Commit Graph

111 Commits

Author SHA1 Message Date
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 886da3c92e merged with develop 2022-03-04 14:35:50 +01:00
P4T12ICK f76df6b741 fixed validate issues 2022-03-04 14:15:47 +01:00
patel-bhavin a67a8a4da6 Merge branch 'develop' into refactored_security_content 2022-03-03 12:51:11 -08:00
research bot 67ecd29d53 updating docs and package bits [ci skip] 2022-03-03 18:22:29 +00:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
Lou Stella d3322283c3 Added risk_severity 2022-02-25 13:49:21 -06:00
Lou Stella 9f65b5d0d4 Updated required fields 2022-02-25 13:48:04 -06:00
Lou Stella 760747cea2 Small update to body 2022-02-25 10:46:46 -06:00
Lou Stella ca2163ae8c Moved to Experimental 2022-02-25 10:40:46 -06:00
patel-bhavin e7eab5af71 push 2022-02-07 14:45:37 -08:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
research bot e52d00b53d updating docs and package bits [ci skip] 2022-01-31 20:04:12 +00:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
pyth0n1c dd538478f4 Branch was auto-updated. 2022-01-24 10:40:44 -08:00
research bot 23a0acc37d updating docs and package bits [ci skip] 2022-01-21 21:02:48 +00:00
Lou Stella 3ad47776fb Moving to experimental 2022-01-21 14:16:51 -06:00
d1vious 72d33b23ac moving to match what prod should have 2022-01-21 12:29:13 -05:00
mvelazco 852df4c6e7 Merge pull request #1943 from splunk/Fixing-Wrong-Data-Models
Fixing Wrong Data Models
2022-01-18 16:28:55 -05:00
mvelazco 3105bda778 fixing wrong data models
Lateral Movement analytic story
2022-01-18 15:48:01 -05:00
mvelazco 774317fc97 adding missing '|'
Fixing issue reported on https://github.com/splunk/security_content/issues/1904
2022-01-18 11:08:19 -05:00
P4T12ICK 96ba6f8e73 fixed more detections 2022-01-18 13:51:37 +01:00
P4T12ICK f48f8f5b71 fixed bugs in detections after running new validate 2022-01-17 17:45:12 +01:00
P4T12ICK 9ed2766f6c improved content_changer 2022-01-17 09:44:04 +01:00
research bot 14b4c0eb29 updating docs and package bits [ci skip] 2022-01-14 02:07:36 +00:00
pyth0n1c bce591d6d1 Branch was auto-updated. 2022-01-13 10:04:58 -08:00
d1vious 17d7312bc6 excluding experimental detections from the package 2022-01-10 18:00:59 -05:00
pyth0n1c ff6b6c4397 Branch was auto-updated. 2022-01-10 12:11:52 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059
The Haag at The Gates
2022-01-10 12:11:15 -08:00
mhaag-spl 9eea4ded41 It's Raining Haags 2021-12-15 13:01:04 -07:00
research bot ff3319329e updating docs and package bits [ci skip] 2021-12-15 02:58:27 +00:00
Bhavin Patel 61d583e45e Branch was auto-updated. 2021-12-14 18:47:02 -08:00
d1vious 16b771eae2 adding tags to detections 2021-12-14 19:38:51 -05:00
mhaag-spl 71295432e3 Windows shells 2021-12-13 13:01:45 -07:00
mhaag-spl f3b31c113b java Shells 2021-12-13 11:54:59 -07:00
Bhavin Patel 46083ae36f Branch was auto-updated. 2021-12-09 09:06:16 -08:00
mvelazco 648bf1fc6e minor fixes 2021-12-08 13:41:04 -05:00
mhaag-spl 81a49be5e8 Out of the Gates
Microsoft Exchange Mailbox Replication service writing Active Server Pages
2021-12-07 14:46:14 -07:00
mvelazco fc478d80a7 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-06 17:10:00 -05:00
mvelazco efd890e2c2 updating analytic story name 2021-12-06 17:01:58 -05:00
Bhavin Patel e5fd9f9fe7 Branch was auto-updated. 2021-12-06 11:04:13 -08:00
mhaag-spl 25dc457c3c The Unbroken Haag 2021-12-06 11:57:20 -07:00
mvelazco 20425018bc minor fixes 2021-12-03 21:12:31 -05:00
mvelazco 71410ddb7a 3 new detections 2021-12-03 15:58:00 -05:00
mvelazco 918b680350 update experimental detection names 2021-11-30 13:20:42 -05:00
mvelazco b5783ab849 adding 2 experimental detections 2021-11-30 12:51:43 -05:00
mhaag-spl 1aa5852b19 Update exchange_powershell_module_usage.yml 2021-11-15 07:53:20 -07:00
d1vious 70d68fe35c moving to prod 2021-10-29 10:56:04 -04:00
Jose Enrique Hernandez a4d3b8480d minor updates given the feedback on issue 1767 2021-10-29 10:54:45 -04:00