admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,075 Commits 697 Branches 195 Tags
sysmon_fix
Commit Graph

1505 Commits

Author SHA1 Message Date
Patrick 90e2bc27ee merged with develop 2023-09-18 08:50:10 +02:00
srv-rr-gh-researchbt 5c8f2f2cba Branch was auto-updated. 2023-08-28 12:46:13 -07:00
P4T12ICK 58cae8864b add status field to ba detections package 2023-08-28 11:47:43 +02:00
Michael Haag 391cded0c7 Flax Typhoon 2023-08-25 09:30:30 -06:00
P4T12ICK fcb174d163 bug fix 2023-08-18 13:34:14 +02:00
Lou Stella 2b77ace7e0 code change 2023-08-17 10:10:32 -05:00
P4T12ICK da3d925adf converted detections to SPL2 2023-08-09 14:11:24 +02:00
P4T12ICK 01aec84d9a converted detections to SPL2 2023-08-09 11:42:41 +02:00
P4T12ICK 9533c55d93 converted detections to SPL2 2023-08-08 16:00:23 +02:00
P4T12ICK 1b26692ee2 converted detections to SPL2 2023-08-08 14:54:08 +02:00
srv-rr-gh-researchbt 7ad6a04f8f Branch was auto-updated. 2023-07-11 13:03:14 -07:00
pyth0n1c 1243ee3e59 Update error message to be more descriptive for newline validation. 2023-07-11 12:57:22 -07:00
Bhavin Patel 7ade494863 check for howto 2023-07-11 14:16:33 -05:00
srv-rr-gh-researchbt 45a8f0a5ee Branch was auto-updated. 2023-07-11 12:12:54 -07:00
srv-rr-gh-researchbt ab3e9f046b Branch was auto-updated. 2023-07-11 12:12:44 -07:00
P4T12ICK 0c4fb1601d API Output Improvements 2023-06-29 14:44:33 +02:00
pyth0n1c a9dc524ad9 Make changes to lookup validation to 
ensure that the structure of .csv files,
along with their quoting and number of
fields, is correct.
 2023-06-27 12:07:55 -07:00
srv-rr-gh-researchbt 76fa47ef07 Branch was auto-updated. 2023-06-23 10:46:03 -07:00
Bhavin Patel bcee80029d new line check 2023-06-22 16:26:43 -07:00
srv-rr-gh-researchbt 346dfc937e Branch was auto-updated. 2023-06-22 15:00:29 -07:00
Bhavin Patel e66f6bcf44 variable consistency 2023-06-22 13:37:02 -07:00
P4T12ICK ec0770604e Add content changer 2023-06-20 18:56:36 +02:00
Bhavin Patel 1bd0e39148 updated code to building filter macros 2023-06-14 14:34:12 -07:00
srv-rr-gh-researchbt 6c6ff98517 Branch was auto-updated. 2023-06-05 09:51:01 -07:00
pyth0n1c e282f28135 Add support for apple silicon 
to docker testing container
 2023-05-31 13:44:53 -07:00
pyth0n1c cefd9349b1 Ensure that each lookup contains 
either a filename or a collection
field defined in its yml. Make sure
that is a filename is declared, then
that file actually exists in the
lookups folder.  Make sure that
every csv declared in the
lookups folder is actually
used by at least one lookup.
If it is not, then print a
warning but do not cause
a failure.
 2023-05-26 16:27:31 -07:00
patel-bhavin 30ad4d6eab only kvstore conversion 2023-05-22 17:35:13 -07:00
pyth0n1c b24394affd Push a new github_actions test config file 2023-05-15 13:54:53 -07:00
pyth0n1c 4b04df1ff8 Updated all app baselines in validate_args 2023-05-15 13:52:12 -07:00
pyth0n1c 9e535bb5f0 Update baseline to include 
suricata ta.  TA required 
for testing new detections.
Also, remove some 
duplicates apps from the 
baseline.
 2023-05-15 12:49:18 -07:00
srv-rr-gh-researchbt 6c35f820ca Branch was auto-updated. 2023-05-08 08:36:30 -07:00
P4T12ICK 92d73aae24 improvements srs detections 2023-05-08 15:34:46 +02:00
P4T12ICK 43180a41bd bug fix srs detections 2023-05-08 10:56:12 +02:00
srv-rr-gh-researchbt b954ccf537 Branch was auto-updated. 2023-05-02 15:02:44 -07:00
patel-bhavin e51757ca9f conflicts 2023-05-02 14:56:38 -07:00
P4T12ICK 72792fc2a0 Update to detection tags validator 2023-04-28 14:49:00 +02:00
P4T12ICK 97a1ec3bd5 bug fix validation 2023-04-28 13:53:52 +02:00
patel-bhavin 29c841b945 adding a field 2023-04-25 13:30:37 -07:00
patel-bhavin 932b49ccfd fixes to validate 2023-04-17 16:06:37 -07:00
patel-bhavin fc34672ca4 updates to ymls 2023-04-17 15:23:53 -07:00
patel-bhavin 4a9ce12739 adding risk=other to all configs 2023-04-17 15:00:26 -07:00
pyth0n1c 3754611943 Fix a number of experimental and 
deprecated detections so that
they do not raise error when run
out of the box.
 2023-04-11 16:27:40 -07:00
pyth0n1c 66eb63e06c Fixing how smoketest is passed 
to detection wrapper
 2023-04-11 12:49:49 -07:00
pyth0n1c 94a7845f9c Add experimental support for smoketest. 
That means running all detections
without replaying data or checking
correctness.
 2023-04-11 12:48:49 -07:00
P4T12ICK 6c0b883df8 update reporting 2023-04-05 14:53:09 +02:00
P4T12ICK d6514a32ad rebase with develop 2023-04-05 08:41:48 +02:00
srv-rr-gh-researchbt 1738be22b7 Branch was auto-updated. 2023-03-30 23:39:21 -07:00
P4T12ICK d3f883427d updated srs detections 2023-03-31 08:38:45 +02:00
srv-rr-gh-researchbt 4ad9288052 Branch was auto-updated. 2023-03-30 01:31:04 -07:00
P4T12ICK a7394535c6 updated detections 2023-03-30 10:30:26 +02:00