Commit Graph

438 Commits

Author SHA1 Message Date
P4T12ICK 9354dad823 improved GitHub detection 2022-04-04 13:23:37 +02:00
P4T12ICK 4ffa5540e4 github actions detection 2022-04-04 11:08:39 +02:00
pyth0n1c 9f50f52b35 Branch was auto-updated. 2022-03-14 10:14:17 -07:00
Michael Haag e08e7f3e5a syntax 2022-03-10 08:16:21 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Bhavin Patel f79866dca4 Update aws_updateloginprofile.yml 2022-03-08 09:24:18 -08:00
Bhavin Patel e53e25aee4 Update aws_createaccesskey.yml 2022-03-08 09:23:58 -08:00
pyth0n1c b2037a2712 Branch was auto-updated. 2022-03-04 12:21:26 -08:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
pyth0n1c 19b631aca4 Branch was auto-updated. 2022-03-04 09:34:03 -08:00
patel-bhavin 33b5987f16 spl updates 2022-03-03 12:46:44 -08:00
research bot 67ecd29d53 updating docs and package bits [ci skip] 2022-03-03 18:22:29 +00:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
pyth0n1c bb797ef06f Branch was auto-updated. 2022-03-01 06:31:28 -08:00
Marc Schwede 63dcb7f00f Update o365_excessive_authentication_failures_alert.yml
rename syntax adjusted
later needed lastTime included
2022-03-01 14:04:36 +01:00
patel-bhavin 1d19ac2eff text updates 2022-02-28 11:44:33 -08:00
patel-bhavin bdb357cbc2 detection update 2022-02-28 11:28:27 -08:00
pyth0n1c 0338044721 Updating the date to today
and bumping the version for
updated searches associated 
with this PR.
2022-02-18 10:57:49 -08:00
pyth0n1c aa6ec9315b Branch was auto-updated. 2022-02-18 07:41:50 -08:00
pyth0n1c a093ba7aaf Minor updates to fixed searches.
Fixed some spacing issues and quotation
mark issues that were causing search success problems.
2022-02-15 09:47:36 -08:00
pyth0n1c 77b300ab4e Accidentally changed detection file
detections/cloud/aws_excessive_security_scanning.yml.
That file should not have been modified.  Rolling back those
changes.
2022-02-15 09:37:52 -08:00
pyth0n1c 7648c76c0b A handful of easy detection test fixes to get
the tests to detections to work with the
newest application baseline.
2022-02-14 16:57:33 -08:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
research bot 3212249c52 updating docs and package bits [ci skip] 2022-02-07 21:03:48 +00:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
patel-bhavin eb43251183 spl update 2022-02-03 15:26:19 -08:00
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK a95e0e5aa6 fixed detections metadata 2022-01-20 13:42:50 +01:00
Detection Testing Service 6fd7a4e812 test: updated supported_tas to recommended_tas 2022-01-19 17:43:41 +05:30
P4T12ICK 5a3d277c9f fixed more detections 2022-01-18 14:17:09 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
P4T12ICK 98e5af3713 put baselines and investigations into its own folder 2022-01-17 10:56:04 +01:00
Detection Testing Service a2b6fff739 test:updated ymls 2021-12-15 21:15:02 +05:30
tlangalia 343ceae12f Updated detection files with supported TA list. 2021-12-14 13:27:55 +05:50
research bot 750c81fb5b updating docs and package bits [ci skip] 2021-12-02 18:50:01 +00:00
patel-bhavin a6ee98620d user login update 2021-11-19 11:18:36 -08:00
patel-bhavin bbc913faaa first 3 detections 2021-11-19 11:16:11 -08:00
root 700383c15f Added detection testing service results inAWS IAM AccessDenied Discovery Events 2021-11-12 19:26:05 +00:00
patel-bhavin 6d152fdf0d spll update 2021-11-12 11:03:40 -08:00
research bot a1afa0fa60 updating docs and package bits [ci skip] 2021-10-28 19:55:37 +00:00
Bhavin Patel 46b7d220cc Branch was auto-updated. 2021-10-12 13:10:59 -07:00
Bhavin Patel f67ee09979 revert deployments: - Send to Phantom 2021-10-12 13:08:33 -07:00
patel-bhavin 7dbacd0674 errors and text updates 2021-10-12 13:02:16 -07:00
tccontre d2719d316e Update gsuite_drive_share_in_external_email.yml 2021-10-12 11:12:12 +02:00
tccontre 8a1bed2fb9 CARS_UPDATE_MITRE_ID_B1 2021-10-11 11:03:20 +02:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
Bhavin Patel 965fd8885c Branch was auto-updated. 2021-09-20 02:43:00 -07:00
P4T12ICK 5b41aaaa58 merged with develop 2021-09-20 11:15:23 +02:00