Commit Graph

9119 Commits

Author SHA1 Message Date
root 8c066fcd26 Added detection testing service results inDetect processes used for System Network Configuration Discovery 2021-07-28 18:20:17 +00:00
root 2fac7f3a74 Added detection testing service results inDetect New Open S3 Buckets over AWS CLI 2021-07-28 18:19:22 +00:00
patel-bhavin ea8de7ad52 Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate 2021-07-28 10:52:39 -07:00
patel-bhavin ecf2886c43 revert 2021-07-28 10:52:22 -07:00
Bhavin Patel 74e0266341 Update detect_new_open_s3_buckets_over_aws_cli.yml 2021-07-27 16:50:03 -07:00
Bhavin Patel 79af676857 Update detect_new_open_s3_buckets_over_aws_cli.yml 2021-07-27 16:45:59 -07:00
patel-bhavin 90191cd151 risk_update 2021-07-27 14:51:57 -07:00
patel-bhavin 60d499fb99 Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate 2021-07-27 14:41:15 -07:00
patel-bhavin f24ba42985 aws-cli 2021-07-27 14:41:06 -07:00
Bhavin Patel 7431704a71 Merge branch 'develop' into blackbolt_duplicate 2021-07-27 14:01:15 -07:00
patel-bhavin bf6804cef7 adding spl updates 2021-07-27 13:57:33 -07:00
github-actions[bot] ffa8a4a805 Branch was auto-updated. 2021-07-27 20:53:22 +00:00
github-actions[bot] da49981e4d Branch was auto-updated. 2021-07-27 20:53:18 +00:00
Bhavin Patel 7f1e68eea6 Merge pull request #1536 from sec-researcher/optimized
Filter PTR requests to optimize deviation calculation and remove them from result.
2021-07-27 13:53:02 -07:00
Bhavin Patel 4d3c12cf26 Merge branch 'develop' into optimized 2021-07-27 13:02:37 -07:00
dependabot[bot] 78493550fd Bump distlib from 0.3.1 to 0.3.2
Bumps [distlib](https://bitbucket.org/pypa/distlib) from 0.3.1 to 0.3.2.
- [Changelog](https://bitbucket.org/pypa/distlib/src/master/CHANGES.rst)
- [Commits](https://bitbucket.org/pypa/distlib/branches/compare/0.3.2..0.3.1)

---
updated-dependencies:
- dependency-name: distlib
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-27 20:02:13 +00:00
github-actions[bot] 5dbf545f75 Branch was auto-updated. 2021-07-27 20:01:52 +00:00
Jose Enrique Hernandez 3807152d0a Merge pull request #1510 from splunk/dependabot/pip/splunk-sdk-1.6.16
Bump splunk-sdk from 1.6.15 to 1.6.16
2021-07-27 16:01:33 -04:00
root 2fd2af4d29 Added detection testing service results inDNS Query Length With High Standard Deviation 2021-07-27 19:59:57 +00:00
Jose Enrique Hernandez 4eb9a75f80 Merge branch 'develop' into optimized 2021-07-27 10:54:35 -04:00
patel-bhavin df4b290340 minor 2021-07-26 18:40:35 -07:00
github-actions[bot] 5ffddf539e Branch was auto-updated. 2021-07-26 16:11:51 +00:00
github-actions[bot] 6278d12ded Branch was auto-updated. 2021-07-26 16:11:45 +00:00
Bhavin Patel 6fb05a1b9f Merge pull request #1542 from splunk/Shadowsinthecopy
SAM I AM
2021-07-26 09:11:29 -07:00
P4T12ICK c4ce0e8590 converted response_task to investigations 2021-07-26 13:49:50 +02:00
P4T12ICK 686b0b5ca4 converted response_task to investigations 2021-07-26 13:39:17 +02:00
Michael Haag 48165c7e35 Merge branch 'develop' into Shadowsinthecopy 2021-07-23 14:10:05 -06:00
mhaag-spl ba92a642a8 SAM I AM
I AM SAM
2021-07-23 14:06:27 -06:00
P4T12ICK c69b8c1053 response tasks into investigations 2021-07-23 19:34:01 +02:00
github-actions[bot] c6639226df Branch was auto-updated. 2021-07-22 19:42:29 +00:00
github-actions[bot] c1ee926cac Branch was auto-updated. 2021-07-22 19:42:25 +00:00
Michael Haag d1ac094077 Merge pull request #1537 from splunk/Shadowsinthecopy
4104 Shadow Copy
2021-07-22 13:42:08 -06:00
github-actions[bot] cfede36f8f Branch was auto-updated. 2021-07-22 19:12:58 +00:00
github-actions[bot] b7a650741d Branch was auto-updated. 2021-07-22 19:12:53 +00:00
github-actions[bot] f82a26bf8a Branch was auto-updated. 2021-07-22 19:12:52 +00:00
Bhavin Patel a761479f6f Merge pull request #1533 from splunk/aws_snap_exfil
AWS Exfil
2021-07-22 12:12:35 -07:00
Michael Haag ad44baef29 Update detect_shared_ec2_snapshot.yml 2021-07-22 13:06:23 -06:00
github-actions[bot] 48babd0a33 Branch was auto-updated. 2021-07-22 16:43:08 +00:00
github-actions[bot] 8e6ab78a8f Branch was auto-updated. 2021-07-22 16:43:07 +00:00
github-actions[bot] 599f9cf046 Branch was auto-updated. 2021-07-22 16:43:02 +00:00
github-actions[bot] d09c80c1cc Branch was auto-updated. 2021-07-22 16:42:56 +00:00
Bhavin Patel 225afaa035 Merge pull request #1540 from splunk/git-fix
The Haag Continuum
2021-07-22 09:42:41 -07:00
mhaag-spl afe1d8a286 Update detect_copy_of_shadowcopy_with_script_block_logging.yml 2021-07-22 06:55:12 -06:00
mhaag-spl 9acd9f32f7 Update detect_renamed_psexec.yml
Resolving #1525 . Thank you!
2021-07-22 06:20:47 -06:00
mhaag-spl d207154de3 Update detect_renamed_winrar.yml
Resolving #1524. Thank you!
2021-07-22 06:19:55 -06:00
Amir hossein Mahboubi 70dc0c1a59 Merge branch 'develop' into optimized 2021-07-22 16:35:02 +04:30
mhaag-spl e5d24fba22 Update detect_copy_of_shadowcopy_with_script_block_logging.yml 2021-07-21 15:48:36 -06:00
mhaag-spl 28af2af96c Update detect_copy_of_shadowcopy_with_script_block_logging.yml 2021-07-21 15:46:49 -06:00
mhaag-spl e9e56493f8 Update detect_copy_of_shadowcopy_with_script_block_logging.test.yml 2021-07-21 15:44:04 -06:00
mhaag-spl b87f262923 test file 2021-07-21 15:41:42 -06:00