4f6d30dc51
Fixes to needs dependencies
...
after updating job names
2022-06-22 15:58:21 -07:00
130f5e3c99
Simplified the build-and-validate
...
workflow, collapsing several jobs into
one.
2022-06-22 15:49:56 -07:00
28eefb325d
adding 2 new detections for kerberoasting
2022-06-22 17:35:37 -04:00
a74ebee88f
Added the --skip_enrichment option to the
...
contentctl tool. This can save a huge amount
of time when generating an app. Also
added a progress meter when the documentation
is being generated. Finally, correctly initialized
the default values of some class member fields
in order to get all the contentctl steps working.
2022-06-22 13:44:17 -07:00
7ef25a98ec
updating docs and package bits [ci skip]
2022-06-22 17:56:19 +00:00
7328ea1aa3
model to detect risky commands
2022-06-22 19:34:06 +02:00
e53e9cf232
Branch was auto-updated.
2022-06-22 10:19:36 -07:00
af269b1bce
Branch was auto-updated.
2022-06-22 10:19:35 -07:00
ad2ae86220
Branch was auto-updated.
2022-06-22 10:19:35 -07:00
1033ae41ae
Branch was auto-updated.
2022-06-22 10:19:34 -07:00
cda681eb8b
Merge pull request #2260 from splunk/DetectionFixes
...
Detection fixes
2022-06-22 13:19:16 -04:00
6fa400f4f9
Update azorult.yml
2022-06-22 18:50:08 +02:00
26d6664e7c
model to detect risky commands
2022-06-22 17:41:34 +02:00
c35c786b09
model to detect risky commands
2022-06-22 17:39:17 +02:00
defa7b1bd0
model to detect risky commands
2022-06-22 16:57:52 +02:00
4ace852c0b
azorult-sfx-package
2022-06-22 16:55:51 +02:00
629e5c2e5e
model to detect risky commands
2022-06-22 16:47:07 +02:00
de7c604cd2
model to detect risky commands
2022-06-22 16:45:48 +02:00
f067ded253
model to detect risky commands
2022-06-22 16:39:33 +02:00
fe84f9fbf9
model to detect risky commands
2022-06-22 16:39:33 +02:00
1120d578e5
model to detect risky commands
2022-06-22 16:39:33 +02:00
96652af2bf
model to detect risky commands
2022-06-22 16:39:33 +02:00
67f35bba10
model to detect risky commands
2022-06-22 16:39:33 +02:00
0de66753a1
Branch was auto-updated.
2022-06-22 07:17:51 -07:00
8d67c4f0a2
Branch was auto-updated.
2022-06-22 07:17:50 -07:00
afc1e9afeb
Branch was auto-updated.
2022-06-22 07:17:49 -07:00
b6fbbcfe7c
Branch was auto-updated.
2022-06-22 07:17:48 -07:00
52fa6467a9
Updated per customer feedback
2022-06-22 09:17:14 -05:00
a7868fc25e
Merge branch 'azorult-sfx-package' of github.com:splunk/security_content into azorult-sfx-package
2022-06-22 15:04:35 +02:00
07ef9a215e
azorult-sfx-package
2022-06-22 15:04:13 +02:00
d2c419e596
azorult-bomb
2022-06-22 13:31:48 +02:00
54203d6858
Fixing detection to conform to new sysmon
...
behavior.
2022-06-21 17:21:30 -07:00
b73ea9e5ae
Added another custom_index to a test
...
file that was failing because it did not
have one.
2022-06-21 16:59:44 -07:00
ff0a57e526
Branch was auto-updated.
2022-06-21 16:45:18 -07:00
70e9066273
Branch was auto-updated.
2022-06-21 16:45:17 -07:00
ee7dd5f7e9
Branch was auto-updated.
2022-06-21 16:45:16 -07:00
07a13ca16b
Merge pull request #2240 from splunk/more-defense-evasion
...
more-defense-evasion
2022-06-21 16:44:59 -07:00
8d04037125
Update windows_impair_defenses_disable_win_defender_auto_logging.yml
2022-06-21 16:28:05 -07:00
35908f5a30
Removed user from the stats call of this search
...
since it does not exist and the field userName
does exist. And it is likely to have captured
the same data.
2022-06-21 16:25:20 -07:00
0634828d94
Branch was auto-updated.
2022-06-21 16:07:18 -07:00
cc03d129c3
Branch was auto-updated.
2022-06-21 16:07:17 -07:00
62ed8fe817
Branch was auto-updated.
2022-06-21 16:07:16 -07:00
e225958248
Branch was auto-updated.
2022-06-21 16:07:15 -07:00
471ee2b8a5
Merge pull request #2220 from splunk/inspired_2194
...
Dupliate: PR 2194
2022-06-21 19:06:53 -04:00
b5c79b6db8
Added a custom index for a detection test
...
that was created when custom_index
support did not yet exist.
2022-06-21 15:53:26 -07:00
cf7f30111e
Branch was auto-updated.
2022-06-21 15:47:25 -07:00
88ce513e8e
Branch was auto-updated.
2022-06-21 15:47:24 -07:00
6e989d1e07
Branch was auto-updated.
2022-06-21 15:47:23 -07:00
d231e4e7fd
Branch was auto-updated.
2022-06-21 15:47:22 -07:00
349551a98f
Branch was auto-updated.
2022-06-21 15:47:21 -07:00
pyth0n1c