73f04bcc9c
test
2022-06-30 16:28:31 -07:00
dbf1c52864
Update splunk_process_injection_forwarder_bundle_downloads.yml
2022-06-16 13:08:02 -05:00
b392ca9aa5
Update splunk_process_injection_forwarder_bundle_downloads.yml
...
Spelling fix
2022-06-14 09:58:09 -05:00
9c3eb1640a
fixing tscollect error
2022-06-14 09:17:24 -04:00
3513587707
Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml
2022-06-14 08:17:53 -04:00
937a7317cf
Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml
2022-06-14 08:17:25 -04:00
4b95ac0339
Update splunk_digital_certificates_infrastructure_version.yml
2022-06-14 08:15:36 -04:00
b8d7a20e73
fixing dm to drop from davids suggestion
2022-06-14 08:10:11 -04:00
9e28d378cc
updated from karims suggestion
2022-06-14 08:09:20 -04:00
cbbe436585
updated given davids suggestions
2022-06-14 08:07:14 -04:00
786b26d858
fixing base on feedback from david
2022-06-14 08:04:57 -04:00
c701be5699
for review comment
2022-06-14 00:30:38 -07:00
a247079b45
update and typos
2022-06-13 17:15:45 -07:00
000e75040d
fix typos
2022-06-13 16:39:09 -07:00
7b2dc90afb
fixedsearchdescription
2022-06-13 15:51:53 -07:00
99cbc03fd5
fixedhosts
2022-06-13 15:47:06 -07:00
f94759101b
Merge branch 'vj9r' of github.com:splunk/security_content into vj9r
2022-06-13 15:33:29 -07:00
9a266a78ee
update per review comments
2022-06-13 15:33:12 -07:00
be1c572724
Fixed field
2022-06-13 16:50:50 -05:00
a0967fe429
Workbook how_to_implement & references
2022-06-13 16:49:49 -05:00
3afeaa8a3b
Update splunk_command_and_scripting_interpreter_delete_usage.yml
2022-06-13 15:39:43 -06:00
e109bc48cc
Merge branch 'vj9r' of https://github.com/splunk/security_content into vj9r
2022-06-13 16:19:08 -05:00
5414d530fe
Update splunk_command_and_scripting_interpreter_risky_commands.yml
2022-06-13 15:18:21 -06:00
e30ad6bd31
Updated How To Implement
2022-06-13 16:17:07 -05:00
61a6c11e2d
Update splunk_command_and_scripting_interpreter_delete_usage.yml
2022-06-13 15:11:44 -06:00
42f1e731f7
Updated description
2022-06-13 15:47:56 -05:00
cc852767f7
Updated date
2022-06-13 14:04:04 -05:00
5a34e6c633
add risky command abuse ML detection
2022-06-13 10:53:09 -07:00
d5c65edc6a
Branch was auto-updated.
2022-06-13 10:41:17 -07:00
3369d15d72
rm wrong commit
2022-06-13 10:40:47 -07:00
d5fa5ddc0b
Branch was auto-updated.
2022-06-13 09:51:47 -07:00
6efcbd4b93
add risky command ML detection
2022-06-13 09:50:58 -07:00
fe2713e077
Fixed a detection which was
...
using the wrong macro
2022-06-08 12:40:52 -07:00
47cd84d377
Wrong sourcetype declared in one
...
of the test files, causing it to fail.
Fixed missing backticks on some
macros.
2022-06-08 11:46:42 -07:00
e8abbd916b
Added missing _internal custom_indexes
...
to relevant test files. Removed the |
character from searches that use
index and sourcetype macros at the
beginning of the search.
2022-06-08 11:08:21 -07:00
3fb342d4c4
Fixed improperly named macro.
...
Renamed the macro in the tests
that use that macro. Added the
optional field, "custom_index"
to the test files which MUST
upload data into the _audit
index. This branch doesn't
support custom_index yet,
but those changes will be merged
soon from another branch.
2022-06-08 10:31:53 -07:00
61e827c41e
added - to CVE
2022-06-01 17:38:28 -07:00
9b6cd6a022
added tags
2022-06-01 17:31:53 -07:00
ae4dc00392
tags added
2022-06-01 17:21:54 -07:00
d5a1d0010e
added cis tags
2022-06-01 17:19:38 -07:00
97d51b71bf
adding cves
2022-06-01 17:03:00 -04:00
96a391dbc9
Updating DM
2022-05-31 10:38:13 -05:00
ce599810c6
confidence
2022-05-27 15:00:35 -06:00
926e63649a
delete usage
2022-05-27 14:41:34 -06:00
177a9736d3
Update splunk_command_and_scripting_interpreter_risky_commands.yml
...
fixed
2022-05-27 14:25:20 -06:00
21d5a68dd9
Splunk Command and Scripting Interpreter Risky Commands
2022-05-26 11:28:08 -06:00
7d2a728085
anomaly for non TLS forwarders
2022-05-26 12:21:20 -05:00
d43d0ce270
killchain
2022-05-26 10:18:53 -07:00
2a9d78d7fd
fixedimpact
2022-05-26 10:16:31 -07:00
a1e472d68d
MMerge branch 'vj9r' of github.com:splunk/security_content into vj9r
...
yup# Please enter a commit message to explain why this merge is necessary,
2022-05-26 10:08:45 -07:00
Xiao Lin