Commit Graph

8347 Commits

Author SHA1 Message Date
Rod Soto 6086fa8e2b azk8srolesto 2020-05-21 18:41:32 -04:00
Bhavin Patel c422d7191a Merge pull request #465 from splunk/spec_3_feature
generate a mitre enrichment lookup
2020-05-21 08:48:47 -07:00
Rod Soto 2e7d50b6d0 newstoryconfsecazk8s 2020-05-20 19:09:29 -04:00
Rod Soto 0748085eca azpodscandetect 2020-05-20 15:38:53 -04:00
Rod Soto 5cdd5ac784 fixedawsmacrosnametoaz 2020-05-20 14:41:09 -04:00
Bhavin Patel 87494bfa21 Merge pull request #464 from jwindley-splunk/patch-4
Update reg_manipulating_services.yml
2020-05-20 11:11:52 -07:00
Patrick Bareiss c5e25d7355 generate a mitre enrichment lookup 2020-05-20 14:23:16 +02:00
jwindley-splunk a4ec26d2a0 Update reg_manipulating_services.yml
$src_user$ from notable description did not exist, so needed to go.

At the same time, proposed to add the user(s) in to the stats table and change the description to reference $user$ instead.
2020-05-20 12:56:25 +01:00
Bhavin Patel 39b8472322 Merge pull request #460 from splunk/spec_3_readme
updated Readme
2020-05-19 15:33:43 -07:00
Rod Soto 4ac5dc4dff k8sScan 2020-05-19 17:55:28 -04:00
Bhavin Patel 873c46184e Merge pull request #459 from jwindley-splunk/patch-3
Update create_or_delete_network_shares.yml
2020-05-19 11:56:20 -07:00
Patrick Bareiss c76ebad945 updated Readme 2020-05-19 17:00:31 +02:00
Patrick Bareiss d2350dd6a8 updated Readme 2020-05-19 16:53:35 +02:00
P4T12ICK e48da8e952 Merge pull request #458 from splunk/spec3_ui
WIP -- Spec 3 ui updates
2020-05-19 16:12:59 +02:00
jwindley-splunk e3f6752724 Update create_or_delete_network_shares.yml
By having process=*share* AND process=*delete* you will miss any creation of shares. If you are just looking for creating OR deleting of shares you just need to look for the word *share*
2020-05-19 10:35:27 +01:00
bpatel ad6cf3a4c2 adding docs for spec files 2020-05-18 17:00:15 -07:00
bpatel 2b33d4fe86 spec documentation using jsonschema2md 2020-05-18 16:41:58 -07:00
bpatel 8d303f57c5 remove old files 2020-05-18 16:28:14 -07:00
bpatel 4124fedf12 remove mitre tatic from filters 2020-05-18 15:46:56 -07:00
bpatel bb190be50d remove Providing Technologies 2020-05-18 14:21:47 -07:00
Bhavin Patel 2e8f9dfee5 Merge pull request #456 from zelienka/patch-1
Fixed typo in search, search optimization
2020-05-18 13:07:37 -07:00
bpatel f2fcabe907 link update 2020-05-18 12:25:30 -07:00
bpatel 9f11288073 supress fields updated 2020-05-18 12:23:07 -07:00
Bhavin Patel eb6039e449 Merge pull request #457 from jwindley-splunk/patch-2
Update attrib_to_hide_files.yml
2020-05-18 11:58:04 -07:00
bpatel d72c44f626 minor link update 2020-05-18 11:40:04 -07:00
Vilém Zelienka 530037ad16 Fixed typo in search, search optimization
Changes Processs to Processes.
Moved process search to tstats.
2020-05-18 15:42:03 +02:00
jwindley-splunk 2b0c42b8dc Update attrib_to_hide_files.yml
Adding dest
2020-05-18 12:11:33 +01:00
Bhavin Patel 2982fc3e8a Merge pull request #452 from splunk/new_generate_script
New generate script
2020-05-15 12:07:58 -07:00
Patrick Bareiss fcfea82cd4 make small changes 2020-05-14 11:30:28 +02:00
Patrick Bareiss e9e81cd1de bug in generate 2020-05-14 10:11:16 +02:00
Patrick Bareiss 9a50a74ee7 bug in generate 2020-05-14 10:00:55 +02:00
Patrick Bareiss 347c94032e bug in generate 2020-05-13 11:09:33 +02:00
Patrick Bareiss eedb7c49e2 bug in generate 2020-05-13 10:46:58 +02:00
Patrick Bareiss 3ac6c62937 bug in generate 2020-05-13 10:30:46 +02:00
Patrick Bareiss 9b86f038de Merge branch 'new_generate_script' of https://github.com/splunk/security-content into new_generate_script 2020-05-13 10:10:55 +02:00
Patrick Bareiss f375256925 bug in generate 2020-05-13 10:10:42 +02:00
bpatel 4836bad27e removing deprecated html files 2020-05-12 12:28:04 -07:00
Patrick Bareiss b332406c91 bug in generate 2020-05-12 14:43:24 +02:00
Patrick Bareiss 18722520e9 bug in generate 2020-05-12 14:31:56 +02:00
Patrick Bareiss 707e21278f bug in generate 2020-05-12 14:19:23 +02:00
Patrick Bareiss e645c7586f bug in generate 2020-05-12 14:02:11 +02:00
Patrick Bareiss a8866e6788 bug in generate 2020-05-12 13:57:36 +02:00
Patrick Bareiss 151bbbaa5a bug in generate 2020-05-12 13:53:48 +02:00
bpatel 74175639a5 minor bug and flake8 2020-05-11 15:16:55 -07:00
bpatel 792792c5b5 minor bug and flake8 2020-05-11 15:12:00 -07:00
bpatel 4ceb0e14cd minor bug and flake8 2020-05-11 14:57:16 -07:00
Patrick Bareiss 804e2e8248 bug in generate 2020-05-11 17:40:06 +02:00
Patrick Bareiss 7ad2bb485c bug in generate 2020-05-11 14:39:28 +02:00
Patrick Bareiss 7fa4709995 bug in generate 2020-05-11 14:27:43 +02:00
Patrick Bareiss fa599c2624 bug in generate 2020-05-11 14:21:06 +02:00