admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,936 Commits 697 Branches 195 Tags
e5a3abaedbbbbfa8d3dd32a9daf577fbde4c8389
Commit Graph

1408 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 4b9933816e Branch was auto-updated. 2023-03-06 02:27:58 -08:00
P4T12ICK 684cad0ff9 update sigma ba conversion 2023-03-06 11:26:51 +01:00
srv-rr-gh-researchbt 33f8071c5c Branch was auto-updated. 2023-03-03 04:28:37 -08:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
srv-rr-gh-researchbt 32569d2931 Branch was auto-updated. 2023-03-03 03:40:52 -08:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK bbabdeb3d8 fixed small bug 2023-03-03 12:19:41 +01:00
P4T12ICK 43c92975d5 Converted SSA detection to OCSF 2023-03-02 08:31:22 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
P4T12ICK 801f3b570c testing 2023-02-24 15:52:15 +01:00
P4T12ICK 768258a237 updates 2023-02-24 14:51:15 +01:00
P4T12ICK a5ec4f97ce updates 2023-02-24 14:06:43 +01:00
P4T12ICK f3841eb846 updates for testing 2023-02-24 13:54:13 +01:00
P4T12ICK edb111c9b9 update 2023-02-17 17:53:51 +01:00
P4T12ICK 8cc5b11302 update 2023-02-17 17:29:50 +01:00
P4T12ICK ecf25b566f updates 2023-02-17 17:21:55 +01:00
P4T12ICK 5ced9e1a1e update 2023-02-17 12:03:33 +01:00
P4T12ICK 13cd29aa34 update detection 2023-02-15 15:54:01 +01:00
patel-bhavin 49db553a08 ci 2023-02-13 12:33:44 -08:00
patel-bhavin 562222583c codetesting ci 2023-02-13 11:37:45 -08:00
patel-bhavin b12011f0d7 remove observables from annnotations 2023-02-13 11:01:35 -08:00
P4T12ICK fbfc35f8f0 small change 2023-02-08 14:38:52 +01:00
pyth0n1c fe1dfb0db0 Fixed some prints to make it easier 
to understand why certain tests are
being skipped.  This is because they
are deprecated, experimental, or
manual_test
 2023-02-03 15:27:11 -08:00
pyth0n1c 5264515a3d Remove filename printouts in factory. 
Add reason why file will not be tested in
GitHub service. This could be the wrong type
or the wrong status.
 2023-02-03 15:03:57 -08:00
pyth0n1c 13ccdc1e16 Add validators to automatically set the 
deprecated and experimental boolean
fields of a detection. Should these fields
still exist given that there is a status
field? Also added enum to help with
validation.
 2023-02-03 14:38:19 -08:00
pyth0n1c 561c60df26 Attempt at adding proper experimental and 
manual_test parsing support to 
detection_testing.
 2023-02-03 11:48:05 -08:00
mvelazco 621fe10dfd Delete test_config_bak.json 2023-02-03 12:40:01 -05:00
P4T12ICK ffa1210a00 merged with develop 2023-02-02 09:15:59 +01:00
P4T12ICK 58c6987122 update finding report generation 2023-01-30 14:08:14 +01:00
mvelazco 5306030d74 fixes 2023-01-26 16:35:43 -05:00
mvelazco 9f0394613d updating microsoft cloud services app metadata 2023-01-26 11:13:28 -05:00
P4T12ICK a1bc51a4e8 ocsf ba 2023-01-26 16:12:24 +01:00
P4T12ICK eec8968a85 Added sigma detections into dev folder 2023-01-20 13:24:15 +01:00
pyth0n1c f1ca2d34f6 Allow detections without tests. This may be an issue in the conversion. 2023-01-09 14:37:06 -08:00
pyth0n1c 547c95cd20 Merge updates from security_content_4_phase_2 to fix detections and contentctl tooling. 2023-01-09 14:28:10 -08:00
pyth0n1c 545a106937 forgot to remove exception raise 
in last commit
 2023-01-05 16:38:14 -08:00
pyth0n1c b333422bca don't throw error, just warn 
when a detection contains
more than one test
 2023-01-05 16:29:10 -08:00
pyth0n1c 1cd81364e3 Resolve issue with file 
not existing when the
timestamps are updated.
 2023-01-04 15:37:42 -08:00
pyth0n1c 6556205305 initial support for pulling tests 
from the detection file instead of
separately. This feature is implemented
as a stopgap as we move to new
tooling.
 2023-01-04 11:28:50 -08:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
P4T12ICK 524766e532 updated detections 2022-12-22 17:18:19 +01:00
P4T12ICK b0543d4749 updated 2022-12-01 14:49:32 +01:00
P4T12ICK 0b97fd423e fixed bug TR-2687 2022-12-01 14:34:23 +01:00
srv-rr-gh-researchbt 1e3ddbc24e Branch was auto-updated. 2022-11-15 11:28:00 -08:00
pyth0n1c 0117d03428 fixing wrong URL 2022-11-15 11:15:49 -08:00
pyth0n1c feb1c94d11 add crowdstrike fdr to baseline 2022-11-15 11:11:08 -08:00
srv-rr-gh-researchbt 76f4eb5377 Branch was auto-updated. 2022-11-01 07:20:42 -07:00
patel-bhavin ac4f625035 updating a file for code testing failure 2022-10-31 15:16:24 -07:00
srv-rr-gh-researchbt 5088662e8f Branch was auto-updated. 2022-10-31 14:21:38 -07:00
srv-rr-gh-researchbt f2a32ef117 Branch was auto-updated. 2022-10-31 14:21:30 -07:00