 David Dorsey
|
791df3b51c
|
Conditionals if there is no alert actions
|
2020-09-23 16:40:14 -05:00 |
|
|
David Dorsey
|
8303b2d166
|
Fixed generate when I don't create notables
|
2020-09-23 16:25:02 -05:00 |
|
|
bpatel
|
e1ae7b4350
|
Merge branch 'TR-41_aws_ec2_mods' of https://github.com/splunk/security-content into TR-41_aws_ec2_mods
|
2020-09-23 14:19:09 -07:00 |
|
|
bpatel
|
c0076b369e
|
fixes for validate and generate
|
2020-09-23 14:18:53 -07:00 |
|
|
David Dorsey
|
a0f95f6b4b
|
updated risk scores
|
2020-09-23 16:09:10 -05:00 |
|
|
David Dorsey
|
1c9de39109
|
Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods
|
2020-09-23 16:07:28 -05:00 |
|
|
Rico Valdez
|
359926e89b
|
text updates and a couple of fixes for mismatched macros
|
2020-09-23 14:44:00 -06:00 |
|
|
David Dorsey
|
5f48894035
|
removed the create notable from all searches
|
2020-09-23 14:38:15 -05:00 |
|
|
David Dorsey
|
c1a58c85a6
|
fix
|
2020-09-23 14:32:15 -05:00 |
|
|
David Dorsey
|
0bb0ad9b7e
|
Merge branch 'develop' into TR-41_aws_ec2_mods
|
2020-09-23 14:25:30 -05:00 |
|
|
trogdorsey
|
122fb2510b
|
Merge pull request #683 from splunk/issue_682
adding a default panel instead of empty
|
2020-09-23 14:24:21 -05:00 |
|
|
Bhavin Patel
|
425abb2304
|
Merge branch 'develop' into issue_682
|
2020-09-23 12:19:04 -07:00 |
|
|
David Dorsey
|
2d8524815f
|
Updated search
|
2020-09-23 13:24:21 -05:00 |
|
|
David Dorsey
|
e268e9643f
|
Need to ignore the filter check for input filters
|
2020-09-23 11:46:19 -05:00 |
|
|
David Dorsey
|
65403cc027
|
Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods
|
2020-09-23 11:36:15 -05:00 |
|
|
David Dorsey
|
2d25205146
|
Fixes
|
2020-09-23 11:35:56 -05:00 |
|
|
Jose Enrique Hernandez
|
7bd6f5380e
|
Merge branch 'develop' into TR-41_aws_ec2_mods
|
2020-09-23 12:09:37 -04:00 |
|
|
David Dorsey
|
9763e75e02
|
Fixes
|
2020-09-23 00:07:54 -05:00 |
|
|
David Dorsey
|
fcd5f1e9b1
|
Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods
|
2020-09-23 00:02:16 -05:00 |
|
|
David Dorsey
|
58848e7326
|
Fixes for cryptomining demo
|
2020-09-23 00:01:02 -05:00 |
|
|
dependabot-preview[bot]
|
fa654c0c8f
|
Merge pull request #685 from splunk/dependabot/pip/importlib-metadata-2.0.0
|
2020-09-23 00:08:18 +00:00 |
|
|
dependabot-preview[bot]
|
fd91c3b52b
|
Bump importlib-metadata from 1.7.0 to 2.0.0
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 1.7.0 to 2.0.0.
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-09-23 00:04:42 +00:00 |
|
|
Jose Enrique Hernandez
|
b9a94effa0
|
Merge branch 'develop' into automated_detection_service
|
2020-09-22 14:30:59 -04:00 |
|
|
dependabot-preview[bot]
|
7509397d3f
|
Merge pull request #681 from splunk/dependabot/pip/identify-1.5.4
|
2020-09-22 15:53:35 +00:00 |
|
|
dependabot-preview[bot]
|
b3ffdac7e8
|
Bump identify from 1.5.2 to 1.5.4
Bumps [identify](https://github.com/chriskuehl/identify) from 1.5.2 to 1.5.4.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.5.2...v1.5.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-09-22 15:49:15 +00:00 |
|
|
dependabot-preview[bot]
|
bc62db083c
|
Merge pull request #684 from splunk/dependabot/pip/zipp-3.2.0
|
2020-09-22 15:48:00 +00:00 |
|
|
dependabot-preview[bot]
|
9e5f5fc78f
|
Bump zipp from 3.1.0 to 3.2.0
Bumps [zipp](https://github.com/jaraco/zipp) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v3.1.0...v3.2.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-09-22 15:42:15 +00:00 |
|
|
jzsplunk
|
1fa80b0161
|
[TR-188] add risk tags to mustang related searches (WIP).
|
2020-09-21 22:19:09 -07:00 |
|
|
jzsplunk
|
2db3cfe746
|
[TR-188] add risk tags to mustang related searches (WIP).
|
2020-09-21 22:18:15 -07:00 |
|
|
David Dorsey
|
aaa6e86623
|
Added output filter back in
|
2020-09-22 00:00:22 -05:00 |
|
|
David Dorsey
|
c1ab637b80
|
Added risk info
|
2020-09-21 23:26:13 -05:00 |
|
|
David Dorsey
|
7d2acbe104
|
Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods
|
2020-09-21 23:24:07 -05:00 |
|
|
David Dorsey
|
17eff649e7
|
Fixes
|
2020-09-21 23:23:57 -05:00 |
|
|
jzsplunk
|
9b8b750db4
|
[TR-41] update risk_object value.
|
2020-09-21 21:06:41 -07:00 |
|
|
jzsplunk
|
d169745ced
|
[TR-41] risk tags for crypto story
|
2020-09-21 21:04:11 -07:00 |
|
|
David Dorsey
|
f411bfa91b
|
File no longer needed
|
2020-09-21 22:43:06 -05:00 |
|
|
Jose Enrique Hernandez
|
b6136c081b
|
Merge branch 'develop' into issue_682
|
2020-09-21 21:27:23 -04:00 |
|
|
divious1
|
a41f3be4da
|
fixing issue with broken app inspect
|
2020-09-21 21:17:41 -04:00 |
|
|
bpatel
|
7b6b1d5d6c
|
adding a default panel instead of empty
|
2020-09-21 15:45:52 -07:00 |
|
|
research bot
|
013649cb6b
|
updating docs and package bits [ci skip]
|
2020-09-18 23:39:37 +00:00 |
|
|
Rod Soto
|
be932e4381
|
Merge pull request #680 from splunk/zerologon_CVE-2020-1472
Detect Zerologon Attack CVE-2020-1472 Story and detections
v3.0.7
|
2020-09-18 19:22:02 -04:00 |
|
|
divious1
|
4f8b5cd6a9
|
fixed some issues with panels that are empty failing generate
|
2020-09-18 19:16:28 -04:00 |
|
|
divious1
|
660135b77a
|
adding 4742 detection
|
2020-09-18 18:39:50 -04:00 |
|
|
divious1
|
b78035c976
|
adding macros
|
2020-09-18 17:36:46 -04:00 |
|
|
divious1
|
39f5939bc9
|
zero logon skeleton
|
2020-09-18 17:16:25 -04:00 |
|
|
Bhavin Patel
|
784a0bb691
|
Merge pull request #632 from splunk/fixedawsstsassumerole
fixedassumedroleaws
|
2020-09-17 11:11:08 -07:00 |
|
|
dependabot-preview[bot]
|
a156661f6f
|
Merge pull request #672 from splunk/dependabot/pip/identify-1.5.2
|
2020-09-17 18:08:08 +00:00 |
|
|
dependabot-preview[bot]
|
cc841bbdfb
|
Bump identify from 1.5.0 to 1.5.2
Bumps [identify](https://github.com/chriskuehl/identify) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.5.0...v1.5.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
|
2020-09-17 18:03:05 +00:00 |
|
|
dependabot-preview[bot]
|
4413638595
|
Merge pull request #673 from splunk/dependabot/pip/pyrsistent-0.17.3
|
2020-09-17 18:01:54 +00:00 |
|
|
Bhavin Patel
|
3d14c802fd
|
Merge branch 'develop' into fixedawsstsassumerole
|
2020-09-17 11:00:31 -07:00 |
|