Commit Graph

1109 Commits

Author SHA1 Message Date
github-actions[bot] 3398b5c927 Branch was auto-updated. 2021-01-07 15:56:50 +00:00
P4T12ICK 8df36c2e0c Merge branch 'develop' into TR-320-suspicious-rights-delegation 2021-01-07 15:28:30 +01:00
github-actions[bot] 8c66036d3a Branch was auto-updated. 2021-01-06 23:21:35 +00:00
Jose Enrique Hernandez fe13a41290 Merge branch 'develop' into supernova_webshell 2021-01-06 18:09:13 -05:00
divious1 f5d522c697 fixing ref 2021-01-06 18:07:40 -05:00
divious1 b83e76c589 adding solarflare detection 2021-01-06 17:59:59 -05:00
github-actions[bot] 37ddfef90f Branch was auto-updated. 2021-01-06 21:37:08 +00:00
github-actions[bot] 162d729fff Branch was auto-updated. 2021-01-06 20:21:46 +00:00
Bhavin Patel 4a07378d9a Merge branch 'develop' into sunburst_typo 2021-01-05 16:52:19 -08:00
Bhavin Patel ed08bac99a Merge branch 'develop' into sunburst_typo 2021-01-05 15:43:40 -08:00
Jose Enrique Hernandez c30e80774a Merge branch 'develop' into outbound_smb_traffic 2021-01-05 18:04:28 -05:00
bpatel 88feb34271 incorrect deprecation 2021-01-05 14:53:52 -08:00
divious1 1e64964226 adding changes from suggestions on issue#1053 2021-01-05 14:45:35 -05:00
divious1 f5aeb32827 should be dest_mac as reported 2021-01-05 11:12:58 -05:00
divious1 8f20920bb0 minor typo on how to implement 2021-01-05 09:38:59 -05:00
Bhavin Patel b8d898704e Merge branch 'develop' into deprecated_aws_searches 2021-01-04 11:52:09 -08:00
Ignacio 5d6e7595a1 Merge branch 'develop' into misko_typo 2020-12-22 10:38:46 -08:00
divious1 1dee0313dd moved sunburst detection 2020-12-17 19:59:16 -05:00
Bhavin Patel 14d6e6d01a Merge branch 'develop' into sunburst_detections 2020-12-17 16:14:28 -08:00
Bhavin Patel 596c326de0 Merge branch 'develop' into deprecated_aws_searches 2020-12-17 16:10:21 -08:00
divious1 974437c22b fixed validate mistakes 2020-12-17 18:13:25 -05:00
bpatel 224478807d test push 2020-12-17 12:34:52 -08:00
divious1 b8326d8b38 Merge branch 'sunburst_detections' of github.com:splunk/security-content into sunburst_detections 2020-12-17 13:53:29 -05:00
divious1 ca1ae13328 renaming dragonfly 2020-12-17 13:53:20 -05:00
Jose Enrique Hernandez 56d4471b78 Merge branch 'develop' into sunburst_detections 2020-12-17 13:01:38 -05:00
divious1 58eade42b6 adding new detection and test for sunburst 2020-12-17 12:20:26 -05:00
root c6edd5dd27 Added detection testing service results inO365 Excessive Authentication Failures Alert 2020-12-17 11:17:16 +00:00
root 366a7b8213 Added detection testing service results inO365 PST export alert 2020-12-17 10:56:41 +00:00
P4T12ICK 2c62bc7ede bug fix 2020-12-17 11:40:00 +01:00
P4T12ICK 504a11d8be bug fix 2020-12-17 11:22:22 +01:00
root 5598782ca0 Added detection testing service results inO365 Disable MFA 2020-12-17 10:21:24 +00:00
P4T12ICK 48ada30a34 o365 disable mfa 2020-12-17 11:02:20 +01:00
P4T12ICK d8fa8188e5 Merge branch 'rodo365' into TR-320-suspicious-rights-delegation 2020-12-17 10:49:59 +01:00
bpatel ee9d4131bc filter 2020-12-16 18:26:07 -08:00
bpatel fdb698cdb3 new detection for login failure 2020-12-16 16:26:25 -08:00
Rod Soto 018d1bd766 addedmacros 2020-12-16 14:32:10 -05:00
Rod Soto 6c47a0d56e excessiveauthfailures 2020-12-16 14:28:48 -05:00
Rod Soto 8b1b7bd5a6 fixandnewdisablemfa 2020-12-16 14:16:20 -05:00
Rod Soto d9f0ee461a o365rodetections 2020-12-16 13:49:57 -05:00
P4T12ICK 07aa33af22 Merge branch 'develop' into detection_testing_part_two 2020-12-16 15:59:31 +01:00
P4T12ICK 81162132d7 wrong detections in deprecated 2020-12-16 15:59:08 +01:00
root 4c49c04851 Added detection testing service results inO365 Suspicious Admin Email Forwarding 2020-12-16 14:50:54 +00:00
root a2bc2aa5df Added detection testing service results inO365 Suspicious User Email Forwarding 2020-12-16 14:25:18 +00:00
P4T12ICK b2173f3875 new detections 2020-12-16 14:10:32 +01:00
root 70e12c231b Added detection testing service results inO365 Suspicious Rights Delegation 2020-12-15 15:57:03 +00:00
P4T12ICK c1ad08d364 changes 2020-12-15 16:27:18 +01:00
P4T12ICK 8b563122bb changes 2020-12-15 13:59:33 +01:00
P4T12ICK 58627b44f9 changes 2020-12-15 12:27:16 +01:00
P4T12ICK 6de3aaafe4 detection O365 suspicious-rights-delegation 2020-12-15 12:24:30 +01:00
bpatel 77dd26a2f0 sc tasks for sunburst 2020-12-14 20:48:11 -08:00