Patrick Bareiss
1da9f91b75
testing
2020-06-29 13:21:17 +02:00
Patrick Bareiss
3b84f18145
_testing_
2020-06-29 09:21:47 +02:00
dependabot-preview[bot]
bc93a1fac9
Merge pull request #526 from splunk/dependabot/pip/idna-2.10
2020-06-28 00:04:29 +00:00
dependabot-preview[bot]
f6392e3690
Bump idna from 2.9 to 2.10
...
Bumps [idna](https://github.com/kjd/idna ) from 2.9 to 2.10.
- [Release notes](https://github.com/kjd/idna/releases )
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst )
- [Commits](https://github.com/kjd/idna/compare/v2.9...v2.10 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-06-27 23:57:37 +00:00
dependabot-preview[bot]
89e731de20
Merge pull request #525 from splunk/dependabot/pip/importlib-metadata-1.7.0
2020-06-26 21:56:34 +00:00
dependabot-preview[bot]
8c3ffa1ccf
Bump importlib-metadata from 1.6.1 to 1.7.0
...
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/ ) from 1.6.1 to 1.7.0.
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-06-26 21:51:01 +00:00
Bhavin Patel
0648c52e6a
Merge pull request #523 from splunk/first_time_windows_service_bug
...
First time windows service bug
2020-06-26 12:50:07 -07:00
Bhavin Patel
3a82c218bb
incorrect field name
2020-06-26 12:44:43 -07:00
Patrick Bareiss
967c1d7974
small change
2020-06-26 17:28:39 +02:00
Patrick Bareiss
92d6b66ffd
small change
2020-06-26 16:45:42 +02:00
Patrick Bareiss
f4783eaec6
small change
2020-06-26 16:43:05 +02:00
Patrick Bareiss
d6f576658a
small change
2020-06-26 16:18:44 +02:00
Patrick Bareiss
98118fc533
small change
2020-06-26 15:35:49 +02:00
David Dorsey
af09770db1
Merge branch 'develop' into first_time_windows_service_bug
2020-06-26 08:32:34 -05:00
David Dorsey
6369f0f895
Changed running windows service to use kvstore as cache
2020-06-26 08:27:39 -05:00
David Dorsey
62a14e3217
Merge branch 'first_time_windows_service_bug' of github.com:splunk/security-content into first_time_windows_service_bug
2020-06-26 08:26:58 -05:00
David Dorsey
f67734dedd
Fixed SPL issues with detection. SPL syntax was wrong, and lookup was wrong.
2020-06-26 08:24:16 -05:00
Patrick Bareiss
cd4e80f98c
new test
2020-06-26 14:46:35 +02:00
Patrick Bareiss
b6608488de
new test
2020-06-26 14:24:38 +02:00
Patrick Bareiss
de67ca7fe5
add ssh key to circleci
2020-06-26 13:31:02 +02:00
Patrick Bareiss
ba07c24280
new test
2020-06-26 12:28:47 +02:00
Patrick Bareiss
5f0427b1f1
new test
2020-06-26 11:34:35 +02:00
Patrick Bareiss
fb45de7b4e
new test
2020-06-26 11:14:20 +02:00
Patrick Bareiss
e1e71e6e90
new test
2020-06-26 11:01:37 +02:00
Patrick Bareiss
5675d92013
testing
2020-06-26 10:42:41 +02:00
Patrick Bareiss
bd6df9e9e2
testing
2020-06-26 10:33:01 +02:00
Patrick Bareiss
a354a9f1cd
testing
2020-06-26 10:10:01 +02:00
research bot
8f57b5362f
updating docs and package bits [ci skip]
2020-06-25 22:40:24 +00:00
Bhavin Patel
0506f93a4f
Merge pull request #520 from splunk/security_hub_response
...
Security hub response
v3.0.3
2020-06-25 14:08:55 -07:00
Bhavin Patel
836c123569
Update abnormally_high_aws_instances_launched_by_user.yml
2020-06-25 13:57:54 -07:00
rvaldez617
b5e4ebff23
Merge branch 'develop' into security_hub_response
2020-06-25 14:45:01 -06:00
Bhavin Patel
0cf88ffdc2
Merge pull request #524 from splunk/awsgcpk8s
...
Awsgcpk8s
2020-06-25 13:34:46 -07:00
Bhavin Patel
957b39837f
Merge branch 'develop' into awsgcpk8s
2020-06-25 13:26:56 -07:00
Bhavin Patel
1cddcfaa25
Merge branch 'develop' into first_time_windows_service_bug
2020-06-25 11:57:22 -07:00
Rod Soto
e432a4ab50
fixedservaccounatct
2020-06-25 14:52:41 -04:00
David Dorsey
07ce28f433
Updated baseline deployments
2020-06-25 13:49:48 -05:00
Rod Soto
6ea3604481
fixedaddedcondition
2020-06-25 14:36:18 -04:00
Patrick Bareiss
000b56b0ee
add cron schedule
2020-06-25 18:52:51 +02:00
Bhavin Patel
4b13ddff94
Merge pull request #521 from splunk/awsgcpk8s
...
Awsgcpk8s
2020-06-25 09:50:31 -07:00
Bhavin Patel
cbcd614236
Merge branch 'develop' into awsgcpk8s
2020-06-25 09:39:42 -07:00
divious1
a433fa15b3
updating region
2020-06-25 12:38:37 -04:00
David Dorsey
301bf51a8a
Merge branch 'develop' into first_time_windows_service_bug
2020-06-25 11:34:38 -05:00
trogdorsey
fb3c848285
Merge pull request #522 from splunk/improve_deployment_handling
...
new deployment configurations
2020-06-25 11:30:45 -05:00
Patrick Bareiss
7a236f3dd0
new deployment configurations
2020-06-25 10:02:36 +02:00
Patrick Bareiss
85f13dd926
new deployment configurations
2020-06-25 09:53:44 +02:00
David Dorsey
c90fcb2e9f
Update how to implement
2020-06-25 00:14:24 -05:00
David Dorsey
8438bf71e8
Fixed the first time previously seen windows service search to work
...
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update
Made the default deployment template be -70m@m to -10m@m
Added a new deployment template for hourly baseline caches
2020-06-25 00:09:30 -05:00
Bhavin Patel
e2fa17ebde
Merge branch 'develop' into security_hub_response
2020-06-24 17:22:16 -07:00
bpatel
c812c56d87
updates with T1530
2020-06-24 17:21:02 -07:00
bpatel
3c1d9cb416
adding T1098
2020-06-24 17:11:33 -07:00