mvelazco
|
b2332df9a0
|
Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover
|
2022-08-16 12:13:02 -04:00 |
|
mvelazco
|
d00a4b2ae6
|
updating detection yaml
|
2022-08-16 12:13:00 -04:00 |
|
pyth0n1c
|
7d441871cb
|
Branch was auto-updated.
|
2022-08-16 08:40:56 -07:00 |
|
gowthamarajr
|
6759feccd4
|
Add Azure AD Multi-Factor Authentication Disabled
|
2022-08-15 17:22:54 -04:00 |
|
patel-bhavin
|
8d25d3d27a
|
getpassworddata
|
2022-08-10 16:03:18 -07:00 |
|
mvelazco
|
5579f1ebdb
|
adding new detection
|
2022-08-10 13:34:18 -04:00 |
|
gowthamarajr
|
3cc956cd99
|
Add AWS Credential Access detections
|
2022-08-08 01:47:33 -04:00 |
|
pyth0n1c
|
53fb29f36e
|
Branch was auto-updated.
|
2022-07-28 13:11:00 -07:00 |
|
patel-bhavin
|
a78c180836
|
file update
|
2022-07-26 17:21:56 -07:00 |
|
patel-bhavin
|
8672c8d824
|
security sercvices deleteion activities
|
2022-07-26 16:54:42 -07:00 |
|
patel-bhavin
|
7eea768cde
|
new detection putbucket lifecycle
|
2022-07-25 16:29:57 -07:00 |
|
Bhavin Patel
|
c55b3ed7e0
|
Merge pull request #2287 from splunk/TR-2222
AWS Defense Evasion Stop Logging Cloudtrail
|
2022-07-25 10:48:37 -07:00 |
|
gowthamarajr
|
c2decc3b9c
|
Add AWS defense evasion
1. Update Cloudtrail
2. Delete CloudWatch log group
|
2022-07-19 11:56:41 -04:00 |
|
mvelazco
|
d6dd5098be
|
adding new detection
|
2022-07-14 13:29:55 -04:00 |
|
patel-bhavin
|
5bf8a69beb
|
delete cloudtrail
|
2022-07-13 12:49:43 -07:00 |
|
patel-bhavin
|
c0996437b5
|
remove update
|
2022-07-13 11:40:55 -07:00 |
|
mvelazco
|
b615728924
|
fixing file path
|
2022-07-13 14:38:13 -04:00 |
|
mvelazco
|
7807c66f73
|
adding new detection
|
2022-07-13 14:16:09 -04:00 |
|
patel-bhavin
|
9756e681f7
|
aws cloudtrail stop logging
|
2022-07-12 17:47:58 -07:00 |
|
mvelazco
|
18aa9f2e7a
|
adding new detection
|
2022-07-12 18:03:26 -04:00 |
|
mvelazco
|
f8e28dde20
|
adding new detection
|
2022-07-12 13:54:32 -04:00 |
|
mvelazco
|
743b94d8a9
|
updating test files
|
2022-07-12 11:22:38 -04:00 |
|
mvelazco
|
ba163055eb
|
adding 2 detections
|
2022-07-11 17:29:18 -04:00 |
|
patel-bhavin
|
4d4a4767d7
|
search, data and yml updates
|
2022-05-17 17:36:49 -07:00 |
|
P4T12ICK
|
4ffa5540e4
|
github actions detection
|
2022-04-04 11:08:39 +02:00 |
|
pyth0n1c
|
9710f9888e
|
Renamed two test files whose detection files are in the experimental detection folder. Since the new branch looks for an fails on these, we fix them here.
|
2022-03-23 13:40:31 -07:00 |
|
pyth0n1c
|
e61e35c3f6
|
In a previous update, baselines were moved into the baselines folder, but the path to the baselines was not updated in the test files. All of the paths have now been updated.
|
2022-03-18 16:10:52 -07:00 |
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
patel-bhavin
|
7321055bc5
|
timewindow
|
2022-02-28 11:59:42 -08:00 |
|
patel-bhavin
|
bdb357cbc2
|
detection update
|
2022-02-28 11:28:27 -08:00 |
|
P4T12ICK
|
8cf8fc40ac
|
reporting integrated
|
2022-02-24 16:18:56 +01:00 |
|
P4T12ICK
|
32798f21ab
|
old test file format
|
2022-02-07 10:50:32 +01:00 |
|
P4T12ICK
|
228cc28a3b
|
after changing test file format
|
2022-01-27 16:12:01 +01:00 |
|
pyth0n1c
|
97c83a1864
|
Created Experimental folder in tests,
as well as cloud, endpoint, and network
subfolders, and moved some tests into it.
This corresponds with the experimental
folder in detections.
|
2021-11-30 09:47:01 -08:00 |
|
pyth0n1c
|
84e54e26d6
|
Changing to the correct baseline paths after restructuring repo
|
2021-11-29 16:44:40 -08:00 |
|
divious1
|
1f6c5070d0
|
cleaned up cruft from repo
|
2021-09-28 17:18:51 -04:00 |
|
P4T12ICK
|
99f0349e9f
|
circle ci detecction
|
2021-09-02 10:42:01 +02:00 |
|
P4T12ICK
|
7f980b6a46
|
circle ci detecction
|
2021-09-01 17:54:38 +02:00 |
|
github-actions[bot]
|
4f9691205f
|
Branch was auto-updated.
|
2021-09-01 12:32:24 +00:00 |
|
P4T12ICK
|
dcbc0f95ad
|
github detection
|
2021-09-01 13:56:23 +02:00 |
|
P4T12ICK
|
175fcfc3d8
|
github detections
|
2021-09-01 11:28:05 +02:00 |
|
tccontre
|
9c0d231357
|
devsec3
|
2021-09-01 11:13:52 +02:00 |
|
P4T12ICK
|
8d51af0e53
|
add dataset
|
2021-09-01 10:54:03 +02:00 |
|
github-actions[bot]
|
8034abf451
|
Branch was auto-updated.
|
2021-08-27 11:15:56 +00:00 |
|
tccontre
|
426d5c4c85
|
dev_git
|
2021-08-27 12:58:41 +02:00 |
|
github-actions[bot]
|
8bddedb93b
|
Branch was auto-updated.
|
2021-08-27 09:00:00 +00:00 |
|
github-actions[bot]
|
35398496bc
|
Branch was auto-updated.
|
2021-08-27 08:59:54 +00:00 |
|
github-actions[bot]
|
b8efb4ea95
|
Branch was auto-updated.
|
2021-08-27 08:21:41 +00:00 |
|