8eb5f91aa8
temp removed ms-sysmon attack-data
2022-03-22 16:28:13 +05:30
f63ed0a596
remove datasets from detections
2022-03-22 15:58:21 +05:30
c1741f4935
Updated detection files with recommended TA list.
2022-03-21 10:53:34 +05:50
6f9877cd9d
Updated all required fields and datamodels again.
2022-03-17 13:25:28 -07:00
25cd37992f
Revert "Updated all required fields and datamodels again."
...
This reverts commit 84e65bb3fb
2022-03-17 13:21:42 -07:00
84e65bb3fb
Updated all required fields and datamodels again.
2022-03-17 13:10:22 -07:00
d24c95bd3a
Branch was auto-updated.
2022-03-14 10:14:19 -07:00
c97bade906
Adding fixes to detection files that did not have the correct datasets declared.
2022-03-11 12:01:18 -08:00
4d91df0427
Reverted enrichment commit.
2022-03-11 11:54:41 -08:00
9dc8da332f
Updating more missing datasets
2022-03-11 11:49:22 -08:00
99c5547667
Removed quoting around fieldnames
...
from two searches that causes the
tool which updates the Datamodel
and required_fields portion of
the detection YAMLs to fail.
2022-03-11 11:43:28 -08:00
f27dfac839
First pass at updating missing or
...
wrong datasets in detection files.
2022-03-11 11:16:43 -08:00
92c7bd6d5c
Fixed quoting issue in two detections,
...
causing the script that populates the
datamodel and required_fields to fail
2022-03-11 09:16:08 -08:00
e08e7f3e5a
syntax
2022-03-10 08:16:21 -07:00
325db37b95
Ran enrichment tool to update all DataModel and required_fields parts of yml files with most recent and correct codebase. More specifically, ran this tool after correcting some searches with only included a Model, not Model.Submodel declaration in their search.
2022-03-09 14:35:48 -08:00
d652c93878
Removed All_Changes submodel from
...
two detections which use more than one
submodel in Changes.
2022-03-09 14:29:25 -08:00
970648ad69
Large number of changes to the
...
format of datamodels in searches.
This is in support of the script
to automatically parse searches in
order to pull out required fields
and datamodels used or not used
in a search.
2022-03-09 14:10:50 -08:00
f79866dca4
Update aws_updateloginprofile.yml
2022-03-08 09:24:18 -08:00
e53e25aee4
Update aws_createaccesskey.yml
2022-03-08 09:23:58 -08:00
b2037a2712
Branch was auto-updated.
2022-03-04 12:21:26 -08:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
19b631aca4
Branch was auto-updated.
2022-03-04 09:34:03 -08:00
886da3c92e
merged with develop
2022-03-04 14:35:50 +01:00
33a25e87dc
merged with develop
2022-03-04 14:18:02 +01:00
f76df6b741
fixed validate issues
2022-03-04 14:15:47 +01:00
597b2aeffe
Branch was auto-updated.
2022-03-03 19:47:55 -08:00
513270c8c1
Merge branch 'develop' into wrong_field
2022-03-03 21:41:37 -06:00
a67a8a4da6
Merge branch 'develop' into refactored_security_content
2022-03-03 12:51:11 -08:00
33b5987f16
spl updates
2022-03-03 12:46:44 -08:00
67ecd29d53
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
68543a8dc1
merged with develop
2022-03-03 13:11:56 +01:00
d012d6707d
Branch was auto-updated.
2022-03-02 13:12:50 -08:00
8439c72b84
Branch was auto-updated.
2022-03-02 12:59:48 -08:00
6bb777fbbb
Branch was auto-updated.
2022-03-02 12:59:46 -08:00
130d8132d8
Branch was auto-updated.
2022-03-02 12:50:10 -08:00
2c2da3d113
Branch was auto-updated.
2022-03-02 12:50:07 -08:00
f121bc28e7
Branch was auto-updated.
2022-03-02 12:49:57 -08:00
b8cc27d347
tag with hermetic
2022-03-02 12:35:56 -08:00
1c505cc136
Branch was auto-updated.
2022-03-02 11:38:13 -08:00
014aa8ffd0
Branch was auto-updated.
2022-03-02 11:38:12 -08:00
988688fca8
Branch was auto-updated.
2022-03-02 11:38:11 -08:00
427cfbf07d
Branch was auto-updated.
2022-03-02 11:20:51 -08:00
bf3cfa5668
Branch was auto-updated.
2022-03-02 11:20:49 -08:00
97e6c4be27
Branch was auto-updated.
2022-03-02 11:20:48 -08:00
b8ff0c1fab
Branch was auto-updated.
2022-03-02 11:20:40 -08:00
65b497ac5e
yml changes
2022-03-02 11:18:26 -08:00
c4d3e2cd21
Branch was auto-updated.
2022-03-02 10:23:33 -08:00
684b225cff
Branch was auto-updated.
2022-03-02 10:23:32 -08:00
b1fe805cc7
Branch was auto-updated.
2022-03-02 10:23:31 -08:00
0721db1a9d
Branch was auto-updated.
2022-03-02 10:23:29 -08:00
arjunkhunti-crest