mhaag-spl
89df8759c6
second pass
2022-03-01 13:54:27 -07:00
mhaag-spl
374a937eb8
Merge branch '4104allday' of https://github.com/splunk/security_content into 4104allday
2022-03-01 13:23:24 -07:00
pyth0n1c
2161a412f4
Branch was auto-updated.
2022-03-01 12:18:35 -08:00
mvelazco
4106cbeabe
Merge pull request #2049 from splunk/aws_lambda
...
AWS Update lambda function
2022-03-01 15:18:08 -05:00
pyth0n1c
b5d5fe8f1e
Branch was auto-updated.
2022-03-01 11:36:06 -08:00
pyth0n1c
6b284f7dee
Branch was auto-updated.
2022-03-01 11:35:56 -08:00
Bhavin Patel
a508cb3067
Merge pull request #2043 from splunk/hermetic_wiper
...
hermetic_wiper
2022-03-01 11:35:30 -08:00
pyth0n1c
4a4bd74497
Branch was auto-updated.
2022-03-01 10:53:56 -08:00
pyth0n1c
c7351afa18
Branch was auto-updated.
2022-03-01 10:53:48 -08:00
pyth0n1c
8cb8b89a96
Branch was auto-updated.
2022-03-01 10:53:47 -08:00
Bhavin Patel
8449a51da4
Merge pull request #2055 from splunk/AlwaysUseDevelopTestingCode
...
Use Latest Testing Code/Config
2022-03-01 10:53:28 -08:00
Bhavin Patel
be0e84c008
Update windows_raw_access_to_disk_volume_partition.yml
2022-03-01 10:39:01 -08:00
Bhavin Patel
a57caed905
Update windows_file_without_extension_in_critical_folder.yml
2022-03-01 10:38:11 -08:00
pyth0n1c
10ed443903
Ensuring that testing code from develop
...
branch is always used for CI/CD. This is
done by explicitly checking out the develop
branch to get the testing code. We make
this change to avoid doing CI/CD tests
using out-of-data Splunkbase Apps.
For one-off testing, a develop can
always modify this workflow file to
NOT check out the develop branch
and include a custom test JSON.
2022-03-01 09:41:19 -08:00
pyth0n1c
73a14ae529
Branch was auto-updated.
2022-03-01 09:34:12 -08:00
pyth0n1c
35ed8089b4
Branch was auto-updated.
2022-03-01 09:34:09 -08:00
pyth0n1c
5d03981aa1
Branch was auto-updated.
2022-03-01 09:34:08 -08:00
Lou Stella
401b5ad8cc
Merge pull request #2054 from splunk/ransomware_extensions
...
Updated ransomware_extensions.csv
2022-03-01 11:33:47 -06:00
Lou Stella
49b2b9f0d4
Updated ransomware_extensions.csv
2022-03-01 11:19:55 -06:00
mhaag-spl
57677f5c31
Allow inbound firewall rule
2022-03-01 09:49:47 -07:00
mhaag-spl
0fff58ca6b
ADsisearcher
2022-03-01 09:39:14 -07:00
pyth0n1c
3a7cd8c742
Branch was auto-updated.
2022-03-01 06:31:28 -08:00
pyth0n1c
bb797ef06f
Branch was auto-updated.
2022-03-01 06:31:28 -08:00
pyth0n1c
7db6383587
Branch was auto-updated.
2022-03-01 06:31:23 -08:00
Jose Enrique Hernandez
3c1f3cf6cf
Merge pull request #2052 from schwedenmut/patch-1
2022-03-01 09:30:52 -05:00
Marc Schwede
63dcb7f00f
Update o365_excessive_authentication_failures_alert.yml
...
rename syntax adjusted
later needed lastTime included
2022-03-01 14:04:36 +01:00
pyth0n1c
f897d45ae8
Branch was auto-updated.
2022-02-28 14:31:26 -08:00
pyth0n1c
0644f0b22f
Branch was auto-updated.
2022-02-28 14:31:22 -08:00
pyth0n1c
a4f3c2f62c
Branch was auto-updated.
2022-02-28 14:31:21 -08:00
Lou Stella
32b5190096
Merge pull request #2050 from splunk/function_updates
...
Function updates
2022-02-28 16:31:03 -06:00
pyth0n1c
ed6f594f43
Branch was auto-updated.
2022-02-28 14:24:57 -08:00
pyth0n1c
82e402f65a
Branch was auto-updated.
2022-02-28 14:24:56 -08:00
pyth0n1c
e7ee845cbc
Branch was auto-updated.
2022-02-28 14:24:55 -08:00
pyth0n1c
a382087cc0
Branch was auto-updated.
2022-02-28 14:24:51 -08:00
Lou Stella
547d323dc6
Merge pull request #2045 from splunk/Playbook_types
...
Added playbook_type field
2022-02-28 16:24:25 -06:00
pyth0n1c
e325eeed98
Branch was auto-updated.
2022-02-28 14:19:49 -08:00
pyth0n1c
ec1dfe99d9
Branch was auto-updated.
2022-02-28 14:19:45 -08:00
pyth0n1c
11fce2b452
Branch was auto-updated.
2022-02-28 14:18:40 -08:00
pyth0n1c
e2585bbff2
Branch was auto-updated.
2022-02-28 14:18:39 -08:00
pyth0n1c
f44d149322
Branch was auto-updated.
2022-02-28 14:18:38 -08:00
Michael Haag
72a04035b3
Merge pull request #2051 from splunk/1526_Github_Issue
...
Fixing Github Issue 1526
2022-02-28 15:18:20 -07:00
mvelazco
8d72fd87fc
testing new detection logic to avoid FP
2022-02-28 17:02:50 -05:00
Lou Stella
0d0076a686
Update find_related_containers
2022-02-28 16:02:33 -06:00
Lou Stella
3a0e77912f
Update container_merge
2022-02-28 16:02:03 -06:00
patel-bhavin
1273fcec97
update giignore for testing
2022-02-28 13:57:59 -08:00
patel-bhavin
7321055bc5
timewindow
2022-02-28 11:59:42 -08:00
patel-bhavin
1d19ac2eff
text updates
2022-02-28 11:44:33 -08:00
patel-bhavin
bdb357cbc2
detection update
2022-02-28 11:28:27 -08:00
mhaag-spl
5785354e77
Fixes
2022-02-28 09:34:40 -07:00
mhaag-spl
cf31629e06
Converted detections to XML
2022-02-25 15:30:49 -07:00