google / google/osdfir-infrastructure

Enable automatic DFIQ integration between Yeti and Timesketch

Open
#264 2 comments 0 reactions 1 assignee Claimed by @wajihyassine View on GitHub
enhancement
Dominant language
Go Template
Stars
213
Forks
30
Avg merge
14h 33m
Merged PRs (30d)
5

Description

### Name and Version

charts/timesketch and charts/yeti

### What is the problem this feature will solve?

Furthering automated integration for Yeti and Timesketch

### What is the feature you are proposing to solve the problem?

In timesketch configs, enable Yeti DFIQ configs. Specifically DFIQ_ENABLED and YETI_DFIQ_ENABLED to True somewhere here: https://github.com/google/osdfir-infrastructure/blob/main/charts/osdfir-infrastructure/charts/timesketch/templates/init-configmap.yaml#L93

In Yeti:
* Enabling DFIQFeed and Timesketch feed at runtime.

### What alternatives have you considered?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.