admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Bareiss c1a9ba0852 added ctime macro to ESCU 2019-12-11 14:10:21 +01:00
Patrick Bareiss 3da0cbf8b2 added ctime macro to ESCU 2019-12-11 14:04:42 +01:00
Patrick Bareiss cf13afa6c4 bug fix of generate.py 2019-12-11 13:29:27 +01:00
Patrick Bareiss ab2118a012 New version of analytics story credential dumping 2019-12-11 13:13:14 +01:00
Patrick Bareiss 44f1bb3efb Merge branch 'develop' into CRL-1698_new_version_credential_dumping 2019-12-11 12:30:43 +01:00
Patrick Bareiss 46ac72ebf6 WIP: Credential Dumping Story 2019-12-11 12:29:41 +01:00
research bot 54b0e8a18f updating docs and package bits [ci skip] 2019-12-10 20:41:52 +00:00
jzsplunk d628c4d450 Merge pull request #276 from splunk/readme_fix 
fix typo in path for doc json.
 2019-12-10 10:04:52 -08:00
jzsplunk 8769b07019 Merge branch 'develop' into readme_fix 2019-12-10 09:49:10 -08:00
dependabot-preview[bot] d6dfa714ef Merge pull request #275 from splunk/dependabot/pip/more-itertools-8.0.2 2019-12-10 16:56:04 +00:00
dependabot-preview[bot] 761718ee93 Merge pull request #272 from splunk/dependabot/pip/importlib-metadata-1.2.0 2019-12-10 16:55:41 +00:00
rvaldez617 a1a60292ec Merge pull request #274 from splunk/python_dual_support_ESCU 
splunk8.0 ready AKA migration to python3
 2019-12-10 09:53:47 -07:00
bpatel c558d126c9 remove re direct and using open window 2019-12-09 18:01:00 -08:00
bpatel 19c466b9ad point run analytics button to ASX 2019-12-09 17:27:40 -08:00
Jose Enrique Hernandez 20ee1638cc Merge branch 'develop' into python_dual_support_ESCU 2019-12-09 20:17:41 -05:00
divious1 ef46ef25c6 remove runstory JS which is no longer needed 2019-12-09 20:14:05 -05:00
divious1 df121a2b87 corrected broken link in readme 2019-12-09 20:07:01 -05:00
divious1 ca1faca05d fixing broken link in readme 2019-12-09 20:04:26 -05:00
divious1 55f4361f4c fixing broken links in stories 2019-12-09 19:59:39 -05:00
divious1 477207a76e adding timeout 2019-12-09 19:49:45 -05:00
divious1 a8b9f493e1 constraint link checking to md files 2019-12-09 19:40:23 -05:00
divious1 177dfe9499 added verbosity to the link check 2019-12-09 19:34:29 -05:00
divious1 b3219d3b21 updating feedback center 2019-12-09 19:24:02 -05:00
jzsplunk fd049298b0 fix typo in path for doc json. 2019-12-09 13:57:16 -08:00
dependabot-preview[bot] 2e129dcf9d Bump more-itertools from 7.2.0 to 8.0.2 
Bumps [more-itertools](https://github.com/erikrose/more-itertools) from 7.2.0 to 8.0.2.
- [Release notes](https://github.com/erikrose/more-itertools/releases)
- [Commits](https://github.com/erikrose/more-itertools/compare/v7.2.0...v8.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-06 14:12:35 +00:00
dependabot-preview[bot] 939e62c187 Bump importlib-metadata from 0.23 to 1.2.0 
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.23 to 1.2.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-06 03:23:32 +00:00
Bhavin Patel ac45c4ddf9 Merge pull request #271 from splunk/dependabot/pip/pyyaml-5.2 
Bump pyyaml from 5.1.2 to 5.2
 2019-12-05 19:22:39 -08:00
Bhavin Patel 41e9d7b29c Merge pull request #273 from splunk/dependabot/pip/identify-1.4.8 
Bump identify from 1.4.7 to 1.4.8
 2019-12-05 19:22:23 -08:00
dependabot-preview[bot] ad2a2dd160 Bump identify from 1.4.7 to 1.4.8 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.7 to 1.4.8.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.7...v1.4.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-05 14:12:42 +00:00
divious1 3fc2db13e5 porting dnstwist to python3 2019-12-04 21:42:58 -05:00
dependabot-preview[bot] 166549aadb Bump pyyaml from 5.1.2 to 5.2 
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.1.2 to 5.2.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.1.2...5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-12-03 14:12:26 +00:00
divious1 c813355782 removed runstory and added a note that was migrated to ASX github 2019-11-27 13:56:10 -05:00
divious1 92e3489d72 remove escu next steps and AR actions 2019-11-26 15:03:09 -05:00
research bot 2d2dd8d87b updating docs and package bits [ci skip] 2019-11-26 19:36:35 +00:00
divious1 1582272ed3 Merge tag 'v1.0.44' 2019-11-26 12:57:49 -05:00
jcbrewer5D6400 a5f1973ddd Merge pull request #268 from splunk/CRL-1645 
CRL-1645 - New detection "Abnormally High AWS Instances Terminated by…
v1.0.45 		2019-11-25 18:29:44 -08:00
Jason Brewer 322e711936 CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description. 2019-11-25 18:17:06 -08:00
Jason Brewer 95f73c9039 CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK" 2019-11-25 18:06:33 -08:00
jcbrewer5D6400 92078c2ec4 Merge pull request #261 from splunk/CRL-1646 
CRL-1646 - Implemented : Update Detection for abnormally_high_instanc…
 2019-11-25 17:10:04 -08:00
Jason Brewer 951d055cc3 CRL-1646 - adding Abnormally High AWS Instances Launched [mltk] to cloud_cryptomining story. 2019-11-25 17:01:20 -08:00
Jason Brewer 5a901801a0 CRL-1646 - Fixing newly broken reference. 2019-11-25 16:32:14 -08:00
Jason Brewer 604e2ecc11 CRL-1646 - changing from user to src_user 2019-11-25 15:49:32 -08:00
Jason Brewer 38be9ebb26 CRL-1646 , CRL-1697 - Making minor tweaks to excessive run instance detections (using ARN vs username) added -MLTK to labels. Added reference for Cloud Compute Instance Created With Previously Unseen Image to cloud_cryptomining.yml. 2019-11-25 15:17:32 -08:00
dependabot-preview[bot] 79507dcd9a Merge pull request #266 from splunk/dependabot/pip/pyrsistent-0.15.6 2019-11-25 21:34:24 +00:00
dependabot-preview[bot] f6a50a723c Bump pyrsistent from 0.15.5 to 0.15.6 
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.15.5 to 0.15.6.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.15.5...v0.15.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 21:28:06 +00:00
Jose Enrique Hernandez 3357aa13a6 Merge pull request #264 from splunk/dependabot/pip/semantic-version-2.8.3 
Bump semantic-version from 2.8.2 to 2.8.3
 2019-11-25 16:26:54 -05:00
dependabot-preview[bot] a33bcba90a Merge pull request #260 from splunk/dependabot/pip/jsonschema-3.2.0 2019-11-25 21:26:32 +00:00
dependabot-preview[bot] 2cd7356d2d Merge pull request #267 from splunk/dependabot/pip/virtualenv-16.7.8 2019-11-25 21:25:46 +00:00
dependabot-preview[bot] 23efd5eb70 Bump semantic-version from 2.8.2 to 2.8.3 
Bumps [semantic-version](https://github.com/rbarrois/python-semanticversion) from 2.8.2 to 2.8.3.
- [Release notes](https://github.com/rbarrois/python-semanticversion/releases)
- [Changelog](https://github.com/rbarrois/python-semanticversion/blob/master/ChangeLog)
- [Commits](https://github.com/rbarrois/python-semanticversion/compare/2.8.2...2.8.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 19:40:18 +00:00
dependabot-preview[bot] 4652ffa7d9 Bump jsonschema from 3.1.1 to 3.2.0 
Bumps [jsonschema](https://github.com/Julian/jsonschema) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/Julian/jsonschema/releases)
- [Changelog](https://github.com/Julian/jsonschema/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/Julian/jsonschema/compare/v3.1.1...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-11-25 19:40:16 +00:00