Commit Graph

1175 Commits

Author SHA1 Message Date
Rod Soto 5facbf0cf8 awssamlaccessbyprovideruserandprincipal 2021-01-26 16:59:56 -05:00
Rod Soto af0fa08d34 storyandfirstsearchcloudfederatedcredentialabuse 2021-01-26 15:03:53 -05:00
github-actions[bot] c88cc88d1b Branch was auto-updated. 2021-01-25 19:02:14 +00:00
P4T12ICK d5d1298db9 fix a description 2021-01-25 18:28:25 +01:00
P4T12ICK daf978228e fix a description 2021-01-25 18:19:03 +01:00
David Dorsey 88c9469541 More language clean up 2021-01-22 09:37:51 -06:00
David Dorsey 26050fae29 More language clean up 2021-01-22 09:34:33 -06:00
P4T12ICK 0c07ebeb88 bug fix 2021-01-22 13:01:09 +01:00
David Dorsey fd76342c94 Changed the language in some of the descriptions 2021-01-21 23:53:47 -06:00
github-actions[bot] 0a8a41d83e Branch was auto-updated. 2021-01-21 22:26:19 +00:00
bpatel 549fb5d197 minor text 2021-01-21 11:39:57 -08:00
Bhavin Patel 4da2f7e4c4 Merge branch 'develop' into lookup_name_duplicate 2021-01-19 08:59:30 -08:00
root f799b2abcf Added detection testing service results inMalicious PowerShell Process - Execution Policy Bypass 2021-01-19 14:02:32 +00:00
P4T12ICK 442d944890 new test file 2021-01-19 14:44:01 +01:00
P4T12ICK 29ba7a7c41 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-19 14:40:00 +01:00
P4T12ICK fc19205eb1 new test file 2021-01-19 14:39:44 +01:00
root 40be1e58a8 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques 2021-01-19 13:35:25 +00:00
P4T12ICK 094c88a6ce new test file 2021-01-19 14:17:24 +01:00
P4T12ICK feb909bb55 new test file 2021-01-19 14:08:44 +01:00
P4T12ICK 0d75faf323 new test file 2021-01-19 13:55:33 +01:00
P4T12ICK 98175156b7 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-18 15:47:15 +01:00
P4T12ICK 477221da99 detection testing 2021-01-18 15:46:53 +01:00
root a88d8291fe Added detection testing service results inDNS Query Length With High Standard Deviation 2021-01-18 14:41:53 +00:00
P4T12ICK 44bf41a678 new test file 2021-01-18 15:22:05 +01:00
P4T12ICK 27b27a5b59 detection testing branch 2021-01-18 14:10:47 +01:00
github-actions[bot] 18ba87492f Branch was auto-updated. 2021-01-14 20:29:17 +00:00
root b751d5ddb8 Added detection testing service results inDetect hosts connecting to dynamic domain providers 2021-01-14 15:15:59 +00:00
P4T12ICK c871d6804a improved detections and tests 2021-01-14 15:01:16 +01:00
root 050b89ebef Added detection testing service results inO365 Bypass MFA via Trusted IP 2021-01-14 02:45:18 +00:00
bpatel 0b6757738e search error 2021-01-13 17:29:45 -08:00
bpatel 13ae19a958 uuid 2021-01-13 17:26:33 -08:00
bpatel c5e6238e20 updated lookup name 2021-01-13 17:21:27 -08:00
Bhavin Patel f74ebbea1c Merge branch 'develop' into TR-318_mfa 2021-01-13 17:19:00 -08:00
bpatel ab6d8cdfe1 new detection file and test data 2021-01-13 16:30:19 -08:00
bpatel a3193582e4 Merge branch 'lookup_name_duplicate' of github.com:splunk/security-content into lookup_name_duplicate 2021-01-13 15:49:10 -08:00
bpatel acd855474b minor 2021-01-13 15:49:03 -08:00
Bhavin Patel c1325067f1 Merge branch 'develop' into lookup_name_duplicate 2021-01-13 15:35:33 -08:00
bpatel 24128d4982 updating lookup name to avoid duplicates and deprecattion 2021-01-13 15:34:24 -08:00
P4T12ICK 843d99f9d9 moved detections 2021-01-13 17:59:31 +01:00
P4T12ICK 36c97ae874 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-13 14:26:11 +01:00
P4T12ICK 7006049099 merged with develop 2021-01-13 14:26:00 +01:00
Detection Testing Service 0f4f7a4288 Merge branch 'detection_testing_branch' of https://github.com/splunk/security-content into detection_testing_branch 2021-01-13 13:24:59 +00:00
root 783c24cbe4 Added detection testing service results inDetect New Open S3 Buckets over AWS CLI 2021-01-13 13:24:58 +00:00
P4T12ICK 4a626c5246 merged with develop 2021-01-13 14:21:09 +01:00
P4T12ICK 8d40be7a12 improved detections and tests 2021-01-13 14:05:53 +01:00
root 65f935b24f Added detection testing service results inDetect New Open S3 buckets 2021-01-12 14:58:47 +00:00
P4T12ICK e31e1b4ace Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-12 15:38:48 +01:00
P4T12ICK 994989b086 improved detections and tests 2021-01-12 15:38:32 +01:00
Detection Testing Service e18710a8ed Merge branch 'detection_testing_branch' of https://github.com/splunk/security-content into detection_testing_branch 2021-01-12 10:33:23 +00:00
root be3736fc61 Added detection testing service results inAWS Network Access Control List Created with All Open Ports 2021-01-12 10:33:22 +00:00