admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,257 Commits 697 Branches 195 Tags
update_mapping_code
Commit Graph

2257 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel c1747aaa21 Merge branch 'develop' into TR-49 2020-07-15 10:29:46 -07:00
Bhavin Patel a1a2ce7e0c Merge pull request #559 from splunk/update_README 
overhauled or readme
 2020-07-15 10:26:24 -07:00
dependabot-preview[bot] d7a324cb01 Bump virtualenv from 20.0.26 to 20.0.27 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.26 to 20.0.27.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/20.0.27/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.26...20.0.27)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-15 17:22:31 +00:00
Bhavin Patel d5e560c4d6 Merge branch 'develop' into update_README 2020-07-15 10:15:33 -07:00
Bhavin Patel b034e224c4 Merge pull request #547 from splunk/mitre_maps 
Adds a MITRE ATTACK Nav Map of all of our detections
 2020-07-15 10:15:09 -07:00
Bhavin Patel 52f8c45892 Merge branch 'develop' into update_README 2020-07-15 10:12:29 -07:00
bpatel 73507de98c updating spl and FP 2020-07-14 17:50:43 -07:00
divious1 170660e742 fixing space 2020-07-14 16:13:28 -04:00
divious1 c2a89d1dd7 adding mitre map to readme 2020-07-14 16:05:26 -04:00
Bhavin Patel d23064ec18 Merge pull request #557 from splunk/gcpk8plussearches 
Gcpk8plussearches
 2020-07-14 11:32:30 -07:00
divious1 48ee5353bd overhauled or readme 2020-07-14 00:11:11 -04:00
bpatel ea717a66fc adding ffilter, sigh 2020-07-13 17:05:30 -07:00
Bhavin Patel 68ee505590 Merge branch 'develop' into gcpk8plussearches 2020-07-13 16:45:48 -07:00
dependabot-preview[bot] 7475e16264 Merge pull request #558 from splunk/dependabot/pip/typing-3.7.4.3 2020-07-13 23:37:01 +00:00
dependabot-preview[bot] 2ee93f0075 Bump typing from 3.7.4.1 to 3.7.4.3 
Bumps [typing](https://github.com/python/typing) from 3.7.4.1 to 3.7.4.3.
- [Release notes](https://github.com/python/typing/releases)
- [Commits](https://github.com/python/typing/compare/3.7.4.1...3.7.4.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-13 23:32:08 +00:00
bpatel 3b1e639db2 rename file 2020-07-13 16:30:28 -07:00
Bhavin Patel da9ecd71fa Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-07-13 16:12:47 -07:00
Bhavin Patel a8c021a41e Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml 
typos
 2020-07-13 16:06:17 -07:00
Rod Soto 71032608db Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches 2020-07-13 19:03:08 -04:00
Rod Soto 6dbc996d9c fixbackticks 2020-07-13 19:01:57 -04:00
Bhavin Patel 62ab2b89e9 Merge branch 'develop' into gcpk8plussearches 2020-07-13 15:47:35 -07:00
Rod Soto 57fbe00de0 fixednamesmacros 2020-07-13 18:45:46 -04:00
Rod Soto 7fe2b89386 fixedsrctypewithmacro 2020-07-13 18:20:38 -04:00
Rod Soto b504edb561 fixedsourcetypeissue 2020-07-13 18:19:06 -04:00
Bhavin Patel 2c27c80c8a Merge pull request #552 from splunk/netsh-fix 
Netsh fix
 2020-07-13 09:59:29 -07:00
Bhavin Patel 186196684d Update processes_launching_netsh.yml 
updated the screen, test screenshot in the comments
 2020-07-13 09:53:43 -07:00
Rod Soto f0fe477413 k8sgcpkubectlcallssarch 2020-07-11 23:38:08 -04:00
Rod Soto c32b00dc7b k8sgcpservaccforbiddenfailure 2020-07-11 22:50:41 -04:00
Rod Soto 4895d18619 k8sgcpsensitiverole 2020-07-11 21:26:00 -04:00
Rod Soto 4935f2a095 k8sgcpsenobjaccess 2020-07-11 20:55:48 -04:00
Rod Soto ce8d85ad06 gcpRBACdetection 2020-07-11 19:40:46 -04:00
Jose Enrique Hernandez 046d8ab015 Merge branch 'develop' into mitre_maps 2020-07-10 23:18:59 -04:00
divious1 e9cf649460 fixing merge error 2020-07-10 23:10:02 -04:00
jkuepker 6f54e15d91 Changed WHERE clause to fix broken search and renamed values(Processes.process) to Processes.process to match other field names for readability. 2020-07-10 22:11:09 -04:00
Rod Soto 4d9f634adf k8sgcpmactivesabypod 2020-07-10 19:39:21 -04:00
dependabot-preview[bot] 074955617d Merge pull request #549 from splunk/dependabot/pip/identify-1.4.23 2020-07-10 18:59:36 +00:00
dependabot-preview[bot] 0bb83f89ec Bump identify from 1.4.21 to 1.4.23 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.21 to 1.4.23.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.21...v1.4.23)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-10 18:53:44 +00:00
Rod Soto 3f79168731 addedgcpscansearch 2020-07-10 08:35:59 -04:00
jzsplunk 3a41964a07 Merge pull request #543 from splunk/new_testing_file 
new pass condition handling
 2020-07-10 01:06:52 -07:00
jzsplunk 5cc42f10de Merge branch 'develop' into new_testing_file 2020-07-10 00:57:35 -07:00
Jose Enrique Hernandez 1db067750d Merge pull request #546 from splunk/T1526detections 
addedmitretechnique
 2020-07-10 02:02:35 -04:00
divious1 5fd3f63947 fixed but with actors 2020-07-10 01:35:55 -04:00
divious1 274fb0e9dc updating files to use latest release 2020-07-09 23:50:30 -04:00
divious1 f88f696b3c minor path bug 2020-07-09 23:08:41 -04:00
divious1 04e8a8291e Merge branch 'develop' into T1526detections 2020-07-09 22:55:00 -04:00
divious1 7693f9fbe2 added a way to generate a mitre map on every release that matches what we have tagged in our detections 2020-07-09 22:47:32 -04:00
Rod Soto e4a0589a4b addedmitretechnique 2020-07-09 22:24:16 -04:00
Bhavin Patel 553625f860 Merge pull request #545 from splunk/CRL-1770 
Removed data model module name from output
 2020-07-09 12:26:16 -07:00
Bhavin Patel 12f9b68ec0 Merge branch 'develop' into CRL-1770 2020-07-09 11:39:11 -07:00
David Dorsey da9aa3de41 Removed data model module name from output 2020-07-09 11:42:51 -05:00