15 Commits

Author	SHA1	Message	Date
d1vious	e9e68ba82d	tagging ba detection for insider threat	2022-09-08 19:00:01 -04:00
pyth0n1c	578e6bb088	Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.	2022-05-02 17:12:50 -07:00
P4T12ICK	6f0ee68913	Refactored security content	2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez	d78bb53baa	Revert "Refactored security content"	2022-03-04 15:13:04 -05:00
P4T12ICK	5fbff3630e	merged with develop	2022-02-07 14:55:34 +01:00
Jud Dagnall	ff8cdbc089	Add empty cist20 and nist tags to meet validation	2022-01-28 18:51:51 -08:00
P4T12ICK	4fd8604b9a	removed SAAWS and automated_detection_testing flag	2022-01-27 09:50:45 +01:00
P4T12ICK	84092434a2	fixed more detections	2022-01-18 12:53:54 +01:00
patel-bhavin	d95e09b8bc	adding risk_severity	2022-01-13 15:57:02 -08:00
research bot	ff3319329e	updating docs and package bits [ci skip]	2021-12-15 02:58:27 +00:00
mhaag-spl	53dc410071	rcloned 4688 logs	2021-12-10 11:39:45 -07:00
mhaag-spl	b51b7dbdf1	Update ssa___detect_rclone_command_line_usage.yml	2021-12-07 11:40:46 -07:00
mhaag-spl	11784add74	Update ssa___detect_rclone_command_line_usage.yml	2021-12-06 18:18:45 -07:00
mhaag-spl	575cb1dcf4	Update ssa___detect_rclone_command_line_usage.yml	2021-12-03 11:29:34 -07:00
mhaag-spl	0e53970750	First SSA	2021-12-03 11:26:27 -07:00