26f6bbfc92
Adding the URL_TOOLBOX app to
...
the application baseline.
2022-06-21 14:29:11 -07:00
5762b4e373
Updated the app baseline as well as
...
the python code for generating the
default config. Also updated the
print behavior for when files are
downloaded.
App baseline is now current, and
files are hosted on S3, as
of 06/21/2022.
2022-06-21 13:53:26 -07:00
c98d7b6855
Fix an issue where trying to download a file from attack_data that returns a 404 fails too late in the process, giving a nondescriptive error message and resulting in a bad filename being included in the detection failure manifest.
2022-06-21 12:52:32 -07:00
10e1b51251
Branch was auto-updated.
2022-06-08 19:58:36 -07:00
9bcd3dff27
Branch was auto-updated.
2022-06-08 15:58:43 -07:00
66280ea4cb
Branch was auto-updated.
2022-06-08 15:58:40 -07:00
1e9b95542d
Missing parenthesis added
2022-06-08 15:30:49 -07:00
8eb675522e
Moved printout of delete status
...
updates to a better location and
condensed multiple printouts for
multiple indices to 1.
2022-06-08 15:21:54 -07:00
5e36835ce9
Moving default data index
...
definition to splunk_sdk file.
2022-06-08 14:57:33 -07:00
7c2047e2cf
Unbalanced quote - fixed
2022-06-07 13:05:05 -07:00
9191057b1b
Changed to use a special host field
...
to denote the source of all the data
sets that we upload. This means that
we don't need hacks to get around
waiting for all of the data to finish
indexing.
2022-06-07 12:55:54 -07:00
aca19c102b
Forgot to include return type from function
2022-06-06 17:15:08 -07:00
8212e22bcb
Forgot to include a break on
...
the forced timeout
2022-06-06 17:03:59 -07:00
7a18850877
Forcing a timeout... certain indexes
...
may continue growing and never have
the same number of events!
2022-06-06 16:53:15 -07:00
d3da287905
Added support for specifying a custom index
...
to delete after a test in each attack_data
dataset in the test file. It is important to
have this level of control (per-dataset), not
just per test or per-file!
2022-06-06 16:08:06 -07:00
84420a1912
PEX-76: fix the detections obj to include the J2 docs fields
2022-06-06 15:01:26 -07:00
518251e8c8
PEX-76: add back the detection_names obj
2022-06-06 09:51:16 -07:00
c247d2cdd4
PEX-76: remove detection_names; modify detections to only contain name attribute
2022-06-02 21:03:36 -07:00
15c16fe736
Branch was auto-updated.
2022-05-31 10:27:37 -07:00
30faa736ff
Branch was auto-updated.
2022-05-31 10:07:40 -07:00
346c21cdfc
Branch was auto-updated.
2022-05-31 10:07:38 -07:00
c7ad4a013b
Updating DM enum
2022-05-31 10:58:08 -05:00
ce00e2414e
fixing testing redux
2022-05-31 11:11:40 -04:00
baac782e94
updating tests
2022-05-31 10:14:24 -04:00
f16de553cc
fix issue 2215
2022-05-31 11:04:09 +02:00
917d4e0dca
just removing bolding
2022-05-27 20:36:32 -04:00
2514983361
adding a note about how the score is calculated
2022-05-27 20:33:28 -04:00
bc4e55c32a
Revert "Updated the following apps:"
...
This reverts commit 0c74525449
2022-05-27 14:38:09 -07:00
0c74525449
Updated the following apps:
...
Splunk Add on for Microsoft Windows
Splunk Add on for Unix and Linux
Splunk Stream
Splunk Stream Knowledge Objects for Wire Data
Splunk Stream Add On
Splunk Add on for Microsoft Office 365
Splunk Common Information Model
2022-05-27 14:33:29 -07:00
c87f34fafa
minor url fix
2022-05-26 16:06:56 -07:00
b4cf2a0865
Branch was auto-updated.
2022-05-23 13:01:47 -04:00
2ef39dd6c4
Branch was auto-updated.
2022-05-20 18:08:55 -04:00
47dd6ac2ef
Branch was auto-updated.
2022-05-20 18:08:53 -04:00
e12b16512a
Fixing tests
2022-05-20 12:19:21 -05:00
c74091184f
Branch was auto-updated.
2022-05-19 21:21:54 -04:00
1268a07a85
Branch was auto-updated.
2022-05-19 21:21:52 -04:00
441ddacfb3
adding insider threat, fixing minor display bug
2022-05-19 21:19:35 -04:00
4b8d366d08
Branch was auto-updated.
2022-05-17 18:32:22 -04:00
d63698c1a5
Branch was auto-updated.
2022-05-17 18:32:19 -04:00
b1c09736a6
Branch was auto-updated.
2022-05-17 18:10:40 -04:00
8f52d443bb
Branch was auto-updated.
2022-05-17 18:10:38 -04:00
8b197cbe3f
Branch was auto-updated.
2022-05-17 18:10:36 -04:00
6c1e1fea73
remove line
2022-05-17 14:52:16 -07:00
7952f316a7
new line:
2022-05-17 14:35:26 -07:00
f1a52746c1
ughh
2022-05-17 14:32:03 -07:00
7bc9788866
new line
2022-05-17 14:10:12 -07:00
2c655f52ca
test
2022-05-17 14:07:03 -07:00
84d0f1fd7f
new test files for code testing
2022-05-17 13:55:00 -07:00
0651c540de
bumping layer version to 4.3
2022-05-17 16:50:56 -04:00
34ae999e98
new tranforms test file
2022-05-16 15:17:12 -07:00
pyth0n1c