 bpatel
|
6dd4f4dc4b
|
merge and testing the package
|
2019-05-30 15:57:28 -07:00 |
|
|
Rico Valdez
|
43ef842562
|
text updates and removed isOutlier from search output
|
2019-05-22 18:37:44 -06:00 |
|
|
bpatel
|
4616971e38
|
removing datamodel
|
2019-05-17 12:03:31 -07:00 |
|
|
bpatel
|
cb2c30de86
|
bringing the branch upto date with develop
|
2019-05-17 11:50:36 -07:00 |
|
|
Rico Valdez
|
438ac72bda
|
changed detection searches to use start_time and end_time vs firstTime and lastTime, included links to docs on algorithm, and included mention of re-running support search in the how_to_implement for detections. Also fixed release #, and fixed incorrect risk object (was dest, should be src) on query length dns searches
|
2019-05-17 11:17:49 -06:00 |
|
|
Rico Valdez
|
2f1cdca631
|
updated names of the support searches and updates stories accordingly
|
2019-05-15 11:51:39 -06:00 |
|
|
Jason Brewer
|
c40a264da5
|
Updating baseines/update_previously_seen_aws_users.json to use sourcetype search in sync with previously_seen_aws_users.json syntax.
|
2019-05-14 11:42:49 -07:00 |
|
|
Jason Brewer
|
0e320c6a39
|
CRL-1428 - Updating per code review feedback.
|
2019-05-13 16:05:24 -07:00 |
|
|
Rico Valdez
|
2286622900
|
going back to hyphens
|
2019-05-10 14:39:34 -06:00 |
|
|
Rico Valdez
|
ead7741cee
|
testing removing the hyphen from smb traffic spike
|
2019-05-10 14:10:35 -06:00 |
|
|
Rico Valdez
|
97d82b606f
|
fixed title on support searches and updated relevant stories
|
2019-05-10 13:47:54 -06:00 |
|
|
Rico Valdez
|
98907055ff
|
pushing Brianna edits
|
2019-05-10 09:10:48 -06:00 |
|
|
Rico Valdez
|
bd42f11bb6
|
search tweaks (mostly output formatting) based on discussion with Bhavin
|
2019-05-09 14:18:55 -06:00 |
|
|
Rico Valdez
|
22100df132
|
fixed a non-ascii char that got in there
|
2019-05-09 11:43:49 -06:00 |
|
|
Rico Valdez
|
d8aac902fb
|
Slight search tweak and another text updates
|
2019-05-09 10:54:36 -06:00 |
|
|
Rico Valdez
|
12be9cdacc
|
added a line to the how-to-implement for the model building manifests
|
2019-05-09 09:53:43 -06:00 |
|
|
Rico Valdez
|
318a41d3c9
|
translated to v1 spec
|
2019-05-08 15:13:20 -06:00 |
|
|
bblacet
|
781924aaca
|
Various changes for grammar, punctuation, and flow.
|
2019-05-07 16:52:42 -07:00 |
|
|
Rico Valdez
|
39a8489a84
|
added a null cron_schedule to try to fix validation on baseline searches
|
2019-05-07 14:46:05 -06:00 |
|
|
Rico Valdez
|
13f7508c46
|
fixes to entities
|
2019-05-07 14:32:04 -06:00 |
|
|
Rico Valdez
|
030683cbed
|
created 3 new searches and associated support searches that are mltk versions of existing searches. Also added them to the appropriate stories and fixed the non-capitalized title for an investigative search - updated associated stories for that as well.
|
2019-05-07 13:57:23 -06:00 |
|
|
Jason Brewer
|
7950452a95
|
CRL-1428 - Updating relevant searches to spec v2.
|
2019-04-30 17:03:34 -07:00 |
|
|
Jason Brewer
|
ddad8fb162
|
CRL-1428 - Adding new user City, Region, and Country detections and needed baseline changes.
|
2019-04-25 15:59:30 -07:00 |
|
|
divious1
|
fa3e66bf07
|
Merge branch 'spec_update' of github.com:splunk/security-content into spec_update
|
2019-04-19 10:59:41 -04:00 |
|
|
divious1
|
a4efc519f9
|
Merge branch 'develop' into spec_update
|
2019-04-19 10:58:47 -04:00 |
|
|
bpatel
|
7e8f267b81
|
fixes, run the genenrate code and validate
|
2019-04-18 17:05:55 -07:00 |
|
|
bpatel
|
4e17ca4774
|
Revert "cron update"
This reverts commit 746878cab9.
|
2019-04-18 16:15:24 -07:00 |
|
|
bpatel
|
746878cab9
|
cron update
|
2019-04-18 15:03:35 -07:00 |
|
|
bpatel
|
3d43375341
|
fixes and udpates
|
2019-04-18 13:15:16 -07:00 |
|
|
divious1
|
af66893917
|
removed unecessary prefixes
|
2019-03-27 11:13:11 -04:00 |
|
|
divious1
|
f6bc3566f3
|
updated dirs and README
|
2019-03-26 13:36:04 -04:00 |
|