Commit Graph

8767 Commits

Author SHA1 Message Date
root 0dbf7fdab6 Added detection testing service results inDetect shared ec2 snapshot 2021-07-20 23:41:56 +00:00
patel-bhavin 4a1841fbed updates 2021-07-20 15:37:36 -07:00
Bhavin Patel 8d8bdaeaab Merge branch 'develop' into aws_snap_exfil 2021-07-20 15:16:07 -07:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
github-actions[bot] df6e6c6a5e Branch was auto-updated. 2021-07-20 20:41:12 +00:00
Bhavin Patel 0872f02a13 Merge pull request #1511 from splunk/Risky
Risky Based Analytics
v3.25.2
2021-07-20 13:40:49 -07:00
github-actions[bot] 14c82ee203 Branch was auto-updated. 2021-07-20 20:34:45 +00:00
github-actions[bot] 8b83e2a888 Branch was auto-updated. 2021-07-20 20:34:44 +00:00
Bhavin Patel 9560018229 Merge pull request #1534 from splunk/fixes
validate fix:
2021-07-20 13:34:27 -07:00
patel-bhavin 23adb90bdc validate fix: 2021-07-20 13:20:31 -07:00
mhaag-spl ce0ffe6cb8 Update office_application_spawn_rundll32_process.yml 2021-07-20 14:08:10 -06:00
patel-bhavin 4d714cd6f6 snap 2021-07-20 12:55:18 -07:00
Michael Haag 2f33b99816 Merge branch 'develop' into Risky 2021-07-20 13:47:15 -06:00
Jose Enrique Hernandez 3d9573d14c Merge pull request #1532 from splunk/TR_794
Mustang bug fixes
2021-07-20 15:43:59 -04:00
github-actions[bot] ed7f7456b6 Branch was auto-updated. 2021-07-20 19:43:24 +00:00
Jose Enrique Hernandez c076fc99d4 Merge pull request #1506 from splunk/TR-772_rba
TR-772 - Rba support
2021-07-20 15:43:04 -04:00
Jose Enrique Hernandez 153fe9b32b Merge branch 'develop' into TR-772_rba 2021-07-20 15:42:56 -04:00
mvelazco 589d3f92ed fixing extra space 2021-07-20 13:53:50 -04:00
research bot 3740535cca updating docs and package bits [ci skip] 2021-07-20 17:49:09 +00:00
github-actions[bot] d74c858cdd Branch was auto-updated. 2021-07-20 15:56:34 +00:00
Jose Enrique Hernandez ae839bff5f Merge pull request #1472 from splunk/cloud_detection_rba_yml
Cloud RBA - 1
2021-07-20 11:56:08 -04:00
github-actions[bot] e58fae0ee3 Branch was auto-updated. 2021-07-20 15:51:45 +00:00
github-actions[bot] 97f0f8dae3 Branch was auto-updated. 2021-07-20 15:51:40 +00:00
Jose Enrique Hernandez bcc4870315 Merge pull request #1520 from splunk/cloud_rab2
Cloud RBA - 2
2021-07-20 11:51:19 -04:00
github-actions[bot] 7c72ccc3d7 Branch was auto-updated. 2021-07-20 15:47:18 +00:00
github-actions[bot] bae9780afd Branch was auto-updated. 2021-07-20 15:47:12 +00:00
Jose Enrique Hernandez 6d06c74d1a Merge branch 'develop' into cloud_rab2 2021-07-20 11:47:07 -04:00
Jose Enrique Hernandez db52587836 Merge pull request #1518 from splunk/rba_task_2
Rba task 2
2021-07-20 11:46:54 -04:00
Jose Enrique Hernandez f4dbaffcc7 Merge branch 'develop' into cloud_rab2 2021-07-20 11:31:21 -04:00
github-actions[bot] 7f4c0e2f53 Branch was auto-updated. 2021-07-20 15:29:39 +00:00
github-actions[bot] 0deb04a9a7 Branch was auto-updated. 2021-07-20 15:29:39 +00:00
github-actions[bot] 85680c51bf Branch was auto-updated. 2021-07-20 15:29:34 +00:00
Jose Enrique Hernandez 193ea9300b Merge pull request #1521 from splunk/cloud_rba3
Cloud RBA - 3
2021-07-20 11:29:15 -04:00
github-actions[bot] 722a467167 Branch was auto-updated. 2021-07-20 15:28:15 +00:00
github-actions[bot] 59f50fb399 Branch was auto-updated. 2021-07-20 15:28:07 +00:00
github-actions[bot] 0d98bc4bb7 Branch was auto-updated. 2021-07-20 15:28:06 +00:00
github-actions[bot] 1fe75a7868 Branch was auto-updated. 2021-07-20 15:28:05 +00:00
Jose Enrique Hernandez 8f5c971c01 Merge pull request #1531 from splunk/take_over
RBA Tags: Bhavin Take over
2021-07-20 11:27:44 -04:00
github-actions[bot] c22e18a014 Branch was auto-updated. 2021-07-20 15:20:30 +00:00
github-actions[bot] fa35a30922 Branch was auto-updated. 2021-07-20 15:20:29 +00:00
github-actions[bot] 88d1d70e55 Branch was auto-updated. 2021-07-20 15:20:28 +00:00
github-actions[bot] 72ffcecd3f Branch was auto-updated. 2021-07-20 15:20:19 +00:00
github-actions[bot] 7ac341661e Branch was auto-updated. 2021-07-20 15:20:18 +00:00
Jose Enrique Hernandez d13c170413 Merge pull request #1529 from splunk/ssa_TR-803
SSA TR-803
2021-07-20 11:19:58 -04:00
patel-bhavin 56b576f331 add work load 2021-07-19 14:49:10 -07:00
patel-bhavin b100388abb fixes 2021-07-19 14:44:42 -07:00
peter-cg 502bdcca79 Allow kerberoasting detection to fail 2021-07-19 15:21:05 -05:00
peter-cg f527e9f739 Fixing first_time pass_condition 2021-07-19 14:52:43 -05:00
peter-cg d48dd6a3e2 Merge branch 'ssa_TR-803' of github.com:splunk/security-content into ssa_TR-803 2021-07-19 13:46:17 -05:00
peter-cg 69541f7259 Fixing a couple SSA detections which would not compile 2021-07-19 13:45:50 -05:00