admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,138 Commits 697 Branches 195 Tags
gcppodscandetection
Commit Graph

2138 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rod Soto f2b605fcbc gcppodscan 2020-07-17 21:52:31 -04:00
bpatel 3b1e639db2 rename file 2020-07-13 16:30:28 -07:00
Bhavin Patel da9ecd71fa Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-07-13 16:12:47 -07:00
Bhavin Patel a8c021a41e Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml 
typos
 2020-07-13 16:06:17 -07:00
Rod Soto 71032608db Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches 2020-07-13 19:03:08 -04:00
Rod Soto 6dbc996d9c fixbackticks 2020-07-13 19:01:57 -04:00
Bhavin Patel 62ab2b89e9 Merge branch 'develop' into gcpk8plussearches 2020-07-13 15:47:35 -07:00
Rod Soto 57fbe00de0 fixednamesmacros 2020-07-13 18:45:46 -04:00
Rod Soto 7fe2b89386 fixedsrctypewithmacro 2020-07-13 18:20:38 -04:00
Rod Soto b504edb561 fixedsourcetypeissue 2020-07-13 18:19:06 -04:00
Bhavin Patel 2c27c80c8a Merge pull request #552 from splunk/netsh-fix 
Netsh fix
 2020-07-13 09:59:29 -07:00
Bhavin Patel 186196684d Update processes_launching_netsh.yml 
updated the screen, test screenshot in the comments
 2020-07-13 09:53:43 -07:00
Rod Soto f0fe477413 k8sgcpkubectlcallssarch 2020-07-11 23:38:08 -04:00
Rod Soto c32b00dc7b k8sgcpservaccforbiddenfailure 2020-07-11 22:50:41 -04:00
Rod Soto 4895d18619 k8sgcpsensitiverole 2020-07-11 21:26:00 -04:00
Rod Soto 4935f2a095 k8sgcpsenobjaccess 2020-07-11 20:55:48 -04:00
Rod Soto ce8d85ad06 gcpRBACdetection 2020-07-11 19:40:46 -04:00
divious1 e9cf649460 fixing merge error 2020-07-10 23:10:02 -04:00
jkuepker 6f54e15d91 Changed WHERE clause to fix broken search and renamed values(Processes.process) to Processes.process to match other field names for readability. 2020-07-10 22:11:09 -04:00
Rod Soto 4d9f634adf k8sgcpmactivesabypod 2020-07-10 19:39:21 -04:00
dependabot-preview[bot] 074955617d Merge pull request #549 from splunk/dependabot/pip/identify-1.4.23 2020-07-10 18:59:36 +00:00
dependabot-preview[bot] 0bb83f89ec Bump identify from 1.4.21 to 1.4.23 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.21 to 1.4.23.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.21...v1.4.23)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-10 18:53:44 +00:00
Rod Soto 3f79168731 addedgcpscansearch 2020-07-10 08:35:59 -04:00
jzsplunk 3a41964a07 Merge pull request #543 from splunk/new_testing_file 
new pass condition handling
 2020-07-10 01:06:52 -07:00
jzsplunk 5cc42f10de Merge branch 'develop' into new_testing_file 2020-07-10 00:57:35 -07:00
Jose Enrique Hernandez 1db067750d Merge pull request #546 from splunk/T1526detections 
addedmitretechnique
 2020-07-10 02:02:35 -04:00
divious1 04e8a8291e Merge branch 'develop' into T1526detections 2020-07-09 22:55:00 -04:00
Rod Soto e4a0589a4b addedmitretechnique 2020-07-09 22:24:16 -04:00
Bhavin Patel 553625f860 Merge pull request #545 from splunk/CRL-1770 
Removed data model module name from output
 2020-07-09 12:26:16 -07:00
Bhavin Patel 12f9b68ec0 Merge branch 'develop' into CRL-1770 2020-07-09 11:39:11 -07:00
David Dorsey da9aa3de41 Removed data model module name from output 2020-07-09 11:42:51 -05:00
dependabot-preview[bot] e9159978da Merge pull request #541 from splunk/dependabot/pip/virtualenv-20.0.26 2020-07-09 16:06:15 +00:00
dependabot-preview[bot] 6a40255c1f Bump virtualenv from 20.0.25 to 20.0.26 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.25 to 20.0.26.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/20.0.26/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.25...20.0.26)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-09 16:00:26 +00:00
dependabot-preview[bot] 354d4052cb Merge pull request #544 from splunk/dependabot/pip/stix2-patterns-1.3.1 2020-07-09 15:59:14 +00:00
dependabot-preview[bot] 67439ff037 Bump stix2-patterns from 1.3.0 to 1.3.1 
Bumps [stix2-patterns](https://github.com/oasis-open/cti-pattern-validator) from 1.3.0 to 1.3.1.
- [Release notes](https://github.com/oasis-open/cti-pattern-validator/releases)
- [Changelog](https://github.com/oasis-open/cti-pattern-validator/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/oasis-open/cti-pattern-validator/compare/v1.3.0...v1.3.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-09 15:54:03 +00:00
Patrick Bareiss 350ecdb648 new pass condition handling 2020-07-09 14:33:33 +02:00
Patrick Bareiss 37e6f6f7c0 new pass condition handling 2020-07-09 14:29:53 +02:00
Patrick Bareiss 6f77dbd20c new pass condition handling 2020-07-09 14:21:33 +02:00
Patrick Bareiss 4caa3c5cb1 detection tested 2020-07-08 15:10:45 +02:00
Patrick Bareiss 49d98cfc45 detection tested 2020-07-08 15:09:05 +02:00
jzsplunk 5c885b15b2 Merge pull request #538 from splunk/testing_detections 
Testing detections
 2020-07-07 09:34:30 -07:00
Patrick Bareiss 594e1e1351 Merge branch 'develop' into testing_detections 2020-07-07 16:17:22 +02:00
P4T12ICK 0190e39fe0 Merge pull request #531 from splunk/api_bug 
API expects name to be lower case
 2020-07-07 16:16:46 +02:00
Patrick Bareiss eafec36bbe Merge branch 'develop' into api_bug 2020-07-07 16:09:49 +02:00
Patrick Bareiss 99dc6677e2 Merge branch 'develop' into testing_detections 2020-07-07 16:08:01 +02:00
dependabot-preview[bot] 1677be5abc Merge pull request #540 from splunk/dependabot/pip/stix2-2.0.2 2020-07-07 13:59:20 +00:00
dependabot-preview[bot] deee54dd9b Bump stix2 from 2.0.1 to 2.0.2 
Bumps [stix2](https://github.com/oasis-open/cti-python-stix2) from 2.0.1 to 2.0.2.
- [Release notes](https://github.com/oasis-open/cti-python-stix2/releases)
- [Changelog](https://github.com/oasis-open/cti-python-stix2/blob/master/CHANGELOG)
- [Commits](https://github.com/oasis-open/cti-python-stix2/compare/v2.0.1...v2.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-07 13:54:51 +00:00
Patrick Bareiss 4124e326f0 updated detection 2020-07-07 15:49:20 +02:00
Patrick Bareiss cd96e40b0b updated detection 2020-07-07 15:45:59 +02:00
dependabot-preview[bot] 96090d34be Merge pull request #539 from splunk/dependabot/pip/stix2-2.0.1 2020-07-06 20:52:38 +00:00