Commit Graph

21 Commits

Author SHA1 Message Date
pyth0n1c 72f7731c6b Restored all the detections to the versions in develop. 2022-07-22 13:07:44 -07:00
pyth0n1c 89fb987623 Merge latest from develop, taking all of their changes 2022-07-22 12:58:35 -07:00
pyth0n1c 27bb4a28fc Fixed the ordering of all detections. This tool previously messed up that order... 2022-05-24 13:01:09 -07:00
pyth0n1c 578e6bb088 Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links. 2022-05-02 17:12:50 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK 6e34aa9cc8 fixed more detections 2022-01-18 13:58:57 +01:00
P4T12ICK 338f22f7e2 fixed more detections 2022-01-18 13:13:30 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
pyth0n1c ecf27cf81f Updated almost all detections again. Changed required_fields from submodel.fieldname to model.submodel.fieldname as discussed with the CREST Team. 2022-01-12 11:31:15 -08:00
pyth0n1c 2670d58f50 Massive commit - the field and datamodel update tool has updated almost all of our detections. We will commit and then run a test on everything to see if we broke any searches. 2022-01-10 15:58:14 -08:00
root 275c33f0e0 Added detection testing service results inOffice Application Drop Executable 2021-11-09 13:01:06 +00:00
tccontre dbce330eb0 fix_issues 2021-11-09 13:14:31 +01:00
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5
CARS_UPDATE_MITRE_ID_B5
2021-10-13 11:20:47 +02:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
root cbb2198d65 Added detection testing service results inOffice Application Drop Executable 2021-09-16 14:48:10 +00:00
tccontre ad6761f6b9 Merge branch 'fin7' of github.com:splunk/security_content into fin7 2021-09-16 16:00:27 +02:00
tccontre b869a0de99 fin7 2021-09-16 15:54:32 +02:00
root f42e2cd255 Added detection testing service results inOffice Application Drop Executable 2021-09-15 13:03:19 +00:00
tccontre d8d8c4e44c FIN7 2021-09-14 12:17:55 +02:00