Commit Graph

57 Commits

Author SHA1 Message Date
P4T12ICK b36ca748cd updated url links for dataset 2020-12-03 15:03:50 +01:00
root 0805b7e9d3 Added detection testing service results inDetect AWS Console Login by User from New City 2020-12-01 20:54:35 +00:00
Detection Testing Service 6324f3898d Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 20:38:46 +00:00
root 69a1c028bf Added detection testing service results inCloud Provisioning Activity From Previously Unseen Country 2020-12-01 20:38:45 +00:00
root 8c1ae77ab3 Added detection testing service results inDetect AWS Console Login by New User 2020-12-01 20:35:03 +00:00
Detection Testing Service cc1b0aa291 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 20:17:57 +00:00
root b56cce1dc0 Added detection testing service results inCloud Instance Modified By Previously Unseen User 2020-12-01 20:17:56 +00:00
root 2a1946a5a3 Added detection testing service results inAbnormally High Number Of Cloud Security Group API Calls 2020-12-01 20:07:25 +00:00
root 241a01119c Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls 2020-12-01 19:45:03 +00:00
root b47fddab62 Added detection testing service results inDetect AWS Console Login by User from New Region 2020-12-01 00:51:03 +00:00
Detection Testing Service 800df744a3 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:11:50 +00:00
root d5df1b0c1e Added detection testing service results inCloud Provisioning Activity From Previously Unseen IP Address 2020-12-01 00:11:49 +00:00
Detection Testing Service 624ef5b790 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:11:37 +00:00
root 56a1852463 Added detection testing service results inDetect AWS Console Login by User from New Country 2020-12-01 00:11:36 +00:00
Detection Testing Service 22ae8ac9c0 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:11:28 +00:00
root 96ddfdc0f6 Added detection testing service results inCloud Provisioning Activity From Previously Unseen Region 2020-12-01 00:11:26 +00:00
Detection Testing Service 6421ec1b47 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:02:23 +00:00
root 740a7e2f89 Added detection testing service results inCloud Provisioning Activity From Previously Unseen City 2020-12-01 00:02:22 +00:00
root 36fd1141e4 Added detection testing service results inCloud Compute Instance Created With Previously Unseen Instance Type 2020-12-01 00:02:09 +00:00
Detection Testing Service 216281f568 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 23:39:11 +00:00
root e174abe001 Added detection testing service results inCloud Compute Instance Created With Previously Unseen Image 2020-11-30 23:39:10 +00:00
Detection Testing Service 17ab3cf97b Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 23:29:25 +00:00
root 8c50ef2beb Added detection testing service results inCloud Compute Instance Created By Previously Unseen User 2020-11-30 23:29:24 +00:00
Detection Testing Service f57e539ad0 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 23:29:05 +00:00
root a0dc08a2f7 Added detection testing service results inCloud API Calls From Previously Unseen User Roles 2020-11-30 23:29:04 +00:00
Bhavin Patel f39ea4b631 Merge branch 'develop' into mustang_beta_test_files 2020-11-30 15:16:18 -08:00
root 0d2d8c573d Added detection testing service results inAWS Cross Account Activity From Previously Unseen Account 2020-11-30 23:05:14 +00:00
root 9655f9245a Added detection testing service results inCloud Compute Instance Created In Previously Unused Region 2020-11-30 22:19:34 +00:00
bpatel 0e410b3dc2 updated sourcetype 2020-11-30 12:30:47 -08:00
bpatel e0c267779f updating risk object 2020-11-18 15:23:13 -08:00
bpatel 98bcdf47fc datamodel fix 2020-11-16 20:15:36 -08:00
bpatel 8e5a9e731b spl update 2020-11-16 18:46:43 -08:00
bpatel a7110f1fec change type is EC2 2020-11-16 17:25:45 -08:00
bpatel 2bed51a09e spl updates 2020-11-16 15:35:30 -08:00
bpatel 52d456fa33 detection update and scheduling 2020-11-12 13:51:55 -08:00
bpatel 3650ca926d Merge branch 'ransomwares3' of https://github.com/splunk/security-content into ransomwares3 2020-11-11 16:45:57 -08:00
bpatel 46143f262d updating text 2020-11-11 16:45:41 -08:00
Bhavin Patel e185ca89ba Merge branch 'develop' into ransomwares3 2020-11-11 16:36:34 -08:00
bpatel 8112beb887 asset type update 2020-11-11 16:34:55 -08:00
bpatel 9685be48a3 final detection 2020-11-11 16:33:20 -08:00
Bhavin Patel 3aa06e82b6 Merge branch 'develop' into mustang_beta 2020-11-10 09:59:18 -08:00
bpatel f786d10f41 fixes 2020-11-06 13:50:51 -08:00
bpatel 4d87173809 detection updates 2020-11-05 16:04:50 -08:00
jzsplunk 1bfa0dfc6b Merge branch 'develop' into ransomwares3 2020-11-04 17:44:34 -08:00
Jose Enrique Hernandez eb268874bd Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-10-29 12:09:16 -04:00
bpatel cad99d8dfb add risk scores 2020-10-27 16:19:50 -07:00
Rod Soto 625fe1c7bc fixnamedetection 2020-10-27 18:08:53 -04:00
Rod Soto be32b7bf01 detectuserencryptings3 2020-10-27 18:01:40 -04:00
Rod Soto a599d1ac21 modifiedmfasearch 2020-10-27 17:46:34 -04:00
Rod Soto 69e5aee23c detecionKMSkeyswMFA 2020-10-27 17:43:58 -04:00