pyth0n1c
|
72f7731c6b
|
Restored all the detections to the versions in develop.
|
2022-07-22 13:07:44 -07:00 |
|
pyth0n1c
|
89fb987623
|
Merge latest from develop, taking all of their changes
|
2022-07-22 12:58:35 -07:00 |
|
pyth0n1c
|
27bb4a28fc
|
Fixed the ordering of all detections. This tool previously messed up that order...
|
2022-05-24 13:01:09 -07:00 |
|
pyth0n1c
|
578e6bb088
|
Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.
|
2022-05-02 17:12:50 -07:00 |
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
P4T12ICK
|
4fd8604b9a
|
removed SAAWS and automated_detection_testing flag
|
2022-01-27 09:50:45 +01:00 |
|
P4T12ICK
|
6e34aa9cc8
|
fixed more detections
|
2022-01-18 13:58:57 +01:00 |
|
P4T12ICK
|
338f22f7e2
|
fixed more detections
|
2022-01-18 13:13:30 +01:00 |
|
P4T12ICK
|
84092434a2
|
fixed more detections
|
2022-01-18 12:53:54 +01:00 |
|
pyth0n1c
|
ecf27cf81f
|
Updated almost all detections again. Changed required_fields from submodel.fieldname to model.submodel.fieldname as discussed with the CREST Team.
|
2022-01-12 11:31:15 -08:00 |
|
pyth0n1c
|
2670d58f50
|
Massive commit - the field and datamodel update tool has updated almost all of our detections. We will commit and then run a test on everything to see if we broke any searches.
|
2022-01-10 15:58:14 -08:00 |
|
root
|
275c33f0e0
|
Added detection testing service results inOffice Application Drop Executable
|
2021-11-09 13:01:06 +00:00 |
|
tccontre
|
dbce330eb0
|
fix_issues
|
2021-11-09 13:14:31 +01:00 |
|
tccontre
|
e0299db411
|
CARS_UPDATE_MITRE_ID_B5
CARS_UPDATE_MITRE_ID_B5
|
2021-10-13 11:20:47 +02:00 |
|
research bot
|
961a81d4a5
|
updating docs and package bits [ci skip]
|
2021-09-27 18:54:15 +00:00 |
|
root
|
cbb2198d65
|
Added detection testing service results inOffice Application Drop Executable
|
2021-09-16 14:48:10 +00:00 |
|
tccontre
|
ad6761f6b9
|
Merge branch 'fin7' of github.com:splunk/security_content into fin7
|
2021-09-16 16:00:27 +02:00 |
|
tccontre
|
b869a0de99
|
fin7
|
2021-09-16 15:54:32 +02:00 |
|
root
|
f42e2cd255
|
Added detection testing service results inOffice Application Drop Executable
|
2021-09-15 13:03:19 +00:00 |
|
tccontre
|
d8d8c4e44c
|
FIN7
|
2021-09-14 12:17:55 +02:00 |
|