Commit Graph

8347 Commits

Author SHA1 Message Date
divious1 221d9a0341 added 2 to evilginx name and update generator 2019-04-12 18:57:00 -04:00
divious1 4148ea43c3 added to phishing story 2019-04-11 14:45:34 -04:00
divious1 0c4c5390ea adding detection of lnk file launching a process 2019-04-11 13:43:26 -04:00
divious1 ad6a52f49c adding phishing payloads story 2019-04-09 16:02:27 -04:00
Bhavin Patel 420f8d1488 Merge pull request #41 from splunk/api_prep
support API for ESCU App
2019-04-09 12:46:56 -07:00
Jose Enrique Hernandez 5512f7f543 Merge pull request #36 from splunk/1297
risk parameter
2019-04-09 15:42:12 -04:00
Jose Enrique Hernandez 3265358511 Merge branch 'develop' into 1297 2019-04-09 15:41:21 -04:00
Jose Enrique Hernandez 23c6b08a03 Merge pull request #37 from splunk/1296
local is true
2019-04-09 15:40:35 -04:00
Jose Enrique Hernandez 4be0765249 Merge pull request #39 from splunk/CRL-1349
Updating the search to use endpoint DM, CI issue was fixed in another branch.
2019-04-09 15:40:04 -04:00
Jose Enrique Hernandez e031f41ec9 Merge pull request #40 from splunk/CRL-1386
application to endpoint
2019-04-09 15:28:20 -04:00
divious1 46f68d62fe updating config for ci 2019-04-09 15:20:05 -04:00
divious1 6ecf6b5bb0 updating config for ci 2019-04-09 15:16:42 -04:00
divious1 360f53345e updating setup tools to fix error 2019-04-09 14:58:07 -04:00
divious1 c5ba54be63 updating setup tools to fix error 2019-04-09 14:56:25 -04:00
divious1 6d50218d43 updating CI to latest python image 2019-04-09 14:47:53 -04:00
bpatel aa205852f9 spec 2 manifests 2019-04-09 11:34:37 -07:00
divious1 8ee0606d6c first commit 2019-04-09 14:17:13 -04:00
divious1 00a13b450a update to the generator 2019-04-09 13:43:53 -04:00
bpatel 4e08aa61bc docs 2019-04-03 08:54:00 -07:00
bpatel 018cd8256c examples in spec files and docs 2019-04-02 17:00:32 -07:00
divious1 cfeccbd73e removed example spec 2019-04-02 17:31:57 -05:00
divious1 87c1490320 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update 2019-04-02 17:31:29 -05:00
divious1 6112fcc9e6 updating schedule field in specs, also corrected validation logic 2019-04-02 17:31:02 -05:00
divious1 d76848cb39 correct mistakes with the sub schema validation 2019-04-02 17:03:55 -05:00
divious1 6b852b50c3 fixed error in validate 2019-04-02 17:03:26 -05:00
bpatel 43093da142 story spec with example and docs 2019-04-02 14:28:20 -07:00
divious1 b923dc56c3 updated investigations 2019-04-02 14:47:10 -04:00
divious1 a9bb9bad0d updated spec and examples to correct some def errors 2019-04-02 14:34:35 -04:00
divious1 9cd8ba0343 skeleton of generate tool, removed old validation tool 2019-04-02 14:33:27 -04:00
bpatel 35f8c61e8c oneOF example 2019-04-02 10:55:59 -07:00
bpatel 81770a38c8 application to endpoint 2019-04-01 14:45:12 -07:00
divious1 e562cc1e37 updated with baseline searches 2019-04-01 16:36:17 -04:00
bpatel eed03e646b Updating the search to use endpoint DM 2019-04-01 11:26:51 -07:00
divious1 af192d416d fixed errors with investigative validations 2019-03-30 15:19:40 -04:00
divious1 f05f011e6b added investigative check functions 2019-03-29 22:59:27 -04:00
divious1 fd6a55d7f4 updated mitre mappings 2019-03-29 13:44:40 -04:00
divious1 a627f86f2d Merge branch 'spec_update' of github.com:splunk/security-content into spec_update 2019-03-29 13:34:28 -04:00
divious1 1e965b3db5 udpated validate script to check detections 2019-03-29 13:32:53 -04:00
bpatel 6c24bb91d9 spec omne enums and v2 examples 2019-03-29 12:45:15 -04:00
bpatel a2f431b6cc baseline update 2019-03-29 12:14:44 -04:00
bpatel 568771a14a Merge branch 'spec_update' of https://github.com/splunk/security-content into spec_update 2019-03-29 11:12:47 -04:00
bpatel 6ce4f809af updates 2019-03-28 12:46:04 -04:00
divious1 341ee8b0c2 better printing for story 2019-03-28 12:42:06 -04:00
bpatel bdbe20f992 detection spec update 2019-03-28 12:23:29 -04:00
divious1 33eff9361c adding logic for checking story content 2019-03-28 12:16:08 -04:00
divious1 fe3e471ffa validate story skeleton 2019-03-28 12:00:14 -04:00
bpatel a5d69e8acc update veuve categories in story: 2019-03-28 10:55:53 -04:00
divious1 57269d8cdb added example to story 2019-03-27 23:35:27 -04:00
divious1 6c44cc6054 updated readme 2019-03-27 23:20:36 -04:00
divious1 66f1c68311 updated readme 2019-03-27 23:19:31 -04:00