Commit Graph

581 Commits

Author SHA1 Message Date
github-actions[bot] 80195953a7 Branch was auto-updated. 2021-01-27 09:02:16 +00:00
root 30bb53bfbc Added detection testing service results inDetect Spike in AWS Security Hub Alerts for EC2 Instance 2021-01-27 03:30:48 +00:00
bpatel 1d4e14ad93 macro fixes 2021-01-26 18:51:06 -08:00
Rod Soto 4c14ca7e2c o365newfederedateddomainadded 2021-01-26 21:43:48 -05:00
Rod Soto e841476a32 o365addedserviceprincipal 2021-01-26 21:30:39 -05:00
Rod Soto 645e87f461 o365addapproleassignmentgrantuser 2021-01-26 21:18:15 -05:00
Rod Soto 43ac587efb o365ssologonerrors 2021-01-26 20:30:37 -05:00
Rod Soto d0a48bcb2f awssamlupdateidentityprovider 2021-01-26 18:47:16 -05:00
bpatel b233d1a1fc minor 2021-01-26 14:07:19 -08:00
Rod Soto 5facbf0cf8 awssamlaccessbyprovideruserandprincipal 2021-01-26 16:59:56 -05:00
bpatel 5e0de64700 search update 2021-01-26 13:53:28 -08:00
P4T12ICK ed2d5c614b Merge branch 'develop' into issue_1101 2021-01-26 09:14:56 +01:00
David Dorsey 26050fae29 More language clean up 2021-01-22 09:34:33 -06:00
bpatel c8fc855ccd rename mustang to ssa4aws 2021-01-21 14:31:23 -08:00
github-actions[bot] 35ff0b21cf Branch was auto-updated. 2021-01-21 22:26:23 +00:00
bpatel 549fb5d197 minor text 2021-01-21 11:39:57 -08:00
bpatel e02498dbf2 Merge branch 'develop' into issue_1101 2021-01-20 15:39:49 -08:00
Bhavin Patel 4da2f7e4c4 Merge branch 'develop' into lookup_name_duplicate 2021-01-19 08:59:30 -08:00
bpatel b99d01458e first commit with product tag 2021-01-14 17:09:00 -08:00
github-actions[bot] 18ba87492f Branch was auto-updated. 2021-01-14 20:29:17 +00:00
root 050b89ebef Added detection testing service results inO365 Bypass MFA via Trusted IP 2021-01-14 02:45:18 +00:00
bpatel 0b6757738e search error 2021-01-13 17:29:45 -08:00
bpatel 13ae19a958 uuid 2021-01-13 17:26:33 -08:00
bpatel ab6d8cdfe1 new detection file and test data 2021-01-13 16:30:19 -08:00
bpatel acd855474b minor 2021-01-13 15:49:03 -08:00
bpatel 24128d4982 updating lookup name to avoid duplicates and deprecattion 2021-01-13 15:34:24 -08:00
Detection Testing Service 0f4f7a4288 Merge branch 'detection_testing_branch' of https://github.com/splunk/security-content into detection_testing_branch 2021-01-13 13:24:59 +00:00
root 783c24cbe4 Added detection testing service results inDetect New Open S3 Buckets over AWS CLI 2021-01-13 13:24:58 +00:00
P4T12ICK 4a626c5246 merged with develop 2021-01-13 14:21:09 +01:00
P4T12ICK 8d40be7a12 improved detections and tests 2021-01-13 14:05:53 +01:00
root 65f935b24f Added detection testing service results inDetect New Open S3 buckets 2021-01-12 14:58:47 +00:00
P4T12ICK e31e1b4ace Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-12 15:38:48 +01:00
P4T12ICK 994989b086 improved detections and tests 2021-01-12 15:38:32 +01:00
Detection Testing Service e18710a8ed Merge branch 'detection_testing_branch' of https://github.com/splunk/security-content into detection_testing_branch 2021-01-12 10:33:23 +00:00
root be3736fc61 Added detection testing service results inAWS Network Access Control List Created with All Open Ports 2021-01-12 10:33:22 +00:00
root fd58b28807 Added detection testing service results inAWS Network Access Control List Deleted 2021-01-12 10:33:02 +00:00
P4T12ICK e1e595c654 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-12 11:13:38 +01:00
P4T12ICK 1073cff2f7 improved detections and tests 2021-01-12 11:13:17 +01:00
root dd8d642973 Added detection testing service results inAWS Detect Users with KMS keys performing encryption S3 2021-01-11 14:56:55 +00:00
root 73b29808ee Added detection testing service results inAWS Detect Users creating keys with encrypt policy without MFA 2021-01-11 14:31:23 +00:00
P4T12ICK 5d481c95ab bug fix detection 2021-01-11 15:13:05 +01:00
P4T12ICK b7175cbc08 updated detection and test file 2021-01-11 14:28:14 +01:00
P4T12ICK 4383db4e83 update detection 2021-01-11 13:31:02 +01:00
P4T12ICK d0bea9eecf detection testing cloud 2021-01-08 15:51:45 +01:00
P4T12ICK fd427dde35 small change 2021-01-08 13:29:04 +01:00
P4T12ICK 8df36c2e0c Merge branch 'develop' into TR-320-suspicious-rights-delegation 2021-01-07 15:28:30 +01:00
bpatel 88feb34271 incorrect deprecation 2021-01-05 14:53:52 -08:00
Bhavin Patel b8d898704e Merge branch 'develop' into deprecated_aws_searches 2021-01-04 11:52:09 -08:00
Bhavin Patel 14d6e6d01a Merge branch 'develop' into sunburst_detections 2020-12-17 16:14:28 -08:00
Bhavin Patel 596c326de0 Merge branch 'develop' into deprecated_aws_searches 2020-12-17 16:10:21 -08:00