admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,257 Commits 697 Branches 195 Tags
update_mapping_code
Commit Graph

2257 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot-preview[bot] d0a384fdb5 Bump zipp from 0.5.2 to 0.6.0 
Bumps [zipp](https://github.com/jaraco/zipp) from 0.5.2 to 0.6.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v0.5.2...v0.6.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-26 06:14:38 +00:00
Brianna 5972936635 Update dyn_dns_queries.json 2019-08-23 12:09:04 -07:00
Brianna db5c8576d4 Update dyn_dns_queries.json 
Various changes for grammar, punctuation, clarity, flow, and formatting.
 2019-08-23 12:03:57 -07:00
Bhavin Patel 6fe35074e1 Merge pull request #190 from splunk/add_missing_tactic 
Modified att&ck mappings for these files. Mostly just added the high …
 2019-08-22 09:41:24 -07:00
Rico Valdez 1cc3fe534b Modified att&ck mappings for these files. Mostly just added the high level tactic, but also tweaked some incluidng smb spike searches and ones about creating accounts 2019-08-22 09:57:45 -06:00
rvaldez617 2a58224efa Merge pull request #187 from splunk/v2Manifests 
Removed incorrect baselines to detection manifest
 2019-08-16 11:10:12 -06:00
Bhavin Patel a78378c0ea Merge pull request #186 from splunk/CRL-1598_metadata_bug 
CRL-1598 removed incorrect stanza
 2019-08-15 17:48:48 -07:00
bpatel 42788cc933 Owner reviewed 2019-08-15 17:37:44 -07:00
divious1 d8975a5f70 CRL-1598 removed incorrect stanza 2019-08-15 10:14:36 -04:00
rvaldez617 b2bd09a588 Merge pull request #183 from splunk/CRL-1592_DNS_Query_Length_bug 
CRL-1592 Error with DNS Query Length With High Standard Deviation detection
 2019-08-14 10:11:54 -06:00
Jose Enrique Hernandez 019791e8bd Merge pull request #185 from splunk/CRL-1591 
remove incorrect stanzas
 2019-08-14 12:10:32 -04:00
Jose Enrique Hernandez 36c856ebde Merge pull request #184 from splunk/dependabot/pip/identify-1.4.6 
Bump identify from 1.4.5 to 1.4.6
 2019-08-14 12:09:34 -04:00
Jose Enrique Hernandez 984a6879ce Merge pull request #182 from splunk/dependabot/pip/pre-commit-1.18.1 
Bump pre-commit from 1.17.0 to 1.18.1
 2019-08-14 12:08:18 -04:00
Jose Enrique Hernandez 4667357506 Merge pull request #181 from splunk/dependabot/pip/configparser-3.8.1 
Bump configparser from 3.7.4 to 3.8.1
 2019-08-14 12:07:48 -04:00
Jose Enrique Hernandez 64bd4259e2 Merge pull request #177 from splunk/dependabot/pip/pyyaml-5.1.2 
Bump pyyaml from 5.1.1 to 5.1.2
 2019-08-14 12:05:33 -04:00
Jose Enrique Hernandez 2f46c0cca7 Merge pull request #178 from splunk/dependabot/pip/jsonschema-3.0.2 
Bump jsonschema from 3.0.1 to 3.0.2
 2019-08-14 12:04:59 -04:00
divious1 f278ff5b9d updated to v2 spec 2019-08-14 12:03:19 -04:00
Jose Enrique Hernandez 902a2dff7d Merge pull request #180 from splunk/v2Manifests 
V2 manifests
 2019-08-14 11:58:06 -04:00
Rico Valdez dacd5b1d55 removed src field from table, as it is not available and results in a blank column. Also incremented the version as a significant change was made to the search 2019-08-13 15:46:49 -06:00
bpatel 1dc4964261 remove incorrect stanzas 2019-08-13 11:53:57 -07:00
dependabot-preview[bot] 0e0e442e68 Bump identify from 1.4.5 to 1.4.6 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.5 to 1.4.6.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.5...v1.4.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-13 06:05:08 +00:00
divious1 5168a396ef updated search 2019-08-12 19:42:30 -04:00
bpatel 5e72c3b94d errrors in file 2019-08-12 15:27:27 -07:00
dependabot-preview[bot] d2ab5d7aba Bump pre-commit from 1.17.0 to 1.18.1 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 1.17.0 to 1.18.1.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v1.17.0...v1.18.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-12 06:58:11 +00:00
dependabot-preview[bot] 0a389a8612 Bump configparser from 3.7.4 to 3.8.1 
Bumps [configparser](https://github.com/jaraco/configparser) from 3.7.4 to 3.8.1.
- [Release notes](https://github.com/jaraco/configparser/releases)
- [Changelog](https://github.com/jaraco/configparser/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/configparser/compare/3.7.4...3.8.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-12 06:57:30 +00:00
Rico Valdez 8eb0084ae0 re-applying some fixes for channel. Also, merging in develop broke the spec file, so fixed that. 2019-08-06 20:47:35 -06:00
Rico Valdez 83b3a18f71 removed all .bu files and re-generated the investigation manifests with the fixed field name and values as strings. 2019-08-06 20:30:03 -06:00
divious1 6c226ce055 renamed offset keys for timing 2019-08-06 18:00:52 -04:00
divious1 b82eaa7750 fixing merge conflicts 2019-08-06 17:45:35 -04:00
Rico Valdez 5836446617 fixed channel in stories, minor tweaks to detections. 
Also - updated spec to allow validation to pass for UBA detection, as well as updated validation script
 2019-08-06 14:58:39 -06:00
bpatel 402581dacd Merge branch 'develop' into run_detections 2019-08-06 13:48:32 -07:00
Rico Valdez b8711d99be modifications to baselines, investigations as appropriate and added usecase field to stories 2019-08-06 13:38:09 -06:00
dependabot-preview[bot] 49b0f2c80f Bump jsonschema from 3.0.1 to 3.0.2 
Bumps [jsonschema](https://github.com/Julian/jsonschema) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/Julian/jsonschema/releases)
- [Changelog](https://github.com/Julian/jsonschema/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/Julian/jsonschema/compare/v3.0.1...v3.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-02 05:56:48 +00:00
dependabot-preview[bot] 79b9d5e402 Bump pyyaml from 5.1.1 to 5.1.2 
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-01 06:02:46 +00:00
divious1 8e866fab4f Merge tag 'v1.0.41' 2019-07-30 12:38:36 -04:00
research bot bf7ed96204 updating docs and package bits [ci skip] 2019-07-29 20:58:00 +00:00
Jose Enrique Hernandez 54e360bed9 Merge pull request #157 from splunk/dependabot/pip/typing-3.7.4 
Bump typing from 3.6.6 to 3.7.4
v1.0.41 		2019-07-29 14:57:19 -04:00
Jose Enrique Hernandez 663e294aae Merge pull request #158 from splunk/dependabot/pip/pathlib2-2.3.4 
Bump pathlib2 from 2.3.3 to 2.3.4
 2019-07-29 14:56:57 -04:00
Jose Enrique Hernandez 0fc91f64c8 Merge pull request #159 from splunk/dependabot/pip/zipp-0.5.2 
Bump zipp from 0.5.1 to 0.5.2
 2019-07-29 14:56:44 -04:00
Bhavin Patel 9f66220d16 Merge pull request #171 from splunk/move_doc_gen_collapse 
minor modifications base on Jes feedback
 2019-07-29 11:55:37 -07:00
dependabot-preview[bot] b60ee685c3 Bump pathlib2 from 2.3.3 to 2.3.4 
Bumps [pathlib2](https://github.com/mcmtroffaes/pathlib2) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/mcmtroffaes/pathlib2/releases)
- [Changelog](https://github.com/mcmtroffaes/pathlib2/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/mcmtroffaes/pathlib2/compare/2.3.3...2.3.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-07-29 18:52:14 +00:00
dependabot-preview[bot] 72de6fbb3b Bump typing from 3.6.6 to 3.7.4 
Bumps [typing](https://docs.python.org/3/library/typing.html) from 3.6.6 to 3.7.4.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-07-29 18:51:51 +00:00
dependabot-preview[bot] 37fd7a921c Bump zipp from 0.5.1 to 0.5.2 
Bumps [zipp](https://github.com/jaraco/zipp) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v0.5.1...v0.5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-07-29 18:51:51 +00:00
Jose Enrique Hernandez e0a9944b82 Merge pull request #165 from splunk/dependabot/pip/cfgv-2.0.1 
Bump cfgv from 2.0.0 to 2.0.1
 2019-07-29 14:51:21 -04:00
Jose Enrique Hernandez 8dc0cbb997 Merge pull request #174 from splunk/dependabot/pip/pyrsistent-0.15.4 
Bump pyrsistent from 0.15.2 to 0.15.4
 2019-07-29 14:50:56 -04:00
Jose Enrique Hernandez c5d9a6eb7b Merge pull request #175 from splunk/dependabot/pip/virtualenv-16.7.2 
Bump virtualenv from 16.6.1 to 16.7.2
 2019-07-29 14:50:35 -04:00
Jose Enrique Hernandez a24d613d7b Merge pull request #176 from splunk/dependabot/pip/importlib-metadata-0.19 
Bump importlib-metadata from 0.18 to 0.19
 2019-07-29 14:49:42 -04:00
divious1 b7fcf3ade1 fixing issue where i wiped out most of the original code 2019-07-29 14:47:02 -04:00
bpatel e762136534 Merge branch 'develop' 2019-07-29 11:43:00 -07:00
Rico Valdez a550d79be6 fixed duplicate investigations and added new content for latest release 2019-07-29 11:53:01 -06:00