 P4T12ICK
|
8df36c2e0c
|
Merge branch 'develop' into TR-320-suspicious-rights-delegation
|
2021-01-07 15:28:30 +01:00 |
|
|
bpatel
|
88feb34271
|
incorrect deprecation
|
2021-01-05 14:53:52 -08:00 |
|
|
Bhavin Patel
|
b8d898704e
|
Merge branch 'develop' into deprecated_aws_searches
|
2021-01-04 11:52:09 -08:00 |
|
|
Bhavin Patel
|
14d6e6d01a
|
Merge branch 'develop' into sunburst_detections
|
2020-12-17 16:14:28 -08:00 |
|
|
Bhavin Patel
|
596c326de0
|
Merge branch 'develop' into deprecated_aws_searches
|
2020-12-17 16:10:21 -08:00 |
|
|
bpatel
|
224478807d
|
test push
|
2020-12-17 12:34:52 -08:00 |
|
|
root
|
c6edd5dd27
|
Added detection testing service results inO365 Excessive Authentication Failures Alert
|
2020-12-17 11:17:16 +00:00 |
|
|
root
|
366a7b8213
|
Added detection testing service results inO365 PST export alert
|
2020-12-17 10:56:41 +00:00 |
|
|
P4T12ICK
|
2c62bc7ede
|
bug fix
|
2020-12-17 11:40:00 +01:00 |
|
|
P4T12ICK
|
504a11d8be
|
bug fix
|
2020-12-17 11:22:22 +01:00 |
|
|
root
|
5598782ca0
|
Added detection testing service results inO365 Disable MFA
|
2020-12-17 10:21:24 +00:00 |
|
|
P4T12ICK
|
48ada30a34
|
o365 disable mfa
|
2020-12-17 11:02:20 +01:00 |
|
|
P4T12ICK
|
d8fa8188e5
|
Merge branch 'rodo365' into TR-320-suspicious-rights-delegation
|
2020-12-17 10:49:59 +01:00 |
|
|
bpatel
|
ee9d4131bc
|
filter
|
2020-12-16 18:26:07 -08:00 |
|
|
bpatel
|
fdb698cdb3
|
new detection for login failure
|
2020-12-16 16:26:25 -08:00 |
|
|
Rod Soto
|
018d1bd766
|
addedmacros
|
2020-12-16 14:32:10 -05:00 |
|
|
Rod Soto
|
6c47a0d56e
|
excessiveauthfailures
|
2020-12-16 14:28:48 -05:00 |
|
|
Rod Soto
|
8b1b7bd5a6
|
fixandnewdisablemfa
|
2020-12-16 14:16:20 -05:00 |
|
|
Rod Soto
|
d9f0ee461a
|
o365rodetections
|
2020-12-16 13:49:57 -05:00 |
|
|
root
|
4c49c04851
|
Added detection testing service results inO365 Suspicious Admin Email Forwarding
|
2020-12-16 14:50:54 +00:00 |
|
|
root
|
a2bc2aa5df
|
Added detection testing service results inO365 Suspicious User Email Forwarding
|
2020-12-16 14:25:18 +00:00 |
|
|
P4T12ICK
|
b2173f3875
|
new detections
|
2020-12-16 14:10:32 +01:00 |
|
|
root
|
70e12c231b
|
Added detection testing service results inO365 Suspicious Rights Delegation
|
2020-12-15 15:57:03 +00:00 |
|
|
P4T12ICK
|
c1ad08d364
|
changes
|
2020-12-15 16:27:18 +01:00 |
|
|
P4T12ICK
|
8b563122bb
|
changes
|
2020-12-15 13:59:33 +01:00 |
|
|
P4T12ICK
|
58627b44f9
|
changes
|
2020-12-15 12:27:16 +01:00 |
|
|
P4T12ICK
|
6de3aaafe4
|
detection O365 suspicious-rights-delegation
|
2020-12-15 12:24:30 +01:00 |
|
|
bpatel
|
0aeae24adf
|
deprecated AWS seaches that have been translated
|
2020-12-14 13:09:24 -08:00 |
|
|
P4T12ICK
|
abe8c635c1
|
updates
|
2020-12-09 18:12:30 +01:00 |
|
|
P4T12ICK
|
b36ca748cd
|
updated url links for dataset
|
2020-12-03 15:03:50 +01:00 |
|
|
root
|
0805b7e9d3
|
Added detection testing service results inDetect AWS Console Login by User from New City
|
2020-12-01 20:54:35 +00:00 |
|
|
Detection Testing Service
|
6324f3898d
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 20:38:46 +00:00 |
|
|
root
|
69a1c028bf
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen Country
|
2020-12-01 20:38:45 +00:00 |
|
|
root
|
8c1ae77ab3
|
Added detection testing service results inDetect AWS Console Login by New User
|
2020-12-01 20:35:03 +00:00 |
|
|
Detection Testing Service
|
cc1b0aa291
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 20:17:57 +00:00 |
|
|
root
|
b56cce1dc0
|
Added detection testing service results inCloud Instance Modified By Previously Unseen User
|
2020-12-01 20:17:56 +00:00 |
|
|
root
|
2a1946a5a3
|
Added detection testing service results inAbnormally High Number Of Cloud Security Group API Calls
|
2020-12-01 20:07:25 +00:00 |
|
|
root
|
241a01119c
|
Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls
|
2020-12-01 19:45:03 +00:00 |
|
|
root
|
b47fddab62
|
Added detection testing service results inDetect AWS Console Login by User from New Region
|
2020-12-01 00:51:03 +00:00 |
|
|
Detection Testing Service
|
800df744a3
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:50 +00:00 |
|
|
root
|
d5df1b0c1e
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen IP Address
|
2020-12-01 00:11:49 +00:00 |
|
|
Detection Testing Service
|
624ef5b790
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:37 +00:00 |
|
|
root
|
56a1852463
|
Added detection testing service results inDetect AWS Console Login by User from New Country
|
2020-12-01 00:11:36 +00:00 |
|
|
Detection Testing Service
|
22ae8ac9c0
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:28 +00:00 |
|
|
root
|
96ddfdc0f6
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen Region
|
2020-12-01 00:11:26 +00:00 |
|
|
Detection Testing Service
|
6421ec1b47
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:02:23 +00:00 |
|
|
root
|
740a7e2f89
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen City
|
2020-12-01 00:02:22 +00:00 |
|
|
root
|
36fd1141e4
|
Added detection testing service results inCloud Compute Instance Created With Previously Unseen Instance Type
|
2020-12-01 00:02:09 +00:00 |
|
|
Detection Testing Service
|
216281f568
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:39:11 +00:00 |
|
|
root
|
e174abe001
|
Added detection testing service results inCloud Compute Instance Created With Previously Unseen Image
|
2020-11-30 23:39:10 +00:00 |
|