admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,329 Commits 697 Branches 195 Tags
coverage_update
Commit Graph

492 Commits

Author SHA1 Message Date
Jose Enrique Hernandez a66740b506 Merge branch 'develop' into PR_609 2020-08-25 12:13:24 -04:00
Bhavin Patel 00653ac542 Merge pull request #623 from splunk/fixawsk8sfailuresrcuser 
newfixawsdetectpkey
 2020-08-24 12:47:10 -07:00
Jose Enrique Hernandez 5eb6c522c6 Merge branch 'develop' into PR_609 2020-08-24 12:50:54 -04:00
Jose Enrique Hernandez 6443822362 Merge branch 'develop' into fixawsk8sfailuresrcuser 2020-08-24 12:20:40 -04:00
Jose Enrique Hernandez 21c1dcb759 Merge branch 'develop' into PR_609 2020-08-24 01:04:48 -04:00
Jose Enrique Hernandez 1c1ce46004 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 01:04:40 -04:00
Jose Enrique Hernandez a26414f16d Merge branch 'develop' into TR-122 2020-08-24 00:39:35 -04:00
Jose Enrique Hernandez 76d05aee12 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 00:36:00 -04:00
Jose Enrique Hernandez 686ea3c55d Merge branch 'develop' into PR_609 2020-08-24 00:35:15 -04:00
Rod Soto c0c6c4db97 newfixawsdetectpkey 2020-08-20 16:39:25 -04:00
Rod Soto 8b532f7358 fixedsrcuserfromtable 2020-08-20 12:02:44 -04:00
Bhavin Patel fdfcc03651 Merge branch 'develop' into mitrests 2020-08-19 19:20:53 -07:00
Rod Soto 94707e9cfd addedmitretoawssearches 2020-08-19 21:16:13 -04:00
bpatel 00f51defe8 shannons PR bug fixes 2020-08-19 14:37:01 -07:00
Mikael Bjerkeland 584ef0aff9 Updates 2020-08-14 22:59:11 +02:00
Mikael Bjerkeland 289cec6fde Now validating? 2020-08-12 23:32:48 +02:00
Mikael Bjerkeland ff4cf63e3e Fixed up my mistakes. Should hopefully validate now 2020-08-12 23:26:57 +02:00
Mikael Bjerkeland cc4d23469c . 2020-08-12 23:26:26 +02:00
Mikael Bjerkeland d820c2d914 Retrying 2020-08-12 23:21:43 +02:00
Mikael Bjerkeland c12f8b2a6e Added ARP Poisoning Detection for Cisco Devices 2020-08-12 10:55:10 +02:00
Mikael Bjerkeland dd10e6e3cb Adding macros 2020-08-12 09:17:32 +02:00
Mikael Bjerkeland 9eb49b723c Description update 2020-08-11 23:33:57 +02:00
Mikael Bjerkeland a3e9363271 Added Layer 2 Network Detection to detect Rogue DHCP Servers 2020-08-11 23:29:42 +02:00
bpatel 2f04c868e4 new detections for security hub alerts 2020-08-06 14:44:50 -07:00
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00
bpatel 58f47148b9 ymls and updates 2020-08-04 14:04:38 -07:00
bpatel 63f266629e porting ymls into a newe PR 2020-08-04 12:55:12 -07:00
Bhavin Patel 6e595aa13a Merge pull request #590 from splunk/nocaps 
Nocaps
 2020-08-04 09:54:56 -07:00
Patrick Bareiss 9d7a8c2e3e Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe 2020-07-29 10:55:02 +02:00
Joseph Zadeh 3f93f64bfd [TR-038] update mitre id for detection. add test for net exe specific behavior 2020-07-28 11:47:58 -07:00
Rod Soto a4e1a402ca anothererrorfixed 2020-07-28 12:03:21 -04:00
Rod Soto d597c6f64c Merge branch 'develop' into nocaps 2020-07-28 11:53:17 -04:00
Rod Soto 182b0551aa fixedsearch 2020-07-28 11:52:34 -04:00
Patrick Bareiss 074b782dd0 detection tested 2020-07-28 15:43:57 +02:00
Patrick Bareiss 004eeb2347 merged 2020-07-28 14:20:14 +02:00
Patrick Bareiss 8db3edafe2 tested detection 2020-07-28 14:17:10 +02:00
Rod Soto f53f148f00 seeifitworks 2020-07-28 08:10:19 -04:00
Rod Soto 9b3a81da87 fixedsearches 2020-07-28 07:46:50 -04:00
Patrick Bareiss f74a0fe273 successful tested 2020-07-28 11:14:34 +02:00
Rod Soto ba11f8f183 awslm5searches 2020-07-27 20:33:01 -04:00
Rod Soto 1ac5d3fca4 awslm3rd 2020-07-27 19:19:10 -04:00
Rod Soto 9f2c49f532 2searchstsassumerole 2020-07-27 17:57:12 -04:00
Rod Soto 3584bb4a31 newawslmsearches 2020-07-27 17:20:05 -04:00
Jose Enrique Hernandez 025a161f7b Update smb_traffic_spike.yml 2020-07-24 12:32:22 -04:00
Patrick Bareiss a38b71f11d converted detections to subtechniques 2020-07-22 10:59:55 +02:00
Patrick Bareiss e7966e76b1 converted detections to subtechniques 2020-07-22 10:45:43 +02:00
Patrick Bareiss bd0e7ca2ba converted detections to subtechniques 2020-07-22 10:34:54 +02:00
Bhavin Patel bb906c721a Update gcp_kubernetes_cluster_pod_scan_detection.yml 
corrected how to implement
 2020-07-20 10:47:18 -07:00
Rod Soto ef98461e89 newgcpk8podsearch 2020-07-17 22:11:19 -04:00
bpatel 73507de98c updating spl and FP 2020-07-14 17:50:43 -07:00