8377003694
Merge branch 'develop' into PR_609
2020-08-24 01:26:09 -04:00
b9e4c0b921
Merge branch 'develop' into mbjerkeland-develop
2020-08-24 01:26:02 -04:00
0fd01f08dd
Merge branch 'develop' into coverage_update
2020-08-24 01:25:53 -04:00
a8b832b4ae
Merge branch 'develop' into dependabot/pip/pre-commit-2.7.1
2020-08-24 01:25:45 -04:00
5886b2dbff
Merge pull request #628 from splunk/dependabot/pip/nodeenv-1.5.0
2020-08-24 05:09:37 +00:00
dddf13d05c
Merge branch 'develop' into coverage_update
2020-08-24 01:05:25 -04:00
764a4283de
Merge branch 'develop' into dependabot/pip/pre-commit-2.7.1
2020-08-24 01:05:10 -04:00
42f85908ad
Merge branch 'develop' into dependabot/pip/nodeenv-1.5.0
2020-08-24 01:04:58 -04:00
21c1dcb759
Merge branch 'develop' into PR_609
2020-08-24 01:04:48 -04:00
1c1ce46004
Merge branch 'develop' into mbjerkeland-develop
2020-08-24 01:04:40 -04:00
7f7b4150ff
Merge pull request #611 from splunk/TR-122
...
new detections for security hub alerts
2020-08-24 01:04:22 -04:00
a26414f16d
Merge branch 'develop' into TR-122
2020-08-24 00:39:35 -04:00
76d05aee12
Merge branch 'develop' into mbjerkeland-develop
2020-08-24 00:36:00 -04:00
686ea3c55d
Merge branch 'develop' into PR_609
2020-08-24 00:35:15 -04:00
2236ed9318
Merge branch 'develop' into fixawsk8sfailuresrcuser
2020-08-24 00:33:50 -04:00
786e68db83
Bump nodeenv from 1.4.0 to 1.5.0
...
Bumps [nodeenv](https://github.com/ekalinin/nodeenv ) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/ekalinin/nodeenv/releases )
- [Changelog](https://github.com/ekalinin/nodeenv/blob/master/CHANGES )
- [Commits](https://github.com/ekalinin/nodeenv/compare/1.4.0...1.5.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-08-23 18:39:19 +00:00
8eb71a0544
Bump pre-commit from 2.6.0 to 2.7.1
...
Bumps [pre-commit](https://github.com/pre-commit/pre-commit ) from 2.6.0 to 2.7.1.
- [Release notes](https://github.com/pre-commit/pre-commit/releases )
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md )
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.6.0...v2.7.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-08-23 18:06:56 +00:00
365c0904b5
Merge branch 'develop' into coverage_update
2020-08-22 01:22:38 -04:00
fb69d6f6c4
updated both maps fixed errors with coverage
2020-08-22 01:18:14 -04:00
c587aa1893
Merge pull request #624 from splunk/dependabot/pip/attackcti-0.3.3
2020-08-21 05:00:35 +00:00
58ed589c15
Bump attackcti from 0.3.2 to 0.3.3
...
Bumps [attackcti](https://github.com/hunters-forge/ATTACK-Python-Client ) from 0.3.2 to 0.3.3.
- [Release notes](https://github.com/hunters-forge/ATTACK-Python-Client/releases )
- [Commits](https://github.com/hunters-forge/ATTACK-Python-Client/compare/0.3.2...0.3.3 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-08-21 04:55:41 +00:00
c0c6c4db97
newfixawsdetectpkey
2020-08-20 16:39:25 -04:00
c0aafb749b
Merge pull request #621 from splunk/fixawsk8sfailuresrcuser
...
Fixawsk8sfailuresrcuser
2020-08-20 12:25:40 -07:00
80860d37f4
Created manifests for unseen city, region, and country and updated
...
logic to reflect each case
2020-08-20 14:07:21 -05:00
7de781c8f0
Manifest cleanup
2020-08-20 13:15:14 -05:00
94a40701a7
Merge pull request #622 from splunk/dependabot/pip/attrs-20.1.0
2020-08-20 17:58:31 +00:00
031548e36f
Bump attrs from 19.3.0 to 20.1.0
...
Bumps [attrs](https://github.com/python-attrs/attrs ) from 19.3.0 to 20.1.0.
- [Release notes](https://github.com/python-attrs/attrs/releases )
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/python-attrs/attrs/compare/19.3.0...20.1.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-08-20 17:53:56 +00:00
8b532f7358
fixedsrcuserfromtable
2020-08-20 12:02:44 -04:00
fdfcc03651
Merge branch 'develop' into mitrests
2020-08-19 19:20:53 -07:00
94707e9cfd
addedmitretoawssearches
2020-08-19 21:16:13 -04:00
8136f73bda
Merge branch 'develop' into mbjerkeland-develop
2020-08-19 14:43:54 -07:00
31a332bb9b
adding story to response
2020-08-19 14:39:24 -07:00
00f51defe8
shannons PR bug fixes
2020-08-19 14:37:01 -07:00
52e21c9907
resetting the md file
2020-08-19 10:24:40 -07:00
b4ab45f299
Updated baseline searches for cloud provisioning activities.
...
Broke them out into an initial search and update search
Updated them to use kv store
Updated Cloud Provisioning from previously unseen ip address to
relfect changes in baseline searches.
Added new fields to make the detection more actionable
Added the lookup manifest and a macro manifest
2020-08-19 10:28:05 -05:00
dd4e61837c
bug updates
2020-08-18 16:33:58 -07:00
fb00fffd3f
work in progress file
2020-08-18 17:01:29 -06:00
0328c2d98f
Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods
...
merging in changes to branch
2020-08-18 17:00:44 -06:00
9302baefaf
new files for translated detections
2020-08-18 16:38:38 -06:00
a0730b0878
new files - not finalized
2020-08-18 16:38:13 -06:00
63abcbf343
Merge pull request #613 from splunk/TR-145_bug
...
converted lookup to collection
2020-08-18 15:34:31 -07:00
32346eef6a
Merge branch 'develop' into TR-145_bug
2020-08-18 15:29:06 -07:00
6de58bce6a
Update api_call_by_user_baseline.yml
...
latestCount is needed in detection search
2020-08-18 15:28:54 -07:00
866212a733
[TR-82] remove hard coded risk parameters in j2 template.
2020-08-18 13:34:25 -07:00
d3b4d65e69
[TR-82] update detection markdown.
2020-08-18 13:30:21 -07:00
45c0efe7ee
[TR-82] code cleanup for generate.py
2020-08-18 13:21:33 -07:00
84283e4123
[TR-82] add logic for updating risk parameters in saved searches.conf
2020-08-18 12:42:10 -07:00
83d8ce47a5
Removed a few API calls that are not really modifications
2020-08-18 13:47:04 -05:00
e6248f0e77
Merge branch 'develop' into mbjerkeland-develop
2020-08-18 15:08:30 +02:00
6ab60c1557
Merge pull request #617 from splunk/dependabot/pip/virtualenv-20.0.31
2020-08-17 15:38:51 +00:00
Jose Enrique Hernandez