admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot-preview[bot] e6d5e4eda7 Bump identify from 1.4.30 to 1.5.0 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.30 to 1.5.0.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.30...v1.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-05 19:34:10 +00:00
dependabot-preview[bot] 8361e993be Merge pull request #641 from splunk/dependabot/pip/attrs-20.2.0 2020-09-05 10:43:31 +00:00
dependabot-preview[bot] 443de49218 Bump attrs from 20.1.0 to 20.2.0 
Bumps [attrs](https://github.com/python-attrs/attrs) from 20.1.0 to 20.2.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/20.1.0...20.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-05 10:37:59 +00:00
bpatel f9b2c816db minor naming bug 2020-09-04 13:52:49 -07:00
bpatel 10a5b76af7 merge with develop 2020-09-04 13:40:15 -07:00
bpatel d12a38e8ff adding new stories to response 2020-09-04 13:38:05 -07:00
bpatel cea3735f1a updates to ymls to make sure validate passes 2020-09-04 13:31:16 -07:00
David Dorsey 7b098cf836 fixed validate issues 2020-09-04 13:13:22 -05:00
David Dorsey dbfecd9e29 New analytic story for suspicious cloud user activities. 2020-09-04 10:30:47 -05:00
David Dorsey cb5761a251 Added needed macros and lookups 2020-09-04 09:26:10 -05:00
Rico Valdez e8bf1d9e96 updates for mustang 2020-09-03 17:10:02 -06:00
bpatel 637ec487df risk validation 2020-09-03 11:30:09 -07:00
bpatel 20b1130737 Merge branch 'TR-82-risk-tagging' of https://github.com/splunk/security-content into TR-82-risk-tagging 2020-09-03 11:10:26 -07:00
bpatel 11db020423 risk validation 2020-09-03 11:09:52 -07:00
Rico Valdez 8ead727df7 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 
merging in updates
 2020-09-03 11:10:48 -06:00
Rico Valdez e9939cbc98 new files for unblocked searches 2020-09-03 11:10:14 -06:00
David Dorsey d82a74122d Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 2020-09-03 00:32:46 -05:00
David Dorsey ffbd700110 Updates 2020-09-03 00:32:36 -05:00
jzsplunk ee38b1d8cd [TR-82] reset markdown to whats in develop. 2020-09-02 12:07:14 -07:00
bpatel 367dd69bd7 generate testing 2020-09-02 11:07:08 -07:00
jzsplunk 1fac31b330 [TR-82] reset markdown to whats in develop. 2020-09-02 10:44:22 -07:00
Rico Valdez a75e4fcc85 detection - may still change name 2020-09-02 10:31:50 -06:00
Rico Valdez f7498459c8 changes for mustang 2020-09-02 10:21:52 -06:00
jzsplunk 0db46f89dc [TR-82] first cut of validation logic for risk scoring. 2020-09-01 17:55:14 -07:00
Rod Soto 5690c95392 fixedreferencesgcpoauthdetection 2020-09-01 20:44:10 -04:00
Rod Soto 66404dbcbe firstshotgcpaoutabusedetection 2020-09-01 20:42:54 -04:00
jzsplunk 5efea5eb85 Merge branch 'develop' into TR-82-risk-tagging 2020-09-01 17:12:21 -07:00
dependabot-preview[bot] e3633953d9 Merge pull request #634 from splunk/dependabot/pip/identify-1.4.30 2020-09-01 07:56:09 +00:00
dependabot-preview[bot] 77e2a8e22d Bump identify from 1.4.29 to 1.4.30 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.29 to 1.4.30.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.29...v1.4.30)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-01 07:51:15 +00:00
dependabot-preview[bot] 6456cb2449 Merge pull request #633 from splunk/dependabot/pip/more-itertools-8.5.0 2020-08-28 18:51:17 +00:00
dependabot-preview[bot] 9d3694b18e Bump more-itertools from 8.4.0 to 8.5.0 
Bumps [more-itertools](https://github.com/more-itertools/more-itertools) from 8.4.0 to 8.5.0.
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](https://github.com/more-itertools/more-itertools/compare/v8.4.0...8.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-08-28 18:45:53 +00:00
Rico Valdez bda59e0708 Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods 
merging in Dorsey's changes
 2020-08-28 10:18:40 -06:00
Rico Valdez 662d680870 more updates 2020-08-28 10:12:55 -06:00
Rod Soto 5e9f3a7ae0 Merge branch 'develop' into fixedawsstsassumerole 2020-08-27 21:08:51 -04:00
Jose Enrique Hernandez a2688815db Merge branch 'develop' into TR-82-risk-tagging 2020-08-27 16:48:15 -04:00
research bot 346fcc2a18 updating docs and package bits [ci skip] 2020-08-27 18:42:27 +00:00
Rod Soto 48100ebb96 fixedaws_dete_role_creation 2020-08-27 14:12:34 -04:00
David Dorsey 0b9dd4ca9b Fixed validate script errors 2020-08-26 23:50:25 -05:00
David Dorsey 0c7efecd12 Fixed errors found by validate script 2020-08-26 23:47:26 -05:00
David Dorsey e2f786ef0a Fixed a horrible bug that Patrick introduced in the validate script 2020-08-26 23:42:50 -05:00
David Dorsey d662b0538d Removed unused file 2020-08-26 23:17:03 -05:00
David Dorsey 0a47f73352 Updated cloud instances destroyed to change data model 2020-08-26 22:57:45 -05:00
Rod Soto d04d0e9d69 fixedassumedroleaws 2020-08-26 16:56:54 -04:00
David Dorsey b48b40ff76 Updated search for abnormally high cloud instances. Including 
verifying that enough data is there
 2020-08-25 22:28:59 -05:00
Jose Enrique Hernandez bb54641af6 Merge branch 'develop' into response_phases 2020-08-25 18:57:46 -04:00
divious1 339e117806 skeleton 2020-08-25 18:56:44 -04:00
Bhavin Patel 2a13216059 Merge pull request #625 from splunk/coverage_update 
updated both maps fixed errors with coverage
v3.0.6 		2020-08-25 11:31:23 -07:00
Bhavin Patel ac69800ab4 Merge branch 'develop' into coverage_update 2020-08-25 11:26:03 -07:00
Bhavin Patel f58ded02dc Merge branch 'develop' into TR-82-risk-tagging 2020-08-25 09:44:32 -07:00
Jose Enrique Hernandez 463f218ef9 Merge pull request #619 from splunk/PR_609 
Pr 609
 2020-08-25 12:19:00 -04:00