mirror of
https://github.com/marcredhat/kql
synced 2026-06-08 13:23:58 +00:00
marc
43 lines
3.4 KiB
Plaintext
43 lines
3.4 KiB
Plaintext
/Users/marc.chisinevski/.venvs/azcli/lib/python3.9/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020
|
|
warnings.warn(
|
|
[sdl_client] session = kql-proof-fbfe7c67-c796-46d2-901d-7b948657d89b
|
|
Verifying 17 .pq files run cleanly on SDL ...
|
|
(Each file tested in TWO forms: as-written and whitespace-collapsed.)
|
|
|
|
✓ 01_anomalous_signin_location_increase.pq [as-written] matching=63.0 (3.0s)
|
|
✓ 01_anomalous_signin_location_increase.pq [collapsed] matching=63.0 (1.8s)
|
|
✓ 02_rare_audit_activity_by_app.pq [as-written] matching=3.0 (2.0s)
|
|
✓ 02_rare_audit_activity_by_app.pq [collapsed] matching=3.0 (2.6s)
|
|
✓ 03_azure_rare_subscription_ops.pq [as-written] matching=48.0 (1.9s)
|
|
✓ 03_azure_rare_subscription_ops.pq [collapsed] matching=48.0 (2.2s)
|
|
✓ 04_daily_signin_location_trend.pq [as-written] matching=63.0 (3.2s)
|
|
✓ 04_daily_signin_location_trend.pq [collapsed] matching=63.0 (5.4s)
|
|
✓ 05_daily_network_traffic_per_source.pq [as-written] matching=126.0 (3.9s)
|
|
✓ 05_daily_network_traffic_per_source.pq [collapsed] matching=126.0 (2.9s)
|
|
✓ 06_daily_process_execution_trend.pq [as-written] matching=10.0 (2.2s)
|
|
✓ 06_daily_process_execution_trend.pq [collapsed] matching=10.0 (3.6s)
|
|
✓ 07_rare_user_agent_by_app.pq [as-written] matching=20.0 (2.8s)
|
|
✓ 07_rare_user_agent_by_app.pq [collapsed] matching=20.0 (3.2s)
|
|
✓ 08_network_ioc_match.pq [as-written] matching=118.0 (3.0s)
|
|
✓ 08_network_ioc_match.pq [collapsed] matching=118.0 (4.6s)
|
|
✓ 09_new_processes_24h.pq [as-written] matching=2.0 (2.9s)
|
|
✓ 09_new_processes_24h.pq [collapsed] matching=2.0 (2.5s)
|
|
✓ 10_sharepoint_anomaly.pq [as-written] matching=400.0 (3.0s)
|
|
✓ 10_sharepoint_anomaly.pq [collapsed] matching=400.0 (3.4s)
|
|
✓ 11_palo_alto_beacon.pq [as-written] matching=125.0 (3.2s)
|
|
✓ 11_palo_alto_beacon.pq [collapsed] matching=125.0 (2.2s)
|
|
✓ 12_suspicious_windows_logon_off_hours.pq [as-written] matching=1.0 (2.9s)
|
|
✓ 12_suspicious_windows_logon_off_hours.pq [collapsed] matching=1.0 (2.4s)
|
|
✓ 13_insider_threat_sensitive_files.pq [as-written] matching=18.0 (4.8s)
|
|
✓ 13_insider_threat_sensitive_files.pq [collapsed] matching=18.0 (4.2s)
|
|
✓ 14_priv_escalation.pq [as-written] matching=1.0 (2.4s)
|
|
✓ 14_priv_escalation.pq [collapsed] matching=1.0 (2.5s)
|
|
✓ 15_slow_brute_force.pq [as-written] matching=43.0 (2.1s)
|
|
✓ 15_slow_brute_force.pq [collapsed] matching=43.0 (3.3s)
|
|
✓ 16_suspicious_travel.pq [as-written] matching=20.0 (2.1s)
|
|
✓ 16_suspicious_travel.pq [collapsed] matching=20.0 (2.0s)
|
|
✓ 17_daily_baseline_new_locations.pq [as-written] matching=20.0 (4.2s)
|
|
✓ 17_daily_baseline_new_locations.pq [collapsed] matching=20.0 (3.5s)
|
|
|
|
PASS: 17 FAIL: 0
|