169 Commits

Author	SHA1	Message	Date
bpatel	889d6b7292	add product tag for mustang beta 4 baseline	2021-03-12 16:07:02 -08:00
mhaag-spl	51823d81d3	Sunburst malware renamed NOBELIUM Group ... Renaming Sunburst Malware to NOBELIUM Group	2021-03-05 10:30:34 -07:00
divious1	d6f8c42d23	processing baselines now with datamodels	2021-02-11 11:25:21 -05:00
divious1	eef01502f3	renamed stories	2021-02-08 10:18:57 -05:00
divious1	8a772c721f	adding product tags and type to baselines	2021-02-04 10:59:44 -05:00
bpatel	24128d4982	updating lookup name to avoid duplicates and deprecattion	2021-01-13 15:34:24 -08:00
bpatel	7fa41599d5	adding sunburst as tags for relavant detections	2020-12-14 20:29:04 -08:00
P4T12ICK	5fee68375f	fix_bugs	2020-12-11 10:51:02 +01:00
bpatel	25c7f33866	app inspect failures fixes	2020-12-08 14:56:39 -08:00
bpatel	a7110f1fec	change type is EC2	2020-11-16 17:25:45 -08:00
bpatel	2bed51a09e	spl updates	2020-11-16 15:35:30 -08:00
bpatel	52d456fa33	detection update and scheduling	2020-11-12 13:51:55 -08:00
bpatel	1ace7057bd	adding >=	2020-10-14 15:09:39 -07:00
bpatel	dbd9314b1c	spl updates	2020-10-14 14:43:16 -07:00
bpatel	c84795fd80	security api calls mltk	2020-10-13 17:08:25 -07:00
bpatel	d1cb61f159	api calls search mltk	2020-10-13 16:20:47 -07:00
Bhavin Patel	6a07f70a07	Merge branch 'mustang_beta' into cloud_crypto_spl_bugs	2020-10-12 12:47:31 -07:00
bpatel	dac1086b04	spl bugs - fully tested	2020-10-12 12:37:05 -07:00
bpatel	abac1c8b62	convert to kvstore and spl updates	2020-10-12 12:14:50 -07:00
bpatel	97ac9c5f62	spl updates and kvstore file	2020-10-12 11:49:37 -07:00
bpatel	d237a2d984	lookup errors and consistency	2020-10-12 11:26:57 -07:00
bpatel	aac5f2b4bc	unseen image	2020-10-12 10:29:19 -07:00
bpatel	689be427f9	redoing provision story	2020-10-09 15:49:46 -07:00
bpatel	e9ea5ee90b	remove extra pipe	2020-10-09 12:18:54 -07:00
bpatel	1da0f22a6a	baseline re write	2020-10-09 09:59:07 -07:00
bpatel	786c68090c	spl logic update	2020-10-08 15:45:07 -07:00
bpatel	44bc49dc13	spl updates	2020-10-08 11:15:35 -07:00
bpatel	5c4d027d79	spl updates	2020-10-07 18:02:52 -07:00
bpatel	42268eaf3e	typo	2020-10-05 11:08:38 -07:00
bpatel	979a288fcb	adding dist=expon back again	2020-09-30 14:57:55 -07:00
bpatel	13db9854d2	story name errors	2020-09-30 13:46:00 -07:00
bpatel	b9f18705e7	spl errors and typos	2020-09-30 13:24:29 -07:00
bpatel	b70138ed69	creating collections and search updates	2020-09-30 11:25:37 -07:00
bpatel	1028f2c6d7	updating search aand fileames for consistenccy	2020-09-30 11:05:39 -07:00
bpatel	d95a7452f5	removing dist param from baselines	2020-09-30 10:33:14 -07:00
Bhavin Patel	9f3ff7c5e4	Merge branch 'develop' into TR-41_aws_ec2_mods	2020-09-29 16:58:02 -07:00
divious1	cc031f1b9e	fixing a mistake	2020-09-25 16:39:29 -04:00
Rico Valdez	3d029956cc	text fixes	2020-09-23 17:05:15 -06:00
David Dorsey	5fbc68936b	baseline update search fix with macros	2020-09-23 16:58:26 -05:00
David Dorsey	2d25205146	Fixes	2020-09-23 11:35:56 -05:00
David Dorsey	58848e7326	Fixes for cryptomining demo	2020-09-23 00:01:02 -05:00
David Dorsey	17eff649e7	Fixes	2020-09-21 23:23:57 -05:00
David Dorsey	f411bfa91b	File no longer needed	2020-09-21 22:43:06 -05:00
David Dorsey	7201713de3	Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods	2020-09-15 23:59:18 -05:00
David Dorsey	7a99d2c4dd	Fixing story mappings	2020-09-15 23:58:59 -05:00
jzsplunk	7da91f2409	[TR-41] fixing last of merge conflicts.	2020-09-15 20:38:05 -07:00
jzsplunk	0a6bafbe36	Merge branch 'TR-41_aws_ec2_mods' of github.com-jzsplunk:splunk/security-content into TR-41_aws_ec2_mods	2020-09-15 20:33:32 -07:00
David Dorsey	7f2f53d0a8	validate fixes	2020-09-15 20:19:45 -07:00
Rico Valdez	182c4116c9	tweaks and updates	2020-09-15 20:19:45 -07:00
Rico Valdez	248c3d412c	latest updates to create in new vendor_region	2020-09-15 20:19:45 -07:00