537c13d063
addedwords
2022-08-30 11:56:41 -07:00
b6e2ff6278
adding updated url
2022-08-16 15:01:17 -04:00
b7e1a5fe94
adding new detections
2022-08-16 11:30:24 -04:00
4cdbe51506
model to detect risky commands
2022-07-14 16:37:47 +02:00
28c799e829
model to detect risky commands
2022-06-29 23:45:27 +02:00
cb150c258e
minor edits for yml validation and test file name update
2022-06-23 15:21:30 -07:00
8d568ae416
model to detect risky commands
2022-06-23 22:43:22 +02:00
26d6664e7c
model to detect risky commands
2022-06-22 17:41:34 +02:00
c35c786b09
model to detect risky commands
2022-06-22 17:39:17 +02:00
f067ded253
model to detect risky commands
2022-06-22 16:39:33 +02:00
96652af2bf
model to detect risky commands
2022-06-22 16:39:33 +02:00
67f35bba10
model to detect risky commands
2022-06-22 16:39:33 +02:00
dbf1c52864
Update splunk_process_injection_forwarder_bundle_downloads.yml
2022-06-16 13:08:02 -05:00
b392ca9aa5
Update splunk_process_injection_forwarder_bundle_downloads.yml
...
Spelling fix
2022-06-14 09:58:09 -05:00
9c3eb1640a
fixing tscollect error
2022-06-14 09:17:24 -04:00
3513587707
Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml
2022-06-14 08:17:53 -04:00
937a7317cf
Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml
2022-06-14 08:17:25 -04:00
4b95ac0339
Update splunk_digital_certificates_infrastructure_version.yml
2022-06-14 08:15:36 -04:00
b8d7a20e73
fixing dm to drop from davids suggestion
2022-06-14 08:10:11 -04:00
9e28d378cc
updated from karims suggestion
2022-06-14 08:09:20 -04:00
cbbe436585
updated given davids suggestions
2022-06-14 08:07:14 -04:00
786b26d858
fixing base on feedback from david
2022-06-14 08:04:57 -04:00
c701be5699
for review comment
2022-06-14 00:30:38 -07:00
a247079b45
update and typos
2022-06-13 17:15:45 -07:00
000e75040d
fix typos
2022-06-13 16:39:09 -07:00
7b2dc90afb
fixedsearchdescription
2022-06-13 15:51:53 -07:00
99cbc03fd5
fixedhosts
2022-06-13 15:47:06 -07:00
f94759101b
Merge branch 'vj9r' of github.com:splunk/security_content into vj9r
2022-06-13 15:33:29 -07:00
9a266a78ee
update per review comments
2022-06-13 15:33:12 -07:00
be1c572724
Fixed field
2022-06-13 16:50:50 -05:00
a0967fe429
Workbook how_to_implement & references
2022-06-13 16:49:49 -05:00
3afeaa8a3b
Update splunk_command_and_scripting_interpreter_delete_usage.yml
2022-06-13 15:39:43 -06:00
e109bc48cc
Merge branch 'vj9r' of https://github.com/splunk/security_content into vj9r
2022-06-13 16:19:08 -05:00
5414d530fe
Update splunk_command_and_scripting_interpreter_risky_commands.yml
2022-06-13 15:18:21 -06:00
e30ad6bd31
Updated How To Implement
2022-06-13 16:17:07 -05:00
61a6c11e2d
Update splunk_command_and_scripting_interpreter_delete_usage.yml
2022-06-13 15:11:44 -06:00
42f1e731f7
Updated description
2022-06-13 15:47:56 -05:00
cc852767f7
Updated date
2022-06-13 14:04:04 -05:00
5a34e6c633
add risky command abuse ML detection
2022-06-13 10:53:09 -07:00
d5c65edc6a
Branch was auto-updated.
2022-06-13 10:41:17 -07:00
3369d15d72
rm wrong commit
2022-06-13 10:40:47 -07:00
d5fa5ddc0b
Branch was auto-updated.
2022-06-13 09:51:47 -07:00
6efcbd4b93
add risky command ML detection
2022-06-13 09:50:58 -07:00
fe2713e077
Fixed a detection which was
...
using the wrong macro
2022-06-08 12:40:52 -07:00
47cd84d377
Wrong sourcetype declared in one
...
of the test files, causing it to fail.
Fixed missing backticks on some
macros.
2022-06-08 11:46:42 -07:00
e8abbd916b
Added missing _internal custom_indexes
...
to relevant test files. Removed the |
character from searches that use
index and sourcetype macros at the
beginning of the search.
2022-06-08 11:08:21 -07:00
3fb342d4c4
Fixed improperly named macro.
...
Renamed the macro in the tests
that use that macro. Added the
optional field, "custom_index"
to the test files which MUST
upload data into the _audit
index. This branch doesn't
support custom_index yet,
but those changes will be merged
soon from another branch.
2022-06-08 10:31:53 -07:00
61e827c41e
added - to CVE
2022-06-01 17:38:28 -07:00
9b6cd6a022
added tags
2022-06-01 17:31:53 -07:00
ae4dc00392
tags added
2022-06-01 17:21:54 -07:00
Rod Soto