 divious1
|
b8326d8b38
|
Merge branch 'sunburst_detections' of github.com:splunk/security-content into sunburst_detections
|
2020-12-17 13:53:29 -05:00 |
|
|
divious1
|
ca1ae13328
|
renaming dragonfly
|
2020-12-17 13:53:20 -05:00 |
|
|
Jose Enrique Hernandez
|
56d4471b78
|
Merge branch 'develop' into sunburst_detections
|
2020-12-17 13:01:38 -05:00 |
|
|
divious1
|
58eade42b6
|
adding new detection and test for sunburst
|
2020-12-17 12:20:26 -05:00 |
|
|
root
|
c6edd5dd27
|
Added detection testing service results inO365 Excessive Authentication Failures Alert
|
2020-12-17 11:17:16 +00:00 |
|
|
P4T12ICK
|
eee9e6bb2f
|
bug fix
|
2020-12-17 12:00:53 +01:00 |
|
|
root
|
366a7b8213
|
Added detection testing service results inO365 PST export alert
|
2020-12-17 10:56:41 +00:00 |
|
|
P4T12ICK
|
2c62bc7ede
|
bug fix
|
2020-12-17 11:40:00 +01:00 |
|
|
P4T12ICK
|
504a11d8be
|
bug fix
|
2020-12-17 11:22:22 +01:00 |
|
|
root
|
5598782ca0
|
Added detection testing service results inO365 Disable MFA
|
2020-12-17 10:21:24 +00:00 |
|
|
P4T12ICK
|
48ada30a34
|
o365 disable mfa
|
2020-12-17 11:02:20 +01:00 |
|
|
P4T12ICK
|
d8fa8188e5
|
Merge branch 'rodo365' into TR-320-suspicious-rights-delegation
|
2020-12-17 10:49:59 +01:00 |
|
|
bpatel
|
ee9d4131bc
|
filter
|
2020-12-16 18:26:07 -08:00 |
|
|
bpatel
|
fdb698cdb3
|
new detection for login failure
|
2020-12-16 16:26:25 -08:00 |
|
|
Bhavin Patel
|
db03702098
|
Merge pull request #998 from splunk/detection_testing_part_two
Detection Testing Part 2
|
2020-12-16 12:40:27 -08:00 |
|
|
Rod Soto
|
018d1bd766
|
addedmacros
|
2020-12-16 14:32:10 -05:00 |
|
|
Rod Soto
|
6c47a0d56e
|
excessiveauthfailures
|
2020-12-16 14:28:48 -05:00 |
|
|
divious1
|
4c7b7c0397
|
updated CI job
|
2020-12-16 14:17:18 -05:00 |
|
|
Rod Soto
|
8b1b7bd5a6
|
fixandnewdisablemfa
|
2020-12-16 14:16:20 -05:00 |
|
|
divious1
|
6204c225c9
|
added logic to pass a username password a service account
|
2020-12-16 13:56:19 -05:00 |
|
|
Rod Soto
|
d9f0ee461a
|
o365rodetections
|
2020-12-16 13:49:57 -05:00 |
|
|
P4T12ICK
|
07aa33af22
|
Merge branch 'develop' into detection_testing_part_two
|
2020-12-16 15:59:31 +01:00 |
|
|
P4T12ICK
|
81162132d7
|
wrong detections in deprecated
|
2020-12-16 15:59:08 +01:00 |
|
|
P4T12ICK
|
7410b6d670
|
Merge branch 'develop' into TR-320-suspicious-rights-delegation
|
2020-12-16 15:56:45 +01:00 |
|
|
root
|
4c49c04851
|
Added detection testing service results inO365 Suspicious Admin Email Forwarding
|
2020-12-16 14:50:54 +00:00 |
|
|
root
|
a2bc2aa5df
|
Added detection testing service results inO365 Suspicious User Email Forwarding
|
2020-12-16 14:25:18 +00:00 |
|
|
dependabot[bot]
|
f3077833b5
|
Merge pull request #1033 from splunk/dependabot/pip/boto3-1.16.37
|
2020-12-16 14:08:43 +00:00 |
|
|
P4T12ICK
|
5f929693fd
|
new detections
|
2020-12-16 15:03:56 +01:00 |
|
|
dependabot[bot]
|
9a27082aa5
|
Bump boto3 from 1.16.34 to 1.16.37
Bumps [boto3](https://github.com/boto/boto3) from 1.16.34 to 1.16.37.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.34...1.16.37)
Signed-off-by: dependabot[bot] <support@github.com>
|
2020-12-16 14:03:07 +00:00 |
|
|
P4T12ICK
|
9a775408c8
|
new detections
|
2020-12-16 14:31:05 +01:00 |
|
|
P4T12ICK
|
b2173f3875
|
new detections
|
2020-12-16 14:10:32 +01:00 |
|
|
P4T12ICK
|
79d6e03537
|
changes
|
2020-12-16 12:54:29 +01:00 |
|
|
P4T12ICK
|
e454632602
|
Merge branch 'TR-320-suspicious-rights-delegation' of github.com:splunk/security-content into TR-320-suspicious-rights-delegation
|
2020-12-16 12:52:52 +01:00 |
|
|
P4T12ICK
|
eef0129ada
|
changes
|
2020-12-16 12:52:14 +01:00 |
|
|
research bot
|
20d9d3d5f2
|
updating docs and package bits [ci skip]
|
2020-12-16 05:24:45 +00:00 |
|
|
Jose Enrique Hernandez
|
ffe4cbb019
|
Merge pull request #1032 from splunk/appinspect
app-inpspect issues
v3.9.1
|
2020-12-15 21:38:22 -05:00 |
|
|
bpatel
|
1075e6b175
|
adding the lost lookup file
|
2020-12-15 18:30:54 -08:00 |
|
|
bpatel
|
225f0f39a8
|
typo
|
2020-12-15 17:53:47 -08:00 |
|
|
bpatel
|
8dd25a12fa
|
test lookup fromd eprecated
|
2020-12-15 17:47:52 -08:00 |
|
|
bpatel
|
67bf89fc72
|
eerh
|
2020-12-15 17:25:30 -08:00 |
|
|
Bhavin Patel
|
76dce6edfd
|
Merge branch 'develop' into deprecated_aws_searches
|
2020-12-15 16:18:59 -08:00 |
|
|
Bhavin Patel
|
54ce838484
|
Merge pull request #1012 from splunk/workbench_token
testing double replacement
|
2020-12-15 16:14:46 -08:00 |
|
|
Bhavin Patel
|
45ec7a24c3
|
Merge branch 'develop' into deprecated_aws_searches
|
2020-12-15 15:02:56 -08:00 |
|
|
Bhavin Patel
|
9cd075da65
|
Merge pull request #988 from splunk/dependabot/pip/azure-mgmt-network-17.0.0
Bump azure-mgmt-network from 16.0.0 to 17.0.0
|
2020-12-15 14:18:58 -08:00 |
|
|
root
|
510541fdd5
|
Added detection testing service results inO365 Suspicious Rights Delegation
|
2020-12-15 17:49:06 +00:00 |
|
|
root
|
70e12c231b
|
Added detection testing service results inO365 Suspicious Rights Delegation
|
2020-12-15 15:57:03 +00:00 |
|
|
P4T12ICK
|
c1ad08d364
|
changes
|
2020-12-15 16:27:18 +01:00 |
|
|
P4T12ICK
|
8b563122bb
|
changes
|
2020-12-15 13:59:33 +01:00 |
|
|
P4T12ICK
|
58627b44f9
|
changes
|
2020-12-15 12:27:16 +01:00 |
|
|
P4T12ICK
|
6de3aaafe4
|
detection O365 suspicious-rights-delegation
|
2020-12-15 12:24:30 +01:00 |
|