admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,298 Commits 697 Branches 195 Tags
improved_ssa_testing
Commit Graph

54 Commits

Author SHA1 Message Date
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
P4T12ICK 6e826b4e68 add required fields and check 2021-03-11 09:11:48 +01:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
mhaag-spl a6265b60df Moving Tor Traffic to Experimental 2021-03-10 11:47:34 -07:00
P4T12ICK df31ce2246 WIP 2021-03-10 15:22:35 +01:00
P4T12ICK c1c1d1733e WIP 2021-03-10 15:22:14 +01:00
mhaag-spl 51823d81d3 Sunburst malware renamed NOBELIUM Group 
Renaming Sunburst Malware to NOBELIUM Group
 2021-03-05 10:30:34 -07:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
github-actions[bot] c88cc88d1b Branch was auto-updated. 2021-01-25 19:02:14 +00:00
David Dorsey 88c9469541 More language clean up 2021-01-22 09:37:51 -06:00
David Dorsey fd76342c94 Changed the language in some of the descriptions 2021-01-21 23:53:47 -06:00
P4T12ICK 0d75faf323 new test file 2021-01-19 13:55:33 +01:00
P4T12ICK 98175156b7 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-18 15:47:15 +01:00
P4T12ICK 477221da99 detection testing 2021-01-18 15:46:53 +01:00
root a88d8291fe Added detection testing service results inDNS Query Length With High Standard Deviation 2021-01-18 14:41:53 +00:00
P4T12ICK 44bf41a678 new test file 2021-01-18 15:22:05 +01:00
P4T12ICK 27b27a5b59 detection testing branch 2021-01-18 14:10:47 +01:00
root b751d5ddb8 Added detection testing service results inDetect hosts connecting to dynamic domain providers 2021-01-14 15:15:59 +00:00
P4T12ICK c871d6804a improved detections and tests 2021-01-14 15:01:16 +01:00
github-actions[bot] 162d729fff Branch was auto-updated. 2021-01-06 20:21:46 +00:00
divious1 1e64964226 adding changes from suggestions on issue#1053 2021-01-05 14:45:35 -05:00
divious1 f5aeb32827 should be dest_mac as reported 2021-01-05 11:12:58 -05:00
Jose Enrique Hernandez 56d4471b78 Merge branch 'develop' into sunburst_detections 2020-12-17 13:01:38 -05:00
P4T12ICK 07aa33af22 Merge branch 'develop' into detection_testing_part_two 2020-12-16 15:59:31 +01:00
bpatel 7fa41599d5 adding sunburst as tags for relavant detections 2020-12-14 20:29:04 -08:00
bpatel 25c7f33866 app inspect failures fixes 2020-12-08 14:56:39 -08:00
P4T12ICK 268ba8ad21 new test file 2020-12-08 14:00:25 +01:00
P4T12ICK c277a26f14 merge conflict 2020-11-19 11:35:42 +01:00
Jose Enrique Hernandez 3c1cfbf4de Merge branch 'develop' into develop 2020-11-18 13:30:38 -05:00
P4T12ICK 9b2c2bcf28 Merge branch 'develop' into detection_testing_part_one 2020-11-16 15:38:40 +01:00
Jose Enrique Hernandez a874999185 Merge branch 'develop' into detection_testing_part_one 2020-11-12 10:16:47 -05:00
P4T12ICK 3e1b445765 Update detect_traffic_mirroring.yml 2020-11-12 11:58:04 +01:00
P4T12ICK 077de7769a Update detect_ipv6_network_infrastructure_threats.yml 2020-11-12 11:50:34 +01:00
Jose Enrique Hernandez 3e9513f4b8 Merge branch 'develop' into develop 2020-11-11 22:04:16 -05:00
Jose Enrique Hernandez 4acc8c3efb Merge branch 'develop' into mbjerkeland-develop 2020-11-11 22:03:44 -05:00
Bhavin Patel 5a590068f8 Merge pull request #882 from splunk/issue_#850 
issue_#850
 2020-11-11 12:54:34 -08:00
P4T12ICK d8e090d496 wip 2020-11-11 16:27:14 +01:00
Mikael Bjerkeland 4a29a71009 Dashes in references 2020-11-10 09:30:50 +01:00
P4T12ICK 1f3f1ae408 Merge branch 'develop' into mbjerkeland-develop 2020-11-10 09:24:55 +01:00
divious1 77af8684bc ryuk story and detections 2020-11-06 12:32:48 -05:00
Shannon Davis 1ab400a565 mods 2020-11-06 10:57:35 +11:00
Mikael Bjerkeland 7d0ddb28e9 Reduce FP 2020-11-05 12:40:19 +01:00
bpatel 8b93ff2097 minor 2020-11-04 13:32:06 -08:00
bpatel 27cb068218 updating spl to use All_Traffic.transport=tcp 2020-11-04 12:46:20 -08:00
Mikael Bjerkeland f9fa28dd18 Doc fix 2020-10-28 23:26:56 +01:00
Mikael Bjerkeland 17502e4722 Added various Network Infrastructure detections based on the MITRE Network Matrix 2020-10-28 23:14:06 +01:00