divious1
|
5015acef51
|
Merge branch 'migrate_app_es_soc' of github.com:splunk/security-content into migrate_app_es_soc
|
2019-05-22 10:45:12 -07:00 |
|
divious1
|
81b722eae4
|
wrong wondering on ci skip
|
2019-05-22 10:45:06 -07:00 |
|
research bot
|
adbe1dee01
|
updating package files
|
2019-05-22 17:44:49 +00:00 |
|
divious1
|
6b73ea0575
|
updating build
|
2019-05-22 10:35:41 -07:00 |
|
divious1
|
5de3ea7792
|
updating build
|
2019-05-22 10:34:59 -07:00 |
|
divious1
|
ecd1b919e6
|
split ci job for build and committing content
|
2019-05-22 10:33:33 -07:00 |
|
research bot
|
4e385c59ba
|
updating package files
|
2019-05-21 23:31:11 +00:00 |
|
research bot
|
494feb93e2
|
updating package files
|
2019-05-21 23:30:10 +00:00 |
|
divious1
|
9f1efafe4c
|
Merge branch 'migrate_app_es_soc' of github.com:splunk/security-content into migrate_app_es_soc
|
2019-05-21 16:25:07 -07:00 |
|
divious1
|
1e4051395f
|
added build number
|
2019-05-21 16:24:58 -07:00 |
|
research bot
|
7594aa3d82
|
updating package files [ci skip]
|
2019-05-21 19:50:38 +00:00 |
|
divious1
|
e24b2060ff
|
changed ci workflow to commit generated package file on every push
|
2019-05-21 12:49:36 -07:00 |
|
divious1
|
e1d0025ec8
|
migrated app, updated ci job, and docs
|
2019-05-21 12:35:33 -07:00 |
|
bpatel
|
70ff2a9cb3
|
arn to user
|
2019-05-17 12:12:46 -07:00 |
|
bpatel
|
4616971e38
|
removing datamodel
|
2019-05-17 12:03:31 -07:00 |
|
bpatel
|
cb2c30de86
|
bringing the branch upto date with develop
|
2019-05-17 11:50:36 -07:00 |
|
bpatel
|
824ed3f678
|
generating src files
|
2019-05-17 11:27:44 -07:00 |
|
rvaldez617
|
7483590c54
|
Merge pull request #80 from splunk/mltk_content_tweaks
changed detection searches to use start_time and end_time vs firstTim…
|
2019-05-17 12:05:28 -06:00 |
|
Jason Brewer
|
3c3599d322
|
CRL-1428 - Reverting investigative searches.
|
2019-05-17 10:58:25 -07:00 |
|
Rico Valdez
|
438ac72bda
|
changed detection searches to use start_time and end_time vs firstTime and lastTime, included links to docs on algorithm, and included mention of re-running support search in the how_to_implement for detections. Also fixed release #, and fixed incorrect risk object (was dest, should be src) on query length dns searches
|
2019-05-17 11:17:49 -06:00 |
|
rvaldez617
|
a1cd3de1ab
|
Merge pull request #79 from splunk/appinspect-bugs
Appinspect bugs
|
2019-05-15 15:19:28 -06:00 |
|
bpatel
|
e4e88a53b4
|
src files
|
2019-05-15 14:12:35 -07:00 |
|
bpatel
|
3eaf538fe8
|
removing duplicate is_visible and local-true from commands.conf
|
2019-05-15 14:06:09 -07:00 |
|
Bhavin Patel
|
2bd4244ebf
|
Merge pull request #78 from splunk/fix_references_mltk
output of generate
|
2019-05-15 13:05:02 -07:00 |
|
Rico Valdez
|
27dda7bf7c
|
output of generate
|
2019-05-15 14:03:45 -06:00 |
|
Bhavin Patel
|
a5bc5d1ce6
|
Merge pull request #77 from splunk/fix_references_mltk
fixes for references to renamed searches
|
2019-05-15 12:59:38 -07:00 |
|
Rico Valdez
|
25e629b8db
|
fixes for references to renamed searches
|
2019-05-15 13:56:49 -06:00 |
|
Jason Brewer
|
a1f2964dc8
|
CLR-1428 - removing comments and "search_type" keys.
|
2019-05-15 10:58:12 -07:00 |
|
Jose Enrique Hernandez
|
ddb68a64bb
|
Merge pull request #76 from splunk/name_update_mltk
updated names of the support searches and updates stories accordingly
|
2019-05-15 13:57:16 -04:00 |
|
Rico Valdez
|
2f1cdca631
|
updated names of the support searches and updates stories accordingly
|
2019-05-15 11:51:39 -06:00 |
|
bpatel
|
c24a20afc6
|
lame - adding spaces
|
2019-05-14 19:07:57 -07:00 |
|
Jason Brewer
|
2dcc2fc636
|
CRL-1428 - Removing outputlookup from detection search. It is creating inconsistencies in the lookup.
|
2019-05-14 12:55:09 -07:00 |
|
Jason Brewer
|
c40a264da5
|
Updating baseines/update_previously_seen_aws_users.json to use sourcetype search in sync with previously_seen_aws_users.json syntax.
|
2019-05-14 11:42:49 -07:00 |
|
Jason Brewer
|
0e320c6a39
|
CRL-1428 - Updating per code review feedback.
|
2019-05-13 16:05:24 -07:00 |
|
bpatel
|
7510af7266
|
files updated to spec2.0 and phantom shell file
|
2019-05-13 12:36:05 -07:00 |
|
Jose Enrique Hernandez
|
520403e63a
|
Merge pull request #74 from splunk/generate_bugs
strip quotes in category, markdown for description
|
2019-05-10 18:59:28 -04:00 |
|
bpatel
|
1bdd2e93d3
|
strip quotes in category, markdown for description
|
2019-05-10 14:06:39 -07:00 |
|
Bhavin Patel
|
5cc2fbcb0c
|
Merge pull request #73 from splunk/title_fix
Title fix
|
2019-05-10 13:45:26 -07:00 |
|
Rico Valdez
|
cf53e26de8
|
Merge branch 'develop' into title_fix
merged in develop and re-ran generator
|
2019-05-10 14:44:08 -06:00 |
|
Rico Valdez
|
31aef80a75
|
ran generate function - commiting the configs
|
2019-05-10 14:41:14 -06:00 |
|
Rico Valdez
|
2286622900
|
going back to hyphens
|
2019-05-10 14:39:34 -06:00 |
|
Bhavin Patel
|
ea9ff93302
|
Merge pull request #72 from splunk/title_fix
src files
|
2019-05-10 13:28:48 -07:00 |
|
bpatel
|
58fcd303b3
|
src files
|
2019-05-10 13:28:07 -07:00 |
|
Bhavin Patel
|
4fc1963103
|
Merge pull request #71 from splunk/title_fix
testing removing the hyphen from smb traffic spike
|
2019-05-10 13:23:37 -07:00 |
|
Rico Valdez
|
ead7741cee
|
testing removing the hyphen from smb traffic spike
|
2019-05-10 14:10:35 -06:00 |
|
Bhavin Patel
|
16e5c1ad75
|
Merge pull request #70 from splunk/title_fix
fixed title on support searches and updated relevant stories
|
2019-05-10 12:53:33 -07:00 |
|
bpatel
|
cf0e7111f0
|
src files for testing
|
2019-05-10 12:52:47 -07:00 |
|
Rico Valdez
|
97d82b606f
|
fixed title on support searches and updated relevant stories
|
2019-05-10 13:47:54 -06:00 |
|
Bhavin Patel
|
a4cc37ba56
|
Merge pull request #69 from splunk/generate_bug_baselinev1
removing created and update to reference
|
2019-05-10 12:10:44 -07:00 |
|
bpatel
|
d7aead3b45
|
removing created and update to reference
|
2019-05-10 12:04:25 -07:00 |
|