Commit Graph

2257 Commits

Author SHA1 Message Date
David Dorsey 04bc97cafa Made my changes a string.... 2019-12-11 13:24:04 -08:00
David Dorsey bfff607ed2 Fixed time window errors. 2019-12-11 12:54:56 -08:00
bpatel 7b5b704d77 removing package files for conflicts 2019-12-11 12:52:48 -08:00
divious1 89e8cc1faf found a bug with how generate was producing the file, needs to be a string 2019-12-11 15:28:26 -05:00
divious1 f8e3113412 added summariesonly and fixed ctime 2019-12-11 15:14:49 -05:00
divious1 f9bdf7e0e4 introduced security_content_ctime as a macro, renamed all our searches to use this new macro, removing ES dependecy 2019-12-11 14:59:03 -05:00
research bot 9bebd23959 updating docs and package bits [ci skip] 2019-12-11 16:02:42 +00:00
divious1 8148eefc5c Merge branch 'develop' of github.com:splunk/security-content into develop v1.0.46 2019-12-11 10:56:11 -05:00
divious1 570fd7fe31 removing extra version 2019-12-11 10:55:52 -05:00
dependabot-preview[bot] fb99597f09 Bump importlib-metadata from 1.2.0 to 1.3.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 1.2.0 to 1.3.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 14:12:08 +00:00
Patrick Bareiss c1a9ba0852 added ctime macro to ESCU 2019-12-11 14:10:21 +01:00
Patrick Bareiss 3da0cbf8b2 added ctime macro to ESCU 2019-12-11 14:04:42 +01:00
Patrick Bareiss cf13afa6c4 bug fix of generate.py 2019-12-11 13:29:27 +01:00
Patrick Bareiss ab2118a012 New version of analytics story credential dumping 2019-12-11 13:13:14 +01:00
Patrick Bareiss 44f1bb3efb Merge branch 'develop' into CRL-1698_new_version_credential_dumping 2019-12-11 12:30:43 +01:00
Patrick Bareiss 46ac72ebf6 WIP: Credential Dumping Story 2019-12-11 12:29:41 +01:00
research bot 54b0e8a18f updating docs and package bits [ci skip] 2019-12-10 20:41:52 +00:00
jzsplunk d628c4d450 Merge pull request #276 from splunk/readme_fix
fix typo in path for doc json.
2019-12-10 10:04:52 -08:00
jzsplunk 8769b07019 Merge branch 'develop' into readme_fix 2019-12-10 09:49:10 -08:00
dependabot-preview[bot] d6dfa714ef Merge pull request #275 from splunk/dependabot/pip/more-itertools-8.0.2 2019-12-10 16:56:04 +00:00
dependabot-preview[bot] 761718ee93 Merge pull request #272 from splunk/dependabot/pip/importlib-metadata-1.2.0 2019-12-10 16:55:41 +00:00
rvaldez617 a1a60292ec Merge pull request #274 from splunk/python_dual_support_ESCU
splunk8.0 ready AKA migration to python3
2019-12-10 09:53:47 -07:00
bpatel c558d126c9 remove re direct and using open window 2019-12-09 18:01:00 -08:00
bpatel 19c466b9ad point run analytics button to ASX 2019-12-09 17:27:40 -08:00
Jose Enrique Hernandez 20ee1638cc Merge branch 'develop' into python_dual_support_ESCU 2019-12-09 20:17:41 -05:00
divious1 ef46ef25c6 remove runstory JS which is no longer needed 2019-12-09 20:14:05 -05:00
divious1 df121a2b87 corrected broken link in readme 2019-12-09 20:07:01 -05:00
divious1 ca1faca05d fixing broken link in readme 2019-12-09 20:04:26 -05:00
divious1 55f4361f4c fixing broken links in stories 2019-12-09 19:59:39 -05:00
divious1 477207a76e adding timeout 2019-12-09 19:49:45 -05:00
divious1 a8b9f493e1 constraint link checking to md files 2019-12-09 19:40:23 -05:00
divious1 177dfe9499 added verbosity to the link check 2019-12-09 19:34:29 -05:00
divious1 b3219d3b21 updating feedback center 2019-12-09 19:24:02 -05:00
jzsplunk fd049298b0 fix typo in path for doc json. 2019-12-09 13:57:16 -08:00
dependabot-preview[bot] 2e129dcf9d Bump more-itertools from 7.2.0 to 8.0.2
Bumps [more-itertools](https://github.com/erikrose/more-itertools) from 7.2.0 to 8.0.2.
- [Release notes](https://github.com/erikrose/more-itertools/releases)
- [Commits](https://github.com/erikrose/more-itertools/compare/v7.2.0...v8.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-06 14:12:35 +00:00
dependabot-preview[bot] 939e62c187 Bump importlib-metadata from 0.23 to 1.2.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.23 to 1.2.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-06 03:23:32 +00:00
Bhavin Patel ac45c4ddf9 Merge pull request #271 from splunk/dependabot/pip/pyyaml-5.2
Bump pyyaml from 5.1.2 to 5.2
2019-12-05 19:22:39 -08:00
Bhavin Patel 41e9d7b29c Merge pull request #273 from splunk/dependabot/pip/identify-1.4.8
Bump identify from 1.4.7 to 1.4.8
2019-12-05 19:22:23 -08:00
dependabot-preview[bot] ad2a2dd160 Bump identify from 1.4.7 to 1.4.8
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.7 to 1.4.8.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.7...v1.4.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-05 14:12:42 +00:00
divious1 3fc2db13e5 porting dnstwist to python3 2019-12-04 21:42:58 -05:00
dependabot-preview[bot] 166549aadb Bump pyyaml from 5.1.2 to 5.2
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.1.2 to 5.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.1.2...5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-03 14:12:26 +00:00
divious1 c813355782 removed runstory and added a note that was migrated to ASX github 2019-11-27 13:56:10 -05:00
divious1 92e3489d72 remove escu next steps and AR actions 2019-11-26 15:03:09 -05:00
research bot 2d2dd8d87b updating docs and package bits [ci skip] 2019-11-26 19:36:35 +00:00
divious1 1582272ed3 Merge tag 'v1.0.44' 2019-11-26 12:57:49 -05:00
jcbrewer5D6400 a5f1973ddd Merge pull request #268 from splunk/CRL-1645
CRL-1645 - New detection "Abnormally High AWS Instances Terminated by…
v1.0.45
2019-11-25 18:29:44 -08:00
Jason Brewer 322e711936 CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description. 2019-11-25 18:17:06 -08:00
Jason Brewer 95f73c9039 CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK" 2019-11-25 18:06:33 -08:00
jcbrewer5D6400 92078c2ec4 Merge pull request #261 from splunk/CRL-1646
CRL-1646 - Implemented : Update Detection for abnormally_high_instanc…
2019-11-25 17:10:04 -08:00
Jason Brewer 951d055cc3 CRL-1646 - adding Abnormally High AWS Instances Launched [mltk] to cloud_cryptomining story. 2019-11-25 17:01:20 -08:00