201 Commits

Author	SHA1	Message	Date
research-bot	f5cc9deade	stock values for deprecation	2025-01-17 15:31:56 -08:00
pyth0n1c	4cf943ffa4	Final round of fixes to fields with ... extra newlines with version and date bumps.	2024-09-24 21:46:38 -07:00
pyth0n1c	26ef46dbbc	A baseline referenced a detection ... incorrectly. Remove the reference to that detection.	2024-08-12 11:58:27 -07:00
Bhavin Patel	f004aaab16	rm baseline	2024-07-17 10:30:15 -07:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
Bhavin Patel	b0eaed8f75	ESCU Release v4.31.0	2024-05-08 16:05:40 +00:00
Bhavin Patel	72e29c764f	ESCU Release Branch - v4.30.0	2024-04-17 20:44:56 +00:00
Bhavin Patel	7fda817c23	Release 4.19.0	2024-01-10 17:21:34 +00:00
Bhavin Patel	566b6b54ea	update baseline time and text	2023-09-08 10:13:28 -07:00
patel-bhavin	30ad4d6eab	only kvstore conversion	2023-05-22 17:35:13 -07:00
patel-bhavin	a7338650fd	fix scheduling	2023-04-18 16:38:53 -07:00
P4T12ICK	d115bfd4e0	converted ssa detections to ocsf	2023-02-28 12:00:16 +01:00
P4T12ICK	b352a1418e	add new deployment functionality	2023-01-04 13:37:44 +01:00
d1vious	9c3eb1640a	fixing tscollect error	2022-06-14 09:17:24 -04:00
Jose Enrique Hernandez	d91d88ecb7	updated base on karims comments	2022-06-14 07:58:41 -04:00
Xiao Lin	c701be5699	for review comment	2022-06-14 00:30:38 -07:00
Xiao Lin	a247079b45	update and typos	2022-06-13 17:15:45 -07:00
Xiao Lin	000e75040d	fix typos	2022-06-13 16:39:09 -07:00
Xiao Lin	9a266a78ee	update per review comments	2022-06-13 15:33:12 -07:00
Xiao Lin	5a34e6c633	add risky command abuse ML detection	2022-06-13 10:53:09 -07:00
Xiao Lin	3369d15d72	rm wrong commit	2022-06-13 10:40:47 -07:00
Xiao Lin	6efcbd4b93	add risky command ML detection	2022-06-13 09:50:58 -07:00
P4T12ICK	5dd13ea167	fix broken detections	2022-03-14 15:51:05 +01:00
P4T12ICK	e6c8254ede	Added automaticc generation of finding report	2022-03-14 12:12:48 +01:00
P4T12ICK	6f0ee68913	Refactored security content	2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez	d78bb53baa	Revert "Refactored security content"	2022-03-04 15:13:04 -05:00
P4T12ICK	4fd8604b9a	removed SAAWS and automated_detection_testing flag	2022-01-27 09:50:45 +01:00
P4T12ICK	a95e0e5aa6	fixed detections metadata	2022-01-20 13:42:50 +01:00
P4T12ICK	f48f8f5b71	fixed bugs in detections after running new validate	2022-01-17 17:45:12 +01:00
P4T12ICK	98e5af3713	put baselines and investigations into its own folder	2022-01-17 10:56:04 +01:00
P4T12ICK	9568fc7807	migrated baselines into detections folder	2021-07-20 13:19:22 +02:00
bpatel	889d6b7292	add product tag for mustang beta 4 baseline	2021-03-12 16:07:02 -08:00
mhaag-spl	51823d81d3	Sunburst malware renamed NOBELIUM Group ... Renaming Sunburst Malware to NOBELIUM Group	2021-03-05 10:30:34 -07:00
divious1	d6f8c42d23	processing baselines now with datamodels	2021-02-11 11:25:21 -05:00
divious1	eef01502f3	renamed stories	2021-02-08 10:18:57 -05:00
divious1	8a772c721f	adding product tags and type to baselines	2021-02-04 10:59:44 -05:00
bpatel	24128d4982	updating lookup name to avoid duplicates and deprecattion	2021-01-13 15:34:24 -08:00
bpatel	7fa41599d5	adding sunburst as tags for relavant detections	2020-12-14 20:29:04 -08:00
P4T12ICK	5fee68375f	fix_bugs	2020-12-11 10:51:02 +01:00
bpatel	25c7f33866	app inspect failures fixes	2020-12-08 14:56:39 -08:00
bpatel	a7110f1fec	change type is EC2	2020-11-16 17:25:45 -08:00
bpatel	2bed51a09e	spl updates	2020-11-16 15:35:30 -08:00
bpatel	52d456fa33	detection update and scheduling	2020-11-12 13:51:55 -08:00
bpatel	1ace7057bd	adding >=	2020-10-14 15:09:39 -07:00
bpatel	dbd9314b1c	spl updates	2020-10-14 14:43:16 -07:00
bpatel	c84795fd80	security api calls mltk	2020-10-13 17:08:25 -07:00
bpatel	d1cb61f159	api calls search mltk	2020-10-13 16:20:47 -07:00
Bhavin Patel	6a07f70a07	Merge branch 'mustang_beta' into cloud_crypto_spl_bugs	2020-10-12 12:47:31 -07:00
bpatel	dac1086b04	spl bugs - fully tested	2020-10-12 12:37:05 -07:00