P4T12ICK
|
b36ca748cd
|
updated url links for dataset
|
2020-12-03 15:03:50 +01:00 |
|
root
|
0805b7e9d3
|
Added detection testing service results inDetect AWS Console Login by User from New City
|
2020-12-01 20:54:35 +00:00 |
|
Detection Testing Service
|
6324f3898d
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 20:38:46 +00:00 |
|
root
|
69a1c028bf
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen Country
|
2020-12-01 20:38:45 +00:00 |
|
root
|
8c1ae77ab3
|
Added detection testing service results inDetect AWS Console Login by New User
|
2020-12-01 20:35:03 +00:00 |
|
Detection Testing Service
|
cc1b0aa291
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 20:17:57 +00:00 |
|
root
|
b56cce1dc0
|
Added detection testing service results inCloud Instance Modified By Previously Unseen User
|
2020-12-01 20:17:56 +00:00 |
|
root
|
2a1946a5a3
|
Added detection testing service results inAbnormally High Number Of Cloud Security Group API Calls
|
2020-12-01 20:07:25 +00:00 |
|
root
|
241a01119c
|
Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls
|
2020-12-01 19:45:03 +00:00 |
|
root
|
b47fddab62
|
Added detection testing service results inDetect AWS Console Login by User from New Region
|
2020-12-01 00:51:03 +00:00 |
|
Detection Testing Service
|
800df744a3
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:50 +00:00 |
|
root
|
d5df1b0c1e
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen IP Address
|
2020-12-01 00:11:49 +00:00 |
|
Detection Testing Service
|
624ef5b790
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:37 +00:00 |
|
root
|
56a1852463
|
Added detection testing service results inDetect AWS Console Login by User from New Country
|
2020-12-01 00:11:36 +00:00 |
|
Detection Testing Service
|
22ae8ac9c0
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:28 +00:00 |
|
root
|
96ddfdc0f6
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen Region
|
2020-12-01 00:11:26 +00:00 |
|
Detection Testing Service
|
6421ec1b47
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:02:23 +00:00 |
|
root
|
740a7e2f89
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen City
|
2020-12-01 00:02:22 +00:00 |
|
root
|
36fd1141e4
|
Added detection testing service results inCloud Compute Instance Created With Previously Unseen Instance Type
|
2020-12-01 00:02:09 +00:00 |
|
Detection Testing Service
|
216281f568
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:39:11 +00:00 |
|
root
|
e174abe001
|
Added detection testing service results inCloud Compute Instance Created With Previously Unseen Image
|
2020-11-30 23:39:10 +00:00 |
|
Detection Testing Service
|
17ab3cf97b
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:29:25 +00:00 |
|
root
|
8c50ef2beb
|
Added detection testing service results inCloud Compute Instance Created By Previously Unseen User
|
2020-11-30 23:29:24 +00:00 |
|
Detection Testing Service
|
f57e539ad0
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:29:05 +00:00 |
|
root
|
a0dc08a2f7
|
Added detection testing service results inCloud API Calls From Previously Unseen User Roles
|
2020-11-30 23:29:04 +00:00 |
|
Bhavin Patel
|
f39ea4b631
|
Merge branch 'develop' into mustang_beta_test_files
|
2020-11-30 15:16:18 -08:00 |
|
root
|
0d2d8c573d
|
Added detection testing service results inAWS Cross Account Activity From Previously Unseen Account
|
2020-11-30 23:05:14 +00:00 |
|
root
|
9655f9245a
|
Added detection testing service results inCloud Compute Instance Created In Previously Unused Region
|
2020-11-30 22:19:34 +00:00 |
|
bpatel
|
0e410b3dc2
|
updated sourcetype
|
2020-11-30 12:30:47 -08:00 |
|
bpatel
|
e0c267779f
|
updating risk object
|
2020-11-18 15:23:13 -08:00 |
|
bpatel
|
98bcdf47fc
|
datamodel fix
|
2020-11-16 20:15:36 -08:00 |
|
bpatel
|
8e5a9e731b
|
spl update
|
2020-11-16 18:46:43 -08:00 |
|
bpatel
|
a7110f1fec
|
change type is EC2
|
2020-11-16 17:25:45 -08:00 |
|
bpatel
|
2bed51a09e
|
spl updates
|
2020-11-16 15:35:30 -08:00 |
|
bpatel
|
52d456fa33
|
detection update and scheduling
|
2020-11-12 13:51:55 -08:00 |
|
bpatel
|
3650ca926d
|
Merge branch 'ransomwares3' of https://github.com/splunk/security-content into ransomwares3
|
2020-11-11 16:45:57 -08:00 |
|
bpatel
|
46143f262d
|
updating text
|
2020-11-11 16:45:41 -08:00 |
|
Bhavin Patel
|
e185ca89ba
|
Merge branch 'develop' into ransomwares3
|
2020-11-11 16:36:34 -08:00 |
|
bpatel
|
8112beb887
|
asset type update
|
2020-11-11 16:34:55 -08:00 |
|
bpatel
|
9685be48a3
|
final detection
|
2020-11-11 16:33:20 -08:00 |
|
Bhavin Patel
|
3aa06e82b6
|
Merge branch 'develop' into mustang_beta
|
2020-11-10 09:59:18 -08:00 |
|
bpatel
|
f786d10f41
|
fixes
|
2020-11-06 13:50:51 -08:00 |
|
bpatel
|
4d87173809
|
detection updates
|
2020-11-05 16:04:50 -08:00 |
|
jzsplunk
|
1bfa0dfc6b
|
Merge branch 'develop' into ransomwares3
|
2020-11-04 17:44:34 -08:00 |
|
Jose Enrique Hernandez
|
eb268874bd
|
Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml
|
2020-10-29 12:09:16 -04:00 |
|
bpatel
|
cad99d8dfb
|
add risk scores
|
2020-10-27 16:19:50 -07:00 |
|
Rod Soto
|
625fe1c7bc
|
fixnamedetection
|
2020-10-27 18:08:53 -04:00 |
|
Rod Soto
|
be32b7bf01
|
detectuserencryptings3
|
2020-10-27 18:01:40 -04:00 |
|
Rod Soto
|
a599d1ac21
|
modifiedmfasearch
|
2020-10-27 17:46:34 -04:00 |
|
Rod Soto
|
69e5aee23c
|
detecionKMSkeyswMFA
|
2020-10-27 17:43:58 -04:00 |
|