157 Commits

Author	SHA1	Message	Date
bpatel	1ace7057bd	adding >=	2020-10-14 15:09:39 -07:00
bpatel	dbd9314b1c	spl updates	2020-10-14 14:43:16 -07:00
bpatel	c84795fd80	security api calls mltk	2020-10-13 17:08:25 -07:00
bpatel	d1cb61f159	api calls search mltk	2020-10-13 16:20:47 -07:00
Bhavin Patel	6a07f70a07	Merge branch 'mustang_beta' into cloud_crypto_spl_bugs	2020-10-12 12:47:31 -07:00
bpatel	dac1086b04	spl bugs - fully tested	2020-10-12 12:37:05 -07:00
bpatel	abac1c8b62	convert to kvstore and spl updates	2020-10-12 12:14:50 -07:00
bpatel	97ac9c5f62	spl updates and kvstore file	2020-10-12 11:49:37 -07:00
bpatel	d237a2d984	lookup errors and consistency	2020-10-12 11:26:57 -07:00
bpatel	aac5f2b4bc	unseen image	2020-10-12 10:29:19 -07:00
bpatel	689be427f9	redoing provision story	2020-10-09 15:49:46 -07:00
bpatel	e9ea5ee90b	remove extra pipe	2020-10-09 12:18:54 -07:00
bpatel	1da0f22a6a	baseline re write	2020-10-09 09:59:07 -07:00
bpatel	786c68090c	spl logic update	2020-10-08 15:45:07 -07:00
bpatel	44bc49dc13	spl updates	2020-10-08 11:15:35 -07:00
bpatel	5c4d027d79	spl updates	2020-10-07 18:02:52 -07:00
bpatel	42268eaf3e	typo	2020-10-05 11:08:38 -07:00
bpatel	979a288fcb	adding dist=expon back again	2020-09-30 14:57:55 -07:00
bpatel	13db9854d2	story name errors	2020-09-30 13:46:00 -07:00
bpatel	b9f18705e7	spl errors and typos	2020-09-30 13:24:29 -07:00
bpatel	b70138ed69	creating collections and search updates	2020-09-30 11:25:37 -07:00
bpatel	1028f2c6d7	updating search aand fileames for consistenccy	2020-09-30 11:05:39 -07:00
bpatel	d95a7452f5	removing dist param from baselines	2020-09-30 10:33:14 -07:00
Bhavin Patel	9f3ff7c5e4	Merge branch 'develop' into TR-41_aws_ec2_mods	2020-09-29 16:58:02 -07:00
divious1	cc031f1b9e	fixing a mistake	2020-09-25 16:39:29 -04:00
Rico Valdez	3d029956cc	text fixes	2020-09-23 17:05:15 -06:00
David Dorsey	5fbc68936b	baseline update search fix with macros	2020-09-23 16:58:26 -05:00
David Dorsey	2d25205146	Fixes	2020-09-23 11:35:56 -05:00
David Dorsey	58848e7326	Fixes for cryptomining demo	2020-09-23 00:01:02 -05:00
David Dorsey	17eff649e7	Fixes	2020-09-21 23:23:57 -05:00
David Dorsey	f411bfa91b	File no longer needed	2020-09-21 22:43:06 -05:00
David Dorsey	7201713de3	Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods	2020-09-15 23:59:18 -05:00
David Dorsey	7a99d2c4dd	Fixing story mappings	2020-09-15 23:58:59 -05:00
jzsplunk	7da91f2409	[TR-41] fixing last of merge conflicts.	2020-09-15 20:38:05 -07:00
jzsplunk	0a6bafbe36	Merge branch 'TR-41_aws_ec2_mods' of github.com-jzsplunk:splunk/security-content into TR-41_aws_ec2_mods	2020-09-15 20:33:32 -07:00
David Dorsey	7f2f53d0a8	validate fixes	2020-09-15 20:19:45 -07:00
Rico Valdez	182c4116c9	tweaks and updates	2020-09-15 20:19:45 -07:00
Rico Valdez	248c3d412c	latest updates to create in new vendor_region	2020-09-15 20:19:45 -07:00
David Dorsey	adeeab0ee8	Updated baseline searches to have correct deployment. Which was also created	2020-09-15 20:19:45 -07:00
David Dorsey	483d492405	Translated detect_spike_in_aws_api_activity.yml to use Change DM	2020-09-15 20:19:45 -07:00
David Dorsey	b5914eacd9	bug fixes	2020-09-15 20:19:45 -07:00
David Dorsey	8ffbe56392	Updated MLTK searches based on Peter's work	2020-09-15 20:19:45 -07:00
bpatel	976971526d	updates to ymls to make sure validate passes	2020-09-15 20:17:49 -07:00
David Dorsey	9f8418ee85	fixed validate issues	2020-09-15 20:17:49 -07:00
David Dorsey	4af9407d8f	New analytic story for suspicious cloud user activities.	2020-09-15 20:17:49 -07:00
Rico Valdez	a65c01dedf	updates for mustang	2020-09-15 20:17:49 -07:00
Rico Valdez	c341614465	new files for unblocked searches	2020-09-15 20:17:49 -07:00
Rico Valdez	03245f6372	changes for mustang	2020-09-15 20:17:49 -07:00
David Dorsey	4bd7eae3c8	Removed unused file	2020-09-15 20:15:27 -07:00
David Dorsey	181f810dbb	Updated cloud instances destroyed to change data model	2020-09-15 20:15:23 -07:00