 David Dorsey
|
ffbd700110
|
Updates
|
2020-09-03 00:32:36 -05:00 |
|
|
jzsplunk
|
ee38b1d8cd
|
[TR-82] reset markdown to whats in develop.
|
2020-09-02 12:07:14 -07:00 |
|
|
bpatel
|
367dd69bd7
|
generate testing
|
2020-09-02 11:07:08 -07:00 |
|
|
jzsplunk
|
1fac31b330
|
[TR-82] reset markdown to whats in develop.
|
2020-09-02 10:44:22 -07:00 |
|
|
Rico Valdez
|
a75e4fcc85
|
detection - may still change name
|
2020-09-02 10:31:50 -06:00 |
|
|
Rico Valdez
|
f7498459c8
|
changes for mustang
|
2020-09-02 10:21:52 -06:00 |
|
|
jzsplunk
|
0db46f89dc
|
[TR-82] first cut of validation logic for risk scoring.
|
2020-09-01 17:55:14 -07:00 |
|
|
Rod Soto
|
5690c95392
|
fixedreferencesgcpoauthdetection
|
2020-09-01 20:44:10 -04:00 |
|
|
Rod Soto
|
66404dbcbe
|
firstshotgcpaoutabusedetection
|
2020-09-01 20:42:54 -04:00 |
|
|
jzsplunk
|
5efea5eb85
|
Merge branch 'develop' into TR-82-risk-tagging
|
2020-09-01 17:12:21 -07:00 |
|
|
dependabot-preview[bot]
|
e3633953d9
|
Merge pull request #634 from splunk/dependabot/pip/identify-1.4.30
|
2020-09-01 07:56:09 +00:00 |
|
|
dependabot-preview[bot]
|
77e2a8e22d
|
Bump identify from 1.4.29 to 1.4.30
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.29 to 1.4.30.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.29...v1.4.30)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-09-01 07:51:15 +00:00 |
|
|
dependabot-preview[bot]
|
6456cb2449
|
Merge pull request #633 from splunk/dependabot/pip/more-itertools-8.5.0
|
2020-08-28 18:51:17 +00:00 |
|
|
dependabot-preview[bot]
|
9d3694b18e
|
Bump more-itertools from 8.4.0 to 8.5.0
Bumps [more-itertools](https://github.com/more-itertools/more-itertools) from 8.4.0 to 8.5.0.
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](https://github.com/more-itertools/more-itertools/compare/v8.4.0...8.5.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-08-28 18:45:53 +00:00 |
|
|
Rico Valdez
|
bda59e0708
|
Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods
merging in Dorsey's changes
|
2020-08-28 10:18:40 -06:00 |
|
|
Rico Valdez
|
662d680870
|
more updates
|
2020-08-28 10:12:55 -06:00 |
|
|
Rod Soto
|
5e9f3a7ae0
|
Merge branch 'develop' into fixedawsstsassumerole
|
2020-08-27 21:08:51 -04:00 |
|
|
Jose Enrique Hernandez
|
a2688815db
|
Merge branch 'develop' into TR-82-risk-tagging
|
2020-08-27 16:48:15 -04:00 |
|
|
research bot
|
346fcc2a18
|
updating docs and package bits [ci skip]
|
2020-08-27 18:42:27 +00:00 |
|
|
Rod Soto
|
48100ebb96
|
fixedaws_dete_role_creation
|
2020-08-27 14:12:34 -04:00 |
|
|
David Dorsey
|
0b9dd4ca9b
|
Fixed validate script errors
|
2020-08-26 23:50:25 -05:00 |
|
|
David Dorsey
|
0c7efecd12
|
Fixed errors found by validate script
|
2020-08-26 23:47:26 -05:00 |
|
|
David Dorsey
|
e2f786ef0a
|
Fixed a horrible bug that Patrick introduced in the validate script
|
2020-08-26 23:42:50 -05:00 |
|
|
David Dorsey
|
d662b0538d
|
Removed unused file
|
2020-08-26 23:17:03 -05:00 |
|
|
David Dorsey
|
0a47f73352
|
Updated cloud instances destroyed to change data model
|
2020-08-26 22:57:45 -05:00 |
|
|
Rod Soto
|
d04d0e9d69
|
fixedassumedroleaws
|
2020-08-26 16:56:54 -04:00 |
|
|
David Dorsey
|
b48b40ff76
|
Updated search for abnormally high cloud instances. Including
verifying that enough data is there
|
2020-08-25 22:28:59 -05:00 |
|
|
Jose Enrique Hernandez
|
bb54641af6
|
Merge branch 'develop' into response_phases
|
2020-08-25 18:57:46 -04:00 |
|
|
divious1
|
339e117806
|
skeleton
|
2020-08-25 18:56:44 -04:00 |
|
|
Bhavin Patel
|
2a13216059
|
Merge pull request #625 from splunk/coverage_update
updated both maps fixed errors with coverage
v3.0.6
|
2020-08-25 11:31:23 -07:00 |
|
|
Bhavin Patel
|
ac69800ab4
|
Merge branch 'develop' into coverage_update
|
2020-08-25 11:26:03 -07:00 |
|
|
Bhavin Patel
|
f58ded02dc
|
Merge branch 'develop' into TR-82-risk-tagging
|
2020-08-25 09:44:32 -07:00 |
|
|
Jose Enrique Hernandez
|
463f218ef9
|
Merge pull request #619 from splunk/PR_609
Pr 609
|
2020-08-25 12:19:00 -04:00 |
|
|
Jose Enrique Hernandez
|
a66740b506
|
Merge branch 'develop' into PR_609
|
2020-08-25 12:13:24 -04:00 |
|
|
Bhavin Patel
|
00653ac542
|
Merge pull request #623 from splunk/fixawsk8sfailuresrcuser
newfixawsdetectpkey
|
2020-08-24 12:47:10 -07:00 |
|
|
jzsplunk
|
3097f4e692
|
[TR-82] cleanup spec markdown for new risk params.
|
2020-08-24 10:34:09 -07:00 |
|
|
jzsplunk
|
86708a89e2
|
[TR-82] fix savedsearches annotations logic.
|
2020-08-24 10:24:29 -07:00 |
|
|
Jose Enrique Hernandez
|
5eb6c522c6
|
Merge branch 'develop' into PR_609
|
2020-08-24 12:50:54 -04:00 |
|
|
Jose Enrique Hernandez
|
f97c0c6d83
|
Merge pull request #612 from inspired/mbjerkeland-develop
Layer 2 Cisco Network detections
|
2020-08-24 12:50:38 -04:00 |
|
|
Jose Enrique Hernandez
|
d140413a50
|
Merge branch 'develop' into PR_609
|
2020-08-24 12:42:12 -04:00 |
|
|
Jose Enrique Hernandez
|
98e2127d89
|
Merge branch 'develop' into mbjerkeland-develop
|
2020-08-24 12:41:57 -04:00 |
|
|
Jose Enrique Hernandez
|
27cbc9136b
|
Merge branch 'develop' into coverage_update
|
2020-08-24 12:41:43 -04:00 |
|
|
dependabot-preview[bot]
|
a5193dc9c6
|
Merge pull request #629 from splunk/dependabot/pip/identify-1.4.29
|
2020-08-24 16:31:30 +00:00 |
|
|
jzsplunk
|
9b956cc8c2
|
[TR-82] add in logic for risk tagging after synching with ESCU requirements/annotations.
|
2020-08-24 09:27:44 -07:00 |
|
|
dependabot-preview[bot]
|
5805dd794b
|
Bump identify from 1.4.28 to 1.4.29
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.28 to 1.4.29.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.28...v1.4.29)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-08-24 16:26:18 +00:00 |
|
|
Jose Enrique Hernandez
|
ee737a0799
|
Merge branch 'develop' into coverage_update
|
2020-08-24 12:20:49 -04:00 |
|
|
Jose Enrique Hernandez
|
6443822362
|
Merge branch 'develop' into fixawsk8sfailuresrcuser
|
2020-08-24 12:20:40 -04:00 |
|
|
Jose Enrique Hernandez
|
bf91c4e501
|
Merge branch 'develop' into mbjerkeland-develop
|
2020-08-24 12:20:13 -04:00 |
|
|
Jose Enrique Hernandez
|
e0f3ad1030
|
Merge branch 'develop' into PR_609
|
2020-08-24 12:20:02 -04:00 |
|
|
dependabot-preview[bot]
|
441f54a4f6
|
Merge pull request #627 from splunk/dependabot/pip/pre-commit-2.7.1
|
2020-08-24 05:31:27 +00:00 |
|