66 Commits

Author	SHA1	Message	Date
Lou Stella	d1f890a4e9	Adding hunting playbook	2022-07-29 17:12:35 -05:00
Lou Stella	605b962c75	Updated indicator_collect CF	2022-03-28 14:26:35 -05:00
pyth0n1c	89f44723a6	Branch was auto-updated.	2022-03-10 07:15:04 -08:00
P4T12ICK	6f0ee68913	Refactored security content	2022-03-09 14:43:09 +01:00
Lou Stella	0d9e685a4f	updated artifact_create CF	2022-03-08 10:42:23 -06:00
Jose Enrique Hernandez	d78bb53baa	Revert "Refactored security content"	2022-03-04 15:13:04 -05:00
P4T12ICK	68543a8dc1	merged with develop	2022-03-03 13:11:56 +01:00
pyth0n1c	ed6f594f43	Branch was auto-updated.	2022-02-28 14:24:57 -08:00
Lou Stella	0d0076a686	Update find_related_containers	2022-02-28 16:02:33 -06:00
Lou Stella	3a0e77912f	Update container_merge	2022-02-28 16:02:03 -06:00
Lou Stella	b7296e551a	Added playbook_type field	2022-02-25 14:44:58 -06:00
P4T12ICK	5fbff3630e	merged with develop	2022-02-07 14:55:34 +01:00
Lou Stella	001d505066	Another DocGen	2022-02-03 11:18:44 -06:00
Lou Stella	2657b68a23	Updated ymls & j2 templates for changes	2022-02-03 11:09:14 -06:00
Lou Stella	4501e30374	Fixed underlying playbook ymls	2022-02-03 10:56:06 -06:00
Lou Stella	b51d59e9ae	Updated formatting	2022-02-02 16:10:41 -06:00
Lou Stella	ec6f1e4dd9	Start Investigation	2022-02-02 15:32:59 -06:00
Lou Stella	c27358b6a9	Threat Intel Investigate	2022-02-02 13:24:37 -06:00
Lou Stella	fd0def1d7d	TruSTAR Enrich Indicators	2022-02-02 12:44:35 -06:00
Lou Stella	2871175a1e	AWS Disable User Accounts	2022-02-02 12:13:00 -06:00
Lou Stella	91cce1c629	Updated	2022-02-02 12:12:28 -06:00
Lou Stella	57f173010a	AWS Find Inactive Users	2022-02-01 16:03:04 -06:00
Lou Stella	b27059b4fe	Updating playbooks	2022-01-18 15:12:03 -06:00
P4T12ICK	50d75da7b8	content_changer implemented	2022-01-14 10:27:49 +01:00
Lou Stella	049482c74c	Fixed casing per request	2022-01-06 15:16:52 -06:00
Lou Stella	334fb25cd0	Added malware hunt and contain playbook	2022-01-05 13:41:59 -06:00
Lou Stella	6819bb1be7	Added email notification for malware playbook	2022-01-05 13:28:38 -06:00
Lou Stella	e396a3b9d4	Added block_indicators playbook	2022-01-05 12:17:54 -06:00
Lou Stella	2f8de77b7c	Docs Update for playbook changes	2021-12-15 17:42:47 -06:00
Lou Stella	01bc5757b6	removed married parent playbook	2021-12-15 17:06:02 -06:00
Lou Stella	fbf15c3424	Final copy from phantomcyber/playbooks	2021-12-15 16:58:31 -06:00
Lou Stella	872ea4b55c	Standardized type	2021-12-15 15:52:40 -06:00
Lou Stella	ca0aaa46c5	divorced parent playbook	2021-12-15 15:03:21 -06:00
Lou Stella	b341343435	Updated friendly name	2021-12-15 11:30:26 -06:00
Lou Stella	028863eea9	Updated screenshot	2021-12-15 10:15:39 -06:00
Lou Stella	82b45a1cf9	the final push	2021-12-14 19:47:53 -06:00
Lou Stella	f8d3d5a1f9	SSH response	2021-12-14 19:43:19 -06:00
Lou Stella	fafa45fcc9	fixing backslide	2021-12-14 19:41:19 -06:00
Lou Stella	2cd9e3940d	Two more yamls	2021-12-14 19:38:19 -06:00
Lou Stella	4a5154592e	the YAMLfication of words	2021-12-14 19:31:42 -06:00
Lou Stella	544c7b0b9f	parent playbook	2021-12-14 19:27:42 -06:00
Lou Stella	5fb532e10d	Another playbook	2021-12-14 19:24:32 -06:00
Lou Stella	fa976bcfa8	Update internal_host_splunk_investigate_log4j.yml	2021-12-14 19:05:49 -06:00
Lou Stella	60e3d4f4e5	... and another one	2021-12-14 18:59:22 -06:00
Lou Stella	4b7e38cdee	Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell	2021-12-14 18:47:04 -06:00
Lou Stella	94b3fa5aa3	Create log4j_investigate_and_respond.png	2021-12-14 18:46:51 -06:00
d1vious	1d04e6f78a	minor playbook updates	2021-12-14 19:46:04 -05:00
Lou Stella	54c8f81958	Another one	2021-12-14 18:38:02 -06:00
Lou Stella	d33ed87e73	Some playbooks	2021-12-14 18:34:37 -06:00
Lou Stella	672609671b	Add screenshot & updated description text	2021-12-14 18:20:29 -06:00