admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot-preview[bot] 9cf02705dd Bump pyrsistent from 0.17.2 to 0.17.3 
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.2 to 0.17.3.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.2...v0.17.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-17 17:56:38 +00:00
dependabot-preview[bot] 8aaa45b698 Merge pull request #669 from splunk/dependabot/pip/taxii2-client-2.2.2 2020-09-17 17:55:15 +00:00
Bhavin Patel ec3e8a9dbd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:49:56 -07:00
dependabot-preview[bot] 6f62d4da0a Bump taxii2-client from 2.2.1 to 2.2.2 
Bumps [taxii2-client](https://github.com/oasis-open/cti-taxii-client) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/oasis-open/cti-taxii-client/releases)
- [Changelog](https://github.com/oasis-open/cti-taxii-client/blob/master/CHANGES.txt)
- [Commits](https://github.com/oasis-open/cti-taxii-client/compare/v2.2.1...v2.2.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-17 17:49:30 +00:00
Bhavin Patel 2c2692eb4f Merge pull request #665 from splunk/gcpoauth 
Gcpoauth
 2020-09-17 10:48:18 -07:00
Bhavin Patel 997a2714df Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:27:10 -07:00
Bhavin Patel 2031fcded2 Merge branch 'develop' into gcpoauth 2020-09-17 10:26:37 -07:00
P4T12ICK 9a7739604c Merge branch 'develop' into automated_detection_service 2020-09-17 09:43:54 +02:00
Jose Enrique Hernandez d79c2af018 Merge branch 'develop' into TR-41_aws_ec2_mods 2020-09-16 15:02:36 -04:00
Bhavin Patel 7c8dd3519b Merge pull request #677 from splunk/copyright_readme 
add license to readme
 2020-09-16 09:07:27 -07:00
P4T12ICK 7f6b8595b8 add license to readme 2020-09-16 17:59:51 +02:00
P4T12ICK 5b277d6a7c Merge branch 'automated_detection_service' of github.com:splunk/security-content into automated_detection_service 2020-09-16 15:53:19 +02:00
P4T12ICK 3bcda0d5bc updated detection service 2020-09-16 15:51:03 +02:00
jzsplunk c33be23f10 [TR-104] add missing input filters. 2020-09-15 22:59:19 -07:00
David Dorsey 7201713de3 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 2020-09-15 23:59:18 -05:00
David Dorsey 7a99d2c4dd Fixing story mappings 2020-09-15 23:58:59 -05:00
jzsplunk 7da91f2409 [TR-41] fixing last of merge conflicts. 2020-09-15 20:38:05 -07:00
jzsplunk 0a6bafbe36 Merge branch 'TR-41_aws_ec2_mods' of github.com-jzsplunk:splunk/security-content into TR-41_aws_ec2_mods 2020-09-15 20:33:32 -07:00
David Dorsey 7f2f53d0a8 validate fixes 2020-09-15 20:19:45 -07:00
David Dorsey bf143f01e2 cron_schedule fixed 2020-09-15 20:19:45 -07:00
David Dorsey 7cefe3179d Small updates 2020-09-15 20:19:45 -07:00
Rico Valdez 182c4116c9 tweaks and updates 2020-09-15 20:19:45 -07:00
Rico Valdez 248c3d412c latest updates to create in new vendor_region 2020-09-15 20:19:45 -07:00
peter-cg 5fb282681b loud cloud 2020-09-15 20:19:45 -07:00
David Dorsey 934f2ddebc Translated detections/detect_spike_in_security_group_activity.yml 2020-09-15 20:19:45 -07:00
David Dorsey adeeab0ee8 Updated baseline searches to have correct deployment. Which was also created 2020-09-15 20:19:45 -07:00
David Dorsey 483d492405 Translated detect_spike_in_aws_api_activity.yml to use Change DM 2020-09-15 20:19:45 -07:00
David Dorsey b5914eacd9 bug fixes 2020-09-15 20:19:45 -07:00
David Dorsey 8ffbe56392 Updated MLTK searches based on Peter's work 2020-09-15 20:19:45 -07:00
peter-cg b62f2a0ba7 Adding cloud NACL deletion detection 2020-09-15 20:19:45 -07:00
peter-cg 017738bd5d Revert "Converting ACL deletion detection from Cloudtrail to Change DM" 
Actually will just add this as a new cloud_ detection and leave the old
one in place for now

This reverts commit 3159472018.
 2020-09-15 20:19:45 -07:00
peter-cg 987a843f9d Converting ACL deletion detection from Cloudtrail to Change DM 2020-09-15 20:19:45 -07:00
bpatel 344b61d158 minor naming bug 2020-09-15 20:19:45 -07:00
bpatel 212338bcc4 adding new stories to response 2020-09-15 20:19:41 -07:00
bpatel 976971526d updates to ymls to make sure validate passes 2020-09-15 20:17:49 -07:00
David Dorsey 9f8418ee85 fixed validate issues 2020-09-15 20:17:49 -07:00
David Dorsey 4af9407d8f New analytic story for suspicious cloud user activities. 2020-09-15 20:17:49 -07:00
David Dorsey ea3f9165ae Added needed macros and lookups 2020-09-15 20:17:49 -07:00
Rico Valdez a65c01dedf updates for mustang 2020-09-15 20:17:49 -07:00
David Dorsey a679a094df Updates 2020-09-15 20:17:49 -07:00
Rico Valdez c341614465 new files for unblocked searches 2020-09-15 20:17:49 -07:00
Rico Valdez 101702c623 detection - may still change name 2020-09-15 20:17:49 -07:00
Rico Valdez 03245f6372 changes for mustang 2020-09-15 20:17:49 -07:00
David Dorsey a2b98fa8f7 Fixed validate script errors 2020-09-15 20:17:49 -07:00
David Dorsey 5addb1eca4 Fixed errors found by validate script 2020-09-15 20:17:49 -07:00
David Dorsey 79c108b949 Fixed a horrible bug that Patrick introduced in the validate script 2020-09-15 20:17:44 -07:00
David Dorsey 4bd7eae3c8 Removed unused file 2020-09-15 20:15:27 -07:00
David Dorsey 181f810dbb Updated cloud instances destroyed to change data model 2020-09-15 20:15:23 -07:00
peter-cg 7d35bc9947 Remove show_options 2020-09-15 09:45:45 -07:00
David Dorsey d7d22e8809 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 2020-09-15 10:30:16 -05:00