admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,441 Commits 697 Branches 195 Tags
gitlab_release_v4.27.21
Commit Graph

142 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 32bf3d0b90 Branch was auto-updated. 2023-09-06 08:53:52 -07:00
Patrick 412a17c496 updated spec 2023-08-31 08:08:15 +02:00
Kelby Shelton 9d37c809ff Update playbooks.spec.json 2023-08-30 10:28:03 -05:00
P4T12ICK 600ceb8937 Add BA detection schema and validator 2023-05-01 15:16:42 +02:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
P4T12ICK 3946110a92 added specs 2022-02-28 12:47:14 +01:00
d1vious 2a12151862 fixing path 2022-01-27 15:57:21 -05:00
pyth0n1c 72b1fb7df4 Added datamodels to most of the ssa___ detections. 
Still needs some more attention - there are likely 
some missing datamodels and some that are incorrect.
 2021-11-03 12:01:00 -07:00
pyth0n1c 244fad2f7e Removed Endpoint, it should be Endpoint_Process 
for relevant detections.
 2021-11-02 17:34:47 -07:00
pyth0n1c 80db3a4e86 Added Endpoint to ba_detections.spec.json 2021-11-02 17:29:55 -07:00
pyth0n1c ac4bbd06a6 Just ba_detections to make parsing easier. 2021-11-02 16:57:47 -07:00
pyth0n1c f0f7092884 Removed one line from json schema. 
This should fail, removal and check for
failure checks that we fixed the underlying
issue.
 2021-11-02 16:51:11 -07:00
pyth0n1c 5117990730 Added a ba_detections.spec.json file for 
validation of the BA detections.  Updated
validate_schema to use a different shcema
for BA detections vs non BA detections.
 2021-11-02 16:30:49 -07:00
Bhavin Patel 652af4ce87 Merge pull request #1679 from splunk/remove_unused_files 
Remove unused files
 2021-10-05 15:17:03 -07:00
Lou Stella 2126e90b6f Create playbooks.spec.json 2021-09-28 17:01:19 -05:00
divious1 1f6c5070d0 cleaned up cruft from repo 2021-09-28 17:18:51 -04:00
P4T12ICK 8cae9d0130 add new alert action 2021-09-13 12:56:16 +02:00
P4T12ICK 13f072766b change custom command 2021-09-09 09:57:47 +02:00
P4T12ICK 1fca39be77 updated generate 2021-07-20 16:41:53 +02:00
P4T12ICK 65a92a64e1 add analytic types to detections 2021-07-19 16:49:33 +02:00
divious1 2dc5927495 added logic to check for orphaned tests as well as a initial test schema 2021-03-08 14:24:47 -05:00
divious1 d6f8c42d23 processing baselines now with datamodels 2021-02-11 11:25:21 -05:00
divious1 70615c6a09 updated spec to include known datamodels 2021-02-10 22:36:23 -05:00
divious1 004db3e825 renaming analytic stories 2021-02-08 10:21:38 -05:00
divious1 83382be5f6 updating spec doc 2021-02-02 17:13:39 -05:00
divious1 1d629678a6 updated spec to respect the new type change 2021-02-02 12:54:55 -05:00
divious1 bb0db878d9 migrated other portions that pointed to the old repo 2021-01-26 15:07:14 -05:00
divious1 b7ad212344 fix a metric ton of validation errors, also updated the specs 2020-10-08 13:27:10 -04:00
divious1 3987951241 Merge branch 'develop' into response_phases 2020-10-08 10:29:54 -04:00
jzsplunk 0db46f89dc [TR-82] first cut of validation logic for risk scoring. 2020-09-01 17:55:14 -07:00
divious1 339e117806 skeleton 2020-08-25 18:56:44 -04:00
Patrick Bareiss 7a236f3dd0 new deployment configurations 2020-06-25 10:02:36 +02:00
bpatel 72d3ab875e converted to spec3 and other updates 2020-05-28 13:31:49 -07:00
bpatel ad6cf3a4c2 adding docs for spec files 2020-05-18 17:00:15 -07:00
bpatel 2b33d4fe86 spec documentation using jsonschema2md 2020-05-18 16:41:58 -07:00
bpatel 0de08a0f8e removing required[] from tags 2020-04-30 14:25:09 -07:00
bpatel d51b7ae991 validate now passes responses 2020-04-30 14:15:23 -07:00
bpatel f1b70e5d14 adding a required item in spec 2020-04-30 14:02:16 -07:00
Patrick Bareiss 442a575e1d WIP validate script 2020-04-30 15:51:16 +02:00
Patrick Bareiss 7cbc9a9ba6 WIP 2020-04-30 10:34:18 +02:00
Patrick Bareiss e610e87ee0 WIP 2020-04-30 10:14:38 +02:00
Patrick Bareiss d6e5dbc478 spec 3 update 2020-04-29 12:54:27 +02:00
Patrick Bareiss a569e55051 first version of spec 3 2020-04-24 12:52:33 +02:00
Patrick Bareiss 27f4778f9e first version of spec 3 2020-04-24 12:51:53 +02:00
bpatel 8e12891adb spec 2020-04-17 10:52:00 -07:00
Bhavin Patel 916e54d0ff Merge pull request #429 from splunk/crl-1749ssh 
CRL-1749 Cloud Stories
 2020-04-17 10:36:24 -07:00
bpatel c45d8dc34f remove k8s from manifest objects 2020-04-16 16:16:58 -07:00
bpatel a04b31e038 spec update for CI 2020-04-02 14:18:26 -07:00
bpatel 500a21e8cc detection, spec and macroupdates 2020-04-02 13:39:29 -07:00