Commit Graph

463 Commits

Author SHA1 Message Date
Rico Valdez f761e9066c fixing broken detection search - suspicious_file_writes 2019-04-29 14:35:27 -06:00
Bhavin Patel b57d3641ce Merge pull request #55 from splunk/escu_2.0_bugs
fixing bugs
2019-04-25 14:55:40 -07:00
divious1 e552a8831e fixing bugs 2019-04-25 17:53:28 -04:00
Jose Enrique Hernandez 7df41e7d37 Merge pull request #54 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-25 16:20:25 -04:00
bpatel 52f20cf934 created date in use case lib 2019-04-25 12:20:04 -07:00
bpatel e69b9bf457 markdown for use_Case_lib 2019-04-25 11:52:28 -07:00
Jose Enrique Hernandez ba97452af9 Merge pull request #53 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-25 14:05:37 -04:00
divious1 20406758b6 updated datamodels and providing tech rendering 2019-04-25 13:05:27 -04:00
bpatel 7e6c59287a write only once 2019-04-24 18:18:49 -07:00
bpatel 5f7f42e487 update to use spec 1 2019-04-24 18:10:40 -07:00
bpatel 76457c0454 providing tech update on analytic_Stories 2019-04-24 16:22:53 -07:00
bpatel 1abb8e5d7e generate code 2019-04-24 15:09:11 -07:00
bpatel aeb70c9ec7 reference 2019-04-24 15:08:31 -07:00
divious1 b4fe5a97ac updated src files 2019-04-24 17:51:21 -04:00
divious1 e9168daea5 Merge branch 'develop' of github.com:splunk/security-content into develop 2019-04-24 17:45:36 -04:00
divious1 5f04862fdd updating conf files 2019-04-24 17:45:28 -04:00
Jose Enrique Hernandez 5be7983c5d Merge pull request #52 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-24 17:24:11 -04:00
bpatel a258d98598 narratives 2019-04-24 13:17:11 -07:00
bpatel fc5743fd38 references 2019-04-24 11:42:16 -07:00
Bhavin Patel ac53da2583 Merge pull request #51 from splunk/CRL-1379_detect_phishing_frameworks
updating playbook url
2019-04-24 11:05:32 -07:00
bpatel 87ce0942e3 url in howtoimplement 2019-04-24 11:04:34 -07:00
divious1 1ac0a6f336 updating playbook url 2019-04-24 14:01:14 -04:00
Russ Nolen 6b8daec1ac Merge pull request #44 from splunk/CRL-1379_detect_phishing_frameworks
Crl 1379 detect phishing frameworks
2019-04-24 11:06:21 -05:00
Russ Nolen de0dc66549 fixing url for evilginx to evilginx2 2019-04-24 11:02:16 -05:00
bpatel 4cb88ab6ff search update- syntax fixing 2019-04-23 20:26:06 -07:00
bpatel 62df393b0a manifest update with narrative 2019-04-23 19:59:11 -07:00
bpatel a7506fa712 new conf files 2019-04-23 19:24:37 -07:00
bpatel 88e42f2242 ascii ugh 2019-04-23 19:22:58 -07:00
bpatel 541fcafcd0 manifest 2019-04-23 19:18:28 -07:00
bpatel a0967ddaff phantom dets 2019-04-23 17:39:58 -07:00
bpatel f9bfe416fa minor 2019-04-23 17:21:30 -07:00
bpatel 8fe35490f5 manifest updates, phantom configs 2019-04-23 17:18:09 -07:00
Bhavin Patel 2a212c9942 Merge pull request #50 from splunk/spec_update
correct issue with asset_type
2019-04-23 14:42:00 -07:00
Jose Enrique Hernandez d897c1e5d7 Merge branch 'develop' into spec_update 2019-04-23 17:41:41 -04:00
divious1 64abae1d75 correct issue with asset_type 2019-04-23 17:40:18 -04:00
divious1 e2e6717801 force updated src files 2019-04-23 17:33:23 -04:00
Bhavin Patel de08bc7eb1 Merge pull request #49 from splunk/spec_update
fixed issue with phantom investigations being rendered
2019-04-23 14:31:28 -07:00
divious1 e805cb3ca2 fixed issue with phantom investigations being rendered 2019-04-23 17:30:58 -04:00
Bhavin Patel e5137f6579 Merge pull request #48 from splunk/spec_update
fixed an issue with generating cross pollinated content
2019-04-23 14:18:25 -07:00
divious1 729913dda1 fixed an issue with generating cross pollinated content 2019-04-23 17:17:33 -04:00
Bhavin Patel 039a8b83cb Merge pull request #47 from splunk/bump_version
bumped version
2019-04-23 13:29:37 -07:00
divious1 070a1eeeae bumped version 2019-04-23 16:26:08 -04:00
Bhavin Patel 85cd0ea768 Merge pull request #46 from splunk/spec_update
Updating Generator.py
2019-04-23 13:03:18 -07:00
Jose Enrique Hernandez 5e4ba79fa0 Merge branch 'develop' into spec_update 2019-04-23 15:59:44 -04:00
divious1 c472e2271e fixed categories 2019-04-23 15:55:22 -04:00
bpatel 4186e81f2f json dump a field 2019-04-23 12:25:23 -07:00
bpatel 51be492a69 next steps string test 2019-04-23 12:04:03 -07:00
divious1 62fd493f3e updated mappings in analytic_stories.conf 2019-04-23 13:06:40 -04:00
divious1 dead462e2f updated mappings in analytic_stories.conf 2019-04-23 13:05:50 -04:00
bpatel 91e4739e14 minor fixes 2019-04-22 18:26:01 -07:00