1c1ce46004
Merge branch 'develop' into mbjerkeland-develop
2020-08-24 01:04:40 -04:00
897d25a7f8
Present times in ISO8601 instead of US style
2020-08-12 23:45:53 +02:00
289cec6fde
Now validating?
2020-08-12 23:32:48 +02:00
ff4cf63e3e
Fixed up my mistakes. Should hopefully validate now
2020-08-12 23:26:57 +02:00
d820c2d914
Retrying
2020-08-12 23:21:43 +02:00
c12f8b2a6e
Added ARP Poisoning Detection for Cisco Devices
2020-08-12 10:55:10 +02:00
dd10e6e3cb
Adding macros
2020-08-12 09:17:32 +02:00
2f04c868e4
new detections for security hub alerts
2020-08-06 14:44:50 -07:00
32e5fc5331
Merge branch 'develop' into F5_TMUI
2020-08-04 17:09:39 -04:00
58f47148b9
ymls and updates
2020-08-04 14:04:38 -07:00
63f266629e
porting ymls into a newe PR
2020-08-04 12:55:12 -07:00
322697fdd0
more renames base on upper case
2020-06-29 17:39:38 -04:00
8438bf71e8
Fixed the first time previously seen windows service search to work
...
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update
Made the default deployment template be -70m@m to -10m@m
Added a new deployment template for hourly baseline caches
2020-06-25 00:09:30 -05:00
3c8c201add
Merge branch 'develop' into CRL-1766-auth-dm-updates
2020-06-16 10:46:20 -07:00
56ccf11ea0
this should be false
2020-06-09 17:58:39 -04:00
37199617b3
updating macro filters
2020-06-08 17:12:15 -07:00
35c4b110bc
Merge branch 'develop' into azuretest
2020-06-04 11:06:04 -07:00
9f2710bfde
updating files to make sure validate passes
2020-06-03 13:10:30 -07:00
72d3ab875e
converted to spec3 and other updates
2020-05-28 13:31:49 -07:00
50f3fdbbee
kubectlcalls
2020-05-26 23:42:26 -04:00
46803f5ea0
svacconpodnasp
2020-05-26 23:16:07 -04:00
1bbc7d1728
fixedanemsaddedservaccount
2020-05-26 22:40:16 -04:00
8e44ca15ca
RBACauth
2020-05-26 22:18:16 -04:00
6086fa8e2b
azk8srolesto
2020-05-21 18:41:32 -04:00
2e7d50b6d0
newstoryconfsecazk8s
2020-05-20 19:09:29 -04:00
0748085eca
azpodscandetect
2020-05-20 15:38:53 -04:00
4ac5dc4dff
k8sScan
2020-05-19 17:55:28 -04:00
cda505d8fa
new generate script
2020-05-06 17:42:38 +02:00
cc464c87db
updated content
2020-05-05 12:58:56 +02:00
909806896e
validate script
2020-04-30 16:52:38 +02:00
442a575e1d
WIP validate script
2020-04-30 15:51:16 +02:00
916e54d0ff
Merge pull request #429 from splunk/crl-1749ssh
...
CRL-1749 Cloud Stories
2020-04-17 10:36:24 -07:00
dde27b94d0
Merge pull request #430 from splunk/first_okta_story
...
new files for okta story
2020-04-02 15:20:54 -07:00
500a21e8cc
detection, spec and macroupdates
2020-04-02 13:39:29 -07:00
542f78b716
fixedssh
2020-03-28 09:25:01 -04:00
3d5891bb1e
adding macro and updating spl
2020-03-23 11:39:40 -07:00
45ffbde816
Merge branch 'develop' into CRL-1746
2020-03-16 13:23:43 -07:00
9363ded8d0
Merge pull request #385 from splunk/CRL-1733
...
CRL-1733: updating instructions for better clarification
2020-03-16 13:00:23 -06:00
bd439c0a85
Merge pull request #402 from splunk/CRL-1744_macro_fixes
...
fixes for a couple broken macros
2020-03-16 10:18:29 -07:00
1e3299d3f0
updating macro name too
2020-03-11 20:36:49 -04:00
7ee8310efb
macro ymls and detection update
2020-03-09 17:46:47 -07:00
573e8e3aa0
fixes for a couple broken macros
2020-03-04 14:31:37 -07:00
5199a94b31
updating instructions for better clarification
2020-03-02 13:18:54 -08:00
637fdf3c11
Merge pull request #372 from splunk/container_implantation
...
Container implantation
2020-02-27 15:31:47 -08:00
187a00cd71
addedmacros
2020-02-27 17:09:50 -05:00
ef1b56f9ae
new credentia dumping detection
2020-02-21 09:03:15 +01:00
6b2c9e4172
Merge pull request #327 from splunk/supicious_email_updates
...
updating boiler plate, detection not working out of box against T1193…
2020-02-07 10:35:35 -08:00
556efc4a78
Merge pull request #325 from splunk/dns_query_updates
...
Update version info and macros
2020-02-07 10:33:05 -08:00
98195728fc
Merge pull request #324 from splunk/first_time_seen_cmd_updates
...
update version info, add macros for first time seen cmd line detection
2020-02-07 10:07:18 -08:00
0432161688
Merge pull request #326 from splunk/smb_detection_updates
...
update smb related content.
2020-02-07 10:05:44 -08:00
Jose Enrique Hernandez