David Dorsey
|
04bc97cafa
|
Made my changes a string....
|
2019-12-11 13:24:04 -08:00 |
|
David Dorsey
|
bfff607ed2
|
Fixed time window errors.
|
2019-12-11 12:54:56 -08:00 |
|
bpatel
|
7b5b704d77
|
removing package files for conflicts
|
2019-12-11 12:52:48 -08:00 |
|
divious1
|
89e8cc1faf
|
found a bug with how generate was producing the file, needs to be a string
|
2019-12-11 15:28:26 -05:00 |
|
divious1
|
f8e3113412
|
added summariesonly and fixed ctime
|
2019-12-11 15:14:49 -05:00 |
|
divious1
|
f9bdf7e0e4
|
introduced security_content_ctime as a macro, renamed all our searches to use this new macro, removing ES dependecy
|
2019-12-11 14:59:03 -05:00 |
|
research bot
|
9bebd23959
|
updating docs and package bits [ci skip]
|
2019-12-11 16:02:42 +00:00 |
|
divious1
|
8148eefc5c
|
Merge branch 'develop' of github.com:splunk/security-content into develop
v1.0.46
|
2019-12-11 10:56:11 -05:00 |
|
divious1
|
570fd7fe31
|
removing extra version
|
2019-12-11 10:55:52 -05:00 |
|
dependabot-preview[bot]
|
fb99597f09
|
Bump importlib-metadata from 1.2.0 to 1.3.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 1.2.0 to 1.3.0.
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2019-12-11 14:12:08 +00:00 |
|
Patrick Bareiss
|
c1a9ba0852
|
added ctime macro to ESCU
|
2019-12-11 14:10:21 +01:00 |
|
Patrick Bareiss
|
3da0cbf8b2
|
added ctime macro to ESCU
|
2019-12-11 14:04:42 +01:00 |
|
Patrick Bareiss
|
cf13afa6c4
|
bug fix of generate.py
|
2019-12-11 13:29:27 +01:00 |
|
Patrick Bareiss
|
ab2118a012
|
New version of analytics story credential dumping
|
2019-12-11 13:13:14 +01:00 |
|
Patrick Bareiss
|
44f1bb3efb
|
Merge branch 'develop' into CRL-1698_new_version_credential_dumping
|
2019-12-11 12:30:43 +01:00 |
|
Patrick Bareiss
|
46ac72ebf6
|
WIP: Credential Dumping Story
|
2019-12-11 12:29:41 +01:00 |
|
research bot
|
54b0e8a18f
|
updating docs and package bits [ci skip]
|
2019-12-10 20:41:52 +00:00 |
|
jzsplunk
|
d628c4d450
|
Merge pull request #276 from splunk/readme_fix
fix typo in path for doc json.
|
2019-12-10 10:04:52 -08:00 |
|
jzsplunk
|
8769b07019
|
Merge branch 'develop' into readme_fix
|
2019-12-10 09:49:10 -08:00 |
|
dependabot-preview[bot]
|
d6dfa714ef
|
Merge pull request #275 from splunk/dependabot/pip/more-itertools-8.0.2
|
2019-12-10 16:56:04 +00:00 |
|
dependabot-preview[bot]
|
761718ee93
|
Merge pull request #272 from splunk/dependabot/pip/importlib-metadata-1.2.0
|
2019-12-10 16:55:41 +00:00 |
|
rvaldez617
|
a1a60292ec
|
Merge pull request #274 from splunk/python_dual_support_ESCU
splunk8.0 ready AKA migration to python3
|
2019-12-10 09:53:47 -07:00 |
|
bpatel
|
c558d126c9
|
remove re direct and using open window
|
2019-12-09 18:01:00 -08:00 |
|
bpatel
|
19c466b9ad
|
point run analytics button to ASX
|
2019-12-09 17:27:40 -08:00 |
|
Jose Enrique Hernandez
|
20ee1638cc
|
Merge branch 'develop' into python_dual_support_ESCU
|
2019-12-09 20:17:41 -05:00 |
|
divious1
|
ef46ef25c6
|
remove runstory JS which is no longer needed
|
2019-12-09 20:14:05 -05:00 |
|
divious1
|
df121a2b87
|
corrected broken link in readme
|
2019-12-09 20:07:01 -05:00 |
|
divious1
|
ca1faca05d
|
fixing broken link in readme
|
2019-12-09 20:04:26 -05:00 |
|
divious1
|
55f4361f4c
|
fixing broken links in stories
|
2019-12-09 19:59:39 -05:00 |
|
divious1
|
477207a76e
|
adding timeout
|
2019-12-09 19:49:45 -05:00 |
|
divious1
|
a8b9f493e1
|
constraint link checking to md files
|
2019-12-09 19:40:23 -05:00 |
|
divious1
|
177dfe9499
|
added verbosity to the link check
|
2019-12-09 19:34:29 -05:00 |
|
divious1
|
b3219d3b21
|
updating feedback center
|
2019-12-09 19:24:02 -05:00 |
|
jzsplunk
|
fd049298b0
|
fix typo in path for doc json.
|
2019-12-09 13:57:16 -08:00 |
|
dependabot-preview[bot]
|
2e129dcf9d
|
Bump more-itertools from 7.2.0 to 8.0.2
Bumps [more-itertools](https://github.com/erikrose/more-itertools) from 7.2.0 to 8.0.2.
- [Release notes](https://github.com/erikrose/more-itertools/releases)
- [Commits](https://github.com/erikrose/more-itertools/compare/v7.2.0...v8.0.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2019-12-06 14:12:35 +00:00 |
|
dependabot-preview[bot]
|
939e62c187
|
Bump importlib-metadata from 0.23 to 1.2.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.23 to 1.2.0.
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2019-12-06 03:23:32 +00:00 |
|
Bhavin Patel
|
ac45c4ddf9
|
Merge pull request #271 from splunk/dependabot/pip/pyyaml-5.2
Bump pyyaml from 5.1.2 to 5.2
|
2019-12-05 19:22:39 -08:00 |
|
Bhavin Patel
|
41e9d7b29c
|
Merge pull request #273 from splunk/dependabot/pip/identify-1.4.8
Bump identify from 1.4.7 to 1.4.8
|
2019-12-05 19:22:23 -08:00 |
|
dependabot-preview[bot]
|
ad2a2dd160
|
Bump identify from 1.4.7 to 1.4.8
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.7 to 1.4.8.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.7...v1.4.8)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2019-12-05 14:12:42 +00:00 |
|
divious1
|
3fc2db13e5
|
porting dnstwist to python3
|
2019-12-04 21:42:58 -05:00 |
|
dependabot-preview[bot]
|
166549aadb
|
Bump pyyaml from 5.1.2 to 5.2
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.1.2 to 5.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.1.2...5.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2019-12-03 14:12:26 +00:00 |
|
divious1
|
c813355782
|
removed runstory and added a note that was migrated to ASX github
|
2019-11-27 13:56:10 -05:00 |
|
divious1
|
92e3489d72
|
remove escu next steps and AR actions
|
2019-11-26 15:03:09 -05:00 |
|
research bot
|
2d2dd8d87b
|
updating docs and package bits [ci skip]
|
2019-11-26 19:36:35 +00:00 |
|
divious1
|
1582272ed3
|
Merge tag 'v1.0.44'
|
2019-11-26 12:57:49 -05:00 |
|
jcbrewer5D6400
|
a5f1973ddd
|
Merge pull request #268 from splunk/CRL-1645
CRL-1645 - New detection "Abnormally High AWS Instances Terminated by…
v1.0.45
|
2019-11-25 18:29:44 -08:00 |
|
Jason Brewer
|
322e711936
|
CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description.
|
2019-11-25 18:17:06 -08:00 |
|
Jason Brewer
|
95f73c9039
|
CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK"
|
2019-11-25 18:06:33 -08:00 |
|
jcbrewer5D6400
|
92078c2ec4
|
Merge pull request #261 from splunk/CRL-1646
CRL-1646 - Implemented : Update Detection for abnormally_high_instanc…
|
2019-11-25 17:10:04 -08:00 |
|
Jason Brewer
|
951d055cc3
|
CRL-1646 - adding Abnormally High AWS Instances Launched [mltk] to cloud_cryptomining story.
|
2019-11-25 17:01:20 -08:00 |
|