admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,082 Commits 697 Branches 195 Tags
testing_detection_path_interception
Commit Graph

2082 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
bpatel 4e17ca4774 Revert "cron update" 
This reverts commit 746878cab9.
 2019-04-18 16:15:24 -07:00
bpatel 72106a2bf0 dyn dns 2.0 2019-04-18 15:17:56 -07:00
bpatel 746878cab9 cron update 2019-04-18 15:03:35 -07:00
bpatel 8c88bc8463 more searches to 2.0 2019-04-18 15:00:55 -07:00
bpatel ce0eeade0f spec updates, searches to 2.0 2019-04-18 14:39:01 -07:00
bpatel 3d43375341 fixes and udpates 2019-04-18 13:15:16 -07:00
bpatel 29ac460ce8 uuid 2019-04-18 12:57:22 -07:00
bpatel 68bc80c267 story file 2019-04-18 12:52:02 -07:00
divious1 89cd9071ac updating a few v2 searches 2019-04-18 15:33:40 -04:00
divious1 8293a204b8 updating CI to use our new scripts 2019-04-18 15:20:23 -04:00
divious1 d41996fa34 wrapped up most logic for the generator 2019-04-18 15:15:42 -04:00
divious1 e0142d44fd fixed CI 2019-04-18 14:42:43 -04:00
divious1 63a4e6582f removed dns_hijack as it will be over written in v2 2019-04-18 14:38:24 -04:00
divious1 bdfc72749a updated validate script, included phantom in generator, fixed some stories to v2 2019-04-18 11:28:26 -04:00
divious1 1fc8eb4d83 added generator for savedsearches, need to implement phantom 2019-04-17 22:05:43 -04:00
divious1 7a03712b5d adding usecase lib 2019-04-17 10:25:34 -04:00
bpatel c1bb108cca search updates 2019-04-16 18:20:27 -07:00
bpatel a449fbb8f7 updating Censys in providing technologies 2019-04-16 11:25:19 -07:00
bpatel cff0563d28 phantom invesigation object 2019-04-16 11:20:37 -07:00
divious1 7dd840e551 all objects now land in story generator 2019-04-15 21:43:26 -04:00
bpatel 2663ea9510 spec update for a mitre field 2019-04-15 14:10:45 -07:00
bpatel 920c3397e9 validate.py in CI config 2019-04-15 14:01:02 -07:00
bpatel 18c76cd1ee Merge branch 'develop' into CRL-1391_phishing_payload_detection 2019-04-15 13:58:47 -07:00
bpatel 4509938d99 strings for a config 2019-04-15 13:39:53 -07:00
bpatel 86662c3c0a CI errors 2019-04-15 13:37:49 -07:00
bpatel cc8868007d config update to use validate.py 2019-04-15 13:21:37 -07:00
bpatel a23969f1c1 Merge branch 'develop' into CRL-1379_detect_phishing_frameworks 2019-04-15 13:18:02 -07:00
bpatel 1b7f6b66bd search update for joining the Web logs 2019-04-15 12:33:59 -07:00
divious1 3fdc15a41b added baselines to generator 2019-04-15 15:12:15 -04:00
bpatel ef1652997b OR clause in the search 2019-04-15 11:27:39 -07:00
bpatel d8fde46723 new csv files for legit domains 2019-04-15 11:15:48 -07:00
bpatel 86d64712ce description: 2019-04-15 10:41:37 -07:00
Jose Enrique Hernandez 61c394bb9c added phishlets for other providers 2019-04-15 11:39:53 -04:00
Jose Enrique Hernandez bb6ac0cb08 included other evilnginx detections 2019-04-15 11:35:10 -04:00
bpatel 63d6194192 outlook search 2019-04-12 18:03:52 -07:00
divious1 221d9a0341 added 2 to evilginx name and update generator 2019-04-12 18:57:00 -04:00
divious1 4148ea43c3 added to phishing story 2019-04-11 14:45:34 -04:00
divious1 0c4c5390ea adding detection of lnk file launching a process 2019-04-11 13:43:26 -04:00
divious1 ad6a52f49c adding phishing payloads story 2019-04-09 16:02:27 -04:00
Bhavin Patel 420f8d1488 Merge pull request #41 from splunk/api_prep 
support API for ESCU App
 2019-04-09 12:46:56 -07:00
Jose Enrique Hernandez 5512f7f543 Merge pull request #36 from splunk/1297 
risk parameter
 2019-04-09 15:42:12 -04:00
Jose Enrique Hernandez 3265358511 Merge branch 'develop' into 1297 2019-04-09 15:41:21 -04:00
Jose Enrique Hernandez 23c6b08a03 Merge pull request #37 from splunk/1296 
local is true
 2019-04-09 15:40:35 -04:00
Jose Enrique Hernandez 4be0765249 Merge pull request #39 from splunk/CRL-1349 
Updating the search to use endpoint DM, CI issue was fixed in another branch.
 2019-04-09 15:40:04 -04:00
Jose Enrique Hernandez e031f41ec9 Merge pull request #40 from splunk/CRL-1386 
application to endpoint
 2019-04-09 15:28:20 -04:00
divious1 46f68d62fe updating config for ci 2019-04-09 15:20:05 -04:00
divious1 6ecf6b5bb0 updating config for ci 2019-04-09 15:16:42 -04:00
divious1 360f53345e updating setup tools to fix error 2019-04-09 14:58:07 -04:00
divious1 c5ba54be63 updating setup tools to fix error 2019-04-09 14:56:25 -04:00
divious1 6d50218d43 updating CI to latest python image 2019-04-09 14:47:53 -04:00