Skip to content

V2 update.md #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
G-r-ay wants to merge 2 commits into from
Closed

V2 update.md #4

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2dd38c3
V2 update.md
G-r-ay Jan 22, 2025
3511b2f
Update snow_commandRef.md
G-r-ay Jan 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 18 additions & 5 deletions docs/snow_commandRef.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,11 +13,12 @@ Required Permissions: Warehouse, compute pool, and task management access

### Run Inference
```sql
CALL static_detection.inference('your_service_name');
CALL static_detection.inference(include_mitre_map);
```
Parameters:
- `your_service_name`: Name of the service to analyze (string)
Purpose: Executes inference on specified service data
Parameters:
- `include_mitre_map (BOOLEAN)`: Specifies whether to include MITRE technique mappings in the classified anomalies. Set to TRUE to include the mappings, or FALSE to exclude them.

Purpose: This parameter acts as a toggle to determine whether MITRE tactic mappings are added to the identified anomalies during the inference process.

### Deep Dive Analysis
```sql
Expand All @@ -27,6 +28,18 @@ Parameters:
- `sequence_id`: Identifier of the sequence to analyze (string/integer)
Purpose: Investigates specific sequences flagged as anomalies


### Mitre ATT&CK Classification
```sql
CALL inspect.mitre_classification();
```

Parameters:
- `None`

Purpose: Classifies MITRE tactics for a table of known anomalies sourced from the Tempo app or other systems


## Automated Detection

### Start Automated Inference
Expand Down Expand Up @@ -101,4 +114,4 @@ Purpose: Removes the specified version of the model and its metadata from the ap
## Notes
- All commands require appropriate permissions for warehouse, compute pool, and task management
- The management console is accessible via the Streamlit dashboard
- Reference data can be managed through the web-based management interface
- Reference data can be managed through the web-based management interface
Loading