20c4a18215
moving validate to python3
2019-11-21 20:17:15 -05:00
541b72fd71
merge with develop and testing
2019-11-05 12:22:01 -08:00
af66ed5fe3
Changed json to yml
2019-10-16 16:38:05 +02:00
c9effaf169
Merge branch 'develop' into cloud_cryptominig
2019-10-08 08:40:51 -04:00
9c6c794b81
Merge pull request #215 from splunk/drilldown
...
Added drilldown search and name to the detection spec.
2019-10-08 08:32:49 -04:00
2a4b29e4c4
New investigation macros
...
Updated validate to check for macro and lookup existence in both
baselines and investigation searches
2019-10-07 22:14:12 -05:00
9034599d6f
Added in exception handling to cloud compute activity in new region
...
Added a bunch of lookup manifests
Added a bunch of macro manifests
Updated validate to make sure macros listed in detection search have
a macro manifest
2019-10-07 21:50:13 -05:00
2a8b470241
Added drilldown search and name to the detection spec.
...
Added these fields to the suspicious wevtutil manifest
Updated validate to make sure both entries are there or neither are
Updated generate to output those fields if they are there
2019-10-01 17:31:11 -07:00
1bda6248ea
Added code to validate macros manifest and lookups manifest
...
Lookup manifest validation also checks to make sure either filename or collection is there
If a filename is listed, it makes sure the file exists as well
2019-09-30 16:08:54 -07:00
b82eaa7750
fixing merge conflicts
2019-08-06 17:45:35 -04:00
5836446617
fixed channel in stories, minor tweaks to detections.
...
Also - updated spec to allow validation to pass for UBA detection, as well as updated validation script
2019-08-06 14:58:39 -06:00
bfef6024fe
more tweaks/fixes to manifests - also adjustments to validation script and spec files. Successfully validates with exception of usecase in stories
2019-07-25 14:56:40 -06:00
2e9d302554
updates to validate and sample UBA manifest for detection
2019-07-15 17:44:10 -07:00
bdfc72749a
updated validate script, included phantom in generator, fixed some stories to v2
2019-04-18 11:28:26 -04:00
6b852b50c3
fixed error in validate
2019-04-02 17:03:26 -05:00
9cd8ba0343
skeleton of generate tool, removed old validation tool
2019-04-02 14:33:27 -04:00
e562cc1e37
updated with baseline searches
2019-04-01 16:36:17 -04:00
af192d416d
fixed errors with investigative validations
2019-03-30 15:19:40 -04:00
f05f011e6b
added investigative check functions
2019-03-29 22:59:27 -04:00
1e965b3db5
udpated validate script to check detections
2019-03-29 13:32:53 -04:00
341ee8b0c2
better printing for story
2019-03-28 12:42:06 -04:00
33eff9361c
adding logic for checking story content
2019-03-28 12:16:08 -04:00
fe3e471ffa
validate story skeleton
2019-03-28 12:00:14 -04:00
divious1