admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,345 Commits 697 Branches 195 Tags
b64ca7010c24d58c8564ce4723158429c6dfa6fe
Commit Graph

504 Commits

Author SHA1 Message Date
bpatel b64ca7010c seearch bugs 2020-10-09 10:23:53 -07:00
Rod Soto 07bae7a2b7 ../detections/gcp_detect_high_risk_permissions_by_resource_and_account.yml 2020-10-09 11:37:48 -04:00
Rod Soto 202da1aa8a gcpdetectsearchesfixed2 2020-10-09 10:57:14 -04:00
Rod Soto cb93a1df16 gcpdetecthighriskpermissionsv1 2020-10-09 10:43:27 -04:00
Rod Soto 8115fbd312 gcpdetectaccounthighriskrolesbyproject2 2020-10-09 10:12:21 -04:00
Rod Soto e6a967a412 gcpdetectaccounthighriskrolesbyproject 2020-10-09 10:07:42 -04:00
Rod Soto e6080d9022 firstiterationgcploitdetect 2020-10-08 17:51:57 -04:00
Rod Soto 5690c95392 fixedreferencesgcpoauthdetection 2020-09-01 20:44:10 -04:00
Rod Soto 66404dbcbe firstshotgcpaoutabusedetection 2020-09-01 20:42:54 -04:00
Rod Soto 5e9f3a7ae0 Merge branch 'develop' into fixedawsstsassumerole 2020-08-27 21:08:51 -04:00
Rod Soto 48100ebb96 fixedaws_dete_role_creation 2020-08-27 14:12:34 -04:00
Rod Soto d04d0e9d69 fixedassumedroleaws 2020-08-26 16:56:54 -04:00
Jose Enrique Hernandez a66740b506 Merge branch 'develop' into PR_609 2020-08-25 12:13:24 -04:00
Bhavin Patel 00653ac542 Merge pull request #623 from splunk/fixawsk8sfailuresrcuser 
newfixawsdetectpkey
 2020-08-24 12:47:10 -07:00
Jose Enrique Hernandez 5eb6c522c6 Merge branch 'develop' into PR_609 2020-08-24 12:50:54 -04:00
Jose Enrique Hernandez 6443822362 Merge branch 'develop' into fixawsk8sfailuresrcuser 2020-08-24 12:20:40 -04:00
Jose Enrique Hernandez 21c1dcb759 Merge branch 'develop' into PR_609 2020-08-24 01:04:48 -04:00
Jose Enrique Hernandez 1c1ce46004 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 01:04:40 -04:00
Jose Enrique Hernandez a26414f16d Merge branch 'develop' into TR-122 2020-08-24 00:39:35 -04:00
Jose Enrique Hernandez 76d05aee12 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 00:36:00 -04:00
Jose Enrique Hernandez 686ea3c55d Merge branch 'develop' into PR_609 2020-08-24 00:35:15 -04:00
Rod Soto c0c6c4db97 newfixawsdetectpkey 2020-08-20 16:39:25 -04:00
Rod Soto 8b532f7358 fixedsrcuserfromtable 2020-08-20 12:02:44 -04:00
Bhavin Patel fdfcc03651 Merge branch 'develop' into mitrests 2020-08-19 19:20:53 -07:00
Rod Soto 94707e9cfd addedmitretoawssearches 2020-08-19 21:16:13 -04:00
bpatel 00f51defe8 shannons PR bug fixes 2020-08-19 14:37:01 -07:00
Mikael Bjerkeland 584ef0aff9 Updates 2020-08-14 22:59:11 +02:00
Mikael Bjerkeland 289cec6fde Now validating? 2020-08-12 23:32:48 +02:00
Mikael Bjerkeland ff4cf63e3e Fixed up my mistakes. Should hopefully validate now 2020-08-12 23:26:57 +02:00
Mikael Bjerkeland cc4d23469c . 2020-08-12 23:26:26 +02:00
Mikael Bjerkeland d820c2d914 Retrying 2020-08-12 23:21:43 +02:00
Mikael Bjerkeland c12f8b2a6e Added ARP Poisoning Detection for Cisco Devices 2020-08-12 10:55:10 +02:00
Mikael Bjerkeland dd10e6e3cb Adding macros 2020-08-12 09:17:32 +02:00
Mikael Bjerkeland 9eb49b723c Description update 2020-08-11 23:33:57 +02:00
Mikael Bjerkeland a3e9363271 Added Layer 2 Network Detection to detect Rogue DHCP Servers 2020-08-11 23:29:42 +02:00
bpatel 2f04c868e4 new detections for security hub alerts 2020-08-06 14:44:50 -07:00
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00
bpatel 58f47148b9 ymls and updates 2020-08-04 14:04:38 -07:00
bpatel 63f266629e porting ymls into a newe PR 2020-08-04 12:55:12 -07:00
Bhavin Patel 6e595aa13a Merge pull request #590 from splunk/nocaps 
Nocaps
 2020-08-04 09:54:56 -07:00
Patrick Bareiss 9d7a8c2e3e Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe 2020-07-29 10:55:02 +02:00
Joseph Zadeh 3f93f64bfd [TR-038] update mitre id for detection. add test for net exe specific behavior 2020-07-28 11:47:58 -07:00
Rod Soto a4e1a402ca anothererrorfixed 2020-07-28 12:03:21 -04:00
Rod Soto d597c6f64c Merge branch 'develop' into nocaps 2020-07-28 11:53:17 -04:00
Rod Soto 182b0551aa fixedsearch 2020-07-28 11:52:34 -04:00
Patrick Bareiss 074b782dd0 detection tested 2020-07-28 15:43:57 +02:00
Patrick Bareiss 004eeb2347 merged 2020-07-28 14:20:14 +02:00
Patrick Bareiss 8db3edafe2 tested detection 2020-07-28 14:17:10 +02:00
Rod Soto f53f148f00 seeifitworks 2020-07-28 08:10:19 -04:00
Rod Soto 9b3a81da87 fixedsearches 2020-07-28 07:46:50 -04:00