Commit Graph

14255 Commits

Author SHA1 Message Date
mhaag-spl 89df8759c6 second pass 2022-03-01 13:54:27 -07:00
mhaag-spl 374a937eb8 Merge branch '4104allday' of https://github.com/splunk/security_content into 4104allday 2022-03-01 13:23:24 -07:00
pyth0n1c 2161a412f4 Branch was auto-updated. 2022-03-01 12:18:35 -08:00
mvelazco 4106cbeabe Merge pull request #2049 from splunk/aws_lambda
AWS Update lambda function
2022-03-01 15:18:08 -05:00
pyth0n1c b5d5fe8f1e Branch was auto-updated. 2022-03-01 11:36:06 -08:00
pyth0n1c 6b284f7dee Branch was auto-updated. 2022-03-01 11:35:56 -08:00
Bhavin Patel a508cb3067 Merge pull request #2043 from splunk/hermetic_wiper
hermetic_wiper
2022-03-01 11:35:30 -08:00
pyth0n1c 4a4bd74497 Branch was auto-updated. 2022-03-01 10:53:56 -08:00
pyth0n1c c7351afa18 Branch was auto-updated. 2022-03-01 10:53:48 -08:00
pyth0n1c 8cb8b89a96 Branch was auto-updated. 2022-03-01 10:53:47 -08:00
Bhavin Patel 8449a51da4 Merge pull request #2055 from splunk/AlwaysUseDevelopTestingCode
Use Latest Testing Code/Config
2022-03-01 10:53:28 -08:00
Bhavin Patel be0e84c008 Update windows_raw_access_to_disk_volume_partition.yml 2022-03-01 10:39:01 -08:00
Bhavin Patel a57caed905 Update windows_file_without_extension_in_critical_folder.yml 2022-03-01 10:38:11 -08:00
pyth0n1c 10ed443903 Ensuring that testing code from develop
branch is always used for CI/CD.  This is
done by explicitly checking out the develop
branch to get the testing code.  We make
this change to avoid doing CI/CD tests 
using out-of-data Splunkbase Apps.
For one-off testing, a develop can
always modify this workflow file to 
NOT check out the develop branch
and include a custom test JSON.
2022-03-01 09:41:19 -08:00
pyth0n1c 73a14ae529 Branch was auto-updated. 2022-03-01 09:34:12 -08:00
pyth0n1c 35ed8089b4 Branch was auto-updated. 2022-03-01 09:34:09 -08:00
pyth0n1c 5d03981aa1 Branch was auto-updated. 2022-03-01 09:34:08 -08:00
Lou Stella 401b5ad8cc Merge pull request #2054 from splunk/ransomware_extensions
Updated ransomware_extensions.csv
2022-03-01 11:33:47 -06:00
Lou Stella 49b2b9f0d4 Updated ransomware_extensions.csv 2022-03-01 11:19:55 -06:00
mhaag-spl 57677f5c31 Allow inbound firewall rule 2022-03-01 09:49:47 -07:00
mhaag-spl 0fff58ca6b ADsisearcher 2022-03-01 09:39:14 -07:00
pyth0n1c 3a7cd8c742 Branch was auto-updated. 2022-03-01 06:31:28 -08:00
pyth0n1c bb797ef06f Branch was auto-updated. 2022-03-01 06:31:28 -08:00
pyth0n1c 7db6383587 Branch was auto-updated. 2022-03-01 06:31:23 -08:00
Jose Enrique Hernandez 3c1f3cf6cf Merge pull request #2052 from schwedenmut/patch-1 2022-03-01 09:30:52 -05:00
Marc Schwede 63dcb7f00f Update o365_excessive_authentication_failures_alert.yml
rename syntax adjusted
later needed lastTime included
2022-03-01 14:04:36 +01:00
pyth0n1c f897d45ae8 Branch was auto-updated. 2022-02-28 14:31:26 -08:00
pyth0n1c 0644f0b22f Branch was auto-updated. 2022-02-28 14:31:22 -08:00
pyth0n1c a4f3c2f62c Branch was auto-updated. 2022-02-28 14:31:21 -08:00
Lou Stella 32b5190096 Merge pull request #2050 from splunk/function_updates
Function updates
2022-02-28 16:31:03 -06:00
pyth0n1c ed6f594f43 Branch was auto-updated. 2022-02-28 14:24:57 -08:00
pyth0n1c 82e402f65a Branch was auto-updated. 2022-02-28 14:24:56 -08:00
pyth0n1c e7ee845cbc Branch was auto-updated. 2022-02-28 14:24:55 -08:00
pyth0n1c a382087cc0 Branch was auto-updated. 2022-02-28 14:24:51 -08:00
Lou Stella 547d323dc6 Merge pull request #2045 from splunk/Playbook_types
Added playbook_type field
2022-02-28 16:24:25 -06:00
pyth0n1c e325eeed98 Branch was auto-updated. 2022-02-28 14:19:49 -08:00
pyth0n1c ec1dfe99d9 Branch was auto-updated. 2022-02-28 14:19:45 -08:00
pyth0n1c 11fce2b452 Branch was auto-updated. 2022-02-28 14:18:40 -08:00
pyth0n1c e2585bbff2 Branch was auto-updated. 2022-02-28 14:18:39 -08:00
pyth0n1c f44d149322 Branch was auto-updated. 2022-02-28 14:18:38 -08:00
Michael Haag 72a04035b3 Merge pull request #2051 from splunk/1526_Github_Issue
Fixing Github Issue 1526
2022-02-28 15:18:20 -07:00
mvelazco 8d72fd87fc testing new detection logic to avoid FP 2022-02-28 17:02:50 -05:00
Lou Stella 0d0076a686 Update find_related_containers 2022-02-28 16:02:33 -06:00
Lou Stella 3a0e77912f Update container_merge 2022-02-28 16:02:03 -06:00
patel-bhavin 1273fcec97 update giignore for testing 2022-02-28 13:57:59 -08:00
patel-bhavin 7321055bc5 timewindow 2022-02-28 11:59:42 -08:00
patel-bhavin 1d19ac2eff text updates 2022-02-28 11:44:33 -08:00
patel-bhavin bdb357cbc2 detection update 2022-02-28 11:28:27 -08:00
mhaag-spl 5785354e77 Fixes 2022-02-28 09:34:40 -07:00
mhaag-spl cf31629e06 Converted detections to XML 2022-02-25 15:30:49 -07:00