Commit Graph

18530 Commits

Author SHA1 Message Date
P4T12ICK 4383db4e83 update detection 2021-01-11 13:31:02 +01:00
Jose Enrique Hernandez d8182bc8ad Merge pull request #1082 from splunk/TR-223
Syntax change in first_time_event
2021-01-08 17:58:28 -05:00
Ignacio Bermudez Corrales 1edc936662 Syntax change in first_time_event 2021-01-08 11:10:12 -08:00
P4T12ICK 6304b53e65 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-08 15:52:36 +01:00
P4T12ICK d0bea9eecf detection testing cloud 2021-01-08 15:51:45 +01:00
github-actions[bot] 6164e15bdc Branch was auto-updated. 2021-01-08 14:16:01 +00:00
dependabot[bot] 00a5291569 Merge pull request #1081 from splunk/dependabot/pip/boto3-1.16.51 2021-01-08 14:15:39 +00:00
dependabot[bot] 7ce147217c Bump boto3 from 1.16.50 to 1.16.51
Bumps [boto3](https://github.com/boto/boto3) from 1.16.50 to 1.16.51.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.50...1.16.51)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-08 14:09:40 +00:00
github-actions[bot] 363b9464b8 Branch was auto-updated. 2021-01-08 14:09:16 +00:00
dependabot[bot] 5f4135cb0b Merge pull request #1080 from splunk/dependabot/pip/botocore-1.19.51 2021-01-08 14:08:53 +00:00
dependabot[bot] e42b1fae0d Bump botocore from 1.19.50 to 1.19.51
Bumps [botocore](https://github.com/boto/botocore) from 1.19.50 to 1.19.51.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.50...1.19.51)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-08 14:02:57 +00:00
dependabot[bot] b19c8f4107 Bump dnspython from 2.0.0 to 2.1.0
Bumps [dnspython](https://github.com/rthalley/dnspython) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/master/doc/whatsnew.rst)
- [Commits](https://github.com/rthalley/dnspython/compare/v2.0.0...v2.1.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-08 14:02:53 +00:00
root 2af42c6f65 Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls 2021-01-08 13:00:41 +00:00
P4T12ICK fd427dde35 small change 2021-01-08 13:29:04 +01:00
research bot a75b94ee87 updating docs and package bits [ci skip] 2021-01-07 20:47:59 +00:00
Jose Enrique Hernandez 060cd72540 Merge pull request #1065 from splunk/issue_848_dest_mac
should be dest_mac as reported
v3.11.0
2021-01-07 12:37:23 -05:00
github-actions[bot] 3398b5c927 Branch was auto-updated. 2021-01-07 15:56:50 +00:00
Jose Enrique Hernandez c0c8358563 Merge pull request #1030 from splunk/TR-320-suspicious-rights-delegation
Office 365 Detections
2021-01-07 10:56:27 -05:00
github-actions[bot] 01f1b85b58 Branch was auto-updated. 2021-01-07 14:52:29 +00:00
github-actions[bot] 0381f57b57 Branch was auto-updated. 2021-01-07 14:52:28 +00:00
dependabot[bot] da8ca9afab Merge pull request #1076 from splunk/dependabot/pip/botocore-1.19.50 2021-01-07 14:52:05 +00:00
dependabot[bot] 643588c288 Bump botocore from 1.19.49 to 1.19.50
Bumps [botocore](https://github.com/boto/botocore) from 1.19.49 to 1.19.50.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.49...1.19.50)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-07 14:45:04 +00:00
dependabot[bot] 860bbec43a Merge pull request #1077 from splunk/dependabot/pip/boto3-1.16.50 2021-01-07 14:44:17 +00:00
P4T12ICK 8df36c2e0c Merge branch 'develop' into TR-320-suspicious-rights-delegation 2021-01-07 15:28:30 +01:00
dependabot[bot] 8bb0ce7dfa Bump boto3 from 1.16.49 to 1.16.50
Bumps [boto3](https://github.com/boto/boto3) from 1.16.49 to 1.16.50.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.49...1.16.50)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-07 14:02:31 +00:00
github-actions[bot] 8c66036d3a Branch was auto-updated. 2021-01-06 23:21:35 +00:00
Bhavin Patel e2d7a88d9d Merge pull request #1075 from splunk/supernova_webshell
adding solarflare detection for supernova built by John Stoner
2021-01-06 15:21:15 -08:00
github-actions[bot] 64dc7d0486 Branch was auto-updated. 2021-01-06 23:14:39 +00:00
github-actions[bot] aa6845d91d Branch was auto-updated. 2021-01-06 23:14:37 +00:00
Bhavin Patel 7a76b1b645 Merge pull request #1035 from splunk/appinspect_service_account
added logic to pass a username password a service account
2021-01-06 15:14:15 -08:00
Jose Enrique Hernandez fe13a41290 Merge branch 'develop' into supernova_webshell 2021-01-06 18:09:13 -05:00
divious1 f5d522c697 fixing ref 2021-01-06 18:07:40 -05:00
divious1 b83e76c589 adding solarflare detection 2021-01-06 17:59:59 -05:00
github-actions[bot] 355a151b51 Branch was auto-updated. 2021-01-06 21:37:09 +00:00
github-actions[bot] 37ddfef90f Branch was auto-updated. 2021-01-06 21:37:08 +00:00
Bhavin Patel 4b054b1a77 Merge pull request #1063 from splunk/sunburst_typo
minor typo on how to implement on sunburst detection
2021-01-06 13:36:49 -08:00
github-actions[bot] 5f4dc85e11 Branch was auto-updated. 2021-01-06 20:35:33 +00:00
github-actions[bot] fae0f6f64b Branch was auto-updated. 2021-01-06 20:35:31 +00:00
github-actions[bot] e8f3d2cc58 Branch was auto-updated. 2021-01-06 20:35:30 +00:00
Jose Enrique Hernandez 8795a4d5e2 Merge pull request #1068 from splunk/issue_960
testing weaponization
2021-01-06 15:35:09 -05:00
github-actions[bot] 7f842cab43 Branch was auto-updated. 2021-01-06 20:30:27 +00:00
github-actions[bot] 8195befc62 Branch was auto-updated. 2021-01-06 20:30:25 +00:00
github-actions[bot] 75189be5c4 Branch was auto-updated. 2021-01-06 20:30:24 +00:00
github-actions[bot] 89d5e56966 Branch was auto-updated. 2021-01-06 20:30:22 +00:00
Bhavin Patel 92e142e382 Merge pull request #1074 from splunk/auto_update_all_prs
removing PR filter
2021-01-06 12:30:03 -08:00
divious1 a4d37d3f8c removing PR filter 2021-01-06 15:25:20 -05:00
github-actions[bot] 162d729fff Branch was auto-updated. 2021-01-06 20:21:46 +00:00
Jose Enrique Hernandez b79b2983a5 Merge pull request #1069 from splunk/dependabot/pip/antlr4-python3-runtime-4.9.1
Bump antlr4-python3-runtime from 4.9 to 4.9.1
2021-01-06 15:21:27 -05:00
divious1 dafebbc047 fixing a minor bug with workbench panel generation 2021-01-06 15:14:14 -05:00
divious1 f09d4cad41 updated path 2021-01-06 14:26:28 -05:00