Commit Graph

2257 Commits

Author SHA1 Message Date
Patrick Bareiss 1da9f91b75 testing 2020-06-29 13:21:17 +02:00
Patrick Bareiss 3b84f18145 _testing_ 2020-06-29 09:21:47 +02:00
dependabot-preview[bot] bc93a1fac9 Merge pull request #526 from splunk/dependabot/pip/idna-2.10 2020-06-28 00:04:29 +00:00
dependabot-preview[bot] f6392e3690 Bump idna from 2.9 to 2.10
Bumps [idna](https://github.com/kjd/idna) from 2.9 to 2.10.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](https://github.com/kjd/idna/compare/v2.9...v2.10)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-27 23:57:37 +00:00
dependabot-preview[bot] 89e731de20 Merge pull request #525 from splunk/dependabot/pip/importlib-metadata-1.7.0 2020-06-26 21:56:34 +00:00
dependabot-preview[bot] 8c3ffa1ccf Bump importlib-metadata from 1.6.1 to 1.7.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 1.6.1 to 1.7.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-26 21:51:01 +00:00
Bhavin Patel 0648c52e6a Merge pull request #523 from splunk/first_time_windows_service_bug
First time windows service bug
2020-06-26 12:50:07 -07:00
Bhavin Patel 3a82c218bb incorrect field name 2020-06-26 12:44:43 -07:00
Patrick Bareiss 967c1d7974 small change 2020-06-26 17:28:39 +02:00
Patrick Bareiss 92d6b66ffd small change 2020-06-26 16:45:42 +02:00
Patrick Bareiss f4783eaec6 small change 2020-06-26 16:43:05 +02:00
Patrick Bareiss d6f576658a small change 2020-06-26 16:18:44 +02:00
Patrick Bareiss 98118fc533 small change 2020-06-26 15:35:49 +02:00
David Dorsey af09770db1 Merge branch 'develop' into first_time_windows_service_bug 2020-06-26 08:32:34 -05:00
David Dorsey 6369f0f895 Changed running windows service to use kvstore as cache 2020-06-26 08:27:39 -05:00
David Dorsey 62a14e3217 Merge branch 'first_time_windows_service_bug' of github.com:splunk/security-content into first_time_windows_service_bug 2020-06-26 08:26:58 -05:00
David Dorsey f67734dedd Fixed SPL issues with detection. SPL syntax was wrong, and lookup was wrong. 2020-06-26 08:24:16 -05:00
Patrick Bareiss cd4e80f98c new test 2020-06-26 14:46:35 +02:00
Patrick Bareiss b6608488de new test 2020-06-26 14:24:38 +02:00
Patrick Bareiss de67ca7fe5 add ssh key to circleci 2020-06-26 13:31:02 +02:00
Patrick Bareiss ba07c24280 new test 2020-06-26 12:28:47 +02:00
Patrick Bareiss 5f0427b1f1 new test 2020-06-26 11:34:35 +02:00
Patrick Bareiss fb45de7b4e new test 2020-06-26 11:14:20 +02:00
Patrick Bareiss e1e71e6e90 new test 2020-06-26 11:01:37 +02:00
Patrick Bareiss 5675d92013 testing 2020-06-26 10:42:41 +02:00
Patrick Bareiss bd6df9e9e2 testing 2020-06-26 10:33:01 +02:00
Patrick Bareiss a354a9f1cd testing 2020-06-26 10:10:01 +02:00
research bot 8f57b5362f updating docs and package bits [ci skip] 2020-06-25 22:40:24 +00:00
Bhavin Patel 0506f93a4f Merge pull request #520 from splunk/security_hub_response
Security hub response
v3.0.3
2020-06-25 14:08:55 -07:00
Bhavin Patel 836c123569 Update abnormally_high_aws_instances_launched_by_user.yml 2020-06-25 13:57:54 -07:00
rvaldez617 b5e4ebff23 Merge branch 'develop' into security_hub_response 2020-06-25 14:45:01 -06:00
Bhavin Patel 0cf88ffdc2 Merge pull request #524 from splunk/awsgcpk8s
Awsgcpk8s
2020-06-25 13:34:46 -07:00
Bhavin Patel 957b39837f Merge branch 'develop' into awsgcpk8s 2020-06-25 13:26:56 -07:00
Bhavin Patel 1cddcfaa25 Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:57:22 -07:00
Rod Soto e432a4ab50 fixedservaccounatct 2020-06-25 14:52:41 -04:00
David Dorsey 07ce28f433 Updated baseline deployments 2020-06-25 13:49:48 -05:00
Rod Soto 6ea3604481 fixedaddedcondition 2020-06-25 14:36:18 -04:00
Patrick Bareiss 000b56b0ee add cron schedule 2020-06-25 18:52:51 +02:00
Bhavin Patel 4b13ddff94 Merge pull request #521 from splunk/awsgcpk8s
Awsgcpk8s
2020-06-25 09:50:31 -07:00
Bhavin Patel cbcd614236 Merge branch 'develop' into awsgcpk8s 2020-06-25 09:39:42 -07:00
divious1 a433fa15b3 updating region 2020-06-25 12:38:37 -04:00
David Dorsey 301bf51a8a Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:34:38 -05:00
trogdorsey fb3c848285 Merge pull request #522 from splunk/improve_deployment_handling
new deployment configurations
2020-06-25 11:30:45 -05:00
Patrick Bareiss 7a236f3dd0 new deployment configurations 2020-06-25 10:02:36 +02:00
Patrick Bareiss 85f13dd926 new deployment configurations 2020-06-25 09:53:44 +02:00
David Dorsey c90fcb2e9f Update how to implement 2020-06-25 00:14:24 -05:00
David Dorsey 8438bf71e8 Fixed the first time previously seen windows service search to work
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update

Made the default deployment template be -70m@m to -10m@m

Added a new deployment template for hourly baseline caches
2020-06-25 00:09:30 -05:00
Bhavin Patel e2fa17ebde Merge branch 'develop' into security_hub_response 2020-06-24 17:22:16 -07:00
bpatel c812c56d87 updates with T1530 2020-06-24 17:21:02 -07:00
bpatel 3c1d9cb416 adding T1098 2020-06-24 17:11:33 -07:00