Commit Graph

624 Commits

Author SHA1 Message Date
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin 6126674761 updated all yml, remove kc,nist,cis, updaated with 3.64.0 new content 2023-04-04 17:15:38 -05:00
patel-bhavin efab71809b making experimental to test and adding manual tag 2023-04-03 16:03:11 -05:00
patel-bhavin f535458728 detection testing fixes 2023-04-03 15:58:04 -05:00
P4T12ICK 153b2d44ae merged with develop 2023-03-16 09:44:35 +01:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
srv-rr-gh-researchbt 54ec5991d7 Branch was auto-updated. 2023-02-06 16:31:13 -08:00
srv-rr-gh-researchbt b3e8ddc0bf Branch was auto-updated. 2023-02-06 16:12:24 -08:00
srv-rr-gh-researchbt bcf9eae237 Branch was auto-updated. 2023-02-06 16:12:19 -08:00
mvelazco 192b93a110 adding required field 2023-02-03 10:53:26 -05:00
pyth0n1c 60ea283f53 Moving failing tests to experimental 2023-02-02 16:32:24 -08:00
mvelazco bc7fa3078f multiple fixes 2023-02-02 18:38:06 -05:00
P4T12ICK 327ab6b4c7 fixed detections 2023-02-02 15:24:43 +01:00
patel-bhavin 7c88bf93c9 validation error 2023-02-01 17:19:30 -08:00
patel-bhavin 5dd64e3fd1 aws concurrent detections 2023-02-01 17:01:28 -08:00
patel-bhavin 697dcfed0b fix yaml 2023-01-31 17:02:34 -08:00
patel-bhavin ae07e87dc1 spl update 2023-01-31 16:42:19 -08:00
patel-bhavin f6c78edc5d new mfa added aws 2023-01-31 11:34:28 -08:00
patel-bhavin 71273d8fe1 fix the errors 2023-01-30 15:13:56 -08:00
mvelazco 8dd93e3149 adding new detection 2023-01-30 17:33:25 -05:00
patel-bhavin b629b14dca spl and yaml updates 2023-01-30 13:38:41 -08:00
patel-bhavin 14edea4ca0 new aws detection 2023-01-30 13:10:13 -08:00
patel-bhavin 03598ec031 new detectiono aws 2023-01-27 16:58:28 -08:00
patel-bhavin 6d2aea64cc minor fix 2023-01-26 17:14:53 -08:00
patel-bhavin 2ff71df1b0 new detection and update 1 2023-01-26 17:11:29 -08:00
mvelazco 5306030d74 fixes 2023-01-26 16:35:43 -05:00
mvelazco 0c79ce7d96 adding new detection 2023-01-24 18:50:51 -05:00
mvelazco faedd6645a adding new detection for azure ad session hijacking 2023-01-24 14:02:06 -05:00
mvelazco a7f6ddbfeb adding new azure ad brute force detection 2023-01-23 20:46:00 -05:00
mvelazco 5f16506697 adding new azure ad brute force detection 2023-01-23 17:31:48 -05:00
P4T12ICK a23b2470fe Converted detections v3 to v4 2023-01-20 11:12:47 +01:00
patel-bhavin 090e5c4bee yml changes 2023-01-19 16:38:20 -08:00
patel-bhavin 4b24cc6d53 tagging aws relevant detection draft 2023-01-19 16:01:20 -08:00
patel-bhavin 05aca8a58e new aws detection 2023-01-19 15:51:14 -08:00
srv-rr-gh-researchbt 1035205f8d Branch was auto-updated. 2023-01-10 11:46:08 -08:00
pyth0n1c 547c95cd20 Merge updates from security_content_4_phase_2 to fix detections and contentctl tooling. 2023-01-09 14:28:10 -08:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
patel-bhavin 2beb040928 add risk index macro 2022-12-21 14:12:18 -08:00
mvelazco eebf59bc8b updating detection 2022-11-16 13:15:58 -05:00
patel-bhavin 631daa4ff6 spl update 2022-11-11 13:50:35 -08:00
srv-rr-gh-researchbt c9624ff0bd Branch was auto-updated. 2022-11-11 12:29:52 -08:00
patel-bhavin 767e323fc1 spl update 2022-11-11 11:45:47 -08:00
srv-rr-gh-researchbt a031ca7bcc Branch was auto-updated. 2022-11-08 13:29:16 -08:00
patel-bhavin c87d793e48 remove datamodel 2022-11-08 12:56:46 -08:00
mvelazco b8d9c4c6fd moving detection to experimental 2022-11-04 13:48:00 -04:00