Commit Graph

41 Commits

Author SHA1 Message Date
patel-bhavin 207e76e774 minor fix 2022-11-11 11:51:20 -08:00
mvelazco b8d9c4c6fd moving detection to experimental 2022-11-04 13:48:00 -04:00
d1vious 3c62e835df removing 2022-07-19 12:59:03 -04:00
pyth0n1c 578e6bb088 Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links. 2022-05-02 17:12:50 -07:00
P4T12ICK 5dd13ea167 fix broken detections 2022-03-14 15:51:05 +01:00
P4T12ICK e6c8254ede Added automaticc generation of finding report 2022-03-14 12:12:48 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
patel-bhavin fe5db9e78e adding lookup files 2022-01-26 15:34:10 -08:00
P4T12ICK 96ba6f8e73 fixed more detections 2022-01-18 13:51:37 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
P4T12ICK f48f8f5b71 fixed bugs in detections after running new validate 2022-01-17 17:45:12 +01:00
P4T12ICK 9ed2766f6c improved content_changer 2022-01-17 09:44:04 +01:00
research bot c1410c0e95 updating docs and package bits [ci skip] 2021-11-10 16:16:30 +00:00
patel-bhavin 0dfff97830 yml errors 2021-11-02 18:11:32 -07:00
patel-bhavin 0a9c396e08 search update 2021-11-02 18:03:21 -07:00
patel-bhavin ad5afdc3dc calendar search 2021-11-01 16:14:12 -07:00
patel-bhavin 0539ea52f2 macro update 2021-11-01 13:30:50 -07:00
Rod Soto e9d1a85251 prforbhavingsuiteexperimentalsearches 2021-10-24 12:08:39 -07:00
tccontre 9d466adc76 CARS_UPDATE_MITRE_ID_B8
CARS_UPDATE_MITRE_ID_B8
2021-10-15 10:22:43 +02:00
P4T12ICK 1fca39be77 updated generate 2021-07-20 16:41:53 +02:00
P4T12ICK cfae82505c add analytic types to detections 2021-07-19 17:41:22 +02:00
divious1 022c5be43e Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming"
This reverts commit 45c138d518.
2021-06-25 15:03:55 -04:00
divious1 f262360d0a updated CloudTrails to AWS CloudTrails 2021-06-25 14:50:50 -04:00
divious1 45c138d518 updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming 2021-06-25 14:44:02 -04:00
research bot 4b27622a3f updating docs and package bits [ci skip] 2021-03-12 17:32:09 +00:00
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 6c950af9d4 Merge branch 'develop' into TR-380_reuse_type 2021-02-04 21:24:00 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
divious1 055c9ec258 updated type to use batch or streaming instead of product name 2021-02-02 12:54:27 -05:00
P4T12ICK 4383db4e83 update detection 2021-01-11 13:31:02 +01:00
P4T12ICK d0bea9eecf detection testing cloud 2021-01-08 15:51:45 +01:00
Ignacio Bermudez Corrales afe64bdb3e detection/experimental folder for untested detections 2020-11-06 10:37:11 -08:00