admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,454 Commits 697 Branches 195 Tags
orga
Commit Graph

517 Commits

Author SHA1 Message Date
Ignacio Bermudez Corrales 57dddc7310 updated detection for long command line 2020-10-08 19:30:17 -07:00
Jose Enrique Hernandez 5a60f56c57 Update kubernetes_aws_detect_sensitive_object_access.yml 2020-10-08 17:39:58 -04:00
bpatel b80016e3df update date key 2020-10-06 13:47:24 -07:00
Ignacio Bermudez Corrales 95ff817a80 formatting 2020-10-06 11:21:36 -07:00
Ignacio Bermudez Corrales 4810237537 merging Jud changes 2020-10-06 11:05:10 -07:00
Ignacio Bermudez Corrales 0e64512127 changes for detections to work 2020-10-06 11:01:47 -07:00
Ignacio Bermudez Corrales ab9df3e5e5 Jud changes 2020-10-06 11:00:59 -07:00
Ignacio Bermudez Corrales 9a59760cbb adding missing change lost in the transition 2020-10-06 10:09:04 -07:00
divious1 48f5c8836f added subtext 2020-09-25 16:57:49 -04:00
divious1 cc031f1b9e fixing a mistake 2020-09-25 16:39:29 -04:00
divious1 dac98c19b9 skeleton 2020-09-24 18:05:10 -04:00
divious1 660135b77a adding 4742 detection 2020-09-18 18:39:50 -04:00
divious1 39f5939bc9 zero logon skeleton 2020-09-18 17:16:25 -04:00
Bhavin Patel ec3e8a9dbd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:49:56 -07:00
Bhavin Patel 02ac11cfd8 Merge branch 'develop' into gcpoauth 2020-09-14 13:24:54 -07:00
bpatel 52739bc3ab yml updates 2020-09-14 13:12:51 -07:00
Bhavin Patel 796617a83c Merge branch 'develop' into fixedawsstsassumerole 2020-09-10 13:26:07 -07:00
Bhavin Patel ef3fee0a81 Update aws_detect_sts_assume_role_abuse.yml 
using cloudtrail as input macro
 2020-09-10 13:25:39 -07:00
divious1 9bfc5f9f4e updated spec docs and also added one more example 2020-09-10 12:17:21 -04:00
bpatel 637ec487df risk validation 2020-09-03 11:30:09 -07:00
Rod Soto 5690c95392 fixedreferencesgcpoauthdetection 2020-09-01 20:44:10 -04:00
Rod Soto 66404dbcbe firstshotgcpaoutabusedetection 2020-09-01 20:42:54 -04:00
Rod Soto 5e9f3a7ae0 Merge branch 'develop' into fixedawsstsassumerole 2020-08-27 21:08:51 -04:00
Rod Soto 48100ebb96 fixedaws_dete_role_creation 2020-08-27 14:12:34 -04:00
Rod Soto d04d0e9d69 fixedassumedroleaws 2020-08-26 16:56:54 -04:00
Jose Enrique Hernandez a66740b506 Merge branch 'develop' into PR_609 2020-08-25 12:13:24 -04:00
Bhavin Patel 00653ac542 Merge pull request #623 from splunk/fixawsk8sfailuresrcuser 
newfixawsdetectpkey
 2020-08-24 12:47:10 -07:00
Jose Enrique Hernandez 5eb6c522c6 Merge branch 'develop' into PR_609 2020-08-24 12:50:54 -04:00
Jose Enrique Hernandez 6443822362 Merge branch 'develop' into fixawsk8sfailuresrcuser 2020-08-24 12:20:40 -04:00
Jose Enrique Hernandez 21c1dcb759 Merge branch 'develop' into PR_609 2020-08-24 01:04:48 -04:00
Jose Enrique Hernandez 1c1ce46004 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 01:04:40 -04:00
Jose Enrique Hernandez a26414f16d Merge branch 'develop' into TR-122 2020-08-24 00:39:35 -04:00
Jose Enrique Hernandez 76d05aee12 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 00:36:00 -04:00
Jose Enrique Hernandez 686ea3c55d Merge branch 'develop' into PR_609 2020-08-24 00:35:15 -04:00
Rod Soto c0c6c4db97 newfixawsdetectpkey 2020-08-20 16:39:25 -04:00
Rod Soto 8b532f7358 fixedsrcuserfromtable 2020-08-20 12:02:44 -04:00
Bhavin Patel fdfcc03651 Merge branch 'develop' into mitrests 2020-08-19 19:20:53 -07:00
Rod Soto 94707e9cfd addedmitretoawssearches 2020-08-19 21:16:13 -04:00
bpatel 00f51defe8 shannons PR bug fixes 2020-08-19 14:37:01 -07:00
Mikael Bjerkeland 584ef0aff9 Updates 2020-08-14 22:59:11 +02:00
Mikael Bjerkeland 289cec6fde Now validating? 2020-08-12 23:32:48 +02:00
Mikael Bjerkeland ff4cf63e3e Fixed up my mistakes. Should hopefully validate now 2020-08-12 23:26:57 +02:00
Mikael Bjerkeland cc4d23469c . 2020-08-12 23:26:26 +02:00
Mikael Bjerkeland d820c2d914 Retrying 2020-08-12 23:21:43 +02:00
Mikael Bjerkeland c12f8b2a6e Added ARP Poisoning Detection for Cisco Devices 2020-08-12 10:55:10 +02:00
Mikael Bjerkeland dd10e6e3cb Adding macros 2020-08-12 09:17:32 +02:00
Mikael Bjerkeland 9eb49b723c Description update 2020-08-11 23:33:57 +02:00
Mikael Bjerkeland a3e9363271 Added Layer 2 Network Detection to detect Rogue DHCP Servers 2020-08-11 23:29:42 +02:00
bpatel 2f04c868e4 new detections for security hub alerts 2020-08-06 14:44:50 -07:00
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00