Commit Graph

14636 Commits

Author SHA1 Message Date
Michael Hart 5798dd291d Fixing references issue 2022-01-19 21:01:08 -05:00
Michael Hart 0f2eae3108 Fixing missing filter statement 2022-01-19 20:14:28 -05:00
Michael Hart c3f59cb750 Renaming the macro 2022-01-19 20:08:39 -05:00
Michael Hart 82e6efb466 Adding in model lookup file 2022-01-19 20:04:16 -05:00
Michael Hart b59380d324 Potentially malicious execution on command line 2022-01-19 20:02:42 -05:00
Lou Stella 167574e892 tweaked search 2022-01-19 17:35:10 -06:00
tccontre d3aa2403d1 WhisperGateIsOpen 2022-01-19 18:53:16 +01:00
pyth0n1c 14c26f7475 Branch was auto-updated. 2022-01-19 09:41:52 -08:00
pyth0n1c e0e7975c47 Branch was auto-updated. 2022-01-19 09:41:51 -08:00
pyth0n1c d46b1ddef5 Branch was auto-updated. 2022-01-19 09:41:50 -08:00
pyth0n1c 4885f91425 Branch was auto-updated. 2022-01-19 09:41:49 -08:00
pyth0n1c 152330c2a6 Branch was auto-updated. 2022-01-19 09:41:45 -08:00
pyth0n1c fdb5dfe6d8 Branch was auto-updated. 2022-01-19 09:41:43 -08:00
Bhavin Patel 3703c6324a Merge pull request #1939 from splunk/ssa_rclone
SSA package bugs
2022-01-19 09:41:19 -08:00
Michael Haag 7d5cfe5ad5 added source 2022-01-19 09:15:37 -07:00
tccontre a28d611cbc WhisperGateIsOpen 2022-01-19 14:55:02 +01:00
tccontre 4e971b693c WhisperGateIsOpen 2022-01-19 14:51:20 +01:00
tccontre 4cff83c86d WhisperGateIsOpen 2022-01-19 14:06:45 +01:00
tccontre 05218c71e8 WhisperGateIsOpen 2022-01-19 13:46:17 +01:00
tccontre 312be225c0 WhisperGateIsOpen 2022-01-19 13:41:50 +01:00
Detection Testing Service 6fd7a4e812 test: updated supported_tas to recommended_tas 2022-01-19 17:43:41 +05:30
P4T12ICK fe541625eb fix detections 2022-01-19 09:56:04 +01:00
mhaag-spl f17abe251f Update cmd_carry_out_string_command_parameter.yml 2022-01-18 19:41:50 -07:00
mhaag-spl e5dfe45bf7 Update cmd_carry_out_string_command_parameter.yml 2022-01-18 19:40:11 -07:00
mhaag-spl bbea800499 whisper1 2022-01-18 19:36:58 -07:00
pyth0n1c 021f7b65e6 Branch was auto-updated. 2022-01-18 14:23:32 -08:00
Bhavin Patel c8097d685e Merge pull request #1944 from splunk/playbook_update
Updating playbooks
2022-01-18 14:23:16 -08:00
pyth0n1c e9fa08a4a8 Branch was auto-updated. 2022-01-18 14:03:24 -08:00
pyth0n1c e3ef3cc2a9 Branch was auto-updated. 2022-01-18 14:03:23 -08:00
Lou Stella 36a9c04c9a Merge pull request #1930 from splunk/dependabot/pip/pillow-9.0.0
Bump pillow from 8.4.0 to 9.0.0
2022-01-18 16:03:05 -06:00
dependabot[bot] 498b7c8af9 Bump pillow from 8.4.0 to 9.0.0
Bumps [pillow](https://github.com/python-pillow/Pillow) from 8.4.0 to 9.0.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/8.4.0...9.0.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-18 21:54:44 +00:00
pyth0n1c 09284d54f4 Branch was auto-updated. 2022-01-18 13:29:17 -08:00
pyth0n1c f40756f3b6 Branch was auto-updated. 2022-01-18 13:29:16 -08:00
mvelazco 852df4c6e7 Merge pull request #1943 from splunk/Fixing-Wrong-Data-Models
Fixing Wrong Data Models
2022-01-18 16:28:55 -05:00
Lou Stella b27059b4fe Updating playbooks 2022-01-18 15:12:03 -06:00
mvelazco 3105bda778 fixing wrong data models
Lateral Movement analytic story
2022-01-18 15:48:01 -05:00
mvelazco 2cba1d3408 fixing wrong data models
Active Directory Discovery analytic story
2022-01-18 12:58:06 -05:00
mvelazco e9cff8e0a4 updating data model field
for AD Password Spraying analytic story
2022-01-18 12:36:49 -05:00
pyth0n1c 06fdc44cc2 Branch was auto-updated. 2022-01-18 09:00:50 -08:00
mvelazco 6216800158 Merge pull request #1940 from splunk/Minor-Fix-on-Lateral-Movement-Hunting-Analytic
Minor Fix on Lateral Movement Hunting Analytic
2022-01-18 12:00:23 -05:00
mvelazco 774317fc97 adding missing '|'
Fixing issue reported on https://github.com/splunk/security_content/issues/1904
2022-01-18 11:08:19 -05:00
P4T12ICK 5a3d277c9f fixed more detections 2022-01-18 14:17:09 +01:00
P4T12ICK 6e34aa9cc8 fixed more detections 2022-01-18 13:58:57 +01:00
P4T12ICK 96ba6f8e73 fixed more detections 2022-01-18 13:51:37 +01:00
P4T12ICK cc5d778466 fixed more detections 2022-01-18 13:41:02 +01:00
P4T12ICK 338f22f7e2 fixed more detections 2022-01-18 13:13:30 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
P4T12ICK 1568a95b47 fixed a bunch of detections 2022-01-18 08:25:39 +01:00
P4T12ICK f48f8f5b71 fixed bugs in detections after running new validate 2022-01-17 17:45:12 +01:00
P4T12ICK 98e5af3713 put baselines and investigations into its own folder 2022-01-17 10:56:04 +01:00