imageName5 = Slide5.PNG -imageName6 = Slide6.PNG -imageName7 = Slide7.PNG -imageName8 = Slide8.PNG -imgPath = /escu -label = ESCU -skipText = Skip tour -type = image -viewed = 0 -imageName1 = Slide1.PNG -imageCaption1 = This biweekly subscription service delivers pre-packaged security content that helps you better address security problems and threats in your environment and get the most out of Splunk Enterprise Security. From fa9cdbc18bb48394f917ec3e24be3590a6494cdb Mon Sep 17 00:00:00 2001 From: divious1 Date: Mon, 15 Jun 2020 16:48:04 -0400 Subject: [PATCH 3/3] readding tour conf file --- package/default/ui-tour.conf | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 package/default/ui-tour.conf diff --git a/package/default/ui-tour.conf b/package/default/ui-tour.conf new file mode 100644 index 0000000000..b68dadda6c --- /dev/null +++ b/package/default/ui-tour.conf @@ -0,0 +1,24 @@ +[escu_tour] +context = DA-ESS-ContentUpdate +doneURL = /app/DA-ESS-ContentUpdate/escu_summary?form.as_cis=*&form.as_category=*&form.cis_token=*&form.searchtype=*&form.as_kill_chain_phase=*&form.as_mitre_attack=*&form.as_data_models=*&form.kill_chain_phase=*&form.mitre_attack=*&form.data_models=* +imageCaption2 = Indicators of compromise can be difficult to stitch together to construct a bigger picture. ESCU's Analytic Stories help you monitor for common adversary tactics and techniques, which helps you decide whether to investigate further. +imageCaption3 = When you open ESCU, you’ll see the total number of Analytic Stories, the number of stories updated with the last two weeks, the categories they fall into, and the stages of the kill chain they relate to. +imageCaption4 = Each Analytic Story includes a narrative that provides deep background on the attack technique in question. The "Run Analytics" button will kick off the detection searches in the order in which they appear. +imageCaption5 = On the right are the Kill Chain and MITRE ATT&CK framework phases the story is related to. +imageCaption6 = Each search includes an “Explain it like I’m Five (ELI5)” section that breaks it down in terms that even your boss can understand. +imageCaption7 = The “How to Implement” section explains prerequisites required for the searches to work correctly. “Known False Positives” helps you understand some of the conditions that may create misleading results. +imageCaption8 = We invite you to collaborate with us by sharing your feedback and suggesting topics for Analytic Stories. Click on the “Feedback Center” tab in the green menu bar. +imageName2 = Slide2.PNG +imageName3 = Slide3.PNG +imageName4 = Slide4.PNG +imageName5 = Slide5.PNG +imageName6 = Slide6.PNG +imageName7 = Slide7.PNG +imageName8 = Slide8.PNG +imgPath = /escu +label = ESCU +skipText = Skip tour +type = image +viewed = 0 +imageName1 = Slide1.PNG +imageCaption1 = This biweekly subscription service delivers pre-packaged security content that helps you better address security problems and threats in your environment and get the most out of Splunk Enterprise Security.