Commit Graph

9119 Commits

Author SHA1 Message Date
github-actions[bot] 00d45922eb Branch was auto-updated. 2021-07-01 16:33:39 +00:00
github-actions[bot] 4d9032c1f4 Branch was auto-updated. 2021-07-01 16:33:37 +00:00
Bhavin Patel a88ba2d01a Merge pull request #1469 from splunk/contentctl_update
adding new description logic for our generated template
2021-07-01 11:33:17 -05:00
mhaag-spl d3f8728816 RBA 2021-07-01 06:52:15 -06:00
patel-bhavin 36cb084235 first 6 ymls 2021-06-30 16:48:13 -05:00
patel-bhavin 4ebf2e22ba remove extrra files 2021-06-30 15:53:05 -05:00
github-actions[bot] 5514077de0 Branch was auto-updated. 2021-06-30 20:23:44 +00:00
github-actions[bot] d96bf8b30a Branch was auto-updated. 2021-06-30 20:23:42 +00:00
github-actions[bot] 624b4a5a1c Branch was auto-updated. 2021-06-30 20:23:41 +00:00
github-actions[bot] edb29f3874 Branch was auto-updated. 2021-06-30 20:23:40 +00:00
github-actions[bot] 78360ad461 Branch was auto-updated. 2021-06-30 20:23:39 +00:00
Jose Enrique Hernandez f436742c0d Merge pull request #1452 from splunk/rba_poc
Context Builder AKA RBA++ AKA security emojis
2021-06-30 16:23:22 -04:00
divious1 63d2581343 Merge branch 'develop' into rba_poc 2021-06-30 16:10:23 -04:00
divious1 b86a57f2a2 adding new description logic for our generated template 2021-06-30 15:04:01 -04:00
patel-bhavin 9d063ed669 conflicts 2021-06-30 12:22:48 -05:00
patel-bhavin e5e2b62f39 Merge branch 'cloud_detection_rba_yml' of github.com:splunk/security_content into cloud_detection_rba_yml 2021-06-30 10:39:08 -05:00
Michael Haag 743ca45fbd Update access_lsass_memory_for_dump_creation.yml 2021-06-30 08:56:38 -06:00
github-actions[bot] b69ebbf728 Branch was auto-updated. 2021-06-30 14:42:23 +00:00
github-actions[bot] 7f98688e4a Branch was auto-updated. 2021-06-30 14:42:22 +00:00
github-actions[bot] 2bc052d925 Branch was auto-updated. 2021-06-30 14:42:21 +00:00
github-actions[bot] 9b2ed2e366 Branch was auto-updated. 2021-06-30 14:42:20 +00:00
Michael Haag 25794989c6 Merge pull request #1468 from splunk/autoencoder_for_anomaly_detection
Notebook describing autoencoders for anomaly detection
2021-06-30 08:41:55 -06:00
patel-bhavin 42d2afeae8 adding keys to all cloud detections with a 2021-06-29 16:58:47 -05:00
patel-bhavin 7194ba1867 adding empty keys to the ymls 2021-06-29 15:36:04 -05:00
Michael Hart 858f567c67 Merge branch 'autoencoder_for_anomaly_detection' of github.com:splunk/security_content into autoencoder_for_anomaly_detection 2021-06-29 14:49:15 -04:00
Michael Hart 8773f14523 More edits 2021-06-29 14:48:27 -04:00
github-actions[bot] 7f2423864a Branch was auto-updated. 2021-06-29 18:31:02 +00:00
github-actions[bot] 90d62f8358 Branch was auto-updated. 2021-06-29 18:31:00 +00:00
github-actions[bot] 72e304cb79 Branch was auto-updated. 2021-06-29 18:30:59 +00:00
github-actions[bot] 3124d0b301 Branch was auto-updated. 2021-06-29 18:30:59 +00:00
github-actions[bot] 5a7f37ffbf Branch was auto-updated. 2021-06-29 18:30:58 +00:00
Bhavin Patel fb6f9c82a7 Merge pull request #1462 from splunk/ssa_wevtutil_branch_reversion
[PR-1444] fix branch reversion.
2021-06-29 13:30:38 -05:00
patel-bhavin e7b854b7e6 validate risk score 2021-06-29 13:15:56 -05:00
tccontre 63937f9521 Merge branch 'ssa_det' of github.com:splunk/security_content into ssa_det 2021-06-29 17:01:58 +02:00
tccontre 5c3fe3dda1 ssa8 2021-06-29 17:01:40 +02:00
Michael Hart 04c4263b56 Adding edits 2021-06-29 09:47:37 -04:00
Michael Hart 4dbc42c86c Initial commit 2021-06-28 22:10:15 -04:00
github-actions[bot] 868a3fe2a1 Branch was auto-updated. 2021-06-28 18:29:50 +00:00
github-actions[bot] dc67fbd644 Branch was auto-updated. 2021-06-28 18:29:49 +00:00
github-actions[bot] e4a7b5a75d Branch was auto-updated. 2021-06-28 18:29:47 +00:00
github-actions[bot] 52aaa53e40 Branch was auto-updated. 2021-06-28 18:29:47 +00:00
github-actions[bot] 73a7d75731 Branch was auto-updated. 2021-06-28 18:29:46 +00:00
Michael Haag 40278784b2 Merge pull request #1465 from splunk/excessive_sc_start_disable
Excessive number of sc.exe start as disabled calls
2021-06-28 12:29:30 -06:00
Michael Hart d9c8e10920 Slight correction. Process contains cmd line arguments for finding distinct number of sc invocations. Removing this and process id from BY clause 2021-06-28 14:14:42 -04:00
Michael Haag f10bdb4742 Update excessive_number_of_service_control_start_as_disabled.yml 2021-06-28 11:34:18 -06:00
Michael Haag bfa5d036ae Update excessive_number_of_service_control_start_as_disabled.yml 2021-06-28 10:35:29 -06:00
Michael Haag ae269feb4b Update excessive_number_of_service_control_start_as_disabled.yml 2021-06-28 10:35:01 -06:00
github-actions[bot] d57b067af1 Branch was auto-updated. 2021-06-28 16:09:43 +00:00
github-actions[bot] f17961abd1 Branch was auto-updated. 2021-06-28 16:09:41 +00:00
github-actions[bot] 8722a9fae7 Branch was auto-updated. 2021-06-28 16:09:41 +00:00