admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,257 Commits 697 Branches 195 Tags
update_mapping_code
Commit Graph

468 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00
bpatel 58f47148b9 ymls and updates 2020-08-04 14:04:38 -07:00
bpatel 63f266629e porting ymls into a newe PR 2020-08-04 12:55:12 -07:00
Bhavin Patel 6e595aa13a Merge pull request #590 from splunk/nocaps 
Nocaps
 2020-08-04 09:54:56 -07:00
Patrick Bareiss 9d7a8c2e3e Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe 2020-07-29 10:55:02 +02:00
Joseph Zadeh 3f93f64bfd [TR-038] update mitre id for detection. add test for net exe specific behavior 2020-07-28 11:47:58 -07:00
Rod Soto a4e1a402ca anothererrorfixed 2020-07-28 12:03:21 -04:00
Rod Soto d597c6f64c Merge branch 'develop' into nocaps 2020-07-28 11:53:17 -04:00
Rod Soto 182b0551aa fixedsearch 2020-07-28 11:52:34 -04:00
Patrick Bareiss 074b782dd0 detection tested 2020-07-28 15:43:57 +02:00
Patrick Bareiss 004eeb2347 merged 2020-07-28 14:20:14 +02:00
Patrick Bareiss 8db3edafe2 tested detection 2020-07-28 14:17:10 +02:00
Rod Soto f53f148f00 seeifitworks 2020-07-28 08:10:19 -04:00
Rod Soto 9b3a81da87 fixedsearches 2020-07-28 07:46:50 -04:00
Patrick Bareiss f74a0fe273 successful tested 2020-07-28 11:14:34 +02:00
Rod Soto ba11f8f183 awslm5searches 2020-07-27 20:33:01 -04:00
Rod Soto 1ac5d3fca4 awslm3rd 2020-07-27 19:19:10 -04:00
Rod Soto 9f2c49f532 2searchstsassumerole 2020-07-27 17:57:12 -04:00
Rod Soto 3584bb4a31 newawslmsearches 2020-07-27 17:20:05 -04:00
Jose Enrique Hernandez 025a161f7b Update smb_traffic_spike.yml 2020-07-24 12:32:22 -04:00
Patrick Bareiss a38b71f11d converted detections to subtechniques 2020-07-22 10:59:55 +02:00
Patrick Bareiss e7966e76b1 converted detections to subtechniques 2020-07-22 10:45:43 +02:00
Patrick Bareiss bd0e7ca2ba converted detections to subtechniques 2020-07-22 10:34:54 +02:00
Bhavin Patel bb906c721a Update gcp_kubernetes_cluster_pod_scan_detection.yml 
corrected how to implement
 2020-07-20 10:47:18 -07:00
Rod Soto ef98461e89 newgcpk8podsearch 2020-07-17 22:11:19 -04:00
bpatel 73507de98c updating spl and FP 2020-07-14 17:50:43 -07:00
bpatel ea717a66fc adding ffilter, sigh 2020-07-13 17:05:30 -07:00
bpatel 3b1e639db2 rename file 2020-07-13 16:30:28 -07:00
Bhavin Patel da9ecd71fa Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-07-13 16:12:47 -07:00
Bhavin Patel a8c021a41e Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml 
typos
 2020-07-13 16:06:17 -07:00
Rod Soto 71032608db Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches 2020-07-13 19:03:08 -04:00
Rod Soto 6dbc996d9c fixbackticks 2020-07-13 19:01:57 -04:00
Bhavin Patel 62ab2b89e9 Merge branch 'develop' into gcpk8plussearches 2020-07-13 15:47:35 -07:00
Rod Soto 57fbe00de0 fixednamesmacros 2020-07-13 18:45:46 -04:00
Rod Soto 7fe2b89386 fixedsrctypewithmacro 2020-07-13 18:20:38 -04:00
Rod Soto b504edb561 fixedsourcetypeissue 2020-07-13 18:19:06 -04:00
Bhavin Patel 186196684d Update processes_launching_netsh.yml 
updated the screen, test screenshot in the comments
 2020-07-13 09:53:43 -07:00
Rod Soto f0fe477413 k8sgcpkubectlcallssarch 2020-07-11 23:38:08 -04:00
Rod Soto c32b00dc7b k8sgcpservaccforbiddenfailure 2020-07-11 22:50:41 -04:00
Rod Soto 4895d18619 k8sgcpsensitiverole 2020-07-11 21:26:00 -04:00
Rod Soto 4935f2a095 k8sgcpsenobjaccess 2020-07-11 20:55:48 -04:00
Rod Soto ce8d85ad06 gcpRBACdetection 2020-07-11 19:40:46 -04:00
divious1 e9cf649460 fixing merge error 2020-07-10 23:10:02 -04:00
jkuepker 6f54e15d91 Changed WHERE clause to fix broken search and renamed values(Processes.process) to Processes.process to match other field names for readability. 2020-07-10 22:11:09 -04:00
Rod Soto 4d9f634adf k8sgcpmactivesabypod 2020-07-10 19:39:21 -04:00
Rod Soto 3f79168731 addedgcpscansearch 2020-07-10 08:35:59 -04:00
jzsplunk 5cc42f10de Merge branch 'develop' into new_testing_file 2020-07-10 00:57:35 -07:00
divious1 04e8a8291e Merge branch 'develop' into T1526detections 2020-07-09 22:55:00 -04:00
Rod Soto e4a0589a4b addedmitretechnique 2020-07-09 22:24:16 -04:00
David Dorsey da9aa3de41 Removed data model module name from output 2020-07-09 11:42:51 -05:00