admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,757 Commits 697 Branches 195 Tags
spec_3_develop
Commit Graph

330 Commits

Author SHA1 Message Date
Patrick Bareiss fcfea82cd4 make small changes 2020-05-14 11:30:28 +02:00
Patrick Bareiss 9a50a74ee7 bug in generate 2020-05-14 10:00:55 +02:00
Patrick Bareiss 3ac6c62937 bug in generate 2020-05-13 10:30:46 +02:00
Patrick Bareiss 151bbbaa5a bug in generate 2020-05-12 13:53:48 +02:00
Patrick Bareiss cda505d8fa new generate script 2020-05-06 17:42:38 +02:00
Patrick Bareiss cc464c87db updated content 2020-05-05 12:58:56 +02:00
Patrick Bareiss 909806896e validate script 2020-04-30 16:52:38 +02:00
Patrick Bareiss 442a575e1d WIP validate script 2020-04-30 15:51:16 +02:00
Patrick Bareiss 4217266952 WIP 2020-04-30 12:53:55 +02:00
Patrick Bareiss 7cbc9a9ba6 WIP 2020-04-30 10:34:18 +02:00
Patrick Bareiss d2e82224b0 Converted all objects to new spec 2020-04-29 13:01:45 +02:00
rvaldez617 ba916b37aa update version to 2.1 instead of 3.0, as no search changes - just metadata 2020-04-17 12:10:11 -06:00
bpatel 8d72fdee03 mapping update 2020-04-17 10:44:23 -07:00
Bhavin Patel 916e54d0ff Merge pull request #429 from splunk/crl-1749ssh 
CRL-1749 Cloud Stories
 2020-04-17 10:36:24 -07:00
bpatel c45d8dc34f remove k8s from manifest objects 2020-04-16 16:16:58 -07:00
rvaldez617 baa2aaa043 typo 2020-04-16 16:35:35 -06:00
rvaldez617 5330f043bc need src_ip in output 2020-04-16 16:32:51 -06:00
rvaldez617 377d8a58a4 need src_ip in output for investigation, etc 2020-04-16 16:30:50 -06:00
rvaldez617 d95011a61a field name tweaks and added a rename 2020-04-16 16:26:50 -06:00
rvaldez617 a6105744da field name tweaks 2020-04-16 16:23:11 -06:00
rvaldez617 6280dbf26d another tweak 2020-04-16 16:08:53 -06:00
rvaldez617 a4803c5f76 field name tweaks 2020-04-16 16:07:39 -06:00
rvaldez617 8158e59d21 field name tweak 2020-04-16 15:33:38 -06:00
rvaldez617 2a1185dd99 field name tweaks due to /local edits 2020-04-16 15:30:16 -06:00
bpatel f689b71d18 adding new investigation manifest 2020-04-16 12:06:36 -07:00
bpatel 5fc984f4cc adding new investigation manifest 2020-04-16 11:51:19 -07:00
bpatel 245f15912e spl and manifest updates: 2020-04-15 15:54:34 -07:00
bpatel 330c7aaaf2 search name consistency 2020-04-15 11:44:39 -07:00
Rod Soto be16d2dd86 consolidated 2020-04-13 19:57:13 -04:00
Bhavin Patel dde27b94d0 Merge pull request #430 from splunk/first_okta_story 
new files for okta story
 2020-04-02 15:20:54 -07:00
bpatel 500a21e8cc detection, spec and macroupdates 2020-04-02 13:39:29 -07:00
Rico Valdez 26446e099f some naming tweaks to detections, and detctions in stories. Need text for story 2020-04-02 13:36:55 -06:00
Rico Valdez 4febee85d8 Updates to detection files - still need macros 2020-04-02 13:17:04 -06:00
Rico Valdez 576debf5ec new files for okta story 2020-04-02 12:31:22 -06:00
bpatel 9cebb11dc9 detection manifest fixes 2020-03-30 13:22:18 -07:00
Rod Soto 542f78b716 fixedssh 2020-03-28 09:25:01 -04:00
bpatel 7c7c34d4f5 updating version 2020-03-23 11:40:29 -07:00
bpatel 3d5891bb1e adding macro and updating spl 2020-03-23 11:39:40 -07:00
Bhavin Patel 45ffbde816 Merge branch 'develop' into CRL-1746 2020-03-16 13:23:43 -07:00
bpatel d7828c2c0d version and date update 2020-03-16 12:56:56 -07:00
rvaldez617 bae56e409c Merge pull request #387 from splunk/CRL-1735 
CRL-1735: adding escape chars
 2020-03-16 13:31:25 -06:00
rvaldez617 b20a771463 Merge pull request #389 from splunk/CRL-1739 
CRL-1739: spl update to use parent_process_name
 2020-03-16 13:26:35 -06:00
rvaldez617 27f1ea2b4f Merge pull request #393 from splunk/CRL-1736 
CRL-1736: search updated
 2020-03-16 13:25:47 -06:00
rvaldez617 f36032d76e updating version and mod_date 2020-03-16 13:20:02 -06:00
bpatel a3d9771238 updating spl 2020-03-16 12:18:24 -07:00
rvaldez617 ae54845c31 Merge pull request #388 from splunk/CRL-1737 
CRL-1737: removing status field from spl
 2020-03-16 13:17:31 -06:00
rvaldez617 eefbae66a9 Merge pull request #386 from splunk/CRL-1734 
CRL-1734: updating spl with escape chars and better output
 2020-03-16 13:14:47 -06:00
rvaldez617 d624d4b563 Merge pull request #384 from splunk/CRL-1732 
CRL-1732: removing status from spl
 2020-03-16 13:11:19 -06:00
rvaldez617 f3963c97be formatting, and version/mod_date update 2020-03-16 13:09:27 -06:00
rvaldez617 9363ded8d0 Merge pull request #385 from splunk/CRL-1733 
CRL-1733: updating instructions for better clarification
 2020-03-16 13:00:23 -06:00