admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,082 Commits 697 Branches 195 Tags
testing_detection_path_interception
Commit Graph

2082 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
divious1 ef46ef25c6 remove runstory JS which is no longer needed 2019-12-09 20:14:05 -05:00
divious1 df121a2b87 corrected broken link in readme 2019-12-09 20:07:01 -05:00
divious1 ca1faca05d fixing broken link in readme 2019-12-09 20:04:26 -05:00
divious1 55f4361f4c fixing broken links in stories 2019-12-09 19:59:39 -05:00
divious1 477207a76e adding timeout 2019-12-09 19:49:45 -05:00
divious1 a8b9f493e1 constraint link checking to md files 2019-12-09 19:40:23 -05:00
divious1 177dfe9499 added verbosity to the link check 2019-12-09 19:34:29 -05:00
divious1 b3219d3b21 updating feedback center 2019-12-09 19:24:02 -05:00
jzsplunk fd049298b0 fix typo in path for doc json. 2019-12-09 13:57:16 -08:00
dependabot-preview[bot] 2e129dcf9d Bump more-itertools from 7.2.0 to 8.0.2 
Bumps [more-itertools](https://github.com/erikrose/more-itertools) from 7.2.0 to 8.0.2.
- [Release notes](https://github.com/erikrose/more-itertools/releases)
- [Commits](https://github.com/erikrose/more-itertools/compare/v7.2.0...v8.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-06 14:12:35 +00:00
dependabot-preview[bot] 939e62c187 Bump importlib-metadata from 0.23 to 1.2.0 
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.23 to 1.2.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-06 03:23:32 +00:00
Bhavin Patel ac45c4ddf9 Merge pull request #271 from splunk/dependabot/pip/pyyaml-5.2 
Bump pyyaml from 5.1.2 to 5.2
 2019-12-05 19:22:39 -08:00
Bhavin Patel 41e9d7b29c Merge pull request #273 from splunk/dependabot/pip/identify-1.4.8 
Bump identify from 1.4.7 to 1.4.8
 2019-12-05 19:22:23 -08:00
dependabot-preview[bot] ad2a2dd160 Bump identify from 1.4.7 to 1.4.8 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.7 to 1.4.8.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.7...v1.4.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-05 14:12:42 +00:00
divious1 3fc2db13e5 porting dnstwist to python3 2019-12-04 21:42:58 -05:00
dependabot-preview[bot] 166549aadb Bump pyyaml from 5.1.2 to 5.2 
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.1.2 to 5.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.1.2...5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-03 14:12:26 +00:00
divious1 c813355782 removed runstory and added a note that was migrated to ASX github 2019-11-27 13:56:10 -05:00
divious1 92e3489d72 remove escu next steps and AR actions 2019-11-26 15:03:09 -05:00
research bot 2d2dd8d87b updating docs and package bits [ci skip] 2019-11-26 19:36:35 +00:00
divious1 1582272ed3 Merge tag 'v1.0.44' 2019-11-26 12:57:49 -05:00
jcbrewer5D6400 a5f1973ddd Merge pull request #268 from splunk/CRL-1645 
CRL-1645 - New detection "Abnormally High AWS Instances Terminated by…
v1.0.45 		2019-11-25 18:29:44 -08:00
Jason Brewer 322e711936 CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description. 2019-11-25 18:17:06 -08:00
Jason Brewer 95f73c9039 CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK" 2019-11-25 18:06:33 -08:00
jcbrewer5D6400 92078c2ec4 Merge pull request #261 from splunk/CRL-1646 
CRL-1646 - Implemented : Update Detection for abnormally_high_instanc…
 2019-11-25 17:10:04 -08:00
Jason Brewer 951d055cc3 CRL-1646 - adding Abnormally High AWS Instances Launched [mltk] to cloud_cryptomining story. 2019-11-25 17:01:20 -08:00
Jason Brewer 5a901801a0 CRL-1646 - Fixing newly broken reference. 2019-11-25 16:32:14 -08:00
Jason Brewer 604e2ecc11 CRL-1646 - changing from user to src_user 2019-11-25 15:49:32 -08:00
Jason Brewer 38be9ebb26 CRL-1646 , CRL-1697 - Making minor tweaks to excessive run instance detections (using ARN vs username) added -MLTK to labels. Added reference for Cloud Compute Instance Created With Previously Unseen Image to cloud_cryptomining.yml. 2019-11-25 15:17:32 -08:00
dependabot-preview[bot] 79507dcd9a Merge pull request #266 from splunk/dependabot/pip/pyrsistent-0.15.6 2019-11-25 21:34:24 +00:00
dependabot-preview[bot] f6a50a723c Bump pyrsistent from 0.15.5 to 0.15.6 
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.15.5 to 0.15.6.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.15.5...v0.15.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 21:28:06 +00:00
Jose Enrique Hernandez 3357aa13a6 Merge pull request #264 from splunk/dependabot/pip/semantic-version-2.8.3 
Bump semantic-version from 2.8.2 to 2.8.3
 2019-11-25 16:26:54 -05:00
dependabot-preview[bot] a33bcba90a Merge pull request #260 from splunk/dependabot/pip/jsonschema-3.2.0 2019-11-25 21:26:32 +00:00
dependabot-preview[bot] 2cd7356d2d Merge pull request #267 from splunk/dependabot/pip/virtualenv-16.7.8 2019-11-25 21:25:46 +00:00
dependabot-preview[bot] 23efd5eb70 Bump semantic-version from 2.8.2 to 2.8.3 
Bumps [semantic-version](https://github.com/rbarrois/python-semanticversion) from 2.8.2 to 2.8.3.
- [Release notes](https://github.com/rbarrois/python-semanticversion/releases)
- [Changelog](https://github.com/rbarrois/python-semanticversion/blob/master/ChangeLog)
- [Commits](https://github.com/rbarrois/python-semanticversion/compare/2.8.2...2.8.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 19:40:18 +00:00
dependabot-preview[bot] 4652ffa7d9 Bump jsonschema from 3.1.1 to 3.2.0 
Bumps [jsonschema](https://github.com/Julian/jsonschema) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/Julian/jsonschema/releases)
- [Changelog](https://github.com/Julian/jsonschema/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/Julian/jsonschema/compare/v3.1.1...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 19:40:16 +00:00
Bhavin Patel cef48c974c Merge pull request #262 from splunk/python3_CI 
Python3 ci
 2019-11-25 11:39:00 -08:00
Jose Enrique Hernandez c00727de8d Merge pull request #263 from splunk/CRL-1493 
Removed data sources from fraud searches that were not Splunk
 2019-11-25 13:15:14 -05:00
divious1 20842510b0 added pyhthon3 dev tools to make appinspect work 2019-11-25 13:12:15 -05:00
dependabot-preview[bot] db67a65598 Bump virtualenv from 16.7.7 to 16.7.8 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 16.7.7 to 16.7.8.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changes.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/16.7.7...16.7.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 05:47:26 +00:00
Jason Brewer 12d6587e4a CRL-1646 - Adjusting how to implement to quote the string and escape the newlines to soothe our tool chain. 2019-11-22 10:21:29 -08:00
David Dorsey d33adf4423 Removed data sources from fraud searches that were not Splunk 
Stream since the sourcetype in the search specifies Stream
 2019-11-21 21:10:56 -06:00
divious1 4011bec8f1 looks like slim still on python2.7 https://dev.splunk.com/enterprise/docs/releaseapps/packagingtoolkit/installpkgtoolkit\#Update-your-Python-PATH 2019-11-21 20:41:55 -05:00
divious1 e1b39fba45 updating requirements for python3 2019-11-21 20:21:53 -05:00
divious1 be5cd1dd13 migrating docgen to python3 2019-11-21 20:21:24 -05:00
divious1 20c4a18215 moving validate to python3 2019-11-21 20:17:15 -05:00
divious1 2663d3f88b updating generate to use python3 2019-11-21 20:14:44 -05:00
Jason Brewer 37cdeab391 CRL-1646 - fixing stats. 2019-11-21 15:33:02 -08:00
Jason Brewer 3d1846cd2e CRL-1646 - Updating to add input_filter macro to searches and to reference baseline search from detection search. 2019-11-21 14:01:14 -08:00
Jason Brewer f21db84f76 CRL-1646 - Modifying search to see if my yml is wrong for a multiline object with pipes. 2019-11-20 15:50:39 -08:00
Jason Brewer b3b4f4e892 CRL-1646 - Implemented : Update Detection for abnormally_high_instances_launched to use MLTK 2019-11-20 14:18:50 -08:00