Commit Graph

18530 Commits

Author SHA1 Message Date
Patrick Bareiss bd0e7ca2ba converted detections to subtechniques 2020-07-22 10:34:54 +02:00
Patrick Bareiss 5ceef308a7 bug fix generate script 2020-07-21 10:12:58 +02:00
Bhavin Patel 1822b485d7 Merge pull request #568 from splunk/newgcpk8podsearch
newgcpk8podsearch
2020-07-20 11:14:56 -07:00
Bhavin Patel 2d9eaf695f Merge branch 'develop' into newgcpk8podsearch 2020-07-20 10:47:42 -07:00
Bhavin Patel bb906c721a Update gcp_kubernetes_cluster_pod_scan_detection.yml
corrected how to implement
2020-07-20 10:47:18 -07:00
dependabot-preview[bot] 24c0354c3f Merge pull request #569 from splunk/dependabot/pip/identify-1.4.24 2020-07-19 18:37:19 +00:00
dependabot-preview[bot] 86e7b4f3b9 Bump identify from 1.4.23 to 1.4.24
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.23 to 1.4.24.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.23...v1.4.24)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-19 18:32:06 +00:00
Rod Soto ef98461e89 newgcpk8podsearch 2020-07-17 22:11:19 -04:00
dependabot-preview[bot] 7f95b60210 Merge pull request #566 from splunk/dependabot/pip/taxii2-client-2.2.1 2020-07-17 19:44:08 +00:00
dependabot-preview[bot] c767fe1cd8 Bump taxii2-client from 2.2.0 to 2.2.1
Bumps [taxii2-client](https://github.com/oasis-open/cti-taxii-client) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/oasis-open/cti-taxii-client/releases)
- [Changelog](https://github.com/oasis-open/cti-taxii-client/blob/master/CHANGES.txt)
- [Commits](https://github.com/oasis-open/cti-taxii-client/compare/v2.2.0...v2.2.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-17 19:37:50 +00:00
dependabot-preview[bot] cd86c0ccc7 Merge pull request #564 from splunk/dependabot/pip/simplejson-3.17.2 2020-07-16 18:51:40 +00:00
dependabot-preview[bot] 28b5150604 Bump simplejson from 3.17.0 to 3.17.2
Bumps [simplejson](https://github.com/simplejson/simplejson) from 3.17.0 to 3.17.2.
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](https://github.com/simplejson/simplejson/compare/v3.17.0...v3.17.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 18:46:24 +00:00
research bot 23cf6ae542 updating docs and package bits [ci skip] 2020-07-15 21:14:02 +00:00
Bhavin Patel a079a093b8 Merge pull request #563 from splunk/yet_another_map_bug
forgot to get rid of tdqm
v3.0.4
2020-07-15 13:59:40 -07:00
divious1 440fcfb3ae fixed print msg 2020-07-15 16:53:49 -04:00
divious1 217aabfe72 forgot to get rid of tdqm 2020-07-15 16:46:37 -04:00
Bhavin Patel 8ef987da5d Merge pull request #562 from splunk/mitre_map_bug
minor arg bug
2020-07-15 13:26:14 -07:00
divious1 a250cceed2 minor arg bug 2020-07-15 16:19:40 -04:00
dependabot-preview[bot] 9b08ad29c1 Merge pull request #560 from splunk/dependabot/pip/virtualenv-20.0.27 2020-07-15 18:56:17 +00:00
Jose Enrique Hernandez 6cd1b26d36 Merge branch 'develop' into dependabot/pip/virtualenv-20.0.27 2020-07-15 14:51:44 -04:00
Jose Enrique Hernandez 9c23451998 Merge pull request #561 from splunk/TR-49
updating spl and FP
2020-07-15 14:51:21 -04:00
Bhavin Patel c1747aaa21 Merge branch 'develop' into TR-49 2020-07-15 10:29:46 -07:00
Bhavin Patel a1a2ce7e0c Merge pull request #559 from splunk/update_README
overhauled or readme
2020-07-15 10:26:24 -07:00
dependabot-preview[bot] d7a324cb01 Bump virtualenv from 20.0.26 to 20.0.27
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.26 to 20.0.27.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/20.0.27/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.26...20.0.27)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-15 17:22:31 +00:00
Bhavin Patel d5e560c4d6 Merge branch 'develop' into update_README 2020-07-15 10:15:33 -07:00
Bhavin Patel b034e224c4 Merge pull request #547 from splunk/mitre_maps
Adds a MITRE ATTACK Nav Map of all of our detections
2020-07-15 10:15:09 -07:00
Bhavin Patel 52f8c45892 Merge branch 'develop' into update_README 2020-07-15 10:12:29 -07:00
bpatel 73507de98c updating spl and FP 2020-07-14 17:50:43 -07:00
divious1 170660e742 fixing space 2020-07-14 16:13:28 -04:00
divious1 c2a89d1dd7 adding mitre map to readme 2020-07-14 16:05:26 -04:00
Bhavin Patel d23064ec18 Merge pull request #557 from splunk/gcpk8plussearches
Gcpk8plussearches
2020-07-14 11:32:30 -07:00
divious1 48ee5353bd overhauled or readme 2020-07-14 00:11:11 -04:00
bpatel ea717a66fc adding ffilter, sigh 2020-07-13 17:05:30 -07:00
Bhavin Patel 68ee505590 Merge branch 'develop' into gcpk8plussearches 2020-07-13 16:45:48 -07:00
dependabot-preview[bot] 7475e16264 Merge pull request #558 from splunk/dependabot/pip/typing-3.7.4.3 2020-07-13 23:37:01 +00:00
dependabot-preview[bot] 2ee93f0075 Bump typing from 3.7.4.1 to 3.7.4.3
Bumps [typing](https://github.com/python/typing) from 3.7.4.1 to 3.7.4.3.
- [Release notes](https://github.com/python/typing/releases)
- [Commits](https://github.com/python/typing/compare/3.7.4.1...3.7.4.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-13 23:32:08 +00:00
bpatel 3b1e639db2 rename file 2020-07-13 16:30:28 -07:00
Bhavin Patel da9ecd71fa Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-07-13 16:12:47 -07:00
Bhavin Patel a8c021a41e Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml
typos
2020-07-13 16:06:17 -07:00
Rod Soto 71032608db Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches 2020-07-13 19:03:08 -04:00
Rod Soto 6dbc996d9c fixbackticks 2020-07-13 19:01:57 -04:00
Bhavin Patel 62ab2b89e9 Merge branch 'develop' into gcpk8plussearches 2020-07-13 15:47:35 -07:00
Rod Soto 57fbe00de0 fixednamesmacros 2020-07-13 18:45:46 -04:00
Rod Soto 7fe2b89386 fixedsrctypewithmacro 2020-07-13 18:20:38 -04:00
Rod Soto b504edb561 fixedsourcetypeissue 2020-07-13 18:19:06 -04:00
Bhavin Patel 2c27c80c8a Merge pull request #552 from splunk/netsh-fix
Netsh fix
2020-07-13 09:59:29 -07:00
Bhavin Patel 186196684d Update processes_launching_netsh.yml
updated the screen, test screenshot in the comments
2020-07-13 09:53:43 -07:00
Rod Soto f0fe477413 k8sgcpkubectlcallssarch 2020-07-11 23:38:08 -04:00
Rod Soto c32b00dc7b k8sgcpservaccforbiddenfailure 2020-07-11 22:50:41 -04:00
Rod Soto 4895d18619 k8sgcpsensitiverole 2020-07-11 21:26:00 -04:00