6f9877cd9d
Updated all required fields and datamodels again.
2022-03-17 13:25:28 -07:00
25cd37992f
Revert "Updated all required fields and datamodels again."
...
This reverts commit 84e65bb3fb
2022-03-17 13:21:42 -07:00
84e65bb3fb
Updated all required fields and datamodels again.
2022-03-17 13:10:22 -07:00
d24c95bd3a
Branch was auto-updated.
2022-03-14 10:14:19 -07:00
c97bade906
Adding fixes to detection files that did not have the correct datasets declared.
2022-03-11 12:01:18 -08:00
4d91df0427
Reverted enrichment commit.
2022-03-11 11:54:41 -08:00
9dc8da332f
Updating more missing datasets
2022-03-11 11:49:22 -08:00
f27dfac839
First pass at updating missing or
...
wrong datasets in detection files.
2022-03-11 11:16:43 -08:00
e08e7f3e5a
syntax
2022-03-10 08:16:21 -07:00
325db37b95
Ran enrichment tool to update all DataModel and required_fields parts of yml files with most recent and correct codebase. More specifically, ran this tool after correcting some searches with only included a Model, not Model.Submodel declaration in their search.
2022-03-09 14:35:48 -08:00
d652c93878
Removed All_Changes submodel from
...
two detections which use more than one
submodel in Changes.
2022-03-09 14:29:25 -08:00
970648ad69
Large number of changes to the
...
format of datamodels in searches.
This is in support of the script
to automatically parse searches in
order to pull out required fields
and datamodels used or not used
in a search.
2022-03-09 14:10:50 -08:00
f79866dca4
Update aws_updateloginprofile.yml
2022-03-08 09:24:18 -08:00
e53e25aee4
Update aws_createaccesskey.yml
2022-03-08 09:23:58 -08:00
b2037a2712
Branch was auto-updated.
2022-03-04 12:21:26 -08:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
19b631aca4
Branch was auto-updated.
2022-03-04 09:34:03 -08:00
33b5987f16
spl updates
2022-03-03 12:46:44 -08:00
67ecd29d53
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
68543a8dc1
merged with develop
2022-03-03 13:11:56 +01:00
bb797ef06f
Branch was auto-updated.
2022-03-01 06:31:28 -08:00
63dcb7f00f
Update o365_excessive_authentication_failures_alert.yml
...
rename syntax adjusted
later needed lastTime included
2022-03-01 14:04:36 +01:00
1d19ac2eff
text updates
2022-02-28 11:44:33 -08:00
bdb357cbc2
detection update
2022-02-28 11:28:27 -08:00
0338044721
Updating the date to today
...
and bumping the version for
updated searches associated
with this PR.
2022-02-18 10:57:49 -08:00
aa6ec9315b
Branch was auto-updated.
2022-02-18 07:41:50 -08:00
a093ba7aaf
Minor updates to fixed searches.
...
Fixed some spacing issues and quotation
mark issues that were causing search success problems.
2022-02-15 09:47:36 -08:00
77b300ab4e
Accidentally changed detection file
...
detections/cloud/aws_excessive_security_scanning.yml.
That file should not have been modified. Rolling back those
changes.
2022-02-15 09:37:52 -08:00
7648c76c0b
A handful of easy detection test fixes to get
...
the tests to detections to work with the
newest application baseline.
2022-02-14 16:57:33 -08:00
179134e8ef
test:removed cim version
2022-02-08 12:05:05 +05:30
3212249c52
updating docs and package bits [ci skip]
2022-02-07 21:03:48 +00:00
1d880e6b0e
merged with latest content and fixed bugs
2022-02-07 15:58:50 +01:00
5fbff3630e
merged with develop
2022-02-07 14:55:34 +01:00
eb43251183
spl update
2022-02-03 15:26:19 -08:00
08f0ff6405
test: Removed tas with mapping from detection files
2022-01-31 19:46:09 +05:30
4fd8604b9a
removed SAAWS and automated_detection_testing flag
2022-01-27 09:50:45 +01:00
a95e0e5aa6
fixed detections metadata
2022-01-20 13:42:50 +01:00
6fd7a4e812
test: updated supported_tas to recommended_tas
2022-01-19 17:43:41 +05:30
5a3d277c9f
fixed more detections
2022-01-18 14:17:09 +01:00
84092434a2
fixed more detections
2022-01-18 12:53:54 +01:00
98e5af3713
put baselines and investigations into its own folder
2022-01-17 10:56:04 +01:00
a2b6fff739
test:updated ymls
2021-12-15 21:15:02 +05:30
343ceae12f
Updated detection files with supported TA list.
2021-12-14 13:27:55 +05:50
750c81fb5b
updating docs and package bits [ci skip]
2021-12-02 18:50:01 +00:00
a6ee98620d
user login update
2021-11-19 11:18:36 -08:00
bbc913faaa
first 3 detections
2021-11-19 11:16:11 -08:00
700383c15f
Added detection testing service results inAWS IAM AccessDenied Discovery Events
2021-11-12 19:26:05 +00:00
6d152fdf0d
spll update
2021-11-12 11:03:40 -08:00
a1afa0fa60
updating docs and package bits [ci skip]
2021-10-28 19:55:37 +00:00
46b7d220cc
Branch was auto-updated.
2021-10-12 13:10:59 -07:00
pyth0n1c