admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,257 Commits 697 Branches 195 Tags
update_mapping_code
Commit Graph

2257 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
bpatel cc8868007d config update to use validate.py 2019-04-15 13:21:37 -07:00
bpatel a23969f1c1 Merge branch 'develop' into CRL-1379_detect_phishing_frameworks 2019-04-15 13:18:02 -07:00
bpatel 1b7f6b66bd search update for joining the Web logs 2019-04-15 12:33:59 -07:00
divious1 3fdc15a41b added baselines to generator 2019-04-15 15:12:15 -04:00
bpatel ef1652997b OR clause in the search 2019-04-15 11:27:39 -07:00
bpatel d8fde46723 new csv files for legit domains 2019-04-15 11:15:48 -07:00
bpatel 86d64712ce description: 2019-04-15 10:41:37 -07:00
Jose Enrique Hernandez 61c394bb9c added phishlets for other providers 2019-04-15 11:39:53 -04:00
Jose Enrique Hernandez bb6ac0cb08 included other evilnginx detections 2019-04-15 11:35:10 -04:00
bpatel 63d6194192 outlook search 2019-04-12 18:03:52 -07:00
divious1 221d9a0341 added 2 to evilginx name and update generator 2019-04-12 18:57:00 -04:00
divious1 4148ea43c3 added to phishing story 2019-04-11 14:45:34 -04:00
divious1 0c4c5390ea adding detection of lnk file launching a process 2019-04-11 13:43:26 -04:00
divious1 ad6a52f49c adding phishing payloads story 2019-04-09 16:02:27 -04:00
Bhavin Patel 420f8d1488 Merge pull request #41 from splunk/api_prep 
support API for ESCU App
 2019-04-09 12:46:56 -07:00
Jose Enrique Hernandez 5512f7f543 Merge pull request #36 from splunk/1297 
risk parameter
 2019-04-09 15:42:12 -04:00
Jose Enrique Hernandez 3265358511 Merge branch 'develop' into 1297 2019-04-09 15:41:21 -04:00
Jose Enrique Hernandez 23c6b08a03 Merge pull request #37 from splunk/1296 
local is true
 2019-04-09 15:40:35 -04:00
Jose Enrique Hernandez 4be0765249 Merge pull request #39 from splunk/CRL-1349 
Updating the search to use endpoint DM, CI issue was fixed in another branch.
 2019-04-09 15:40:04 -04:00
Jose Enrique Hernandez e031f41ec9 Merge pull request #40 from splunk/CRL-1386 
application to endpoint
 2019-04-09 15:28:20 -04:00
divious1 46f68d62fe updating config for ci 2019-04-09 15:20:05 -04:00
divious1 6ecf6b5bb0 updating config for ci 2019-04-09 15:16:42 -04:00
divious1 360f53345e updating setup tools to fix error 2019-04-09 14:58:07 -04:00
divious1 c5ba54be63 updating setup tools to fix error 2019-04-09 14:56:25 -04:00
divious1 6d50218d43 updating CI to latest python image 2019-04-09 14:47:53 -04:00
bpatel aa205852f9 spec 2 manifests 2019-04-09 11:34:37 -07:00
divious1 8ee0606d6c first commit 2019-04-09 14:17:13 -04:00
divious1 00a13b450a update to the generator 2019-04-09 13:43:53 -04:00
bpatel 4e08aa61bc docs 2019-04-03 08:54:00 -07:00
bpatel 018cd8256c examples in spec files and docs 2019-04-02 17:00:32 -07:00
divious1 cfeccbd73e removed example spec 2019-04-02 17:31:57 -05:00
divious1 87c1490320 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update 2019-04-02 17:31:29 -05:00
divious1 6112fcc9e6 updating schedule field in specs, also corrected validation logic 2019-04-02 17:31:02 -05:00
divious1 d76848cb39 correct mistakes with the sub schema validation 2019-04-02 17:03:55 -05:00
divious1 6b852b50c3 fixed error in validate 2019-04-02 17:03:26 -05:00
bpatel 43093da142 story spec with example and docs 2019-04-02 14:28:20 -07:00
divious1 b923dc56c3 updated investigations 2019-04-02 14:47:10 -04:00
divious1 a9bb9bad0d updated spec and examples to correct some def errors 2019-04-02 14:34:35 -04:00
divious1 9cd8ba0343 skeleton of generate tool, removed old validation tool 2019-04-02 14:33:27 -04:00
bpatel 35f8c61e8c oneOF example 2019-04-02 10:55:59 -07:00
bpatel 81770a38c8 application to endpoint 2019-04-01 14:45:12 -07:00
divious1 e562cc1e37 updated with baseline searches 2019-04-01 16:36:17 -04:00
bpatel eed03e646b Updating the search to use endpoint DM 2019-04-01 11:26:51 -07:00
divious1 af192d416d fixed errors with investigative validations 2019-03-30 15:19:40 -04:00
divious1 f05f011e6b added investigative check functions 2019-03-29 22:59:27 -04:00
divious1 fd6a55d7f4 updated mitre mappings 2019-03-29 13:44:40 -04:00
divious1 a627f86f2d Merge branch 'spec_update' of github.com:splunk/security-content into spec_update 2019-03-29 13:34:28 -04:00
divious1 1e965b3db5 udpated validate script to check detections 2019-03-29 13:32:53 -04:00
bpatel 6c24bb91d9 spec omne enums and v2 examples 2019-03-29 12:45:15 -04:00
bpatel a2f431b6cc baseline update 2019-03-29 12:14:44 -04:00