Commit Graph

18530 Commits

Author SHA1 Message Date
pyth0n1c e993ff1dce Updating baseline to latest apps as of
20220715.  Apps have already been
uploaded to S3.
2022-07-15 08:48:32 -07:00
pyth0n1c 1cdfb1916f Fixed paths in content generation to use the input path instead of hardcoded relative paths. 2022-07-15 08:02:17 -07:00
pyth0n1c 97ad9beaa2 Fixed the pathing issue for reporting. 2022-07-15 06:44:25 -07:00
mvelazco 0fa185eeab updating description 2022-07-14 16:55:46 -04:00
mvelazco fee335e73d renaming analytic story 2022-07-14 16:44:33 -04:00
Michael Haag 366e8763c2 oh hey data 2022-07-14 11:51:36 -06:00
mvelazco d6dd5098be adding new detection 2022-07-14 13:29:55 -04:00
Michael Haag 0a56c2470f proto fix 2022-07-14 09:50:41 -06:00
Michael Haag 3c5d118341 actual description 2022-07-14 09:43:00 -06:00
Michael Haag b4c6d95acd rename 2022-07-14 08:42:53 -06:00
Kumar Sharad 4cdbe51506 model to detect risky commands 2022-07-14 16:37:47 +02:00
Michael Haag c4ad3d0996 LOTL 2022-07-13 15:51:47 -06:00
patel-bhavin 5bf8a69beb delete cloudtrail 2022-07-13 12:49:43 -07:00
patel-bhavin c0996437b5 remove update 2022-07-13 11:40:55 -07:00
mvelazco b615728924 fixing file path 2022-07-13 14:38:13 -04:00
mvelazco f666632017 update description 2022-07-13 14:23:38 -04:00
mvelazco 7807c66f73 adding new detection 2022-07-13 14:16:09 -04:00
patel-bhavin e06e3da573 Merge branch 'TR-2222' of github.com:splunk/security_content into TR-2222 2022-07-12 18:30:33 -07:00
patel-bhavin 0c7efe362c message 2022-07-12 18:27:39 -07:00
pyth0n1c 037bcb3f18 Branch was auto-updated. 2022-07-12 17:52:52 -07:00
pyth0n1c c08e5f8a71 Branch was auto-updated. 2022-07-12 17:52:51 -07:00
pyth0n1c d11b2dedf3 Branch was auto-updated. 2022-07-12 17:52:50 -07:00
pyth0n1c d34a10968e Branch was auto-updated. 2022-07-12 17:52:48 -07:00
pyth0n1c d4bcd0716c Branch was auto-updated. 2022-07-12 17:52:47 -07:00
pyth0n1c 2183543236 Branch was auto-updated. 2022-07-12 17:52:46 -07:00
pyth0n1c 52ad26197f Branch was auto-updated. 2022-07-12 17:52:44 -07:00
pyth0n1c 163d2bace0 Branch was auto-updated. 2022-07-12 17:52:43 -07:00
pyth0n1c 71ff6c11e8 Branch was auto-updated. 2022-07-12 17:52:42 -07:00
pyth0n1c 57371eecc4 Branch was auto-updated. 2022-07-12 17:52:39 -07:00
pyth0n1c 929c623975 Branch was auto-updated. 2022-07-12 17:52:38 -07:00
pyth0n1c fa2c0a6a40 Branch was auto-updated. 2022-07-12 17:52:37 -07:00
pyth0n1c 9c226267cb Branch was auto-updated. 2022-07-12 17:52:36 -07:00
Bhavin Patel 3bd256120f Merge pull request #2242 from splunk/azorult-sfx-package
azorult-sfx-package
2022-07-12 17:52:18 -07:00
patel-bhavin 92d6b653bc mionr 2022-07-12 17:50:38 -07:00
patel-bhavin 9756e681f7 aws cloudtrail stop logging 2022-07-12 17:47:58 -07:00
pyth0n1c 20ab9f27ce Moved id collision checking into
the Utils module since it will
be used by the Factory and the
BA Factory.  Updated a duplicate
UUID to mitigate the collision
issue raised on GitHub.
2022-07-12 15:06:35 -07:00
mvelazco 3935b8634d Merge branch 'TR-2219_AzureAD_Password_Srapying' of github.com:splunk/security_content into TR-2219_AzureAD_Password_Srapying 2022-07-12 18:03:28 -04:00
mvelazco 18aa9f2e7a adding new detection 2022-07-12 18:03:26 -04:00
pyth0n1c 9b21029bea Added logic for checking to
see if there are duplicate ids
for any/all kinds of content that
have an ID associated with it.
2022-07-12 14:26:34 -07:00
Michael Haag 8ec266233b Windows Protocol Handler 2022-07-12 14:43:39 -06:00
pyth0n1c 42191ed3a9 Branch was auto-updated. 2022-07-12 12:33:23 -07:00
pyth0n1c 79b48f69dc Branch was auto-updated. 2022-07-12 12:33:22 -07:00
pyth0n1c 3841520566 Branch was auto-updated. 2022-07-12 12:33:21 -07:00
pyth0n1c 5ecd4380b8 Branch was auto-updated. 2022-07-12 12:33:20 -07:00
pyth0n1c 11609e9227 Branch was auto-updated. 2022-07-12 12:33:19 -07:00
pyth0n1c 5369103dd6 Branch was auto-updated. 2022-07-12 12:33:18 -07:00
pyth0n1c 17b8e9cef0 Branch was auto-updated. 2022-07-12 12:33:17 -07:00
pyth0n1c 82ee418b89 Branch was auto-updated. 2022-07-12 12:33:16 -07:00
pyth0n1c dbc710114a Branch was auto-updated. 2022-07-12 12:33:15 -07:00
pyth0n1c 4f77e857e9 Branch was auto-updated. 2022-07-12 12:33:14 -07:00