Commit Graph

17 Commits

Author SHA1 Message Date
David Dorsey 5f48894035 removed the create notable from all searches 2020-09-23 14:38:15 -05:00
David Dorsey 3efae7ccef cron_schedule fixed 2020-09-10 20:52:24 -05:00
David Dorsey 97dd7e357b Small updates 2020-09-10 20:49:00 -05:00
David Dorsey adf19afe6a Updated baseline searches to have correct deployment. Which was also created 2020-09-09 01:35:38 -05:00
bpatel 10a5b76af7 merge with develop 2020-09-04 13:40:15 -07:00
David Dorsey 7de781c8f0 Manifest cleanup 2020-08-20 13:15:14 -05:00
David Dorsey b4ab45f299 Updated baseline searches for cloud provisioning activities.
Broke them out into an initial search and update search
  Updated them to use kv store
Updated Cloud Provisioning from previously unseen ip address to
  relfect changes in baseline searches.
Added new fields to make the detection more actionable
Added the lookup manifest and a macro manifest
2020-08-19 10:28:05 -05:00
Mikael Bjerkeland 4c7cb2488c Polish 2020-08-14 23:08:02 +02:00
Mikael Bjerkeland 584ef0aff9 Updates 2020-08-14 22:59:11 +02:00
David Dorsey 07ce28f433 Updated baseline deployments 2020-06-25 13:49:48 -05:00
David Dorsey 301bf51a8a Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:34:38 -05:00
Patrick Bareiss 85f13dd926 new deployment configurations 2020-06-25 09:53:44 +02:00
David Dorsey 8438bf71e8 Fixed the first time previously seen windows service search to work
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update

Made the default deployment template be -70m@m to -10m@m

Added a new deployment template for hourly baseline caches
2020-06-25 00:09:30 -05:00
Patrick Bareiss e9c7ae28a5 small bug bix 2020-05-25 18:00:46 +02:00
Patrick Bareiss 3c7b2dfc6d bug in generate 2020-05-11 09:31:35 +02:00
Patrick Bareiss cda505d8fa new generate script 2020-05-06 17:42:38 +02:00
Patrick Bareiss e610e87ee0 WIP 2020-04-30 10:14:38 +02:00