Patrick Bareiss
729419b24d
Updated searches
2020-05-25 11:06:36 +02:00
Patrick Bareiss
052a7d7872
run generate
2020-05-25 10:46:40 +02:00
Patrick Bareiss
6b966dd4e3
merged with develop
2020-05-25 10:44:29 +02:00
Patrick Bareiss
48882024ad
merged with develop
2020-05-25 10:43:58 +02:00
divious1
2ed0930441
merging in asx button fix
2020-05-22 14:23:11 -04:00
divious1
841db96e07
removed flake8, added more verbosity to generate
2020-05-22 01:30:25 -04:00
divious1
2512a90f59
minor readme fixes
2020-05-22 00:30:56 -04:00
dependabot-preview[bot]
3789e49d9a
Merge pull request #468 from splunk/dependabot/pip/identify-1.4.16
2020-05-21 23:51:38 +00:00
dependabot-preview[bot]
b25b580ce0
Bump identify from 1.4.15 to 1.4.16
...
Bumps [identify](https://github.com/chriskuehl/identify ) from 1.4.15 to 1.4.16.
- [Release notes](https://github.com/chriskuehl/identify/releases )
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.15...v1.4.16 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-05-21 23:45:36 +00:00
Rod Soto
b4577d54c8
fixedazk8srolesto
2020-05-21 18:52:12 -04:00
Rod Soto
6086fa8e2b
azk8srolesto
2020-05-21 18:41:32 -04:00
Bhavin Patel
c422d7191a
Merge pull request #465 from splunk/spec_3_feature
...
generate a mitre enrichment lookup
2020-05-21 08:48:47 -07:00
Rod Soto
2e7d50b6d0
newstoryconfsecazk8s
2020-05-20 19:09:29 -04:00
Rod Soto
0748085eca
azpodscandetect
2020-05-20 15:38:53 -04:00
Rod Soto
5cdd5ac784
fixedawsmacrosnametoaz
2020-05-20 14:41:09 -04:00
Bhavin Patel
87494bfa21
Merge pull request #464 from jwindley-splunk/patch-4
...
Update reg_manipulating_services.yml
2020-05-20 11:11:52 -07:00
Patrick Bareiss
c5e25d7355
generate a mitre enrichment lookup
2020-05-20 14:23:16 +02:00
jwindley-splunk
a4ec26d2a0
Update reg_manipulating_services.yml
...
$src_user$ from notable description did not exist, so needed to go.
At the same time, proposed to add the user(s) in to the stats table and change the description to reference $user$ instead.
2020-05-20 12:56:25 +01:00
Bhavin Patel
39b8472322
Merge pull request #460 from splunk/spec_3_readme
...
updated Readme
2020-05-19 15:33:43 -07:00
Rod Soto
4ac5dc4dff
k8sScan
2020-05-19 17:55:28 -04:00
Bhavin Patel
873c46184e
Merge pull request #459 from jwindley-splunk/patch-3
...
Update create_or_delete_network_shares.yml
2020-05-19 11:56:20 -07:00
Patrick Bareiss
c76ebad945
updated Readme
2020-05-19 17:00:31 +02:00
Patrick Bareiss
d2350dd6a8
updated Readme
2020-05-19 16:53:35 +02:00
P4T12ICK
e48da8e952
Merge pull request #458 from splunk/spec3_ui
...
WIP -- Spec 3 ui updates
2020-05-19 16:12:59 +02:00
jwindley-splunk
e3f6752724
Update create_or_delete_network_shares.yml
...
By having process=*share* AND process=*delete* you will miss any creation of shares. If you are just looking for creating OR deleting of shares you just need to look for the word *share*
2020-05-19 10:35:27 +01:00
bpatel
ad6cf3a4c2
adding docs for spec files
2020-05-18 17:00:15 -07:00
bpatel
2b33d4fe86
spec documentation using jsonschema2md
2020-05-18 16:41:58 -07:00
bpatel
8d303f57c5
remove old files
2020-05-18 16:28:14 -07:00
bpatel
4124fedf12
remove mitre tatic from filters
2020-05-18 15:46:56 -07:00
bpatel
bb190be50d
remove Providing Technologies
2020-05-18 14:21:47 -07:00
Bhavin Patel
2e8f9dfee5
Merge pull request #456 from zelienka/patch-1
...
Fixed typo in search, search optimization
2020-05-18 13:07:37 -07:00
bpatel
f2fcabe907
link update
2020-05-18 12:25:30 -07:00
bpatel
9f11288073
supress fields updated
2020-05-18 12:23:07 -07:00
Bhavin Patel
eb6039e449
Merge pull request #457 from jwindley-splunk/patch-2
...
Update attrib_to_hide_files.yml
2020-05-18 11:58:04 -07:00
bpatel
d72c44f626
minor link update
2020-05-18 11:40:04 -07:00
Vilém Zelienka
530037ad16
Fixed typo in search, search optimization
...
Changes Processs to Processes.
Moved process search to tstats.
2020-05-18 15:42:03 +02:00
jwindley-splunk
2b0c42b8dc
Update attrib_to_hide_files.yml
...
Adding dest
2020-05-18 12:11:33 +01:00
Bhavin Patel
2982fc3e8a
Merge pull request #452 from splunk/new_generate_script
...
New generate script
2020-05-15 12:07:58 -07:00
Patrick Bareiss
fcfea82cd4
make small changes
2020-05-14 11:30:28 +02:00
Patrick Bareiss
e9e81cd1de
bug in generate
2020-05-14 10:11:16 +02:00
Patrick Bareiss
9a50a74ee7
bug in generate
2020-05-14 10:00:55 +02:00
Patrick Bareiss
347c94032e
bug in generate
2020-05-13 11:09:33 +02:00
Patrick Bareiss
eedb7c49e2
bug in generate
2020-05-13 10:46:58 +02:00
Patrick Bareiss
3ac6c62937
bug in generate
2020-05-13 10:30:46 +02:00
Patrick Bareiss
9b86f038de
Merge branch 'new_generate_script' of https://github.com/splunk/security-content into new_generate_script
2020-05-13 10:10:55 +02:00
Patrick Bareiss
f375256925
bug in generate
2020-05-13 10:10:42 +02:00
bpatel
4836bad27e
removing deprecated html files
2020-05-12 12:28:04 -07:00
Patrick Bareiss
b332406c91
bug in generate
2020-05-12 14:43:24 +02:00
Patrick Bareiss
18722520e9
bug in generate
2020-05-12 14:31:56 +02:00
Patrick Bareiss
707e21278f
bug in generate
2020-05-12 14:19:23 +02:00