patel-bhavin
|
207e76e774
|
minor fix
|
2022-11-11 11:51:20 -08:00 |
|
mvelazco
|
b8d9c4c6fd
|
moving detection to experimental
|
2022-11-04 13:48:00 -04:00 |
|
d1vious
|
3c62e835df
|
removing
|
2022-07-19 12:59:03 -04:00 |
|
pyth0n1c
|
578e6bb088
|
Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.
|
2022-05-02 17:12:50 -07:00 |
|
P4T12ICK
|
5dd13ea167
|
fix broken detections
|
2022-03-14 15:51:05 +01:00 |
|
P4T12ICK
|
e6c8254ede
|
Added automaticc generation of finding report
|
2022-03-14 12:12:48 +01:00 |
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
P4T12ICK
|
5fbff3630e
|
merged with develop
|
2022-02-07 14:55:34 +01:00 |
|
P4T12ICK
|
4fd8604b9a
|
removed SAAWS and automated_detection_testing flag
|
2022-01-27 09:50:45 +01:00 |
|
patel-bhavin
|
fe5db9e78e
|
adding lookup files
|
2022-01-26 15:34:10 -08:00 |
|
P4T12ICK
|
96ba6f8e73
|
fixed more detections
|
2022-01-18 13:51:37 +01:00 |
|
P4T12ICK
|
84092434a2
|
fixed more detections
|
2022-01-18 12:53:54 +01:00 |
|
P4T12ICK
|
f48f8f5b71
|
fixed bugs in detections after running new validate
|
2022-01-17 17:45:12 +01:00 |
|
P4T12ICK
|
9ed2766f6c
|
improved content_changer
|
2022-01-17 09:44:04 +01:00 |
|
research bot
|
c1410c0e95
|
updating docs and package bits [ci skip]
|
2021-11-10 16:16:30 +00:00 |
|
patel-bhavin
|
0dfff97830
|
yml errors
|
2021-11-02 18:11:32 -07:00 |
|
patel-bhavin
|
0a9c396e08
|
search update
|
2021-11-02 18:03:21 -07:00 |
|
patel-bhavin
|
ad5afdc3dc
|
calendar search
|
2021-11-01 16:14:12 -07:00 |
|
patel-bhavin
|
0539ea52f2
|
macro update
|
2021-11-01 13:30:50 -07:00 |
|
Rod Soto
|
e9d1a85251
|
prforbhavingsuiteexperimentalsearches
|
2021-10-24 12:08:39 -07:00 |
|
tccontre
|
9d466adc76
|
CARS_UPDATE_MITRE_ID_B8
CARS_UPDATE_MITRE_ID_B8
|
2021-10-15 10:22:43 +02:00 |
|
P4T12ICK
|
1fca39be77
|
updated generate
|
2021-07-20 16:41:53 +02:00 |
|
P4T12ICK
|
cfae82505c
|
add analytic types to detections
|
2021-07-19 17:41:22 +02:00 |
|
divious1
|
022c5be43e
|
Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming"
This reverts commit 45c138d518.
|
2021-06-25 15:03:55 -04:00 |
|
divious1
|
f262360d0a
|
updated CloudTrails to AWS CloudTrails
|
2021-06-25 14:50:50 -04:00 |
|
divious1
|
45c138d518
|
updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming
|
2021-06-25 14:44:02 -04:00 |
|
research bot
|
4b27622a3f
|
updating docs and package bits [ci skip]
|
2021-03-12 17:32:09 +00:00 |
|
P4T12ICK
|
edaf9598f2
|
fixed merging issues
|
2021-03-11 19:03:54 +01:00 |
|
mhaag-spl
|
b15aaa55df
|
Moving non-passed to experimental and deprecating some
|
2021-03-10 13:27:00 -07:00 |
|
P4T12ICK
|
7c134dbb5d
|
WIP
|
2021-03-10 14:44:44 +01:00 |
|
divious1
|
b58843ca9f
|
added datamodels as an array
|
2021-02-10 22:35:58 -05:00 |
|
divious1
|
d0c9c92857
|
added datamodel field and made all objects also pretty via new tool called pretty_yaml.py
|
2021-02-10 22:11:24 -05:00 |
|
divious1
|
1ec15cf044
|
renamed on all detections
|
2021-02-08 10:18:16 -05:00 |
|
divious1
|
b68e05685e
|
modified type for detections
|
2021-02-05 14:35:49 -05:00 |
|
divious1
|
6c950af9d4
|
Merge branch 'develop' into TR-380_reuse_type
|
2021-02-04 21:24:00 -05:00 |
|
divious1
|
e14fade976
|
adding product tag to all detections
|
2021-02-03 21:42:46 -05:00 |
|
divious1
|
055c9ec258
|
updated type to use batch or streaming instead of product name
|
2021-02-02 12:54:27 -05:00 |
|
P4T12ICK
|
4383db4e83
|
update detection
|
2021-01-11 13:31:02 +01:00 |
|
P4T12ICK
|
d0bea9eecf
|
detection testing cloud
|
2021-01-08 15:51:45 +01:00 |
|
Ignacio Bermudez Corrales
|
afe64bdb3e
|
detection/experimental folder for untested detections
|
2020-11-06 10:37:11 -08:00 |
|