Jose Enrique Hernandez
|
797fabfc70
|
Merge pull request #68 from splunk/generate_bug_baselinev1
Generate bug baselinev1
|
2019-05-10 13:53:16 -04:00 |
|
bpatel
|
631fce783d
|
src files
|
2019-05-10 10:49:29 -07:00 |
|
bpatel
|
e9135bc01d
|
description for baselinev1
|
2019-05-10 10:47:01 -07:00 |
|
Bhavin Patel
|
769b32d611
|
Merge pull request #67 from splunk/mltk_3searches
Mltk 3searches
|
2019-05-10 10:13:02 -07:00 |
|
Rico Valdez
|
98907055ff
|
pushing Brianna edits
|
2019-05-10 09:10:48 -06:00 |
|
bpatel
|
dd0892edc8
|
running locally
|
2019-05-09 14:30:01 -07:00 |
|
Rico Valdez
|
bd42f11bb6
|
search tweaks (mostly output formatting) based on discussion with Bhavin
|
2019-05-09 14:18:55 -06:00 |
|
Rico Valdez
|
22100df132
|
fixed a non-ascii char that got in there
|
2019-05-09 11:43:49 -06:00 |
|
Rico Valdez
|
d8aac902fb
|
Slight search tweak and another text updates
|
2019-05-09 10:54:36 -06:00 |
|
Rico Valdez
|
12be9cdacc
|
added a line to the how-to-implement for the model building manifests
|
2019-05-09 09:53:43 -06:00 |
|
Rico Valdez
|
6cdedee427
|
fixed an erronous change to the original spec file
|
2019-05-08 15:57:04 -06:00 |
|
Rico Valdez
|
f8fe738bce
|
another typo
|
2019-05-08 15:43:18 -06:00 |
|
Rico Valdez
|
37f6e78d6f
|
another typo
|
2019-05-08 15:40:59 -06:00 |
|
Rico Valdez
|
0a6beee328
|
fixing typo
|
2019-05-08 15:37:16 -06:00 |
|
Rico Valdez
|
be6701df8d
|
fix some hyphen issues
|
2019-05-08 15:33:18 -06:00 |
|
Rico Valdez
|
318a41d3c9
|
translated to v1 spec
|
2019-05-08 15:13:20 -06:00 |
|
Rico Valdez
|
a78865213d
|
fixing some json structure after Brianna edits
|
2019-05-08 10:25:59 -06:00 |
|
bblacet
|
e9df2198d1
|
various changes for grammar, punctuation, and flow
|
2019-05-08 08:47:43 -07:00 |
|
bblacet
|
781924aaca
|
Various changes for grammar, punctuation, and flow.
|
2019-05-07 16:52:42 -07:00 |
|
Rico Valdez
|
39a8489a84
|
added a null cron_schedule to try to fix validation on baseline searches
|
2019-05-07 14:46:05 -06:00 |
|
Rico Valdez
|
13f7508c46
|
fixes to entities
|
2019-05-07 14:32:04 -06:00 |
|
Rico Valdez
|
030683cbed
|
created 3 new searches and associated support searches that are mltk versions of existing searches. Also added them to the appropriate stories and fixed the non-capitalized title for an investigative search - updated associated stories for that as well.
|
2019-05-07 13:57:23 -06:00 |
|
Jose Enrique Hernandez
|
d6e95f7ec7
|
Merge pull request #63 from splunk/CRL-1348
search and datamodel update
|
2019-05-07 14:42:01 -04:00 |
|
Jose Enrique Hernandez
|
7b4f48b330
|
Merge pull request #64 from splunk/brianna_as_reviwer
fixing auto assigned users
|
2019-05-07 14:22:23 -04:00 |
|
divious1
|
6472504c85
|
fixing auto assigned users
|
2019-05-07 14:20:02 -04:00 |
|
bpatel
|
6ec66236dd
|
search and datamodel update
|
2019-05-07 11:18:24 -07:00 |
|
Jose Enrique Hernandez
|
98b66cc478
|
Merge pull request #61 from splunk/brianna_as_reviwer
adding brianna as the default reviewer
|
2019-05-07 14:15:18 -04:00 |
|
divious1
|
a32dc49b0d
|
adding brianna as the default reviewer
|
2019-05-07 14:14:06 -04:00 |
|
Philip Royer
|
67cbbde5d7
|
Merge pull request #60 from splunk/CRL-1416
updates to name and links
|
2019-05-06 15:10:34 -04:00 |
|
bpatel
|
6284acdf37
|
updates to name and links
|
2019-05-06 11:48:35 -07:00 |
|
divious1
|
cb367c1998
|
Merge branch 'develop' of github.com:splunk/security-content into develop
|
2019-05-03 23:43:18 -04:00 |
|
divious1
|
ebcfb72e50
|
updating automating on the project
|
2019-05-03 23:36:20 -04:00 |
|
Jason Brewer
|
e25dc0ed9b
|
CRL-1428 - Updating story/manifest to v2 and updating a related investigative search, get_notable_info.json, to v2. I missed it in my last sweep.
|
2019-05-01 10:24:24 -07:00 |
|
Jason Brewer
|
7950452a95
|
CRL-1428 - Updating relevant searches to spec v2.
|
2019-04-30 17:03:34 -07:00 |
|
research bot
|
ad553d50d4
|
updating src files [ci skip]
|
2019-04-29 21:25:06 +00:00 |
|
Jose Enrique Hernandez
|
7a8f2d01a9
|
Merge pull request #59 from splunk/file_writes_fix
fixing broken detection search - suspicious_file_writes
v1.0.37
|
2019-04-29 17:13:50 -04:00 |
|
Rico Valdez
|
f761e9066c
|
fixing broken detection search - suspicious_file_writes
|
2019-04-29 14:35:27 -06:00 |
|
rvaldez617
|
77ad425799
|
Merge pull request #58 from splunk/spec_update
minor rendering updates
|
2019-04-29 13:53:49 -06:00 |
|
divious1
|
34f4a1ca98
|
typo
|
2019-04-29 15:51:57 -04:00 |
|
divious1
|
50fb65a58c
|
minor rendering updates
|
2019-04-29 15:31:44 -04:00 |
|
research bot
|
caf14955d5
|
updating src files [ci skip]
|
2019-04-26 19:56:42 +00:00 |
|
Jose Enrique Hernandez
|
a9b081e97d
|
Merge pull request #57 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
|
2019-04-26 15:54:43 -04:00 |
|
bpatel
|
f298c52387
|
date updates
|
2019-04-26 11:22:34 -07:00 |
|
Jason Brewer
|
ddad8fb162
|
CRL-1428 - Adding new user City, Region, and Country detections and needed baseline changes.
|
2019-04-25 15:59:30 -07:00 |
|
bpatel
|
93ace4dac7
|
narrative update
|
2019-04-25 15:30:39 -07:00 |
|
Bhavin Patel
|
b57d3641ce
|
Merge pull request #55 from splunk/escu_2.0_bugs
fixing bugs
|
2019-04-25 14:55:40 -07:00 |
|
divious1
|
e552a8831e
|
fixing bugs
|
2019-04-25 17:53:28 -04:00 |
|
Jose Enrique Hernandez
|
7df41e7d37
|
Merge pull request #54 from splunk/CRL-1391_phishing_payload_detection
Crl 1391 phishing payload detection
|
2019-04-25 16:20:25 -04:00 |
|
bpatel
|
52f20cf934
|
created date in use case lib
|
2019-04-25 12:20:04 -07:00 |
|
bpatel
|
e69b9bf457
|
markdown for use_Case_lib
|
2019-04-25 11:52:28 -07:00 |
|