8eb5f91aa8
temp removed ms-sysmon attack-data
2022-03-22 16:28:13 +05:30
f63ed0a596
remove datasets from detections
2022-03-22 15:58:21 +05:30
c1741f4935
Updated detection files with recommended TA list.
2022-03-21 10:53:34 +05:50
6f9877cd9d
Updated all required fields and datamodels again.
2022-03-17 13:25:28 -07:00
25cd37992f
Revert "Updated all required fields and datamodels again."
...
This reverts commit 84e65bb3fb
2022-03-17 13:21:42 -07:00
84e65bb3fb
Updated all required fields and datamodels again.
2022-03-17 13:10:22 -07:00
c97bade906
Adding fixes to detection files that did not have the correct datasets declared.
2022-03-11 12:01:18 -08:00
4d91df0427
Reverted enrichment commit.
2022-03-11 11:54:41 -08:00
9dc8da332f
Updating more missing datasets
2022-03-11 11:49:22 -08:00
99c5547667
Removed quoting around fieldnames
...
from two searches that causes the
tool which updates the Datamodel
and required_fields portion of
the detection YAMLs to fail.
2022-03-11 11:43:28 -08:00
f27dfac839
First pass at updating missing or
...
wrong datasets in detection files.
2022-03-11 11:16:43 -08:00
92c7bd6d5c
Fixed quoting issue in two detections,
...
causing the script that populates the
datamodel and required_fields to fail
2022-03-11 09:16:08 -08:00
325db37b95
Ran enrichment tool to update all DataModel and required_fields parts of yml files with most recent and correct codebase. More specifically, ran this tool after correcting some searches with only included a Model, not Model.Submodel declaration in their search.
2022-03-09 14:35:48 -08:00
970648ad69
Large number of changes to the
...
format of datamodels in searches.
This is in support of the script
to automatically parse searches in
order to pull out required fields
and datamodels used or not used
in a search.
2022-03-09 14:10:50 -08:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
886da3c92e
merged with develop
2022-03-04 14:35:50 +01:00
33a25e87dc
merged with develop
2022-03-04 14:18:02 +01:00
f76df6b741
fixed validate issues
2022-03-04 14:15:47 +01:00
513270c8c1
Merge branch 'develop' into wrong_field
2022-03-03 21:41:37 -06:00
a67a8a4da6
Merge branch 'develop' into refactored_security_content
2022-03-03 12:51:11 -08:00
67ecd29d53
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
68543a8dc1
merged with develop
2022-03-03 13:11:56 +01:00
d012d6707d
Branch was auto-updated.
2022-03-02 13:12:50 -08:00
8439c72b84
Branch was auto-updated.
2022-03-02 12:59:48 -08:00
6bb777fbbb
Branch was auto-updated.
2022-03-02 12:59:46 -08:00
130d8132d8
Branch was auto-updated.
2022-03-02 12:50:10 -08:00
2c2da3d113
Branch was auto-updated.
2022-03-02 12:50:07 -08:00
f121bc28e7
Branch was auto-updated.
2022-03-02 12:49:57 -08:00
b8cc27d347
tag with hermetic
2022-03-02 12:35:56 -08:00
1c505cc136
Branch was auto-updated.
2022-03-02 11:38:13 -08:00
014aa8ffd0
Branch was auto-updated.
2022-03-02 11:38:12 -08:00
988688fca8
Branch was auto-updated.
2022-03-02 11:38:11 -08:00
65b497ac5e
yml changes
2022-03-02 11:18:26 -08:00
c4d3e2cd21
Branch was auto-updated.
2022-03-02 10:23:33 -08:00
b1fe805cc7
Branch was auto-updated.
2022-03-02 10:23:31 -08:00
0721db1a9d
Branch was auto-updated.
2022-03-02 10:23:29 -08:00
9f8b04a913
Branch was auto-updated.
2022-03-02 10:23:28 -08:00
c4305d9132
Update windows_disable_memory_crash_dump.yml
...
minnor yml updates
2022-03-02 10:11:42 -08:00
e9c7accd0f
hwiper_more_ioc
2022-03-02 11:50:13 +01:00
046c55c2df
Branch was auto-updated.
2022-03-01 15:17:18 -08:00
5a11f58b5e
Branch was auto-updated.
2022-03-01 15:17:16 -08:00
e39253ea6f
Branch was auto-updated.
2022-03-01 15:17:15 -08:00
e401142651
Branch was auto-updated.
2022-03-01 15:17:13 -08:00
1b66664deb
Branch was auto-updated.
2022-03-01 12:47:36 -08:00
6fc5982360
Branch was auto-updated.
2022-03-01 12:47:27 -08:00
ffca8de97c
Branch was auto-updated.
2022-03-01 12:47:25 -08:00
9d4acafcf0
Branch was auto-updated.
2022-03-01 12:47:23 -08:00
4aa3bb8d05
Branch was auto-updated.
2022-03-01 12:47:21 -08:00
d504084018
Update windows_event_for_service_disabled.yml
2022-03-01 12:40:11 -08:00
756956ad39
updates to ymls
2022-03-01 12:11:43 -08:00
arjunkhunti-crest