8eb5f91aa8
temp removed ms-sysmon attack-data
2022-03-22 16:28:13 +05:30
f63ed0a596
remove datasets from detections
2022-03-22 15:58:21 +05:30
c1741f4935
Updated detection files with recommended TA list.
2022-03-21 10:53:34 +05:50
6f9877cd9d
Updated all required fields and datamodels again.
2022-03-17 13:25:28 -07:00
25cd37992f
Revert "Updated all required fields and datamodels again."
...
This reverts commit 84e65bb3fb
2022-03-17 13:21:42 -07:00
84e65bb3fb
Updated all required fields and datamodels again.
2022-03-17 13:10:22 -07:00
d24c95bd3a
Branch was auto-updated.
2022-03-14 10:14:19 -07:00
3315565add
Merge pull request #2065 from splunk/issue_2062
...
Issue 2062
2022-03-14 10:13:55 -07:00
c97bade906
Adding fixes to detection files that did not have the correct datasets declared.
2022-03-11 12:01:18 -08:00
f608d91e89
Merge branch 'develop' into FixDatamodelFormat
2022-03-11 11:56:45 -08:00
4d91df0427
Reverted enrichment commit.
2022-03-11 11:54:41 -08:00
9dc8da332f
Updating more missing datasets
2022-03-11 11:49:22 -08:00
99c5547667
Removed quoting around fieldnames
...
from two searches that causes the
tool which updates the Datamodel
and required_fields portion of
the detection YAMLs to fail.
2022-03-11 11:43:28 -08:00
f27dfac839
First pass at updating missing or
...
wrong datasets in detection files.
2022-03-11 11:16:43 -08:00
92c7bd6d5c
Fixed quoting issue in two detections,
...
causing the script that populates the
datamodel and required_fields to fail
2022-03-11 09:16:08 -08:00
e08e7f3e5a
syntax
2022-03-10 08:16:21 -07:00
c0efcc76d5
Branch was auto-updated.
2022-03-10 07:15:18 -08:00
1fa47120c1
Merge pull request #2071 from splunk/function_updates
...
Updated artifact_create CF
2022-03-10 09:14:43 -06:00
325db37b95
Ran enrichment tool to update all DataModel and required_fields parts of yml files with most recent and correct codebase. More specifically, ran this tool after correcting some searches with only included a Model, not Model.Submodel declaration in their search.
2022-03-09 14:35:48 -08:00
d652c93878
Removed All_Changes submodel from
...
two detections which use more than one
submodel in Changes.
2022-03-09 14:29:25 -08:00
02b2a5f85f
Moved test file from endpoint to
...
experimental/endpoint. The detection
file was already in experimental.
2022-03-09 14:16:28 -08:00
970648ad69
Large number of changes to the
...
format of datamodels in searches.
This is in support of the script
to automatically parse searches in
order to pull out required fields
and datamodels used or not used
in a search.
2022-03-09 14:10:50 -08:00
f79866dca4
Update aws_updateloginprofile.yml
2022-03-08 09:24:18 -08:00
e53e25aee4
Update aws_createaccesskey.yml
2022-03-08 09:23:58 -08:00
0d9e685a4f
updated artifact_create CF
2022-03-08 10:42:23 -06:00
b2037a2712
Branch was auto-updated.
2022-03-04 12:21:26 -08:00
f9cc8cfeaf
Merge pull request #2069 from splunk/revert-1954-refactored_security_content
...
Revert "Refactored security content"
2022-03-04 12:21:04 -08:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
19b631aca4
Branch was auto-updated.
2022-03-04 09:34:03 -08:00
d077b90a01
Merge pull request #1954 from splunk/refactored_security_content
...
Refactored security content
2022-03-04 09:33:27 -08:00
886da3c92e
merged with develop
2022-03-04 14:35:50 +01:00
33a25e87dc
merged with develop
2022-03-04 14:18:02 +01:00
f76df6b741
fixed validate issues
2022-03-04 14:15:47 +01:00
597b2aeffe
Branch was auto-updated.
2022-03-03 19:47:55 -08:00
9176a54ca4
Merge pull request #2056 from splunk/wrong_field
...
Wrong field used
2022-03-03 21:47:38 -06:00
513270c8c1
Merge branch 'develop' into wrong_field
2022-03-03 21:41:37 -06:00
a67a8a4da6
Merge branch 'develop' into refactored_security_content
2022-03-03 12:51:11 -08:00
33b5987f16
spl updates
2022-03-03 12:46:44 -08:00
67ecd29d53
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
bf4606b142
Branch was auto-updated.
2022-03-03 10:07:35 -08:00
cee8f9cbcc
Branch was auto-updated.
2022-03-03 10:07:24 -08:00
2a3edd2300
Merge pull request #2064 from splunk/token_issue
...
remove CI step
2022-03-03 10:07:05 -08:00
96e5f0cd2d
remove CI step
2022-03-03 10:01:47 -08:00
8e916cf2a1
Branch was auto-updated.
2022-03-03 09:36:29 -08:00
80af6cb85b
Branch was auto-updated.
2022-03-03 09:36:15 -08:00
e0a51669dc
Merge pull request #2063 from splunk/token_issue
...
update github_token
2022-03-03 09:35:58 -08:00
2563d62bac
error
2022-03-03 09:33:31 -08:00
9746970a97
update github_token
2022-03-03 09:32:34 -08:00
3131db9d8c
merged with develop
2022-03-03 14:18:47 +01:00
68543a8dc1
merged with develop
2022-03-03 13:11:56 +01:00
arjunkhunti-crest