Bhavin Patel
|
1ed9d2d649
|
Branch was auto-updated.
|
2021-11-03 15:11:18 -07:00 |
|
Bhavin Patel
|
ed91698f04
|
Merge pull request #1776 from splunk/ssa_fix
Update ssa___modify_acls_permission_of_files_or_folders.yml
|
2021-11-03 15:10:58 -07:00 |
|
root
|
8c160f9bca
|
Added detection testing service results inWindows AdFind Exe
|
2021-11-03 22:10:48 +00:00 |
|
Lou Stella
|
df4623a652
|
Update ssa___modify_acls_permission_of_files_or_folders.yml
|
2021-11-03 17:04:39 -05:00 |
|
patel-bhavin
|
1f66d94667
|
author updates
|
2021-11-03 14:38:40 -07:00 |
|
patel-bhavin
|
0096350774
|
quotes
|
2021-11-03 14:32:17 -07:00 |
|
patel-bhavin
|
4b4f616bf5
|
date
|
2021-11-03 13:41:39 -07:00 |
|
patel-bhavin
|
da9d9ae021
|
updates
|
2021-11-03 13:40:22 -07:00 |
|
pyth0n1c
|
72b1fb7df4
|
Added datamodels to most of the ssa___ detections.
Still needs some more attention - there are likely
some missing datamodels and some that are incorrect.
|
2021-11-03 12:01:00 -07:00 |
|
Bhavin Patel
|
c6a98285e9
|
Branch was auto-updated.
|
2021-11-03 10:43:53 -07:00 |
|
Bhavin Patel
|
fc4cc81ad6
|
Branch was auto-updated.
|
2021-11-03 10:43:52 -07:00 |
|
Bhavin Patel
|
1329ff2998
|
Branch was auto-updated.
|
2021-11-03 10:43:48 -07:00 |
|
Bhavin Patel
|
50a730bebf
|
Branch was auto-updated.
|
2021-11-03 10:43:47 -07:00 |
|
Bhavin Patel
|
cf50083094
|
Merge pull request #1736 from splunk/expgsuite
prforbhavingsuiteexperimentalsearches
|
2021-11-03 10:43:28 -07:00 |
|
patel-bhavin
|
0dfff97830
|
yml errors
|
2021-11-02 18:11:32 -07:00 |
|
patel-bhavin
|
767461b47d
|
remove wrong lookup
|
2021-11-02 18:04:52 -07:00 |
|
patel-bhavin
|
1c1d17df17
|
Merge branch 'expgsuite' of github.com:splunk/security_content into expgsuite
|
2021-11-02 18:03:33 -07:00 |
|
patel-bhavin
|
0a9c396e08
|
search update
|
2021-11-02 18:03:21 -07:00 |
|
pyth0n1c
|
dbc1e604b8
|
Changed datamodel from Endpoint to Endpoint_Process
for a number of the ssa___ detection files.
|
2021-11-02 17:40:19 -07:00 |
|
pyth0n1c
|
244fad2f7e
|
Removed Endpoint, it should be Endpoint_Process
for relevant detections.
|
2021-11-02 17:34:47 -07:00 |
|
pyth0n1c
|
80db3a4e86
|
Added Endpoint to ba_detections.spec.json
|
2021-11-02 17:29:55 -07:00 |
|
pyth0n1c
|
2009a6541c
|
more fixes to getting ssa detections
|
2021-11-02 17:22:03 -07:00 |
|
pyth0n1c
|
26af696757
|
fixed checking of the ssa filename, I think
|
2021-11-02 17:15:02 -07:00 |
|
pyth0n1c
|
3d84051d80
|
some print statements during
validation to help with debugging
|
2021-11-02 17:05:49 -07:00 |
|
pyth0n1c
|
ac4bbd06a6
|
Just ba_detections to make parsing easier.
|
2021-11-02 16:57:47 -07:00 |
|
pyth0n1c
|
f0f7092884
|
Removed one line from json schema.
This should fail, removal and check for
failure checks that we fixed the underlying
issue.
|
2021-11-02 16:51:11 -07:00 |
|
pyth0n1c
|
5117990730
|
Added a ba_detections.spec.json file for
validation of the BA detections. Updated
validate_schema to use a different shcema
for BA detections vs non BA detections.
|
2021-11-02 16:30:49 -07:00 |
|
Bhavin Patel
|
581ace9401
|
Branch was auto-updated.
|
2021-11-02 11:56:15 -07:00 |
|
Bhavin Patel
|
bb1b3ed291
|
Branch was auto-updated.
|
2021-11-02 11:56:14 -07:00 |
|
Bhavin Patel
|
9cc5671f48
|
Branch was auto-updated.
|
2021-11-02 11:56:12 -07:00 |
|
Bhavin Patel
|
fcf073e01f
|
Branch was auto-updated.
|
2021-11-02 11:56:08 -07:00 |
|
Bhavin Patel
|
b0a44e4d2f
|
Branch was auto-updated.
|
2021-11-02 11:56:07 -07:00 |
|
Bhavin Patel
|
5e300eafa3
|
Merge pull request #1772 from splunk/TR-880_generate_ssa_package
Honey, I shrunk the YAMLs!
|
2021-11-02 11:55:48 -07:00 |
|
Bhavin Patel
|
b0c0d89368
|
Branch was auto-updated.
|
2021-11-02 09:57:02 -07:00 |
|
Bhavin Patel
|
571276f9f5
|
Branch was auto-updated.
|
2021-11-02 09:57:01 -07:00 |
|
Bhavin Patel
|
db8142e1e8
|
Branch was auto-updated.
|
2021-11-02 09:56:56 -07:00 |
|
Bhavin Patel
|
5459d17d29
|
Branch was auto-updated.
|
2021-11-02 09:56:55 -07:00 |
|
Bhavin Patel
|
fd953d2dbe
|
Branch was auto-updated.
|
2021-11-02 09:56:52 -07:00 |
|
Bhavin Patel
|
7181933d48
|
Branch was auto-updated.
|
2021-11-02 09:56:51 -07:00 |
|
Bhavin Patel
|
2407813a61
|
Branch was auto-updated.
|
2021-11-02 09:56:49 -07:00 |
|
tccontre
|
a0411fd063
|
Merge pull request #1731 from splunk/iceid_ttps
iceid_ttps
|
2021-11-02 17:56:25 +01:00 |
|
Danny Leung
|
280f6f4a10
|
PEX-33: fix repo path duplication issue
|
2021-11-02 00:11:24 -07:00 |
|
Danny Leung
|
ade0bf3bf6
|
PEX-33: remove chalice import
|
2021-11-01 22:56:37 -07:00 |
|
Danny Leung
|
500dcf256e
|
PEX-33: test running build on current branch instead of develop.
|
2021-11-01 22:42:44 -07:00 |
|
Danny Leung
|
7737249d92
|
Revert "PEX-33: manual revert to develop"
This reverts commit bb2050269f.
|
2021-11-01 22:16:43 -07:00 |
|
pyth0n1c
|
79833fccd0
|
Fixed how OrderedDict is imported to hopefully fix CSV output format.
|
2021-11-01 18:10:25 -07:00 |
|
Bhavin Patel
|
8d7ed3105b
|
Update attempted_credential_dump_from_registry_via_reg_exe.yml
|
2021-11-01 17:44:38 -07:00 |
|
patel-bhavin
|
3ecdae1e84
|
minor
|
2021-11-01 17:43:37 -07:00 |
|
pyth0n1c
|
aadb588fff
|
Changes to generate JSON artifacts as well as CSV and upload them after a test run on GH Actions.
|
2021-11-01 17:23:22 -07:00 |
|
d1vious
|
19a159802c
|
updating with no savedsearches_annotations
|
2021-11-01 20:01:33 -04:00 |
|