23d1be0296
Branch was auto-updated.
2022-09-30 10:36:54 -07:00
55adce3981
Branch was auto-updated.
2022-09-30 10:36:47 -07:00
3968693c33
Remove slim as a dependency. Still requires
...
some testing. This will break the contentctl build
functionality as it still requires slim. A user can
install splunk-packaging-toolkit separately,
but it is not currently compatible with Python3.10.
2022-09-30 09:54:19 -07:00
fe36f9f5bc
Re-Added and improved duplicate ID checking
...
for ESCU and BA detections.
2022-09-29 14:35:21 -07:00
9657101fc3
Fixes for more robust catching of duplicate ids.
2022-09-29 13:46:52 -07:00
f171cd0089
Branch was auto-updated.
2022-09-29 11:20:08 -07:00
b24a25355a
Branch was auto-updated.
2022-09-29 11:20:07 -07:00
c02e8a9314
Branch was auto-updated.
2022-09-29 11:20:02 -07:00
09d7802383
Branch was auto-updated.
2022-09-29 11:20:00 -07:00
741c48edd2
Branch was auto-updated.
2022-09-29 11:16:38 -07:00
bd85a2be5a
Branch was auto-updated.
2022-09-29 11:16:36 -07:00
f125d7dd3d
Branch was auto-updated.
2022-09-29 11:16:33 -07:00
42655d9b0d
Branch was auto-updated.
2022-09-29 11:16:32 -07:00
64c354f963
Branch was auto-updated.
2022-09-29 11:16:31 -07:00
52214ba9ee
Updated validation error message for
...
nist category. Updated the regex used
to check CIS20 numbers so that it does
not allow invalid numbers/lines to
pass validation and provided a more
verbose error message.
2022-09-28 12:45:53 -07:00
63822221ba
Added validation to NIST tags
2022-09-28 12:19:49 -07:00
b2617ccb5d
fixing make all detection ba specific
2022-09-26 20:16:22 -04:00
23b140e8e6
A few more changes in the story builder to get references working properly.
2022-09-15 17:18:50 -07:00
bb84ef752b
One more change to substitution string
2022-09-15 16:30:32 -07:00
c8a7c61b74
Changes to apss the name of the app to the story builder, since it is required for generate.
2022-09-15 16:26:34 -07:00
d84aba8af0
Fixed another issue with the filename.
2022-09-15 13:28:36 -07:00
af16d25ca2
Fixed file name find and replace issue
2022-09-15 13:27:48 -07:00
017cf9a284
fixing ssa detection
2022-09-15 16:23:35 -04:00
6fe804f8ed
changed one more location where the path to escu is hardcoded.
2022-09-15 13:18:00 -07:00
a4d143d4f1
better app name valdiation message
2022-09-15 12:58:52 -07:00
b5bfc29fb5
Basic validation on the app_name
2022-09-15 12:57:12 -07:00
444026f32b
Another small modification to replace
...
static ESCU name with the name of
your app
2022-09-15 12:53:29 -07:00
0ff8d76b90
fixing by adding an asterisk
2022-09-15 14:52:57 -04:00
fdb7e18510
Merge branch 'detection_enrichment_project' of github.com:splunk/security_content into detection_enrichment_project
2022-09-15 14:42:35 -04:00
5385bc77cf
making path generic to their location and not specific location of file
2022-09-15 14:42:30 -04:00
49f0d7ac0c
Branch was auto-updated.
2022-09-15 11:33:13 -07:00
097e7dca27
Branch was auto-updated.
2022-09-15 11:33:13 -07:00
2ab2821d0d
Branch was auto-updated.
2022-09-15 11:33:09 -07:00
60ee6c453a
Branch was auto-updated.
2022-09-15 11:33:08 -07:00
124fd0d465
Fix search string to be more broad
2022-09-15 11:22:05 -07:00
3030c694bf
Branch was auto-updated.
2022-09-15 08:08:58 -07:00
4d7ea6dc0e
Branch was auto-updated.
2022-09-15 08:08:57 -07:00
1cc5266ca9
Branch was auto-updated.
2022-09-15 08:08:52 -07:00
710e6aab5e
Branch was auto-updated.
2022-09-15 08:08:50 -07:00
3397919067
new-xml-src-data
2022-09-15 09:59:04 +02:00
819b016b37
search updaate and remove import
2022-09-14 18:24:59 -05:00
50a2d18163
fixing missing test
2022-09-14 19:20:57 -04:00
e027f13add
removing risk objects from correlation searches on savedsearchesconf to avoid circular risk loop
2022-09-14 18:33:15 -04:00
480a6e7d1d
Branch was auto-updated.
2022-09-13 13:53:05 -07:00
cf1e620611
Branch was auto-updated.
2022-09-13 13:52:59 -07:00
940598b6c2
pass CI testing
2022-09-13 16:52:39 -04:00
6f668df817
Branch was auto-updated.
2022-09-13 10:12:30 -07:00
934844a293
Branch was auto-updated.
2022-09-13 10:12:23 -07:00
64908593d4
adds RBA to correlation rule titles
2022-09-13 13:11:51 -04:00
e43855c570
lolbas
2022-09-08 19:15:03 -04:00
srv-rr-gh-researchbt