admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,082 Commits 697 Branches 195 Tags
testing_detection_path_interception
Commit Graph

2082 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Bareiss bd6df9e9e2 testing 2020-06-26 10:33:01 +02:00
Patrick Bareiss a354a9f1cd testing 2020-06-26 10:10:01 +02:00
research bot 8f57b5362f updating docs and package bits [ci skip] 2020-06-25 22:40:24 +00:00
Bhavin Patel 0506f93a4f Merge pull request #520 from splunk/security_hub_response 
Security hub response
v3.0.3 		2020-06-25 14:08:55 -07:00
Bhavin Patel 836c123569 Update abnormally_high_aws_instances_launched_by_user.yml 2020-06-25 13:57:54 -07:00
rvaldez617 b5e4ebff23 Merge branch 'develop' into security_hub_response 2020-06-25 14:45:01 -06:00
Bhavin Patel 0cf88ffdc2 Merge pull request #524 from splunk/awsgcpk8s 
Awsgcpk8s
 2020-06-25 13:34:46 -07:00
Bhavin Patel 957b39837f Merge branch 'develop' into awsgcpk8s 2020-06-25 13:26:56 -07:00
Bhavin Patel 1cddcfaa25 Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:57:22 -07:00
Rod Soto e432a4ab50 fixedservaccounatct 2020-06-25 14:52:41 -04:00
David Dorsey 07ce28f433 Updated baseline deployments 2020-06-25 13:49:48 -05:00
Rod Soto 6ea3604481 fixedaddedcondition 2020-06-25 14:36:18 -04:00
Patrick Bareiss 000b56b0ee add cron schedule 2020-06-25 18:52:51 +02:00
Bhavin Patel 4b13ddff94 Merge pull request #521 from splunk/awsgcpk8s 
Awsgcpk8s
 2020-06-25 09:50:31 -07:00
Bhavin Patel cbcd614236 Merge branch 'develop' into awsgcpk8s 2020-06-25 09:39:42 -07:00
divious1 a433fa15b3 updating region 2020-06-25 12:38:37 -04:00
David Dorsey 301bf51a8a Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:34:38 -05:00
trogdorsey fb3c848285 Merge pull request #522 from splunk/improve_deployment_handling 
new deployment configurations
 2020-06-25 11:30:45 -05:00
Patrick Bareiss 7a236f3dd0 new deployment configurations 2020-06-25 10:02:36 +02:00
Patrick Bareiss 85f13dd926 new deployment configurations 2020-06-25 09:53:44 +02:00
David Dorsey c90fcb2e9f Update how to implement 2020-06-25 00:14:24 -05:00
David Dorsey 8438bf71e8 Fixed the first time previously seen windows service search to work 
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update

Made the default deployment template be -70m@m to -10m@m

Added a new deployment template for hourly baseline caches
 2020-06-25 00:09:30 -05:00
Bhavin Patel e2fa17ebde Merge branch 'develop' into security_hub_response 2020-06-24 17:22:16 -07:00
bpatel c812c56d87 updates with T1530 2020-06-24 17:21:02 -07:00
bpatel 3c1d9cb416 adding T1098 2020-06-24 17:11:33 -07:00
bpatel f955708bfc adding mitre id 2020-06-24 17:09:27 -07:00
Jose Enrique Hernandez 23e86ec9ad Merge pull request #519 from splunk/dependabot/pip/virtualenv-20.0.25 
Bump virtualenv from 20.0.23 to 20.0.25
 2020-06-24 16:23:01 -04:00
Jose Enrique Hernandez 08386f30d7 Merge branch 'develop' into dependabot/pip/virtualenv-20.0.25 2020-06-24 15:52:44 -04:00
bpatel 7490418230 fixing errors for validate 2020-06-24 11:06:22 -07:00
Bhavin Patel 06245b9f3d Merge branch 'develop' into awsgcpk8s 2020-06-24 10:42:26 -07:00
Bhavin Patel 300e56f4dc Merge pull request #518 from splunk/CRL-1787_improvements_credential_dumping 
update detection for credential dumping
 2020-06-24 10:36:32 -07:00
Rod Soto 3c9fd3d376 awskubectl 2020-06-23 22:11:05 -04:00
Rod Soto b6737234fe awsfailureserv 2020-06-23 21:20:37 -04:00
bpatel 047680d82e untested playbook- remove for now 2020-06-23 16:59:30 -07:00
Rod Soto 368c72824d k8sawssensitverole 2020-06-23 19:44:44 -04:00
Jose Enrique Hernandez b734ee908b Merge branch 'develop' into CRL-1787_improvements_credential_dumping 2020-06-23 17:52:22 -04:00
Rod Soto d7bb41378e awssentobj 2020-06-23 15:58:11 -04:00
Rod Soto 8f89d328d6 RBACAWSsearch 2020-06-23 15:32:12 -04:00
Rod Soto 8225616f3d firstgcpawssearch 2020-06-23 14:51:45 -04:00
dependabot-preview[bot] 2f6a4898aa Bump virtualenv from 20.0.23 to 20.0.25 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.23 to 20.0.25.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.23...20.0.25)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-06-23 18:28:23 +00:00
Bhavin Patel e94bbc285d Merge pull request #517 from splunk/remove_dead_links 
we can run this manually lets take it off CI, causes too much noise
 2020-06-23 10:46:29 -07:00
divious1 5af4d06843 we can run this manually lets take it off CI, causes too much noise 2020-06-23 12:57:14 -04:00
Patrick Bareiss 8a5017fc3e update detection for credential dumping 2020-06-23 18:57:03 +02:00
divious1 e079f84573 added scheduling for nightly 2020-06-22 23:44:33 -04:00
divious1 e1a04dc037 fixed spacing to get job to validate 2020-06-22 23:42:41 -04:00
bpatel c1ccd745a2 updated search 2020-06-22 13:34:58 -07:00
P4T12ICK a23a6908b6 Merge pull request #513 from splunk/broken_url_update 
Broken url update
 2020-06-22 09:35:03 +02:00
Patrick Bareiss a15641cdbb Merge branch 'develop' into broken_url_update 2020-06-22 09:29:14 +02:00
dependabot-preview[bot] 120208df4d Merge pull request #514 from splunk/dependabot/pip/identify-1.4.20 2020-06-21 23:30:07 +00:00
dependabot-preview[bot] c869cf1c93 Bump identify from 1.4.19 to 1.4.20 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.19 to 1.4.20.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.19...v1.4.20)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-06-21 23:23:24 +00:00