Commit Graph

2257 Commits

Author SHA1 Message Date
Patrick Bareiss 729419b24d Updated searches 2020-05-25 11:06:36 +02:00
Patrick Bareiss 052a7d7872 run generate 2020-05-25 10:46:40 +02:00
Patrick Bareiss 6b966dd4e3 merged with develop 2020-05-25 10:44:29 +02:00
Patrick Bareiss 48882024ad merged with develop 2020-05-25 10:43:58 +02:00
divious1 2ed0930441 merging in asx button fix 2020-05-22 14:23:11 -04:00
divious1 841db96e07 removed flake8, added more verbosity to generate 2020-05-22 01:30:25 -04:00
divious1 2512a90f59 minor readme fixes 2020-05-22 00:30:56 -04:00
dependabot-preview[bot] 3789e49d9a Merge pull request #468 from splunk/dependabot/pip/identify-1.4.16 2020-05-21 23:51:38 +00:00
dependabot-preview[bot] b25b580ce0 Bump identify from 1.4.15 to 1.4.16
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.15 to 1.4.16.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.15...v1.4.16)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-21 23:45:36 +00:00
Rod Soto b4577d54c8 fixedazk8srolesto 2020-05-21 18:52:12 -04:00
Rod Soto 6086fa8e2b azk8srolesto 2020-05-21 18:41:32 -04:00
Bhavin Patel c422d7191a Merge pull request #465 from splunk/spec_3_feature
generate a mitre enrichment lookup
2020-05-21 08:48:47 -07:00
Rod Soto 2e7d50b6d0 newstoryconfsecazk8s 2020-05-20 19:09:29 -04:00
Rod Soto 0748085eca azpodscandetect 2020-05-20 15:38:53 -04:00
Rod Soto 5cdd5ac784 fixedawsmacrosnametoaz 2020-05-20 14:41:09 -04:00
Bhavin Patel 87494bfa21 Merge pull request #464 from jwindley-splunk/patch-4
Update reg_manipulating_services.yml
2020-05-20 11:11:52 -07:00
Patrick Bareiss c5e25d7355 generate a mitre enrichment lookup 2020-05-20 14:23:16 +02:00
jwindley-splunk a4ec26d2a0 Update reg_manipulating_services.yml
$src_user$ from notable description did not exist, so needed to go.

At the same time, proposed to add the user(s) in to the stats table and change the description to reference $user$ instead.
2020-05-20 12:56:25 +01:00
Bhavin Patel 39b8472322 Merge pull request #460 from splunk/spec_3_readme
updated Readme
2020-05-19 15:33:43 -07:00
Rod Soto 4ac5dc4dff k8sScan 2020-05-19 17:55:28 -04:00
Bhavin Patel 873c46184e Merge pull request #459 from jwindley-splunk/patch-3
Update create_or_delete_network_shares.yml
2020-05-19 11:56:20 -07:00
Patrick Bareiss c76ebad945 updated Readme 2020-05-19 17:00:31 +02:00
Patrick Bareiss d2350dd6a8 updated Readme 2020-05-19 16:53:35 +02:00
P4T12ICK e48da8e952 Merge pull request #458 from splunk/spec3_ui
WIP -- Spec 3 ui updates
2020-05-19 16:12:59 +02:00
jwindley-splunk e3f6752724 Update create_or_delete_network_shares.yml
By having process=*share* AND process=*delete* you will miss any creation of shares. If you are just looking for creating OR deleting of shares you just need to look for the word *share*
2020-05-19 10:35:27 +01:00
bpatel ad6cf3a4c2 adding docs for spec files 2020-05-18 17:00:15 -07:00
bpatel 2b33d4fe86 spec documentation using jsonschema2md 2020-05-18 16:41:58 -07:00
bpatel 8d303f57c5 remove old files 2020-05-18 16:28:14 -07:00
bpatel 4124fedf12 remove mitre tatic from filters 2020-05-18 15:46:56 -07:00
bpatel bb190be50d remove Providing Technologies 2020-05-18 14:21:47 -07:00
Bhavin Patel 2e8f9dfee5 Merge pull request #456 from zelienka/patch-1
Fixed typo in search, search optimization
2020-05-18 13:07:37 -07:00
bpatel f2fcabe907 link update 2020-05-18 12:25:30 -07:00
bpatel 9f11288073 supress fields updated 2020-05-18 12:23:07 -07:00
Bhavin Patel eb6039e449 Merge pull request #457 from jwindley-splunk/patch-2
Update attrib_to_hide_files.yml
2020-05-18 11:58:04 -07:00
bpatel d72c44f626 minor link update 2020-05-18 11:40:04 -07:00
Vilém Zelienka 530037ad16 Fixed typo in search, search optimization
Changes Processs to Processes.
Moved process search to tstats.
2020-05-18 15:42:03 +02:00
jwindley-splunk 2b0c42b8dc Update attrib_to_hide_files.yml
Adding dest
2020-05-18 12:11:33 +01:00
Bhavin Patel 2982fc3e8a Merge pull request #452 from splunk/new_generate_script
New generate script
2020-05-15 12:07:58 -07:00
Patrick Bareiss fcfea82cd4 make small changes 2020-05-14 11:30:28 +02:00
Patrick Bareiss e9e81cd1de bug in generate 2020-05-14 10:11:16 +02:00
Patrick Bareiss 9a50a74ee7 bug in generate 2020-05-14 10:00:55 +02:00
Patrick Bareiss 347c94032e bug in generate 2020-05-13 11:09:33 +02:00
Patrick Bareiss eedb7c49e2 bug in generate 2020-05-13 10:46:58 +02:00
Patrick Bareiss 3ac6c62937 bug in generate 2020-05-13 10:30:46 +02:00
Patrick Bareiss 9b86f038de Merge branch 'new_generate_script' of https://github.com/splunk/security-content into new_generate_script 2020-05-13 10:10:55 +02:00
Patrick Bareiss f375256925 bug in generate 2020-05-13 10:10:42 +02:00
bpatel 4836bad27e removing deprecated html files 2020-05-12 12:28:04 -07:00
Patrick Bareiss b332406c91 bug in generate 2020-05-12 14:43:24 +02:00
Patrick Bareiss 18722520e9 bug in generate 2020-05-12 14:31:56 +02:00
Patrick Bareiss 707e21278f bug in generate 2020-05-12 14:19:23 +02:00