 pyth0n1c
|
d40ca09d61
|
Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface.
|
2022-06-23 14:19:17 -07:00 |
|
|
Lou Stella
|
863259df93
|
Updated per #2235
|
2022-06-15 13:49:56 -05:00 |
|
|
pyth0n1c
|
578e6bb088
|
Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.
|
2022-05-02 17:12:50 -07:00 |
|
|
d1vious
|
fdcd471d5d
|
moving to experimental
|
2022-04-14 16:37:54 -04:00 |
|
|
P4T12ICK
|
5dd13ea167
|
fix broken detections
|
2022-03-14 15:51:05 +01:00 |
|
|
P4T12ICK
|
e6c8254ede
|
Added automaticc generation of finding report
|
2022-03-14 12:12:48 +01:00 |
|
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
|
Xiao Lin
|
7b8f6b22e2
|
update search
|
2022-02-25 10:03:01 -08:00 |
|
|
research bot
|
5c8268f137
|
updating docs and package bits [ci skip]
|
2022-02-15 23:10:10 +00:00 |
|
|
Bhavin Patel
|
baab603657
|
Update ssa___unusual_volume_download_from_internal_server.yml
|
2022-02-09 16:45:28 -08:00 |
|
|
Xiao Lin
|
a1e6d3e225
|
update search string
|
2022-02-09 16:36:10 -08:00 |
|
|
Xiao Lin
|
9a04a4e833
|
fix a typo
|
2022-02-09 16:36:10 -08:00 |
|
|
Xiao Lin
|
ddd492fe23
|
update data link to attack_range, move detection to experimental
|
2022-02-09 16:36:10 -08:00 |
|
|
P4T12ICK
|
96ba6f8e73
|
fixed more detections
|
2022-01-18 13:51:37 +01:00 |
|
|
P4T12ICK
|
f48f8f5b71
|
fixed bugs in detections after running new validate
|
2022-01-17 17:45:12 +01:00 |
|
|
P4T12ICK
|
9ed2766f6c
|
improved content_changer
|
2022-01-17 09:44:04 +01:00 |
|
|
mvelazco
|
efd890e2c2
|
updating analytic story name
|
2021-12-06 17:01:58 -05:00 |
|
|
research bot
|
a1afa0fa60
|
updating docs and package bits [ci skip]
|
2021-10-28 19:55:37 +00:00 |
|
|
Drew Church
|
3b18c5abcb
|
Added CVE tags to 35 files
|
2021-10-22 10:03:24 -07:00 |
|
|
tccontre
|
9d466adc76
|
CARS_UPDATE_MITRE_ID_B8
CARS_UPDATE_MITRE_ID_B8
|
2021-10-15 10:22:43 +02:00 |
|
|
divious1
|
671e91ecd0
|
moved to experimental due to lack of testing
|
2021-09-09 17:30:40 -04:00 |
|
|
research bot
|
02e58a1dfa
|
updating docs and package bits [ci skip]
|
2021-08-27 21:52:55 +00:00 |
|
|
Michael Haag
|
b831023bd4
|
Update protocols_passing_authentication_in_cleartext.yml
Added a few more changes to make it more clear. Thank you @sec-researcher for updating!
|
2021-08-24 07:04:52 -06:00 |
|
|
Amir hossein Mahboubi
|
0945cc72c9
|
Update protocols_passing_authentication_in_cleartext.yml
|
2021-08-21 08:55:07 +04:30 |
|
|
Amir hossein Mahboubi
|
546e70f2d8
|
Merge branch 'splunk:develop' into optimized
|
2021-08-21 08:53:50 +04:30 |
|
|
sec-researcher
|
0bfb8ba325
|
Filter blocked traffic because it made a lot of false positive specially when something like port scan happen, also add description to "how_to_implement" section to limit result just to organization private and public IP range for more accurate result
|
2021-08-19 18:59:04 +04:30 |
|
|
P4T12ICK
|
cfae82505c
|
add analytic types to detections
|
2021-07-19 17:41:22 +02:00 |
|
|
P4T12ICK
|
edaf9598f2
|
fixed merging issues
|
2021-03-11 19:03:54 +01:00 |
|
|
mhaag-spl
|
b15aaa55df
|
Moving non-passed to experimental and deprecating some
|
2021-03-10 13:27:00 -07:00 |
|
|
mhaag-spl
|
a6265b60df
|
Moving Tor Traffic to Experimental
|
2021-03-10 11:47:34 -07:00 |
|
|
P4T12ICK
|
7c134dbb5d
|
WIP
|
2021-03-10 14:44:44 +01:00 |
|
|
divious1
|
b58843ca9f
|
added datamodels as an array
|
2021-02-10 22:35:58 -05:00 |
|
|
divious1
|
d0c9c92857
|
added datamodel field and made all objects also pretty via new tool called pretty_yaml.py
|
2021-02-10 22:11:24 -05:00 |
|
|
divious1
|
1ec15cf044
|
renamed on all detections
|
2021-02-08 10:18:16 -05:00 |
|
|
divious1
|
b68e05685e
|
modified type for detections
|
2021-02-05 14:35:49 -05:00 |
|
|
divious1
|
e14fade976
|
adding product tag to all detections
|
2021-02-03 21:42:46 -05:00 |
|
|
P4T12ICK
|
0d75faf323
|
new test file
|
2021-01-19 13:55:33 +01:00 |
|
|
P4T12ICK
|
477221da99
|
detection testing
|
2021-01-18 15:46:53 +01:00 |
|
|
P4T12ICK
|
44bf41a678
|
new test file
|
2021-01-18 15:22:05 +01:00 |
|
|
P4T12ICK
|
27b27a5b59
|
detection testing branch
|
2021-01-18 14:10:47 +01:00 |
|
|
Ignacio Bermudez Corrales
|
afe64bdb3e
|
detection/experimental folder for untested detections
|
2020-11-06 10:37:11 -08:00 |
|