admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,166 Commits 697 Branches 195 Tags
f12d9a90bb6d2663243faee7c7d019479655449a
Commit Graph

23 Commits

Author SHA1 Message Date
divious1 c0ece8d9c0 added deployments for pretty printing 2021-02-11 11:30:54 -05:00
bpatel c8fc855ccd rename mustang to ssa4aws 2021-01-21 14:31:23 -08:00
bpatel 369dab3488 minor 2021-01-20 17:32:03 -08:00
bpatel 0b7f46489a adding deployment file for Mustang 2021-01-20 16:40:33 -08:00
divious1 494684ac35 added notables again 2021-01-19 13:08:54 -05:00
P4T12ICK d72747ccd4 new generate feature 2021-01-14 12:33:36 +01:00
David Dorsey 5f48894035 removed the create notable from all searches 2020-09-23 14:38:15 -05:00
David Dorsey 3efae7ccef cron_schedule fixed 2020-09-10 20:52:24 -05:00
David Dorsey 97dd7e357b Small updates 2020-09-10 20:49:00 -05:00
David Dorsey adf19afe6a Updated baseline searches to have correct deployment. Which was also created 2020-09-09 01:35:38 -05:00
bpatel 10a5b76af7 merge with develop 2020-09-04 13:40:15 -07:00
David Dorsey 7de781c8f0 Manifest cleanup 2020-08-20 13:15:14 -05:00
David Dorsey b4ab45f299 Updated baseline searches for cloud provisioning activities. 
Broke them out into an initial search and update search
  Updated them to use kv store
Updated Cloud Provisioning from previously unseen ip address to
  relfect changes in baseline searches.
Added new fields to make the detection more actionable
Added the lookup manifest and a macro manifest
 2020-08-19 10:28:05 -05:00
Mikael Bjerkeland 4c7cb2488c Polish 2020-08-14 23:08:02 +02:00
Mikael Bjerkeland 584ef0aff9 Updates 2020-08-14 22:59:11 +02:00
David Dorsey 07ce28f433 Updated baseline deployments 2020-06-25 13:49:48 -05:00
David Dorsey 301bf51a8a Merge branch 'develop' into first_time_windows_service_bug 2020-06-25 11:34:38 -05:00
Patrick Bareiss 85f13dd926 new deployment configurations 2020-06-25 09:53:44 +02:00
David Dorsey 8438bf71e8 Fixed the first time previously seen windows service search to work 
with the latest Windows TA. Simplified it by adding an hourly baseline
cache update

Made the default deployment template be -70m@m to -10m@m

Added a new deployment template for hourly baseline caches
 2020-06-25 00:09:30 -05:00
Patrick Bareiss e9c7ae28a5 small bug bix 2020-05-25 18:00:46 +02:00
Patrick Bareiss 3c7b2dfc6d bug in generate 2020-05-11 09:31:35 +02:00
Patrick Bareiss cda505d8fa new generate script 2020-05-06 17:42:38 +02:00
Patrick Bareiss e610e87ee0 WIP 2020-04-30 10:14:38 +02:00