d40ca09d61
Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface.
2022-06-23 14:19:17 -07:00
35908f5a30
Removed user from the stats call of this search
...
since it does not exist and the field userName
does exist. And it is likely to have captured
the same data.
2022-06-21 16:25:20 -07:00
7816778eae
Removed the field "user" from the stats
...
line. It does not appear to exist in the raw
data and is not pulled into any field(s).
However, there is a field called userName
which, presumably, represents the same data.
2022-06-21 15:45:00 -07:00
c16ccc1eec
Branch was auto-updated.
2022-05-19 21:21:59 -04:00
441ddacfb3
adding insider threat, fixing minor display bug
2022-05-19 21:19:35 -04:00
f47a96e452
Branch was auto-updated.
2022-05-18 15:51:07 -04:00
aa4499a050
minor grammar fixes
2022-05-18 12:31:41 -07:00
4d4a4767d7
search, data and yml updates
2022-05-17 17:36:49 -07:00
0591cf421e
Branch was auto-updated.
2022-05-16 15:09:33 -04:00
aa13247897
update detection yml
2022-05-10 15:25:55 -07:00
900bd9e7e2
Updated a large number of the links in other detections. Also, adjusted the number of threads that run and tweaked the timeout time.
2022-05-03 10:34:10 -07:00
578e6bb088
Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.
2022-05-02 17:12:50 -07:00
9354dad823
improved GitHub detection
2022-04-04 13:23:37 +02:00
4ffa5540e4
github actions detection
2022-04-04 11:08:39 +02:00
9f50f52b35
Branch was auto-updated.
2022-03-14 10:14:17 -07:00
e08e7f3e5a
syntax
2022-03-10 08:16:21 -07:00
6f0ee68913
Refactored security content
2022-03-09 14:43:09 +01:00
f79866dca4
Update aws_updateloginprofile.yml
2022-03-08 09:24:18 -08:00
e53e25aee4
Update aws_createaccesskey.yml
2022-03-08 09:23:58 -08:00
b2037a2712
Branch was auto-updated.
2022-03-04 12:21:26 -08:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
19b631aca4
Branch was auto-updated.
2022-03-04 09:34:03 -08:00
33b5987f16
spl updates
2022-03-03 12:46:44 -08:00
67ecd29d53
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
68543a8dc1
merged with develop
2022-03-03 13:11:56 +01:00
bb797ef06f
Branch was auto-updated.
2022-03-01 06:31:28 -08:00
63dcb7f00f
Update o365_excessive_authentication_failures_alert.yml
...
rename syntax adjusted
later needed lastTime included
2022-03-01 14:04:36 +01:00
1d19ac2eff
text updates
2022-02-28 11:44:33 -08:00
bdb357cbc2
detection update
2022-02-28 11:28:27 -08:00
0338044721
Updating the date to today
...
and bumping the version for
updated searches associated
with this PR.
2022-02-18 10:57:49 -08:00
aa6ec9315b
Branch was auto-updated.
2022-02-18 07:41:50 -08:00
a093ba7aaf
Minor updates to fixed searches.
...
Fixed some spacing issues and quotation
mark issues that were causing search success problems.
2022-02-15 09:47:36 -08:00
77b300ab4e
Accidentally changed detection file
...
detections/cloud/aws_excessive_security_scanning.yml.
That file should not have been modified. Rolling back those
changes.
2022-02-15 09:37:52 -08:00
7648c76c0b
A handful of easy detection test fixes to get
...
the tests to detections to work with the
newest application baseline.
2022-02-14 16:57:33 -08:00
179134e8ef
test:removed cim version
2022-02-08 12:05:05 +05:30
3212249c52
updating docs and package bits [ci skip]
2022-02-07 21:03:48 +00:00
1d880e6b0e
merged with latest content and fixed bugs
2022-02-07 15:58:50 +01:00
5fbff3630e
merged with develop
2022-02-07 14:55:34 +01:00
eb43251183
spl update
2022-02-03 15:26:19 -08:00
08f0ff6405
test: Removed tas with mapping from detection files
2022-01-31 19:46:09 +05:30
4fd8604b9a
removed SAAWS and automated_detection_testing flag
2022-01-27 09:50:45 +01:00
a95e0e5aa6
fixed detections metadata
2022-01-20 13:42:50 +01:00
6fd7a4e812
test: updated supported_tas to recommended_tas
2022-01-19 17:43:41 +05:30
5a3d277c9f
fixed more detections
2022-01-18 14:17:09 +01:00
84092434a2
fixed more detections
2022-01-18 12:53:54 +01:00
98e5af3713
put baselines and investigations into its own folder
2022-01-17 10:56:04 +01:00
a2b6fff739
test:updated ymls
2021-12-15 21:15:02 +05:30
343ceae12f
Updated detection files with supported TA list.
2021-12-14 13:27:55 +05:50
750c81fb5b
updating docs and package bits [ci skip]
2021-12-02 18:50:01 +00:00
a6ee98620d
user login update
2021-11-19 11:18:36 -08:00
pyth0n1c