Commit Graph

418 Commits

Author SHA1 Message Date
pyth0n1c bb797ef06f Branch was auto-updated. 2022-03-01 06:31:28 -08:00
Marc Schwede 63dcb7f00f Update o365_excessive_authentication_failures_alert.yml
rename syntax adjusted
later needed lastTime included
2022-03-01 14:04:36 +01:00
patel-bhavin 1d19ac2eff text updates 2022-02-28 11:44:33 -08:00
patel-bhavin bdb357cbc2 detection update 2022-02-28 11:28:27 -08:00
pyth0n1c 0338044721 Updating the date to today
and bumping the version for
updated searches associated 
with this PR.
2022-02-18 10:57:49 -08:00
pyth0n1c aa6ec9315b Branch was auto-updated. 2022-02-18 07:41:50 -08:00
pyth0n1c a093ba7aaf Minor updates to fixed searches.
Fixed some spacing issues and quotation
mark issues that were causing search success problems.
2022-02-15 09:47:36 -08:00
pyth0n1c 77b300ab4e Accidentally changed detection file
detections/cloud/aws_excessive_security_scanning.yml.
That file should not have been modified.  Rolling back those
changes.
2022-02-15 09:37:52 -08:00
pyth0n1c 7648c76c0b A handful of easy detection test fixes to get
the tests to detections to work with the
newest application baseline.
2022-02-14 16:57:33 -08:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
research bot 3212249c52 updating docs and package bits [ci skip] 2022-02-07 21:03:48 +00:00
patel-bhavin eb43251183 spl update 2022-02-03 15:26:19 -08:00
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
Detection Testing Service 6fd7a4e812 test: updated supported_tas to recommended_tas 2022-01-19 17:43:41 +05:30
Detection Testing Service a2b6fff739 test:updated ymls 2021-12-15 21:15:02 +05:30
tlangalia 343ceae12f Updated detection files with supported TA list. 2021-12-14 13:27:55 +05:50
research bot 750c81fb5b updating docs and package bits [ci skip] 2021-12-02 18:50:01 +00:00
patel-bhavin a6ee98620d user login update 2021-11-19 11:18:36 -08:00
patel-bhavin bbc913faaa first 3 detections 2021-11-19 11:16:11 -08:00
root 700383c15f Added detection testing service results inAWS IAM AccessDenied Discovery Events 2021-11-12 19:26:05 +00:00
patel-bhavin 6d152fdf0d spll update 2021-11-12 11:03:40 -08:00
research bot a1afa0fa60 updating docs and package bits [ci skip] 2021-10-28 19:55:37 +00:00
Bhavin Patel 46b7d220cc Branch was auto-updated. 2021-10-12 13:10:59 -07:00
Bhavin Patel f67ee09979 revert deployments: - Send to Phantom 2021-10-12 13:08:33 -07:00
patel-bhavin 7dbacd0674 errors and text updates 2021-10-12 13:02:16 -07:00
tccontre d2719d316e Update gsuite_drive_share_in_external_email.yml 2021-10-12 11:12:12 +02:00
tccontre 8a1bed2fb9 CARS_UPDATE_MITRE_ID_B1 2021-10-11 11:03:20 +02:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
Bhavin Patel 965fd8885c Branch was auto-updated. 2021-09-20 02:43:00 -07:00
P4T12ICK 5b41aaaa58 merged with develop 2021-09-20 11:15:23 +02:00
P4T12ICK 9db514182b added phase to detection 2021-09-16 15:39:29 +02:00
patel-bhavin 9e22174115 revert 2021-09-15 15:48:01 -07:00
patel-bhavin a110285399 deprecate 2021-09-15 13:13:38 -07:00
P4T12ICK 1d1c93893b add new alert action 2021-09-13 17:10:37 +02:00
P4T12ICK 8cae9d0130 add new alert action 2021-09-13 12:56:16 +02:00
P4T12ICK f69826e682 changed dashboard 2021-09-13 12:36:59 +02:00
research bot 2783c3fe43 updating docs and package bits [ci skip] 2021-09-09 19:07:07 +00:00
P4T12ICK cf77572420 change tagging 2021-09-09 15:11:44 +02:00
P4T12ICK 13f072766b change custom command 2021-09-09 09:57:47 +02:00
P4T12ICK 4365af0f7f update detections 2021-09-06 15:25:23 +02:00
P4T12ICK f60ebe6f66 updated detections 2021-09-06 15:00:02 +02:00
P4T12ICK a917acaf4c updated detections 2021-09-06 14:49:19 +02:00
P4T12ICK 565c49ee63 updated detections 2021-09-06 13:14:33 +02:00
P4T12ICK 45fd279a31 updated detections 2021-09-06 10:59:00 +02:00
P4T12ICK eabda4cf93 changes 2021-09-03 11:36:49 +02:00
P4T12ICK 890b46cb22 Merge branch 'develop' into dev_sec_ops_package 2021-09-03 11:35:31 +02:00
root 994b63fb07 Added detection testing service results inCircle CI Disable Security Job 2021-09-02 09:06:13 +00:00
P4T12ICK f6322e287c Merge branch 'circle_ci_detections' of github.com:splunk/security_content into circle_ci_detections 2021-09-02 10:42:15 +02:00
P4T12ICK 99f0349e9f circle ci detecction 2021-09-02 10:42:01 +02:00
root 8298c5106c Added detection testing service results inCircle CI Disable Security Step 2021-09-02 08:14:50 +00:00