 Lou Stella
|
83850b8b59
|
#2402 fix
|
2022-10-03 13:01:57 -05:00 |
|
|
Bhavin Patel
|
8148a767ca
|
Update detect_dga_domains_using_pretrained_model_in_dsdl.yml
minor updates
|
2022-09-29 13:53:00 -07:00 |
|
|
Bhavin Patel
|
de34ea116f
|
Update detect_dga_domains_using_pretrained_model_in_dsdl.yml
|
2022-09-29 13:09:04 -07:00 |
|
|
Bhavin Patel
|
8c527b79e3
|
Update detect_dga_domains_using_pretrained_model_in_dsdl.yml
|
2022-09-29 13:06:04 -07:00 |
|
|
Namratha Sreekanta
|
9c22497ba5
|
Changing the link
|
2022-09-29 11:36:31 -07:00 |
|
|
Namratha Sreekanta
|
6cfc24babc
|
changing the bucket name
|
2022-09-29 10:59:09 -07:00 |
|
|
Namratha Sreekanta
|
23418cd595
|
Changing the links for S3 bucket
|
2022-09-28 18:08:40 -07:00 |
|
|
Namratha Sreekanta
|
70753ea779
|
minor desc change in .yml file
|
2022-09-28 15:24:43 -07:00 |
|
|
Bhavin Patel
|
2ba2bc8e53
|
Update detect_dga_domains_using_pretrained_model_in_dsdl.yml
updating story names
|
2022-09-26 16:41:32 -05:00 |
|
|
Namratha Sreekanta
|
902221712b
|
making changes to how to implement
|
2022-09-26 12:26:31 -07:00 |
|
|
Namratha Sreekanta
|
2932ebb1fa
|
Adding more feedback
|
2022-09-23 16:28:58 -07:00 |
|
|
Namratha Sreekanta
|
d22e6db5ef
|
minor change in the detection
|
2022-09-22 14:57:42 -07:00 |
|
|
Namratha Sreekanta
|
6678a4ee55
|
fixing build failure
|
2022-09-21 13:35:47 -07:00 |
|
|
Namratha Sreekanta
|
055f0a175a
|
adding review comments
|
2022-09-21 13:20:47 -07:00 |
|
|
Namratha Sreekanta
|
f5fb35ec4c
|
changing README and few fields regarding the search
|
2022-09-20 16:00:12 -07:00 |
|
|
Namratha Sreekanta
|
56aea9de22
|
Adding in Sharad's inputs on descriptioj
|
2022-09-20 12:28:53 -07:00 |
|
|
Namratha Sreekanta
|
8fa7fffa2a
|
changing the desc to match the detection
|
2022-09-20 11:33:06 -07:00 |
|
|
Namratha Sreekanta
|
43c213a74c
|
modifying the search and adding a README file
|
2022-09-20 11:20:13 -07:00 |
|
|
Namratha Sreekanta
|
c417a9a4af
|
changing the search in the yml
|
2022-09-16 15:13:58 -07:00 |
|
|
Namratha Sreekanta
|
d1788686d5
|
initial commit for dga
|
2022-09-15 17:50:36 -07:00 |
|
|
pyth0n1c
|
d40ca09d61
|
Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface.
|
2022-06-23 14:19:17 -07:00 |
|
|
Lou Stella
|
863259df93
|
Updated per #2235
|
2022-06-15 13:49:56 -05:00 |
|
|
pyth0n1c
|
578e6bb088
|
Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.
|
2022-05-02 17:12:50 -07:00 |
|
|
d1vious
|
fdcd471d5d
|
moving to experimental
|
2022-04-14 16:37:54 -04:00 |
|
|
P4T12ICK
|
5dd13ea167
|
fix broken detections
|
2022-03-14 15:51:05 +01:00 |
|
|
P4T12ICK
|
e6c8254ede
|
Added automaticc generation of finding report
|
2022-03-14 12:12:48 +01:00 |
|
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
|
Xiao Lin
|
7b8f6b22e2
|
update search
|
2022-02-25 10:03:01 -08:00 |
|
|
research bot
|
5c8268f137
|
updating docs and package bits [ci skip]
|
2022-02-15 23:10:10 +00:00 |
|
|
Bhavin Patel
|
baab603657
|
Update ssa___unusual_volume_download_from_internal_server.yml
|
2022-02-09 16:45:28 -08:00 |
|
|
Xiao Lin
|
a1e6d3e225
|
update search string
|
2022-02-09 16:36:10 -08:00 |
|
|
Xiao Lin
|
9a04a4e833
|
fix a typo
|
2022-02-09 16:36:10 -08:00 |
|
|
Xiao Lin
|
ddd492fe23
|
update data link to attack_range, move detection to experimental
|
2022-02-09 16:36:10 -08:00 |
|
|
P4T12ICK
|
96ba6f8e73
|
fixed more detections
|
2022-01-18 13:51:37 +01:00 |
|
|
P4T12ICK
|
f48f8f5b71
|
fixed bugs in detections after running new validate
|
2022-01-17 17:45:12 +01:00 |
|
|
P4T12ICK
|
9ed2766f6c
|
improved content_changer
|
2022-01-17 09:44:04 +01:00 |
|
|
mvelazco
|
efd890e2c2
|
updating analytic story name
|
2021-12-06 17:01:58 -05:00 |
|
|
research bot
|
a1afa0fa60
|
updating docs and package bits [ci skip]
|
2021-10-28 19:55:37 +00:00 |
|
|
Drew Church
|
3b18c5abcb
|
Added CVE tags to 35 files
|
2021-10-22 10:03:24 -07:00 |
|
|
tccontre
|
9d466adc76
|
CARS_UPDATE_MITRE_ID_B8
CARS_UPDATE_MITRE_ID_B8
|
2021-10-15 10:22:43 +02:00 |
|
|
divious1
|
671e91ecd0
|
moved to experimental due to lack of testing
|
2021-09-09 17:30:40 -04:00 |
|
|
research bot
|
02e58a1dfa
|
updating docs and package bits [ci skip]
|
2021-08-27 21:52:55 +00:00 |
|
|
Michael Haag
|
b831023bd4
|
Update protocols_passing_authentication_in_cleartext.yml
Added a few more changes to make it more clear. Thank you @sec-researcher for updating!
|
2021-08-24 07:04:52 -06:00 |
|
|
Amir hossein Mahboubi
|
0945cc72c9
|
Update protocols_passing_authentication_in_cleartext.yml
|
2021-08-21 08:55:07 +04:30 |
|
|
Amir hossein Mahboubi
|
546e70f2d8
|
Merge branch 'splunk:develop' into optimized
|
2021-08-21 08:53:50 +04:30 |
|
|
sec-researcher
|
0bfb8ba325
|
Filter blocked traffic because it made a lot of false positive specially when something like port scan happen, also add description to "how_to_implement" section to limit result just to organization private and public IP range for more accurate result
|
2021-08-19 18:59:04 +04:30 |
|
|
P4T12ICK
|
cfae82505c
|
add analytic types to detections
|
2021-07-19 17:41:22 +02:00 |
|
|
P4T12ICK
|
edaf9598f2
|
fixed merging issues
|
2021-03-11 19:03:54 +01:00 |
|