Bhavin Patel
|
6855e7aea0
|
Update aws_multiple_users_failing_to_authenticate_from_ip.yml
|
2022-10-03 13:37:28 -07:00 |
|
patel-bhavin
|
cf08498d1b
|
update to spl
|
2022-10-03 12:23:27 -07:00 |
|
mvelazco
|
74f1fe7180
|
minor changes on SPL
|
2022-09-27 15:31:24 -04:00 |
|
patel-bhavin
|
f1d93ba5af
|
format updates
|
2022-09-26 17:05:51 -05:00 |
|
patel-bhavin
|
84ad82a95f
|
yml error
|
2022-09-26 16:52:35 -05:00 |
|
patel-bhavin
|
db9068b4fb
|
updating azure
|
2022-09-26 16:50:02 -05:00 |
|
patel-bhavin
|
86c4816f98
|
nnew detection and multiple searches
|
2022-09-26 16:25:49 -05:00 |
|
patel-bhavin
|
0c0603e701
|
password spray detection std dev
|
2022-09-26 15:56:29 -05:00 |
|
pyth0n1c
|
5cd001e040
|
Branch was auto-updated.
|
2022-09-15 09:15:51 -07:00 |
|
patel-bhavin
|
819b016b37
|
search updaate and remove import
|
2022-09-14 18:24:59 -05:00 |
|
pyth0n1c
|
da686eb237
|
Branch was auto-updated.
|
2022-09-14 09:17:49 -07:00 |
|
pyth0n1c
|
64d3dd2b75
|
Branch was auto-updated.
|
2022-09-14 09:17:34 -07:00 |
|
patel-bhavin
|
a1023ca839
|
rename to account takeover
|
2022-09-13 19:26:11 -05:00 |
|
mvelazco
|
4810926509
|
enhancing descriptions
|
2022-09-06 18:08:16 -04:00 |
|
mvelazco
|
d81df080b6
|
updating descriptions
|
2022-09-06 17:26:06 -04:00 |
|
mvelazco
|
d8cce69644
|
adding new detection
|
2022-09-06 16:08:35 -04:00 |
|
mvelazco
|
3d308b862f
|
adding new detection
|
2022-09-02 18:25:34 -04:00 |
|
mvelazco
|
441a1542bd
|
adding new detection. fixing types. adding line to lookup
|
2022-09-02 18:03:14 -04:00 |
|
mvelazco
|
9e94c62a6a
|
adding new detection
|
2022-08-30 18:25:25 -04:00 |
|
mvelazco
|
927d46a74e
|
adding new detection
|
2022-08-30 13:07:41 -04:00 |
|
mvelazco
|
79f7f9c16e
|
adding new detection
|
2022-08-29 17:00:05 -04:00 |
|
mvelazco
|
0473b83ffb
|
minor fixes
|
2022-08-29 12:12:42 -04:00 |
|
mvelazco
|
024337cf62
|
improving detections
|
2022-08-29 11:46:57 -04:00 |
|
mvelazco
|
d9226071a7
|
Merge branch 'TR-2390_Additional_Azure_Detections' of github.com:splunk/security_content into TR-2390_Additional_Azure_Detections
|
2022-08-29 11:24:02 -04:00 |
|
mvelazco
|
02976117ce
|
improving detection
|
2022-08-29 11:24:00 -04:00 |
|
pyth0n1c
|
846867c7d4
|
Branch was auto-updated.
|
2022-08-25 16:25:57 -07:00 |
|
pyth0n1c
|
a8c2a781be
|
Branch was auto-updated.
|
2022-08-25 16:25:55 -07:00 |
|
pyth0n1c
|
474ea41291
|
Finishing updates authors, versions,
and dates on searches.
|
2022-08-25 15:09:13 -07:00 |
|
pyth0n1c
|
8b47ea7b36
|
Updating the author(s), versions, and
dates for searches in PR.
|
2022-08-25 15:08:46 -07:00 |
|
mvelazco
|
2a0c7a69d1
|
adding new detection
|
2022-08-25 16:02:54 -04:00 |
|
mvelazco
|
779ec07f0e
|
adding description. updating dataset url
|
2022-08-24 11:13:03 -04:00 |
|
mvelazco
|
f0926a5372
|
update detections
|
2022-08-23 23:40:54 -04:00 |
|
mvelazco
|
0a6592b9e2
|
adding new detection. fixing another
|
2022-08-23 21:45:22 -04:00 |
|
mvelazco
|
63398504c5
|
Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence
|
2022-08-23 16:28:56 -04:00 |
|
mvelazco
|
63f87f5a12
|
adding new detection
|
2022-08-23 16:28:55 -04:00 |
|
pyth0n1c
|
a2f1972d54
|
Branch was auto-updated.
|
2022-08-23 13:05:56 -07:00 |
|
pyth0n1c
|
a1b3e4c6f7
|
Branch was auto-updated.
|
2022-08-23 13:05:52 -07:00 |
|
pyth0n1c
|
cfa60f73c5
|
Branch was auto-updated.
|
2022-08-22 14:51:16 -07:00 |
|
mvelazco
|
0a10ef85d6
|
fixing detection. adding azure_audit macro
|
2022-08-22 15:36:25 -04:00 |
|
gowthamarajr
|
136cbb1ea8
|
Add detection for "Azure AD External Guest User Invited"
|
2022-08-19 10:39:07 -04:00 |
|
mvelazco
|
fae2c64476
|
adding new detection. other minor changes
|
2022-08-19 00:16:18 -04:00 |
|
mvelazco
|
b81b41e137
|
small fixes
|
2022-08-18 17:46:34 -04:00 |
|
mvelazco
|
38ee247989
|
Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence
|
2022-08-18 14:50:18 -04:00 |
|
mvelazco
|
7b137ad6b9
|
adding new detection and fixing a few others
|
2022-08-18 14:50:16 -04:00 |
|
gowthamarajr
|
55c18d0c40
|
Update "Azure AD Service Principal Created"
|
2022-08-17 18:54:10 -04:00 |
|
gowthamarajr
|
da48c720c6
|
Update "Azure AD Service Principal Created"
|
2022-08-17 18:53:22 -04:00 |
|
gowthamarajr
|
41a7f4380e
|
Add 2 detections
|
2022-08-17 18:43:40 -04:00 |
|
mvelazco
|
393e7775f1
|
fixing typo
|
2022-08-16 12:19:07 -04:00 |
|
mvelazco
|
b2332df9a0
|
Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover
|
2022-08-16 12:13:02 -04:00 |
|
mvelazco
|
d00a4b2ae6
|
updating detection yaml
|
2022-08-16 12:13:00 -04:00 |
|