admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
28,119 Commits 697 Branches 195 Tags
push_security
Commit Graph

36 Commits

Author SHA1 Message Date
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
P4T12ICK b352a1418e add new deployment functionality 2023-01-04 13:37:44 +01:00
P4T12ICK 0b97fd423e fixed bug TR-2687 2022-12-01 14:34:23 +01:00
patel-bhavin 8d8998d243 adding nes to detection object 2022-04-12 11:03:52 -07:00
patel-bhavin df65357cf5 destt in str 2022-04-05 13:48:37 -07:00
patel-bhavin ac3bed4a4b str for nes fields 2022-04-05 13:32:31 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK a630b8a4b5 before removing SAAWS 2022-01-27 09:39:14 +01:00
P4T12ICK 48fb45327b test generate 2022-01-26 15:11:46 +01:00
P4T12ICK 9ed2766f6c improved content_changer 2022-01-17 09:44:04 +01:00
patel-bhavin 824bddc979 make deployments consistent 2021-06-07 10:35:08 -07:00
divious1 3450f5a6b0 fixing bug with deployment where escu package has notables off by default 2021-04-12 18:00:59 -04:00
divious1 c0ece8d9c0 added deployments for pretty printing 2021-02-11 11:30:54 -05:00
bpatel c8fc855ccd rename mustang to ssa4aws 2021-01-21 14:31:23 -08:00
bpatel 369dab3488 minor 2021-01-20 17:32:03 -08:00
bpatel 0b7f46489a adding deployment file for Mustang 2021-01-20 16:40:33 -08:00
divious1 494684ac35 added notables again 2021-01-19 13:08:54 -05:00
P4T12ICK d72747ccd4 new generate feature 2021-01-14 12:33:36 +01:00
David Dorsey 5f48894035 removed the create notable from all searches 2020-09-23 14:38:15 -05:00
David Dorsey 3efae7ccef cron_schedule fixed 2020-09-10 20:52:24 -05:00
David Dorsey 97dd7e357b Small updates 2020-09-10 20:49:00 -05:00
David Dorsey adf19afe6a Updated baseline searches to have correct deployment. Which was also created 2020-09-09 01:35:38 -05:00
bpatel 10a5b76af7 merge with develop 2020-09-04 13:40:15 -07:00
David Dorsey 7de781c8f0 Manifest cleanup 2020-08-20 13:15:14 -05:00
David Dorsey b4ab45f299 Updated baseline searches for cloud provisioning activities. 
Broke them out into an initial search and update search
  Updated them to use kv store
Updated Cloud Provisioning from previously unseen ip address to
  relfect changes in baseline searches.
Added new fields to make the detection more actionable
Added the lookup manifest and a macro manifest
 2020-08-19 10:28:05 -05:00
Mikael Bjerkeland 4c7cb2488c Polish 2020-08-14 23:08:02 +02:00
Mikael Bjerkeland 584ef0aff9 Updates 2020-08-14 22:59:11 +02:00
David Dorsey 07ce28f433 Updated baseline deployments 2020-06-25 13:49:48 -05:00
David Dorsey 301bf51a8a Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:34:38 -05:00
Patrick Bareiss 85f13dd926 new deployment configurations 2020-06-25 09:53:44 +02:00
David Dorsey 8438bf71e8 Fixed the first time previously seen windows service search to work 
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update

Made the default deployment template be -70m@m to -10m@m

Added a new deployment template for hourly baseline caches
 2020-06-25 00:09:30 -05:00
Patrick Bareiss e9c7ae28a5 small bug bix 2020-05-25 18:00:46 +02:00
Patrick Bareiss 3c7b2dfc6d bug in generate 2020-05-11 09:31:35 +02:00
Patrick Bareiss cda505d8fa new generate script 2020-05-06 17:42:38 +02:00
Patrick Bareiss e610e87ee0 WIP 2020-04-30 10:14:38 +02:00