Commit Graph

8347 Commits

Author SHA1 Message Date
Rod Soto 202da1aa8a gcpdetectsearchesfixed2 2020-10-09 10:57:14 -04:00
Rod Soto cb93a1df16 gcpdetecthighriskpermissionsv1 2020-10-09 10:43:27 -04:00
Rod Soto 8115fbd312 gcpdetectaccounthighriskrolesbyproject2 2020-10-09 10:12:21 -04:00
Rod Soto e6a967a412 gcpdetectaccounthighriskrolesbyproject 2020-10-09 10:07:42 -04:00
P4T12ICK c9875509d4 new test file 2020-10-09 12:54:09 +02:00
P4T12ICK e48567ac56 new test file 2020-10-09 12:28:07 +02:00
P4T12ICK 389e25b2e3 new test file 2020-10-09 12:12:06 +02:00
P4T12ICK e30c83593a new test file 2020-10-09 11:32:38 +02:00
P4T12ICK 51ff574655 new test file 2020-10-09 11:29:48 +02:00
P4T12ICK fd0b90bd2d new test file 2020-10-09 11:28:23 +02:00
P4T12ICK 44bbdf8927 new_test_file 2020-10-09 10:35:28 +02:00
P4T12ICK 9f85f5f34e new_test_file 2020-10-09 10:31:00 +02:00
P4T12ICK 6588eef977 new_test_file 2020-10-09 10:21:21 +02:00
P4T12ICK dbc9f267d0 new test 2020-10-09 09:29:38 +02:00
Ignacio a63539b0c3 Merge branch 'develop' into TR-193 2020-10-08 19:37:19 -07:00
Ignacio Bermudez Corrales 57dddc7310 updated detection for long command line 2020-10-08 19:30:17 -07:00
dependabot-preview[bot] 0226d62cfc Merge pull request #720 from splunk/dependabot/pip/configparser-5.0.1 2020-10-09 00:53:51 +00:00
dependabot-preview[bot] 4539bc9632 Bump configparser from 5.0.0 to 5.0.1
Bumps [configparser](https://github.com/jaraco/configparser) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/jaraco/configparser/releases)
- [Changelog](https://github.com/jaraco/configparser/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/configparser/compare/v5.0.0...v5.0.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-09 00:48:30 +00:00
bpatel d094bd30a9 Merge branch 'mustang_beta' of https://github.com/splunk/security-content into mustang_beta 2020-10-08 15:45:17 -07:00
bpatel 786c68090c spl logic update 2020-10-08 15:45:07 -07:00
Bhavin Patel b0938997a4 Merge branch 'develop' into mustang_beta 2020-10-08 15:43:00 -07:00
Rod Soto e6080d9022 firstiterationgcploitdetect 2020-10-08 17:51:57 -04:00
Bhavin Patel 87c14110fc Merge pull request #719 from splunk/minor-text-update-lily
Update kubernetes_aws_detect_sensitive_object_access.yml
2020-10-08 14:45:54 -07:00
Jose Enrique Hernandez 5a60f56c57 Update kubernetes_aws_detect_sensitive_object_access.yml 2020-10-08 17:39:58 -04:00
bpatel 44bc49dc13 spl updates 2020-10-08 11:15:35 -07:00
divious1 b7ad212344 fix a metric ton of validation errors, also updated the specs 2020-10-08 13:27:10 -04:00
divious1 3987951241 Merge branch 'develop' into response_phases 2020-10-08 10:29:54 -04:00
P4T12ICK b6fac54d24 updates 2020-10-08 16:18:12 +02:00
P4T12ICK e85f44a023 updates 2020-10-08 15:34:17 +02:00
P4T12ICK 6d820ded74 updates 2020-10-08 14:10:37 +02:00
P4T12ICK f81abbc79d updates 2020-10-08 13:01:52 +02:00
divious1 8f28d1d222 adjusted common generate scripts 2020-10-07 23:39:55 -04:00
divious1 41c0ddeda3 adjusted generate 2020-10-07 23:27:42 -04:00
divious1 eca687e7fb WIP of generate to support subfolders 2020-10-07 23:11:27 -04:00
divious1 4a81866045 adjusted validate to use sub folders 2020-10-07 23:11:11 -04:00
Bhavin Patel 6ebb8db593 Merge pull request #714 from splunk/cloud_auth_spl_bugs
Cloud auth spl bugs
2020-10-07 19:56:39 -07:00
bpatel d3e72133c5 yml update 2020-10-07 19:47:06 -07:00
bpatel 4e253c5b2e updated all searches and tested 2020-10-07 19:29:11 -07:00
bpatel 5c4d027d79 spl updates 2020-10-07 18:02:52 -07:00
divious1 443d86c864 moved detections to their respective folders 2020-10-07 10:31:25 -04:00
P4T12ICK c03d944d3e updated detection service 2020-10-07 15:37:59 +02:00
P4T12ICK 18ba55a210 Merge branch 'develop' into automated_detection_service 2020-10-07 08:57:01 +02:00
P4T12ICK dfb06fb95d new detection service code 2020-10-07 08:56:12 +02:00
Bhavin Patel 224abd200f Merge branch 'develop' into mustang_beta 2020-10-06 16:17:14 -07:00
Bhavin Patel 65f0729e29 Merge pull request #704 from splunk/TR-205_scadmin
addding auth conf file
2020-10-06 16:05:09 -07:00
Ignacio c3828052af Merge pull request #707 from splunk/TR-209
Tr 209
2020-10-06 13:55:22 -07:00
bpatel b80016e3df update date key 2020-10-06 13:47:24 -07:00
Ignacio Bermudez Corrales 95ff817a80 formatting 2020-10-06 11:21:36 -07:00
Ignacio Bermudez Corrales 4810237537 merging Jud changes 2020-10-06 11:05:10 -07:00
Ignacio Bermudez Corrales 0e64512127 changes for detections to work 2020-10-06 11:01:47 -07:00