Commit Graph

6492 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 02728eec00 Merge branch 'develop' into ssa_testing_user_doc 2021-04-26 12:32:08 -04:00
Bhavin Patel 0f401dd3bf Merge pull request #1341 from splunk/TR-593_fix_fp_in_system_process_running_unexpected_location
upgrading detection to avoid FPs and also added bodies
2021-04-26 09:32:02 -07:00
P4T12ICK 3afbc4432d ssa testing usage docs 2021-04-26 10:59:51 +02:00
P4T12ICK bc7dadb1c2 ssa testing usage docs 2021-04-26 10:55:00 +02:00
P4T12ICK 3a6c921507 ssa testing usage docs 2021-04-26 10:54:44 +02:00
P4T12ICK 1ab6a0c855 ssa testing usage docs 2021-04-26 10:16:40 +02:00
P4T12ICK 7a54cdf041 ssa testing usage docs 2021-04-26 09:15:44 +02:00
P4T12ICK 5f90676208 ssa testing usage docs 2021-04-26 09:08:34 +02:00
github-actions[bot] 5a07983b89 Branch was auto-updated. 2021-04-23 18:35:38 +00:00
Bhavin Patel d9f21c3269 Merge pull request #1349 from splunk/mitre_doc_bug
fixing bug with mitre sub technique URLs
2021-04-23 11:35:19 -07:00
github-actions[bot] f80c5cd23d Branch was auto-updated. 2021-04-23 18:09:13 +00:00
github-actions[bot] c4e065474e Branch was auto-updated. 2021-04-23 18:09:03 +00:00
Bhavin Patel 89e8ce52f3 Merge pull request #1347 from splunk/fix_package_version
fixing ci job with package version
2021-04-23 11:08:45 -07:00
divious1 cfce74c34b fixed comments for story 2021-04-23 12:41:19 -04:00
divious1 aacb65becb improve comments 2021-04-23 12:37:01 -04:00
divious1 be079f9654 cleaning up old docs 2021-04-23 12:28:29 -04:00
divious1 fbdd8c30b0 fixing bug with mitre sub technique URLs 2021-04-23 12:23:43 -04:00
github-actions[bot] cae111f759 Branch was auto-updated. 2021-04-23 12:24:22 +00:00
github-actions[bot] 36f58e61ec Branch was auto-updated. 2021-04-23 12:24:19 +00:00
P4T12ICK b4c5b309a3 Merge pull request #1348 from splunk/removed_unused_test_files
fix the 101% detection coverage
2021-04-23 14:23:58 +02:00
P4T12ICK ebffd874e8 fix the 101% detection coverage 2021-04-23 14:11:58 +02:00
research bot 25a4be5d98 updating docs and package bits [ci skip] 2021-04-22 21:55:11 +00:00
divious1 8eb9f0727a fixing ci job with package version v3.19.0 2021-04-22 17:32:06 -04:00
github-actions[bot] 50a55e688d Branch was auto-updated. 2021-04-22 20:59:54 +00:00
Bhavin Patel 0f9a41e8c2 Merge pull request #1322 from splunk/cloudywithachanceofhaags
Cloudy With A Chance of Haag's
2021-04-22 13:59:21 -07:00
Detection Testing Service e2b22babe0 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-22 18:20:11 +00:00
root 825cab7da1 Added detection testing service results inWinword Spawning Windows Script Host 2021-04-22 18:20:10 +00:00
github-actions[bot] 4cb6362ae3 Branch was auto-updated. 2021-04-22 18:19:50 +00:00
github-actions[bot] 3790936f7a Branch was auto-updated. 2021-04-22 18:19:49 +00:00
Bhavin Patel 24c0967b15 Merge pull request #1343 from splunk/rename_product_splunk_behavioral_analytics
renaming product to new name
2021-04-22 11:19:34 -07:00
mhaag-spl 8491518f08 Update winword_spawning_windows_script_host.yml 2021-04-22 11:59:19 -06:00
mhaag-spl aa62997e60 removed detections 2021-04-22 11:52:20 -06:00
Detection Testing Service 4ef58f8af2 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-22 17:49:23 +00:00
root 9c7965ed1f Added detection testing service results inOffice Product Spawning Rundll32 with no DLL 2021-04-22 17:49:23 +00:00
Bhavin Patel cf41087f7b Update aws_iam_failure_group_deletion.yml 2021-04-22 10:47:38 -07:00
Bhavin Patel 60842e5dc9 Update aws_iam_delete_policy.yml 2021-04-22 10:46:57 -07:00
Bhavin Patel 69debe6e26 Update aws_iam_assume_role_policy_brute_force.yml 2021-04-22 10:46:16 -07:00
Bhavin Patel fbb1986114 Update aws_iam_successful_group_deletion.yml 2021-04-22 10:44:46 -07:00
Bhavin Patel 102ccc889b Update aws_iam_root_account_login.yml 2021-04-22 10:44:02 -07:00
Bhavin Patel 47212a6443 Update aws_iam_root_account_login.yml 2021-04-22 10:42:12 -07:00
Bhavin Patel 621a5ec81b Update aws_iam_accessdenied_discovery_events.yml 2021-04-22 10:41:02 -07:00
mhaag-spl 56c645560a Update winword_spawning_windows_script_host.test.yml 2021-04-22 11:29:59 -06:00
mhaag-spl 77d1364c16 Office Product Spawning Rundll32 with no DLL 2021-04-22 11:20:45 -06:00
root ddf4aaf210 Added detection testing service results inWinword Spawning Cmd 2021-04-22 16:40:19 +00:00
Detection Testing Service 7a5e449119 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-22 16:22:45 +00:00
root 48acf37045 Added detection testing service results inSearchProtocolHost with no Command Line with Network 2021-04-22 16:22:45 +00:00
mhaag-spl 2b40cfec8b remove root aws detections and update aws detection 2021-04-22 10:21:36 -06:00
mhaag-spl 88688f9960 duplicate detection 2021-04-22 10:10:47 -06:00
mhaag-spl 029c463ce8 Update searchprotocolhost_with_no_command_line_with_network.test.yml 2021-04-22 10:00:32 -06:00
mhaag-spl b86ece00d8 Update winword_spawning_cmd.test.yml 2021-04-22 09:52:23 -06:00