609 Commits

Author	SHA1	Message	Date
srv-rr-gh-researchbt	54ec5991d7	Branch was auto-updated.	2023-02-06 16:31:13 -08:00
srv-rr-gh-researchbt	b3e8ddc0bf	Branch was auto-updated.	2023-02-06 16:12:24 -08:00
srv-rr-gh-researchbt	bcf9eae237	Branch was auto-updated.	2023-02-06 16:12:19 -08:00
mvelazco	192b93a110	adding required field	2023-02-03 10:53:26 -05:00
pyth0n1c	60ea283f53	Moving failing tests to experimental	2023-02-02 16:32:24 -08:00
mvelazco	bc7fa3078f	multiple fixes	2023-02-02 18:38:06 -05:00
patel-bhavin	7c88bf93c9	validation error	2023-02-01 17:19:30 -08:00
patel-bhavin	5dd64e3fd1	aws concurrent detections	2023-02-01 17:01:28 -08:00
patel-bhavin	697dcfed0b	fix yaml	2023-01-31 17:02:34 -08:00
patel-bhavin	ae07e87dc1	spl update	2023-01-31 16:42:19 -08:00
patel-bhavin	f6c78edc5d	new mfa added aws	2023-01-31 11:34:28 -08:00
patel-bhavin	71273d8fe1	fix the errors	2023-01-30 15:13:56 -08:00
mvelazco	8dd93e3149	adding new detection	2023-01-30 17:33:25 -05:00
patel-bhavin	b629b14dca	spl and yaml updates	2023-01-30 13:38:41 -08:00
patel-bhavin	14edea4ca0	new aws detection	2023-01-30 13:10:13 -08:00
patel-bhavin	03598ec031	new detectiono aws	2023-01-27 16:58:28 -08:00
patel-bhavin	6d2aea64cc	minor fix	2023-01-26 17:14:53 -08:00
patel-bhavin	2ff71df1b0	new detection and update 1	2023-01-26 17:11:29 -08:00
mvelazco	5306030d74	fixes	2023-01-26 16:35:43 -05:00
mvelazco	0c79ce7d96	adding new detection	2023-01-24 18:50:51 -05:00
mvelazco	faedd6645a	adding new detection for azure ad session hijacking	2023-01-24 14:02:06 -05:00
mvelazco	a7f6ddbfeb	adding new azure ad brute force detection	2023-01-23 20:46:00 -05:00
mvelazco	5f16506697	adding new azure ad brute force detection	2023-01-23 17:31:48 -05:00
patel-bhavin	090e5c4bee	yml changes	2023-01-19 16:38:20 -08:00
patel-bhavin	4b24cc6d53	tagging aws relevant detection draft	2023-01-19 16:01:20 -08:00
patel-bhavin	05aca8a58e	new aws detection	2023-01-19 15:51:14 -08:00
srv-rr-gh-researchbt	1035205f8d	Branch was auto-updated.	2023-01-10 11:46:08 -08:00
patel-bhavin	2beb040928	add risk index macro	2022-12-21 14:12:18 -08:00
mvelazco	eebf59bc8b	updating detection	2022-11-16 13:15:58 -05:00
patel-bhavin	631daa4ff6	spl update	2022-11-11 13:50:35 -08:00
srv-rr-gh-researchbt	c9624ff0bd	Branch was auto-updated.	2022-11-11 12:29:52 -08:00
patel-bhavin	767e323fc1	spl update	2022-11-11 11:45:47 -08:00
srv-rr-gh-researchbt	a031ca7bcc	Branch was auto-updated.	2022-11-08 13:29:16 -08:00
patel-bhavin	c87d793e48	remove datamodel	2022-11-08 12:56:46 -08:00
mvelazco	b8d9c4c6fd	moving detection to experimental	2022-11-04 13:48:00 -04:00
pyth0n1c	3f6eda261e	Carried over changes from ... external PR to repo	2022-11-04 09:56:25 -07:00
mvelazco	0f5893bd27	updating mitre ids	2022-11-04 12:50:51 -04:00
Bhavin Patel	0f1b6189ab	Merge branch 'develop' into gcp_account_takeover	2022-10-31 12:41:52 -07:00
Bhavin Patel	1c10255e9d	asset type	2022-10-31 12:20:06 -07:00
mvelazco	17ae3f4a2c	updating how to implement	2022-10-20 17:35:27 -04:00
patel-bhavin	0c6193617f	_time in the by clause	2022-10-19 14:45:10 -07:00
patel-bhavin	1e963e553b	yaml cleanup and references	2022-10-18 18:07:50 -07:00
mvelazco	526ca4bd1b	fixing detection	2022-10-18 12:03:20 -04:00
mvelazco	142d52872f	updating detection	2022-10-18 11:36:29 -04:00
mvelazco	e95c7f6937	fixing detection	2022-10-17 12:27:58 -04:00
mvelazco	2afe6af188	fixing yaml issues	2022-10-17 11:44:39 -04:00
patel-bhavin	5b4074dd23	hti update	2022-10-14 15:36:28 -07:00
Bhavin Patel	7ab9b56f72	Update gcp_unusual_number_of_failed_authentications_from_ip.yml	2022-10-14 12:20:52 -07:00
Bhavin Patel	ec4829ad7f	Update gcp_multiple_users_failing_to_authenticate_from_ip.yml	2022-10-14 12:20:23 -07:00
mvelazco	7bada443b3	Merge branch 'gcp_account_takeover' of github.com:splunk/security_content into gcp_account_takeover	2022-10-14 15:03:56 -04:00