admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,936 Commits 697 Branches 195 Tags
e5a3abaedbbbbfa8d3dd32a9daf577fbde4c8389
Commit Graph

317 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 4b9933816e Branch was auto-updated. 2023-03-06 02:27:58 -08:00
P4T12ICK 684cad0ff9 update sigma ba conversion 2023-03-06 11:26:51 +01:00
srv-rr-gh-researchbt 33f8071c5c Branch was auto-updated. 2023-03-03 04:28:37 -08:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
srv-rr-gh-researchbt 32569d2931 Branch was auto-updated. 2023-03-03 03:40:52 -08:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK bbabdeb3d8 fixed small bug 2023-03-03 12:19:41 +01:00
P4T12ICK 43c92975d5 Converted SSA detection to OCSF 2023-03-02 08:31:22 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
P4T12ICK 801f3b570c testing 2023-02-24 15:52:15 +01:00
P4T12ICK 768258a237 updates 2023-02-24 14:51:15 +01:00
P4T12ICK a5ec4f97ce updates 2023-02-24 14:06:43 +01:00
P4T12ICK f3841eb846 updates for testing 2023-02-24 13:54:13 +01:00
P4T12ICK edb111c9b9 update 2023-02-17 17:53:51 +01:00
P4T12ICK 8cc5b11302 update 2023-02-17 17:29:50 +01:00
P4T12ICK ecf25b566f updates 2023-02-17 17:21:55 +01:00
P4T12ICK 5ced9e1a1e update 2023-02-17 12:03:33 +01:00
P4T12ICK 13cd29aa34 update detection 2023-02-15 15:54:01 +01:00
patel-bhavin 49db553a08 ci 2023-02-13 12:33:44 -08:00
patel-bhavin 562222583c codetesting ci 2023-02-13 11:37:45 -08:00
patel-bhavin b12011f0d7 remove observables from annnotations 2023-02-13 11:01:35 -08:00
P4T12ICK fbfc35f8f0 small change 2023-02-08 14:38:52 +01:00
pyth0n1c 5264515a3d Remove filename printouts in factory. 
Add reason why file will not be tested in
GitHub service. This could be the wrong type
or the wrong status.
 2023-02-03 15:03:57 -08:00
pyth0n1c 13ccdc1e16 Add validators to automatically set the 
deprecated and experimental boolean
fields of a detection. Should these fields
still exist given that there is a status
field? Also added enum to help with
validation.
 2023-02-03 14:38:19 -08:00
pyth0n1c 561c60df26 Attempt at adding proper experimental and 
manual_test parsing support to 
detection_testing.
 2023-02-03 11:48:05 -08:00
P4T12ICK ffa1210a00 merged with develop 2023-02-02 09:15:59 +01:00
P4T12ICK 58c6987122 update finding report generation 2023-01-30 14:08:14 +01:00
P4T12ICK a1bc51a4e8 ocsf ba 2023-01-26 16:12:24 +01:00
P4T12ICK eec8968a85 Added sigma detections into dev folder 2023-01-20 13:24:15 +01:00
P4T12ICK 08bf8f82ed Add drilldown searches 2023-01-09 12:46:04 +01:00
P4T12ICK ff7005304a Improve rba deployment for hunting searches 2023-01-04 14:04:15 +01:00
P4T12ICK b352a1418e add new deployment functionality 2023-01-04 13:37:44 +01:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
P4T12ICK 524766e532 updated detections 2022-12-22 17:18:19 +01:00
P4T12ICK b0543d4749 updated 2022-12-01 14:49:32 +01:00
P4T12ICK 0b97fd423e fixed bug TR-2687 2022-12-01 14:34:23 +01:00
srv-rr-gh-researchbt 76f4eb5377 Branch was auto-updated. 2022-11-01 07:20:42 -07:00
patel-bhavin ac4f625035 updating a file for code testing failure 2022-10-31 15:16:24 -07:00
srv-rr-gh-researchbt b04681c854 Branch was auto-updated. 2022-10-14 12:33:36 -07:00
srv-rr-gh-researchbt 090b1ae9e8 Branch was auto-updated. 2022-10-14 12:33:32 -07:00
d1vious 43faff68da updated given feedback 2022-10-13 13:58:10 -04:00
pyth0n1c 7056578d21 Fix generate API. Also, return nonzero error 
code when contentctl action raises an
uncaught error
 2022-10-13 10:08:12 -07:00
d1vious d3fe59a15c adding data_schema tag 2022-10-12 18:50:39 -04:00
pyth0n1c e033d17e23 add validation for missing detection tags cis20 and nist 2022-10-04 16:51:23 -07:00
srv-rr-gh-researchbt a794604853 Branch was auto-updated. 2022-09-30 10:37:00 -07:00
pyth0n1c fe36f9f5bc Re-Added and improved duplicate ID checking 
for ESCU and BA detections.
 2022-09-29 14:35:21 -07:00
pyth0n1c 9657101fc3 Fixes for more robust catching of duplicate ids. 2022-09-29 13:46:52 -07:00
srv-rr-gh-researchbt f171cd0089 Branch was auto-updated. 2022-09-29 11:20:08 -07:00
srv-rr-gh-researchbt c02e8a9314 Branch was auto-updated. 2022-09-29 11:20:02 -07:00
srv-rr-gh-researchbt bd85a2be5a Branch was auto-updated. 2022-09-29 11:16:36 -07:00