admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,454 Commits 697 Branches 195 Tags
orga
Commit Graph

108 Commits

Author SHA1 Message Date
jzsplunk 3c49885ad6 Merge branch 'develop' into TR-104-missing-input-filters 2020-10-02 08:01:15 -07:00
divious1 b78035c976 adding macros 2020-09-18 17:36:46 -04:00
jzsplunk c33be23f10 [TR-104] add missing input filters. 2020-09-15 22:59:19 -07:00
Jose Enrique Hernandez 1c1ce46004 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 01:04:40 -04:00
Mikael Bjerkeland 897d25a7f8 Present times in ISO8601 instead of US style 2020-08-12 23:45:53 +02:00
Mikael Bjerkeland 289cec6fde Now validating? 2020-08-12 23:32:48 +02:00
Mikael Bjerkeland ff4cf63e3e Fixed up my mistakes. Should hopefully validate now 2020-08-12 23:26:57 +02:00
Mikael Bjerkeland d820c2d914 Retrying 2020-08-12 23:21:43 +02:00
Mikael Bjerkeland c12f8b2a6e Added ARP Poisoning Detection for Cisco Devices 2020-08-12 10:55:10 +02:00
Mikael Bjerkeland dd10e6e3cb Adding macros 2020-08-12 09:17:32 +02:00
bpatel 2f04c868e4 new detections for security hub alerts 2020-08-06 14:44:50 -07:00
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00
bpatel 58f47148b9 ymls and updates 2020-08-04 14:04:38 -07:00
bpatel 63f266629e porting ymls into a newe PR 2020-08-04 12:55:12 -07:00
divious1 322697fdd0 more renames base on upper case 2020-06-29 17:39:38 -04:00
David Dorsey 8438bf71e8 Fixed the first time previously seen windows service search to work 
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update

Made the default deployment template be -70m@m to -10m@m

Added a new deployment template for hourly baseline caches
 2020-06-25 00:09:30 -05:00
Bhavin Patel 3c8c201add Merge branch 'develop' into CRL-1766-auth-dm-updates 2020-06-16 10:46:20 -07:00
divious1 56ccf11ea0 this should be false 2020-06-09 17:58:39 -04:00
bpatel 37199617b3 updating macro filters 2020-06-08 17:12:15 -07:00
bpatel 35c4b110bc Merge branch 'develop' into azuretest 2020-06-04 11:06:04 -07:00
bpatel 9f2710bfde updating files to make sure validate passes 2020-06-03 13:10:30 -07:00
bpatel 72d3ab875e converted to spec3 and other updates 2020-05-28 13:31:49 -07:00
Rod Soto 50f3fdbbee kubectlcalls 2020-05-26 23:42:26 -04:00
Rod Soto 46803f5ea0 svacconpodnasp 2020-05-26 23:16:07 -04:00
Rod Soto 1bbc7d1728 fixedanemsaddedservaccount 2020-05-26 22:40:16 -04:00
Rod Soto 8e44ca15ca RBACauth 2020-05-26 22:18:16 -04:00
Rod Soto 6086fa8e2b azk8srolesto 2020-05-21 18:41:32 -04:00
Rod Soto 2e7d50b6d0 newstoryconfsecazk8s 2020-05-20 19:09:29 -04:00
Rod Soto 0748085eca azpodscandetect 2020-05-20 15:38:53 -04:00
Rod Soto 4ac5dc4dff k8sScan 2020-05-19 17:55:28 -04:00
Patrick Bareiss cda505d8fa new generate script 2020-05-06 17:42:38 +02:00
Patrick Bareiss cc464c87db updated content 2020-05-05 12:58:56 +02:00
Patrick Bareiss 909806896e validate script 2020-04-30 16:52:38 +02:00
Patrick Bareiss 442a575e1d WIP validate script 2020-04-30 15:51:16 +02:00
Bhavin Patel 916e54d0ff Merge pull request #429 from splunk/crl-1749ssh 
CRL-1749 Cloud Stories
 2020-04-17 10:36:24 -07:00
Bhavin Patel dde27b94d0 Merge pull request #430 from splunk/first_okta_story 
new files for okta story
 2020-04-02 15:20:54 -07:00
bpatel 500a21e8cc detection, spec and macroupdates 2020-04-02 13:39:29 -07:00
Rod Soto 542f78b716 fixedssh 2020-03-28 09:25:01 -04:00
bpatel 3d5891bb1e adding macro and updating spl 2020-03-23 11:39:40 -07:00
Bhavin Patel 45ffbde816 Merge branch 'develop' into CRL-1746 2020-03-16 13:23:43 -07:00
rvaldez617 9363ded8d0 Merge pull request #385 from splunk/CRL-1733 
CRL-1733: updating instructions for better clarification
 2020-03-16 13:00:23 -06:00
Bhavin Patel bd439c0a85 Merge pull request #402 from splunk/CRL-1744_macro_fixes 
fixes for a couple broken macros
 2020-03-16 10:18:29 -07:00
divious1 1e3299d3f0 updating macro name too 2020-03-11 20:36:49 -04:00
bpatel 7ee8310efb macro ymls and detection update 2020-03-09 17:46:47 -07:00
Rico Valdez 573e8e3aa0 fixes for a couple broken macros 2020-03-04 14:31:37 -07:00
bpatel 5199a94b31 updating instructions for better clarification 2020-03-02 13:18:54 -08:00
Jose Enrique Hernandez 637fdf3c11 Merge pull request #372 from splunk/container_implantation 
Container implantation
 2020-02-27 15:31:47 -08:00
Rod Soto 187a00cd71 addedmacros 2020-02-27 17:09:50 -05:00
Patrick Bareiss ef1b56f9ae new credentia dumping detection 2020-02-21 09:03:15 +01:00
Bhavin Patel 6b2c9e4172 Merge pull request #327 from splunk/supicious_email_updates 
updating boiler plate, detection not working out of box against T1193…
 2020-02-07 10:35:35 -08:00