Commit Graph

2257 Commits

Author SHA1 Message Date
divious1 5015acef51 Merge branch 'migrate_app_es_soc' of github.com:splunk/security-content into migrate_app_es_soc 2019-05-22 10:45:12 -07:00
divious1 81b722eae4 wrong wondering on ci skip 2019-05-22 10:45:06 -07:00
research bot adbe1dee01 updating package files 2019-05-22 17:44:49 +00:00
divious1 6b73ea0575 updating build 2019-05-22 10:35:41 -07:00
divious1 5de3ea7792 updating build 2019-05-22 10:34:59 -07:00
divious1 ecd1b919e6 split ci job for build and committing content 2019-05-22 10:33:33 -07:00
research bot 4e385c59ba updating package files 2019-05-21 23:31:11 +00:00
research bot 494feb93e2 updating package files 2019-05-21 23:30:10 +00:00
divious1 9f1efafe4c Merge branch 'migrate_app_es_soc' of github.com:splunk/security-content into migrate_app_es_soc 2019-05-21 16:25:07 -07:00
divious1 1e4051395f added build number 2019-05-21 16:24:58 -07:00
research bot 7594aa3d82 updating package files [ci skip] 2019-05-21 19:50:38 +00:00
divious1 e24b2060ff changed ci workflow to commit generated package file on every push 2019-05-21 12:49:36 -07:00
divious1 e1d0025ec8 migrated app, updated ci job, and docs 2019-05-21 12:35:33 -07:00
bpatel 70ff2a9cb3 arn to user 2019-05-17 12:12:46 -07:00
bpatel 4616971e38 removing datamodel 2019-05-17 12:03:31 -07:00
bpatel cb2c30de86 bringing the branch upto date with develop 2019-05-17 11:50:36 -07:00
bpatel 824ed3f678 generating src files 2019-05-17 11:27:44 -07:00
rvaldez617 7483590c54 Merge pull request #80 from splunk/mltk_content_tweaks
changed detection searches to use start_time and end_time vs firstTim…
2019-05-17 12:05:28 -06:00
Jason Brewer 3c3599d322 CRL-1428 - Reverting investigative searches. 2019-05-17 10:58:25 -07:00
Rico Valdez 438ac72bda changed detection searches to use start_time and end_time vs firstTime and lastTime, included links to docs on algorithm, and included mention of re-running support search in the how_to_implement for detections. Also fixed release #, and fixed incorrect risk object (was dest, should be src) on query length dns searches 2019-05-17 11:17:49 -06:00
rvaldez617 a1cd3de1ab Merge pull request #79 from splunk/appinspect-bugs
Appinspect bugs
2019-05-15 15:19:28 -06:00
bpatel e4e88a53b4 src files 2019-05-15 14:12:35 -07:00
bpatel 3eaf538fe8 removing duplicate is_visible and local-true from commands.conf 2019-05-15 14:06:09 -07:00
Bhavin Patel 2bd4244ebf Merge pull request #78 from splunk/fix_references_mltk
output of generate
2019-05-15 13:05:02 -07:00
Rico Valdez 27dda7bf7c output of generate 2019-05-15 14:03:45 -06:00
Bhavin Patel a5bc5d1ce6 Merge pull request #77 from splunk/fix_references_mltk
fixes for references to renamed searches
2019-05-15 12:59:38 -07:00
Rico Valdez 25e629b8db fixes for references to renamed searches 2019-05-15 13:56:49 -06:00
Jason Brewer a1f2964dc8 CLR-1428 - removing comments and "search_type" keys. 2019-05-15 10:58:12 -07:00
Jose Enrique Hernandez ddb68a64bb Merge pull request #76 from splunk/name_update_mltk
updated names of the support searches and updates stories accordingly
2019-05-15 13:57:16 -04:00
Rico Valdez 2f1cdca631 updated names of the support searches and updates stories accordingly 2019-05-15 11:51:39 -06:00
bpatel c24a20afc6 lame - adding spaces 2019-05-14 19:07:57 -07:00
Jason Brewer 2dcc2fc636 CRL-1428 - Removing outputlookup from detection search. It is creating inconsistencies in the lookup. 2019-05-14 12:55:09 -07:00
Jason Brewer c40a264da5 Updating baseines/update_previously_seen_aws_users.json to use sourcetype search in sync with previously_seen_aws_users.json syntax. 2019-05-14 11:42:49 -07:00
Jason Brewer 0e320c6a39 CRL-1428 - Updating per code review feedback. 2019-05-13 16:05:24 -07:00
bpatel 7510af7266 files updated to spec2.0 and phantom shell file 2019-05-13 12:36:05 -07:00
Jose Enrique Hernandez 520403e63a Merge pull request #74 from splunk/generate_bugs
strip quotes in category, markdown for description
2019-05-10 18:59:28 -04:00
bpatel 1bdd2e93d3 strip quotes in category, markdown for description 2019-05-10 14:06:39 -07:00
Bhavin Patel 5cc2fbcb0c Merge pull request #73 from splunk/title_fix
Title fix
2019-05-10 13:45:26 -07:00
Rico Valdez cf53e26de8 Merge branch 'develop' into title_fix
merged in develop and re-ran generator
2019-05-10 14:44:08 -06:00
Rico Valdez 31aef80a75 ran generate function - commiting the configs 2019-05-10 14:41:14 -06:00
Rico Valdez 2286622900 going back to hyphens 2019-05-10 14:39:34 -06:00
Bhavin Patel ea9ff93302 Merge pull request #72 from splunk/title_fix
src files
2019-05-10 13:28:48 -07:00
bpatel 58fcd303b3 src files 2019-05-10 13:28:07 -07:00
Bhavin Patel 4fc1963103 Merge pull request #71 from splunk/title_fix
testing removing the hyphen from smb traffic spike
2019-05-10 13:23:37 -07:00
Rico Valdez ead7741cee testing removing the hyphen from smb traffic spike 2019-05-10 14:10:35 -06:00
Bhavin Patel 16e5c1ad75 Merge pull request #70 from splunk/title_fix
fixed title on support searches and updated relevant stories
2019-05-10 12:53:33 -07:00
bpatel cf0e7111f0 src files for testing 2019-05-10 12:52:47 -07:00
Rico Valdez 97d82b606f fixed title on support searches and updated relevant stories 2019-05-10 13:47:54 -06:00
Bhavin Patel a4cc37ba56 Merge pull request #69 from splunk/generate_bug_baselinev1
removing created and update to reference
2019-05-10 12:10:44 -07:00
bpatel d7aead3b45 removing created and update to reference 2019-05-10 12:04:25 -07:00