Commit Graph

2082 Commits

Author SHA1 Message Date
bpatel 6ec66236dd search and datamodel update 2019-05-07 11:18:24 -07:00
Jose Enrique Hernandez 98b66cc478 Merge pull request #61 from splunk/brianna_as_reviwer
adding brianna as the default reviewer
2019-05-07 14:15:18 -04:00
divious1 a32dc49b0d adding brianna as the default reviewer 2019-05-07 14:14:06 -04:00
Philip Royer 67cbbde5d7 Merge pull request #60 from splunk/CRL-1416
updates to name and links
2019-05-06 15:10:34 -04:00
bpatel 6284acdf37 updates to name and links 2019-05-06 11:48:35 -07:00
divious1 cb367c1998 Merge branch 'develop' of github.com:splunk/security-content into develop 2019-05-03 23:43:18 -04:00
divious1 ebcfb72e50 updating automating on the project 2019-05-03 23:36:20 -04:00
Jason Brewer e25dc0ed9b CRL-1428 - Updating story/manifest to v2 and updating a related investigative search, get_notable_info.json, to v2. I missed it in my last sweep. 2019-05-01 10:24:24 -07:00
Jason Brewer 7950452a95 CRL-1428 - Updating relevant searches to spec v2. 2019-04-30 17:03:34 -07:00
research bot ad553d50d4 updating src files [ci skip] 2019-04-29 21:25:06 +00:00
Jose Enrique Hernandez 7a8f2d01a9 Merge pull request #59 from splunk/file_writes_fix
fixing broken detection search - suspicious_file_writes
v1.0.37
2019-04-29 17:13:50 -04:00
Rico Valdez f761e9066c fixing broken detection search - suspicious_file_writes 2019-04-29 14:35:27 -06:00
rvaldez617 77ad425799 Merge pull request #58 from splunk/spec_update
minor rendering updates
2019-04-29 13:53:49 -06:00
divious1 34f4a1ca98 typo 2019-04-29 15:51:57 -04:00
divious1 50fb65a58c minor rendering updates 2019-04-29 15:31:44 -04:00
research bot caf14955d5 updating src files [ci skip] 2019-04-26 19:56:42 +00:00
Jose Enrique Hernandez a9b081e97d Merge pull request #57 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-26 15:54:43 -04:00
bpatel f298c52387 date updates 2019-04-26 11:22:34 -07:00
Jason Brewer ddad8fb162 CRL-1428 - Adding new user City, Region, and Country detections and needed baseline changes. 2019-04-25 15:59:30 -07:00
bpatel 93ace4dac7 narrative update 2019-04-25 15:30:39 -07:00
Bhavin Patel b57d3641ce Merge pull request #55 from splunk/escu_2.0_bugs
fixing bugs
2019-04-25 14:55:40 -07:00
divious1 e552a8831e fixing bugs 2019-04-25 17:53:28 -04:00
Jose Enrique Hernandez 7df41e7d37 Merge pull request #54 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-25 16:20:25 -04:00
bpatel 52f20cf934 created date in use case lib 2019-04-25 12:20:04 -07:00
bpatel e69b9bf457 markdown for use_Case_lib 2019-04-25 11:52:28 -07:00
Jose Enrique Hernandez ba97452af9 Merge pull request #53 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-25 14:05:37 -04:00
divious1 20406758b6 updated datamodels and providing tech rendering 2019-04-25 13:05:27 -04:00
bpatel 7e6c59287a write only once 2019-04-24 18:18:49 -07:00
bpatel 5f7f42e487 update to use spec 1 2019-04-24 18:10:40 -07:00
bpatel 76457c0454 providing tech update on analytic_Stories 2019-04-24 16:22:53 -07:00
bpatel 1abb8e5d7e generate code 2019-04-24 15:09:11 -07:00
bpatel aeb70c9ec7 reference 2019-04-24 15:08:31 -07:00
divious1 b4fe5a97ac updated src files 2019-04-24 17:51:21 -04:00
divious1 e9168daea5 Merge branch 'develop' of github.com:splunk/security-content into develop 2019-04-24 17:45:36 -04:00
divious1 5f04862fdd updating conf files 2019-04-24 17:45:28 -04:00
Jose Enrique Hernandez 5be7983c5d Merge pull request #52 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
2019-04-24 17:24:11 -04:00
bpatel a258d98598 narratives 2019-04-24 13:17:11 -07:00
bpatel fc5743fd38 references 2019-04-24 11:42:16 -07:00
Bhavin Patel ac53da2583 Merge pull request #51 from splunk/CRL-1379_detect_phishing_frameworks
updating playbook url
2019-04-24 11:05:32 -07:00
bpatel 87ce0942e3 url in howtoimplement 2019-04-24 11:04:34 -07:00
divious1 1ac0a6f336 updating playbook url 2019-04-24 14:01:14 -04:00
Russ Nolen 6b8daec1ac Merge pull request #44 from splunk/CRL-1379_detect_phishing_frameworks
Crl 1379 detect phishing frameworks
2019-04-24 11:06:21 -05:00
Russ Nolen de0dc66549 fixing url for evilginx to evilginx2 2019-04-24 11:02:16 -05:00
bpatel 4cb88ab6ff search update- syntax fixing 2019-04-23 20:26:06 -07:00
bpatel 62df393b0a manifest update with narrative 2019-04-23 19:59:11 -07:00
bpatel a7506fa712 new conf files 2019-04-23 19:24:37 -07:00
bpatel 88e42f2242 ascii ugh 2019-04-23 19:22:58 -07:00
bpatel 541fcafcd0 manifest 2019-04-23 19:18:28 -07:00
bpatel a0967ddaff phantom dets 2019-04-23 17:39:58 -07:00
bpatel f9bfe416fa minor 2019-04-23 17:21:30 -07:00