c42c8acce2
Branch was auto-updated.
2022-06-21 14:46:22 -07:00
6554d4a42b
Moved ssa___ test file from the tests/network directory to the tests/experimental/endpoint directory because that's where the corresponding detection resides.
2022-06-21 13:59:50 -07:00
6b06ab718b
Fixing a link to a dataset that has been moved.
2022-06-21 13:13:50 -07:00
e681b766c2
Fixing field name
2022-06-21 14:59:48 -05:00
85f4f107a3
Changed to anomaly
2022-06-21 14:45:43 -05:00
0cf536acd5
fix path error
2022-06-14 20:13:42 -07:00
9a266a78ee
update per review comments
2022-06-13 15:33:12 -07:00
5a34e6c633
add risky command abuse ML detection
2022-06-13 10:53:09 -07:00
d5c65edc6a
Branch was auto-updated.
2022-06-13 10:41:17 -07:00
3369d15d72
rm wrong commit
2022-06-13 10:40:47 -07:00
d5fa5ddc0b
Branch was auto-updated.
2022-06-13 09:51:47 -07:00
6efcbd4b93
add risky command ML detection
2022-06-13 09:50:58 -07:00
c538613139
wrong detection file linked from
...
test file. Fixed.
2022-06-08 16:47:56 -07:00
b87dff2883
Fixing name field in a detection
...
test file
2022-06-08 16:01:21 -07:00
10b2b29122
Adding appropriate custom_index to detection
...
and fixing naming error and file_name error
2022-06-08 12:14:46 -07:00
47cd84d377
Wrong sourcetype declared in one
...
of the test files, causing it to fail.
Fixed missing backticks on some
macros.
2022-06-08 11:46:42 -07:00
e8abbd916b
Added missing _internal custom_indexes
...
to relevant test files. Removed the |
character from searches that use
index and sourcetype macros at the
beginning of the search.
2022-06-08 11:08:21 -07:00
3fb342d4c4
Fixed improperly named macro.
...
Renamed the macro in the tests
that use that macro. Added the
optional field, "custom_index"
to the test files which MUST
upload data into the _audit
index. This branch doesn't
support custom_index yet,
but those changes will be merged
soon from another branch.
2022-06-08 10:31:53 -07:00
829bf8f02f
Branch was auto-updated.
2022-06-06 13:09:33 -07:00
e28a396af4
cve fix2
2022-06-06 11:46:49 -06:00
9f2943793d
fixed cve number
2022-06-06 11:45:12 -06:00
5b46edc201
Fluent in Confluence
2022-06-03 21:29:00 -06:00
46e4e0840c
Branch was auto-updated.
2022-06-03 08:19:02 -07:00
136a3a1b92
detection-fix-due-to-splunk-time
2022-06-03 16:30:32 +02:00
01b2ce4ca2
Branch was auto-updated.
2022-06-01 15:31:23 -07:00
7091af0864
Branch was auto-updated.
2022-06-01 13:10:07 -07:00
b19550f6c0
Branch was auto-updated.
2022-06-01 13:10:06 -07:00
f4237cac86
updating datasets after sim
2022-06-01 12:34:48 -07:00
223f4b73ba
follina_path_traversal_update
2022-06-01 16:14:46 +02:00
b71442549e
Branch was auto-updated.
2022-05-31 10:38:24 -07:00
588c301d84
Branch was auto-updated.
2022-05-31 10:32:07 -07:00
28e97d1639
Branch was auto-updated.
2022-05-31 10:32:04 -07:00
87a9aea4dd
Complete Follina
2022-05-31 07:16:05 -06:00
7153bf7b80
path_traversal
2022-05-30 15:44:52 +02:00
926e63649a
delete usage
2022-05-27 14:41:34 -06:00
38d961ccf1
Branch was auto-updated.
2022-05-26 14:30:01 -07:00
236edce7e1
updating mitre ids and other metadata
2022-05-26 13:39:49 -07:00
6ddebf3a2d
ssl tls ver
2022-05-26 12:28:21 -06:00
fb25e4def0
Splunk Command and Scripting Interpreter Risky Commands
2022-05-26 11:38:35 -06:00
21d5a68dd9
Splunk Command and Scripting Interpreter Risky Commands
2022-05-26 11:28:08 -06:00
7d2a728085
anomaly for non TLS forwarders
2022-05-26 12:21:20 -05:00
4b7bfb516a
terge branch 'vj9r' of github.com:splunk/security_content into vj9r
2022-05-26 10:00:24 -07:00
522e569ced
splkselfsigneddetection
2022-05-26 09:58:07 -07:00
92037c5992
deployment server
2022-05-26 11:39:00 -05:00
a766811c56
0602 hunt
2022-05-26 10:32:09 -05:00
39ee01a256
datasetx
2022-05-26 08:04:57 -07:00
f29d6f9920
renamedsearch
2022-05-26 07:44:46 -07:00
b9d79c5ab1
changednameofdetection
2022-05-26 07:25:17 -07:00
7bd8441806
Adding test, random data since irrelevant to detection
2022-05-25 13:55:43 -05:00
b51c088513
Fixing typo
2022-05-25 10:55:42 -05:00
pyth0n1c