Commit Graph

18530 Commits

Author SHA1 Message Date
David Dorsey 9763e75e02 Fixes 2020-09-23 00:07:54 -05:00
David Dorsey fcd5f1e9b1 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 2020-09-23 00:02:16 -05:00
David Dorsey 58848e7326 Fixes for cryptomining demo 2020-09-23 00:01:02 -05:00
dependabot-preview[bot] fa654c0c8f Merge pull request #685 from splunk/dependabot/pip/importlib-metadata-2.0.0 2020-09-23 00:08:18 +00:00
dependabot-preview[bot] fd91c3b52b Bump importlib-metadata from 1.7.0 to 2.0.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 1.7.0 to 2.0.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-23 00:04:42 +00:00
Jose Enrique Hernandez b9a94effa0 Merge branch 'develop' into automated_detection_service 2020-09-22 14:30:59 -04:00
dependabot-preview[bot] 7509397d3f Merge pull request #681 from splunk/dependabot/pip/identify-1.5.4 2020-09-22 15:53:35 +00:00
dependabot-preview[bot] b3ffdac7e8 Bump identify from 1.5.2 to 1.5.4
Bumps [identify](https://github.com/chriskuehl/identify) from 1.5.2 to 1.5.4.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.5.2...v1.5.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-22 15:49:15 +00:00
dependabot-preview[bot] bc62db083c Merge pull request #684 from splunk/dependabot/pip/zipp-3.2.0 2020-09-22 15:48:00 +00:00
dependabot-preview[bot] 9e5f5fc78f Bump zipp from 3.1.0 to 3.2.0
Bumps [zipp](https://github.com/jaraco/zipp) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v3.1.0...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-22 15:42:15 +00:00
jzsplunk 1fa80b0161 [TR-188] add risk tags to mustang related searches (WIP). 2020-09-21 22:19:09 -07:00
jzsplunk 2db3cfe746 [TR-188] add risk tags to mustang related searches (WIP). 2020-09-21 22:18:15 -07:00
David Dorsey aaa6e86623 Added output filter back in 2020-09-22 00:00:22 -05:00
David Dorsey c1ab637b80 Added risk info 2020-09-21 23:26:13 -05:00
David Dorsey 7d2acbe104 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 2020-09-21 23:24:07 -05:00
David Dorsey 17eff649e7 Fixes 2020-09-21 23:23:57 -05:00
jzsplunk 9b8b750db4 [TR-41] update risk_object value. 2020-09-21 21:06:41 -07:00
jzsplunk d169745ced [TR-41] risk tags for crypto story 2020-09-21 21:04:11 -07:00
David Dorsey f411bfa91b File no longer needed 2020-09-21 22:43:06 -05:00
Jose Enrique Hernandez b6136c081b Merge branch 'develop' into issue_682 2020-09-21 21:27:23 -04:00
divious1 a41f3be4da fixing issue with broken app inspect 2020-09-21 21:17:41 -04:00
bpatel 7b6b1d5d6c adding a default panel instead of empty 2020-09-21 15:45:52 -07:00
research bot 013649cb6b updating docs and package bits [ci skip] 2020-09-18 23:39:37 +00:00
Rod Soto be932e4381 Merge pull request #680 from splunk/zerologon_CVE-2020-1472
Detect Zerologon Attack CVE-2020-1472 Story and detections
v3.0.7
2020-09-18 19:22:02 -04:00
divious1 4f8b5cd6a9 fixed some issues with panels that are empty failing generate 2020-09-18 19:16:28 -04:00
divious1 660135b77a adding 4742 detection 2020-09-18 18:39:50 -04:00
divious1 b78035c976 adding macros 2020-09-18 17:36:46 -04:00
divious1 39f5939bc9 zero logon skeleton 2020-09-18 17:16:25 -04:00
Bhavin Patel 784a0bb691 Merge pull request #632 from splunk/fixedawsstsassumerole
fixedassumedroleaws
2020-09-17 11:11:08 -07:00
dependabot-preview[bot] a156661f6f Merge pull request #672 from splunk/dependabot/pip/identify-1.5.2 2020-09-17 18:08:08 +00:00
dependabot-preview[bot] cc841bbdfb Bump identify from 1.5.0 to 1.5.2
Bumps [identify](https://github.com/chriskuehl/identify) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.5.0...v1.5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-17 18:03:05 +00:00
dependabot-preview[bot] 4413638595 Merge pull request #673 from splunk/dependabot/pip/pyrsistent-0.17.3 2020-09-17 18:01:54 +00:00
Bhavin Patel 3d14c802fd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 11:00:31 -07:00
dependabot-preview[bot] 9cf02705dd Bump pyrsistent from 0.17.2 to 0.17.3
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.2 to 0.17.3.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.2...v0.17.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-17 17:56:38 +00:00
dependabot-preview[bot] 8aaa45b698 Merge pull request #669 from splunk/dependabot/pip/taxii2-client-2.2.2 2020-09-17 17:55:15 +00:00
Bhavin Patel ec3e8a9dbd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:49:56 -07:00
dependabot-preview[bot] 6f62d4da0a Bump taxii2-client from 2.2.1 to 2.2.2
Bumps [taxii2-client](https://github.com/oasis-open/cti-taxii-client) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/oasis-open/cti-taxii-client/releases)
- [Changelog](https://github.com/oasis-open/cti-taxii-client/blob/master/CHANGES.txt)
- [Commits](https://github.com/oasis-open/cti-taxii-client/compare/v2.2.1...v2.2.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-17 17:49:30 +00:00
Bhavin Patel 2c2692eb4f Merge pull request #665 from splunk/gcpoauth
Gcpoauth
2020-09-17 10:48:18 -07:00
Bhavin Patel 997a2714df Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:27:10 -07:00
Bhavin Patel 2031fcded2 Merge branch 'develop' into gcpoauth 2020-09-17 10:26:37 -07:00
P4T12ICK 9a7739604c Merge branch 'develop' into automated_detection_service 2020-09-17 09:43:54 +02:00
Jose Enrique Hernandez d79c2af018 Merge branch 'develop' into TR-41_aws_ec2_mods 2020-09-16 15:02:36 -04:00
Bhavin Patel 7c8dd3519b Merge pull request #677 from splunk/copyright_readme
add license to readme
2020-09-16 09:07:27 -07:00
P4T12ICK 7f6b8595b8 add license to readme 2020-09-16 17:59:51 +02:00
P4T12ICK 5b277d6a7c Merge branch 'automated_detection_service' of github.com:splunk/security-content into automated_detection_service 2020-09-16 15:53:19 +02:00
P4T12ICK 3bcda0d5bc updated detection service 2020-09-16 15:51:03 +02:00
jzsplunk c33be23f10 [TR-104] add missing input filters. 2020-09-15 22:59:19 -07:00
David Dorsey 7201713de3 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 2020-09-15 23:59:18 -05:00
David Dorsey 7a99d2c4dd Fixing story mappings 2020-09-15 23:58:59 -05:00
jzsplunk 7da91f2409 [TR-41] fixing last of merge conflicts. 2020-09-15 20:38:05 -07:00