Commit Graph

536 Commits

Author SHA1 Message Date
Xiao Lin a035e6311f change single quotation mark to back single quotation 2020-10-15 19:47:12 +00:00
Xiao Lin 98b7aa83dd update 2020-10-15 19:47:12 +00:00
Xiao Lin 9db448a52e update unit test 2020-10-15 19:47:12 +00:00
P4T12ICK 6938154a94 ready for PR 2020-10-14 16:13:55 +02:00
root 6aae51fa5c Added detection testing service results inSystem Information Discovery Detection 2020-10-14 12:23:58 +00:00
P4T12ICK c23fe12605 updated with develop 2020-10-14 09:26:19 +02:00
P4T12ICK 323138fe5f improved detection 2020-10-14 09:22:03 +02:00
divious1 dca8fad264 Merge branch 'develop' into organize_detections 2020-10-13 20:19:08 -04:00
root 743ada6db8 Added detection testing service results inSystem Information Discovery Detection 2020-10-13 17:50:09 +00:00
P4T12ICK c19f355fb8 testing 2020-10-13 19:15:56 +02:00
P4T12ICK eeed5fb0b8 testing 2020-10-13 19:06:26 +02:00
root 565c8610cd Added detection testing service results inSystem Information Discovery Detection 2020-10-13 15:40:24 +00:00
root b355f71dbd Added detection testing service results inSystem Information Discovery Detection 2020-10-13 14:54:12 +00:00
P4T12ICK 1661a807f5 test 2020-10-13 14:56:54 +02:00
P4T12ICK bf18c1514d updates 2020-10-13 13:50:28 +02:00
P4T12ICK e48567ac56 new test file 2020-10-09 12:28:07 +02:00
Ignacio Bermudez Corrales 57dddc7310 updated detection for long command line 2020-10-08 19:30:17 -07:00
Jose Enrique Hernandez 5a60f56c57 Update kubernetes_aws_detect_sensitive_object_access.yml 2020-10-08 17:39:58 -04:00
P4T12ICK 6d820ded74 updates 2020-10-08 14:10:37 +02:00
P4T12ICK f81abbc79d updates 2020-10-08 13:01:52 +02:00
divious1 443d86c864 moved detections to their respective folders 2020-10-07 10:31:25 -04:00
bpatel b80016e3df update date key 2020-10-06 13:47:24 -07:00
Ignacio Bermudez Corrales 95ff817a80 formatting 2020-10-06 11:21:36 -07:00
Ignacio Bermudez Corrales 4810237537 merging Jud changes 2020-10-06 11:05:10 -07:00
Ignacio Bermudez Corrales 0e64512127 changes for detections to work 2020-10-06 11:01:47 -07:00
Ignacio Bermudez Corrales ab9df3e5e5 Jud changes 2020-10-06 11:00:59 -07:00
Ignacio Bermudez Corrales 9a59760cbb adding missing change lost in the transition 2020-10-06 10:09:04 -07:00
divious1 48f5c8836f added subtext 2020-09-25 16:57:49 -04:00
divious1 cc031f1b9e fixing a mistake 2020-09-25 16:39:29 -04:00
divious1 dac98c19b9 skeleton 2020-09-24 18:05:10 -04:00
divious1 660135b77a adding 4742 detection 2020-09-18 18:39:50 -04:00
divious1 39f5939bc9 zero logon skeleton 2020-09-18 17:16:25 -04:00
Bhavin Patel ec3e8a9dbd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:49:56 -07:00
Bhavin Patel 02ac11cfd8 Merge branch 'develop' into gcpoauth 2020-09-14 13:24:54 -07:00
bpatel 52739bc3ab yml updates 2020-09-14 13:12:51 -07:00
Bhavin Patel 796617a83c Merge branch 'develop' into fixedawsstsassumerole 2020-09-10 13:26:07 -07:00
Bhavin Patel ef3fee0a81 Update aws_detect_sts_assume_role_abuse.yml
using cloudtrail as input macro
2020-09-10 13:25:39 -07:00
divious1 9bfc5f9f4e updated spec docs and also added one more example 2020-09-10 12:17:21 -04:00
bpatel 637ec487df risk validation 2020-09-03 11:30:09 -07:00
Rod Soto 5690c95392 fixedreferencesgcpoauthdetection 2020-09-01 20:44:10 -04:00
Rod Soto 66404dbcbe firstshotgcpaoutabusedetection 2020-09-01 20:42:54 -04:00
Rod Soto 5e9f3a7ae0 Merge branch 'develop' into fixedawsstsassumerole 2020-08-27 21:08:51 -04:00
Rod Soto 48100ebb96 fixedaws_dete_role_creation 2020-08-27 14:12:34 -04:00
Rod Soto d04d0e9d69 fixedassumedroleaws 2020-08-26 16:56:54 -04:00
Jose Enrique Hernandez a66740b506 Merge branch 'develop' into PR_609 2020-08-25 12:13:24 -04:00
Bhavin Patel 00653ac542 Merge pull request #623 from splunk/fixawsk8sfailuresrcuser
newfixawsdetectpkey
2020-08-24 12:47:10 -07:00
Jose Enrique Hernandez 5eb6c522c6 Merge branch 'develop' into PR_609 2020-08-24 12:50:54 -04:00
Jose Enrique Hernandez 6443822362 Merge branch 'develop' into fixawsk8sfailuresrcuser 2020-08-24 12:20:40 -04:00
Jose Enrique Hernandez 21c1dcb759 Merge branch 'develop' into PR_609 2020-08-24 01:04:48 -04:00
Jose Enrique Hernandez 1c1ce46004 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 01:04:40 -04:00