Commit Graph

16027 Commits

Author SHA1 Message Date
pyth0n1c 349551a98f Branch was auto-updated. 2022-06-21 15:47:21 -07:00
Bhavin Patel 7f38d4e78e Merge pull request #2252 from splunk/fixing_incorrect_story
fixing incorrect story pointer
2022-06-21 15:47:05 -07:00
pyth0n1c d671db062d Branch was auto-updated. 2022-06-21 15:28:41 -07:00
pyth0n1c 6cbace8412 Branch was auto-updated. 2022-06-21 15:28:38 -07:00
Jose Enrique Hernandez e470e2b6d8 Merge pull request #2257 from splunk/2253_fix
Rundll32 LockWorkstation search
2022-06-21 18:28:11 -04:00
patel-bhavin aa228e84be hunting 2022-06-21 14:55:19 -07:00
patel-bhavin d5d0868005 merge from develop 2022-06-21 14:53:25 -07:00
pyth0n1c 88f26544e2 Branch was auto-updated. 2022-06-21 14:46:26 -07:00
pyth0n1c c42c8acce2 Branch was auto-updated. 2022-06-21 14:46:22 -07:00
Bhavin Patel 6fc1b95369 Merge pull request #2258 from splunk/properly_detected_failed_attack_data_downloads
Properly detected failed attack data downloads
2022-06-21 14:46:03 -07:00
pyth0n1c 26f6bbfc92 Adding the URL_TOOLBOX app to
the application baseline.
2022-06-21 14:29:11 -07:00
pyth0n1c 6554d4a42b Moved ssa___ test file from the tests/network directory to the tests/experimental/endpoint directory because that's where the corresponding detection resides. 2022-06-21 13:59:50 -07:00
pyth0n1c 5762b4e373 Updated the app baseline as well as
the python code for generating the
default config. Also updated the
print behavior for when files are
downloaded.
App baseline is now current, and
files are hosted on S3, as
of 06/21/2022.
2022-06-21 13:53:26 -07:00
Lou Stella 575cd80e01 Updated observable & asset_type 2022-06-21 15:17:25 -05:00
pyth0n1c 6b06ab718b Fixing a link to a dataset that has been moved. 2022-06-21 13:13:50 -07:00
Lou Stella e681b766c2 Fixing field name 2022-06-21 14:59:48 -05:00
pyth0n1c c98d7b6855 Fix an issue where trying to download a file from attack_data that returns a 404 fails too late in the process, giving a nondescriptive error message and resulting in a bad filename being included in the detection failure manifest. 2022-06-21 12:52:32 -07:00
Lou Stella 85f4f107a3 Changed to anomaly 2022-06-21 14:45:43 -05:00
patel-bhavin a92a6f2546 map filter 2022-06-21 12:24:04 -07:00
patel-bhavin 8ca9ac7b57 adding urltoolbox and spl updates 2022-06-21 12:05:52 -07:00
patel-bhavin 2ea683be87 Merge branch 'develop' into inspired_2194 2022-06-21 11:04:27 -07:00
d1vious 53bc5dcda4 fixing incorrect story pointer 2022-06-20 16:33:35 -04:00
Jose Enrique Hernandez fc06b83cf6 Merge pull request #2250 from splunk/fix_cve_tag
CVE Tag Fix
2022-06-16 14:35:07 -04:00
Lou Stella dbf1c52864 Update splunk_process_injection_forwarder_bundle_downloads.yml 2022-06-16 13:08:02 -05:00
Jose Enrique Hernandez 81180f53ca Merge pull request #2248 from splunk/exp_unauth_assets_fix
Experimental Network search update
2022-06-15 15:21:11 -04:00
Lou Stella 863259df93 Updated per #2235 2022-06-15 13:49:56 -05:00
Xiao Lin 0cf536acd5 fix path error 2022-06-14 20:13:42 -07:00
Jose Enrique Hernandez 51e6298c9f Merge pull request #2247 from splunk/research_update
update site
2022-06-14 11:56:42 -04:00
Lou Stella 72c71bbfcb update site 2022-06-14 10:38:43 -05:00
Lou Stella 6807c3cc4f Merge pull request #2246 from splunk/story_fix
Update splunk_process_injection_forwarder_bundle_downloads.yml
2022-06-14 10:18:07 -05:00
Lou Stella b392ca9aa5 Update splunk_process_injection_forwarder_bundle_downloads.yml
Spelling fix
2022-06-14 09:58:09 -05:00
research bot 22de947482 updating docs and package bits [ci skip] 2022-06-14 14:10:53 +00:00
Jose Enrique Hernandez 7dba5cef06 Merge pull request #2245 from splunk/fixing_appinspect_tscollect
fixing tscollect error
v3.43.0
2022-06-14 09:35:08 -04:00
d1vious 9c3eb1640a fixing tscollect error 2022-06-14 09:17:24 -04:00
Jose Enrique Hernandez 6d6e7339c4 Merge pull request #2213 from splunk/vj9r
Vj9r
2022-06-14 08:41:57 -04:00
Jose Enrique Hernandez 0288c10f70 Update splunk_identified_ssl_tls_certificates.yml 2022-06-14 08:18:53 -04:00
Jose Enrique Hernandez 3513587707 Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml 2022-06-14 08:17:53 -04:00
Jose Enrique Hernandez 937a7317cf Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml 2022-06-14 08:17:25 -04:00
Jose Enrique Hernandez 4b95ac0339 Update splunk_digital_certificates_infrastructure_version.yml 2022-06-14 08:15:36 -04:00
Jose Enrique Hernandez b8d7a20e73 fixing dm to drop from davids suggestion 2022-06-14 08:10:11 -04:00
Jose Enrique Hernandez 9e28d378cc updated from karims suggestion 2022-06-14 08:09:20 -04:00
Jose Enrique Hernandez cbbe436585 updated given davids suggestions 2022-06-14 08:07:14 -04:00
Jose Enrique Hernandez 786b26d858 fixing base on feedback from david 2022-06-14 08:04:57 -04:00
Jose Enrique Hernandez d91d88ecb7 updated base on karims comments 2022-06-14 07:58:41 -04:00
Xiao Lin c701be5699 for review comment 2022-06-14 00:30:38 -07:00
Xiao Lin a247079b45 update and typos 2022-06-13 17:15:45 -07:00
Xiao Lin 000e75040d fix typos 2022-06-13 16:39:09 -07:00
Rod Soto 7b2dc90afb fixedsearchdescription 2022-06-13 15:51:53 -07:00
Rod Soto 99cbc03fd5 fixedhosts 2022-06-13 15:47:06 -07:00
Xiao Lin f94759101b Merge branch 'vj9r' of github.com:splunk/security_content into vj9r 2022-06-13 15:33:29 -07:00