admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
David Dorsey 6ee9d9962c Added entry for macros in baseline, detections, and investigations spec. 2019-09-25 14:36:35 -05:00
divious1 ebd92527c3 updated base on feedback from Dave H. 2019-09-19 13:42:54 -04:00
divious1 48593b7ff6 Revert "removed contexualized" 
This reverts commit 5ad6534ccd.
 2019-09-19 13:36:13 -04:00
Jose Enrique Hernandez 85e033d0e2 Merge pull request #209 from splunk/dependabot/pip/importlib-metadata-0.23 
Bump importlib-metadata from 0.22 to 0.23
 2019-09-19 11:28:39 -04:00
divious1 5ad6534ccd removed contexualized 2019-09-18 18:01:43 -04:00
dependabot-preview[bot] 4178965a66 Bump importlib-metadata from 0.22 to 0.23 
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.22 to 0.23.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-17 05:43:55 +00:00
bpatel e1310d2192 adding ss.conf spec and example 2019-09-12 16:27:11 -07:00
rvaldez617 6fdc4ff2bf Merge pull request #208 from splunk/CRL-1617_bug 
CRL-1617 changed process to process name
 2019-09-12 11:15:02 -06:00
bpatel f3cb4bcc2a bumping configparserr 2019-09-12 10:05:57 -07:00
bpatel a04729b663 changed process to process name 2019-09-12 09:55:57 -07:00
rvaldez617 66b5cd25ba Merge pull request #202 from splunk/remove_html_tags 
CRL-1611 Remove html tags
 2019-09-12 10:41:00 -06:00
Jose Enrique Hernandez b783922e62 Merge pull request #196 from splunk/dependabot/pip/identify-1.4.7 
Bump identify from 1.4.6 to 1.4.7
 2019-09-12 12:34:58 -04:00
Jose Enrique Hernandez 90ef83a474 Merge branch 'develop' into dependabot/pip/typing-3.7.4.1 2019-09-12 12:31:53 -04:00
Jose Enrique Hernandez 1c8e76029b Merge branch 'develop' into dependabot/pip/zipp-0.6.0 2019-09-12 12:30:21 -04:00
dependabot-preview[bot] 235beccb12 Bump typing from 3.7.4 to 3.7.4.1 
Bumps [typing](https://docs.python.org/3/library/typing.html) from 3.7.4 to 3.7.4.1.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-12 16:29:44 +00:00
Jose Enrique Hernandez ca109f84db Merge pull request #201 from splunk/dependabot/pip/virtualenv-16.7.5 
Bump virtualenv from 16.7.2 to 16.7.5
 2019-09-12 12:29:34 -04:00
Jose Enrique Hernandez e5a67a7145 Merge pull request #197 from splunk/dependabot/pip/pre-commit-1.18.3 
Bump pre-commit from 1.18.1 to 1.18.3
 2019-09-12 12:29:03 -04:00
dependabot-preview[bot] d5d03995d0 Bump identify from 1.4.6 to 1.4.7 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.6 to 1.4.7.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.6...v1.4.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-12 16:28:42 +00:00
Jose Enrique Hernandez c6e5e85581 Merge pull request #203 from splunk/dependabot/pip/semantic-version-2.8.2 
Bump semantic-version from 2.6.0 to 2.8.2
 2019-09-12 12:28:38 -04:00
Jose Enrique Hernandez 9a2575b771 Merge pull request #204 from splunk/dependabot/pip/configparser-4.0.1 
Bump configparser from 3.8.1 to 4.0.1
 2019-09-12 12:27:55 -04:00
Jose Enrique Hernandez 54819dbe80 Merge pull request #207 from splunk/dependabot/pip/importlib-metadata-0.22 
Bump importlib-metadata from 0.19 to 0.22
 2019-09-12 12:27:27 -04:00
dependabot-preview[bot] 295a8587ea Bump importlib-metadata from 0.19 to 0.22 
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 0.19 to 0.22.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-12 05:39:52 +00:00
bpatel 64a8d8990d static method error 2019-09-11 18:37:19 -07:00
bpatel 6061aec7f8 adding detection results to KV store 2019-09-11 17:05:57 -07:00
divious1 af1a9d89e7 correcting new line char 2019-09-11 15:58:02 -04:00
dependabot-preview[bot] 6a38c841ee Bump configparser from 3.8.1 to 4.0.1 
Bumps [configparser](https://github.com/jaraco/configparser) from 3.8.1 to 4.0.1.
- [Release notes](https://github.com/jaraco/configparser/releases)
- [Changelog](https://github.com/jaraco/configparser/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/configparser/compare/3.8.1...v4.0.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-10 05:46:23 +00:00
dependabot-preview[bot] 8caf104960 Bump semantic-version from 2.6.0 to 2.8.2 
Bumps [semantic-version](https://github.com/rbarrois/python-semanticversion) from 2.6.0 to 2.8.2.
- [Release notes](https://github.com/rbarrois/python-semanticversion/releases)
- [Changelog](https://github.com/rbarrois/python-semanticversion/blob/master/ChangeLog)
- [Commits](https://github.com/rbarrois/python-semanticversion/compare/v2.6.0...2.8.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-09 06:08:29 +00:00
bpatel 4d221f5d18 added entities field and updated spec files 2019-09-04 16:36:08 -07:00
bpatel c1208b0fb2 adding investigate.py 2019-09-04 16:16:10 -07:00
divious1 d15531c6fb fixing new line char error 2019-09-04 16:44:39 -04:00
divious1 dceb4ab5d7 fixed issues with new line escaping 2019-09-04 15:59:40 -04:00
bpatel 4fdf20ce0d Merge branch 'develop' into run_detections 2019-09-04 10:32:54 -07:00
divious1 bb0a440b62 removing example repo as all content is now v2 2019-09-04 12:44:43 -04:00
divious1 979938f707 cleaned up markdown logic from scripts 2019-09-04 12:42:58 -04:00
divious1 4849a89daf Fixed listing from markdown 2019-09-04 12:33:15 -04:00
divious1 fe0b0e1133 removing html tags 2019-09-04 12:20:27 -04:00
dependabot-preview[bot] 75e50cb544 Bump virtualenv from 16.7.2 to 16.7.5 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 16.7.2 to 16.7.5.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changes.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/16.7.2...16.7.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-09-04 05:40:13 +00:00
dependabot-preview[bot] 0a9d6cbc8e Bump pre-commit from 1.18.1 to 1.18.3 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 1.18.1 to 1.18.3.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v1.18.1...v1.18.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-28 10:32:30 +00:00
research bot 6a2216b974 updating docs and package bits [ci skip] 2019-08-27 22:45:42 +00:00
Jose Enrique Hernandez 621f26301b Merge pull request #192 from splunk/CRL-1607-Fix-Weird-Italics 
CRL-1608 Update dyn_dns_queries.json
v1.0.42 		2019-08-27 16:53:52 -04:00
dependabot-preview[bot] d0a384fdb5 Bump zipp from 0.5.2 to 0.6.0 
Bumps [zipp](https://github.com/jaraco/zipp) from 0.5.2 to 0.6.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v0.5.2...v0.6.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2019-08-26 06:14:38 +00:00
Brianna 5972936635 Update dyn_dns_queries.json 2019-08-23 12:09:04 -07:00
Brianna db5c8576d4 Update dyn_dns_queries.json 
Various changes for grammar, punctuation, clarity, flow, and formatting.
 2019-08-23 12:03:57 -07:00
Bhavin Patel 6fe35074e1 Merge pull request #190 from splunk/add_missing_tactic 
Modified att&ck mappings for these files. Mostly just added the high …
 2019-08-22 09:41:24 -07:00
Rico Valdez 1cc3fe534b Modified att&ck mappings for these files. Mostly just added the high level tactic, but also tweaked some incluidng smb spike searches and ones about creating accounts 2019-08-22 09:57:45 -06:00
rvaldez617 2a58224efa Merge pull request #187 from splunk/v2Manifests 
Removed incorrect baselines to detection manifest
 2019-08-16 11:10:12 -06:00
Bhavin Patel a78378c0ea Merge pull request #186 from splunk/CRL-1598_metadata_bug 
CRL-1598 removed incorrect stanza
 2019-08-15 17:48:48 -07:00
bpatel 42788cc933 Owner reviewed 2019-08-15 17:37:44 -07:00
divious1 d8975a5f70 CRL-1598 removed incorrect stanza 2019-08-15 10:14:36 -04:00
rvaldez617 b2bd09a588 Merge pull request #183 from splunk/CRL-1592_DNS_Query_Length_bug 
CRL-1592 Error with DNS Query Length With High Standard Deviation detection
 2019-08-14 10:11:54 -06:00