Commit Graph

2082 Commits

Author SHA1 Message Date
Rico Valdez 8eb0084ae0 re-applying some fixes for channel. Also, merging in develop broke the spec file, so fixed that. 2019-08-06 20:47:35 -06:00
Rico Valdez 83b3a18f71 removed all .bu files and re-generated the investigation manifests with the fixed field name and values as strings. 2019-08-06 20:30:03 -06:00
divious1 6c226ce055 renamed offset keys for timing 2019-08-06 18:00:52 -04:00
divious1 b82eaa7750 fixing merge conflicts 2019-08-06 17:45:35 -04:00
Rico Valdez 5836446617 fixed channel in stories, minor tweaks to detections.
Also - updated spec to allow validation to pass for UBA detection, as well as updated validation script
2019-08-06 14:58:39 -06:00
bpatel 402581dacd Merge branch 'develop' into run_detections 2019-08-06 13:48:32 -07:00
Rico Valdez b8711d99be modifications to baselines, investigations as appropriate and added usecase field to stories 2019-08-06 13:38:09 -06:00
dependabot-preview[bot] 49b0f2c80f Bump jsonschema from 3.0.1 to 3.0.2
Bumps [jsonschema](https://github.com/Julian/jsonschema) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/Julian/jsonschema/releases)
- [Changelog](https://github.com/Julian/jsonschema/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/Julian/jsonschema/compare/v3.0.1...v3.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-08-02 05:56:48 +00:00
dependabot-preview[bot] 79b9d5e402 Bump pyyaml from 5.1.1 to 5.1.2
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-08-01 06:02:46 +00:00
divious1 8e866fab4f Merge tag 'v1.0.41' 2019-07-30 12:38:36 -04:00
research bot bf7ed96204 updating docs and package bits [ci skip] 2019-07-29 20:58:00 +00:00
Jose Enrique Hernandez 54e360bed9 Merge pull request #157 from splunk/dependabot/pip/typing-3.7.4
Bump typing from 3.6.6 to 3.7.4
v1.0.41
2019-07-29 14:57:19 -04:00
Jose Enrique Hernandez 663e294aae Merge pull request #158 from splunk/dependabot/pip/pathlib2-2.3.4
Bump pathlib2 from 2.3.3 to 2.3.4
2019-07-29 14:56:57 -04:00
Jose Enrique Hernandez 0fc91f64c8 Merge pull request #159 from splunk/dependabot/pip/zipp-0.5.2
Bump zipp from 0.5.1 to 0.5.2
2019-07-29 14:56:44 -04:00
Bhavin Patel 9f66220d16 Merge pull request #171 from splunk/move_doc_gen_collapse
minor modifications base on Jes feedback
2019-07-29 11:55:37 -07:00
dependabot-preview[bot] b60ee685c3 Bump pathlib2 from 2.3.3 to 2.3.4
Bumps [pathlib2](https://github.com/mcmtroffaes/pathlib2) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/mcmtroffaes/pathlib2/releases)
- [Changelog](https://github.com/mcmtroffaes/pathlib2/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/mcmtroffaes/pathlib2/compare/2.3.3...2.3.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-29 18:52:14 +00:00
dependabot-preview[bot] 72de6fbb3b Bump typing from 3.6.6 to 3.7.4
Bumps [typing](https://docs.python.org/3/library/typing.html) from 3.6.6 to 3.7.4.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-29 18:51:51 +00:00
dependabot-preview[bot] 37fd7a921c Bump zipp from 0.5.1 to 0.5.2
Bumps [zipp](https://github.com/jaraco/zipp) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v0.5.1...v0.5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-29 18:51:51 +00:00
Jose Enrique Hernandez e0a9944b82 Merge pull request #165 from splunk/dependabot/pip/cfgv-2.0.1
Bump cfgv from 2.0.0 to 2.0.1
2019-07-29 14:51:21 -04:00
Jose Enrique Hernandez 8dc0cbb997 Merge pull request #174 from splunk/dependabot/pip/pyrsistent-0.15.4
Bump pyrsistent from 0.15.2 to 0.15.4
2019-07-29 14:50:56 -04:00
Jose Enrique Hernandez c5d9a6eb7b Merge pull request #175 from splunk/dependabot/pip/virtualenv-16.7.2
Bump virtualenv from 16.6.1 to 16.7.2
2019-07-29 14:50:35 -04:00
Jose Enrique Hernandez a24d613d7b Merge pull request #176 from splunk/dependabot/pip/importlib-metadata-0.19
Bump importlib-metadata from 0.18 to 0.19
2019-07-29 14:49:42 -04:00
divious1 b7fcf3ade1 fixing issue where i wiped out most of the original code 2019-07-29 14:47:02 -04:00
bpatel e762136534 Merge branch 'develop' 2019-07-29 11:43:00 -07:00
Rico Valdez a550d79be6 fixed duplicate investigations and added new content for latest release 2019-07-29 11:53:01 -06:00
divious1 5dde18ff54 resolving conflicts 2019-07-29 13:52:42 -04:00
dependabot-preview[bot] c7f3256dc0 Bump importlib-metadata from 0.18 to 0.19
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.18 to 0.19.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-29 06:29:12 +00:00
dependabot-preview[bot] f0a5ccfee6 Bump virtualenv from 16.6.1 to 16.7.2
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 16.6.1 to 16.7.2.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changes.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/16.6.1...16.7.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-29 06:28:36 +00:00
dependabot-preview[bot] 730f7da8ab Bump pyrsistent from 0.15.2 to 0.15.4
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.15.2 to 0.15.4.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.15.2...v0.15.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-29 06:28:04 +00:00
Bhavin Patel 2e4418bbfe Merge pull request #173 from splunk/endpoint_bugfix
fixes for 2 broken searches - CRL-1586 & 1587
2019-07-26 13:06:12 -07:00
Bhavin Patel fab3eea2b4 Merge pull request #156 from splunk/CRL-1572_doc_gen
CRL-1572 doc-gen
2019-07-26 13:02:35 -07:00
Rico Valdez 4687636a53 fixes for 2 broken searches - CRL-1586 & 1587 2019-07-26 14:01:27 -06:00
Bhavin Patel 03195cf747 Merge pull request #172 from splunk/CRL-1584-updated-spec-docs
Crl 1584 updated spec docs
2019-07-26 13:01:24 -07:00
Bhavin Patel ff645ae86a Merge pull request #170 from splunk/CRL-1580
fixing a key in manifest
2019-07-26 12:53:15 -07:00
briannablacet b1ac41233f Update story.spec.json
Various changes for punctuation, spelling, grammar, etc.
2019-07-26 12:52:29 -07:00
divious1 a41d7a9991 minor modifications base on Jes feedback 2019-07-26 15:48:09 -04:00
bpatel 6c15dc4db4 fixing a key in manifest 2019-07-26 12:41:44 -07:00
Bhavin Patel fa63216143 Merge pull request #161 from splunk/CRL-1577
CRL-1577: updating usage details configuations
2019-07-26 12:30:05 -07:00
Bhavin Patel 57118d085c Merge pull request #167 from splunk/CRL-1580
CRL 1580 :UBA Anomaly
2019-07-26 12:26:53 -07:00
briannablacet 6002457d6c Update detections.spec.json
Various changes for spelling, grammar, and flow. Restoring sanity to a sea of chaotic and unruly punctuation.
2019-07-25 18:22:39 -07:00
briannablacet d70c80b62c Update investigations.spec.json 2019-07-25 17:14:44 -07:00
briannablacet 16ae8c67ef Update baselines.spec.json 2019-07-25 17:11:24 -07:00
briannablacet c37ecd6f97 Update investigations.spec.json 2019-07-25 15:48:11 -07:00
briannablacet 09116b5cf9 Update baselines.spec.json
Various changes for grammar, punctuation, and flow.
2019-07-25 15:44:39 -07:00
briannablacet 8bf2c3c491 Update investigations.spec.json
Various changes for grammar, spelling, consistency, and flow.
2019-07-25 15:10:16 -07:00
rvaldez617 5090c726fd Merge pull request #168 from splunk/CRL-1584_schema_doc_update
CRL-1584 updated spec docs
2019-07-25 15:29:49 -06:00
divious1 132e21b14e updated docs 2019-07-25 17:13:31 -04:00
Rico Valdez bfef6024fe more tweaks/fixes to manifests - also adjustments to validation script and spec files. Successfully validates with exception of usecase in stories 2019-07-25 14:56:40 -06:00
Rico Valdez ad3d9ad570 added null cron_schedule where necessary 2019-07-25 10:17:01 -06:00
Rico Valdez 80c6870a8a All manifests converted to spec v2 2019-07-25 09:48:06 -06:00