Commit Graph

217 Commits

Author SHA1 Message Date
research bot 25a4be5d98 updating docs and package bits [ci skip] 2021-04-22 21:55:11 +00:00
mhaag-spl aa62997e60 removed detections 2021-04-22 11:52:20 -06:00
Bhavin Patel cf41087f7b Update aws_iam_failure_group_deletion.yml 2021-04-22 10:47:38 -07:00
Bhavin Patel 60842e5dc9 Update aws_iam_delete_policy.yml 2021-04-22 10:46:57 -07:00
Bhavin Patel 69debe6e26 Update aws_iam_assume_role_policy_brute_force.yml 2021-04-22 10:46:16 -07:00
Bhavin Patel fbb1986114 Update aws_iam_successful_group_deletion.yml 2021-04-22 10:44:46 -07:00
Bhavin Patel 102ccc889b Update aws_iam_root_account_login.yml 2021-04-22 10:44:02 -07:00
Bhavin Patel 47212a6443 Update aws_iam_root_account_login.yml 2021-04-22 10:42:12 -07:00
Bhavin Patel 621a5ec81b Update aws_iam_accessdenied_discovery_events.yml 2021-04-22 10:41:02 -07:00
mhaag-spl 2b40cfec8b remove root aws detections and update aws detection 2021-04-22 10:21:36 -06:00
mhaag-spl 88688f9960 duplicate detection 2021-04-22 10:10:47 -06:00
Michael Haag 5361b73924 Merge branch 'develop' into cloudywithachanceofhaags 2021-04-15 15:05:15 -06:00
mhaag-spl a74171d7e3 removals 2021-04-15 14:25:15 -06:00
root cc38063d6f Added detection testing service results inAWS IAM Successful Group Deletion 2021-04-15 20:16:33 +00:00
root 10d6fccda7 Added detection testing service results inAWS IAM Failure Group Deletion 2021-04-15 19:53:19 +00:00
research bot a40dc12832 updating docs and package bits [ci skip] 2021-04-15 19:40:20 +00:00
Detection Testing Service 7c192a8e44 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-15 19:21:10 +00:00
root 7f30daf301 Added detection testing service results inAWS IAM Delete Policy 2021-04-15 19:21:10 +00:00
root f07a6cd445 Added detection testing service results inAWS IAM Assume Role Policy Brute Force 2021-04-15 19:17:21 +00:00
root d6a32d4bd5 Added detection testing service results inAWS IAM AccessDenied Discovery Events 2021-04-15 18:47:13 +00:00
root 453b0accec Added detection testing service results inAWS Excessive List Command Usage 2021-04-15 18:13:33 +00:00
mhaag-spl bc572e94fa Update aws_iam_delete_policy.yml 2021-04-14 21:14:35 -06:00
mhaag-spl 8a81aee71b AWS Detections 2021-04-14 21:10:46 -06:00
github-actions[bot] 15dae52e30 Branch was auto-updated. 2021-04-14 11:30:46 +00:00
root 884fb57647 Added detection testing service results inAWS Excessive Security Scanning 2021-04-14 11:25:51 +00:00
mhaag-spl 8de6aa31a9 AWS Updates 2021-04-13 14:11:56 -06:00
mhaag-spl 3d839f0f11 Updated AWS IAM Detections 2021-04-13 14:08:45 -06:00
P4T12ICK 1ab072c735 New AWS detection 2021-04-13 16:29:09 +02:00
mhaag-spl b5d3de10f2 AWS 2021-04-06 14:39:27 -06:00
research bot 6212932c35 updating docs and package bits [ci skip] 2021-03-25 19:35:07 +00:00
bpatel 8d12500905 adding risk and product tags 2021-03-23 15:03:02 -07:00
bpatel 4e0776d751 updates 2021-03-23 13:12:47 -07:00
Detection Testing Service f68299b365 Merge branch 'aws_priv_escalation' of https://github.com/splunk/security_content into aws_priv_escalation 2021-03-19 00:27:16 +00:00
root 52e2b6f0ae Added detection testing service results inAWS CreateLoginProfile 2021-03-19 00:27:15 +00:00
Detection Testing Service 7ae972a31d Merge branch 'aws_priv_escalation' of https://github.com/splunk/security_content into aws_priv_escalation 2021-03-19 00:11:45 +00:00
root 8571958958 Added detection testing service results inAWS UpdateLoginProfile 2021-03-19 00:11:44 +00:00
bpatel 1342a1ddb3 updating search 2021-03-18 17:09:36 -07:00
bpatel 78903f3fe9 test files 2021-03-18 12:41:00 -07:00
bpatel 3da137231d req field 2021-03-12 17:55:55 -08:00
github-actions[bot] 058df4ae8c Branch was auto-updated. 2021-03-12 16:49:59 +00:00
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
github-actions[bot] d38bb445da Branch was auto-updated. 2021-03-11 09:20:01 +00:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
bpatel c02840c442 removed dataset 2021-03-09 16:58:57 -08:00
bpatel 92bd73e301 validate 2021-03-09 16:58:01 -08:00
bpatel 1f81838841 two new searches 2021-03-09 16:47:59 -08:00
bpatel 238672e507 story file and tags 2021-03-09 14:58:54 -08:00
root 9877619ce3 Added detection testing service results inAWS CreateAccessKey 2021-03-03 00:42:42 +00:00
bpatel f30d83c623 Merge branch 'aws_priv_escalation' of github.com:splunk/security_content into aws_priv_escalation 2021-03-02 16:23:17 -08:00