admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
20,915 Commits 697 Branches 195 Tags
f15ceb065d892158fa040ae00dfb7e00a3565442
Commit Graph

1482 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 6c6ff98517 Branch was auto-updated. 2023-06-05 09:51:01 -07:00
pyth0n1c e282f28135 Add support for apple silicon 
to docker testing container
 2023-05-31 13:44:53 -07:00
pyth0n1c cefd9349b1 Ensure that each lookup contains 
either a filename or a collection
field defined in its yml. Make sure
that is a filename is declared, then
that file actually exists in the
lookups folder.  Make sure that
every csv declared in the
lookups folder is actually
used by at least one lookup.
If it is not, then print a
warning but do not cause
a failure.
 2023-05-26 16:27:31 -07:00
patel-bhavin 30ad4d6eab only kvstore conversion 2023-05-22 17:35:13 -07:00
pyth0n1c b24394affd Push a new github_actions test config file 2023-05-15 13:54:53 -07:00
pyth0n1c 4b04df1ff8 Updated all app baselines in validate_args 2023-05-15 13:52:12 -07:00
pyth0n1c 9e535bb5f0 Update baseline to include 
suricata ta.  TA required 
for testing new detections.
Also, remove some 
duplicates apps from the 
baseline.
 2023-05-15 12:49:18 -07:00
srv-rr-gh-researchbt 6c35f820ca Branch was auto-updated. 2023-05-08 08:36:30 -07:00
P4T12ICK 92d73aae24 improvements srs detections 2023-05-08 15:34:46 +02:00
P4T12ICK 43180a41bd bug fix srs detections 2023-05-08 10:56:12 +02:00
srv-rr-gh-researchbt b954ccf537 Branch was auto-updated. 2023-05-02 15:02:44 -07:00
patel-bhavin e51757ca9f conflicts 2023-05-02 14:56:38 -07:00
P4T12ICK 72792fc2a0 Update to detection tags validator 2023-04-28 14:49:00 +02:00
P4T12ICK 97a1ec3bd5 bug fix validation 2023-04-28 13:53:52 +02:00
patel-bhavin 29c841b945 adding a field 2023-04-25 13:30:37 -07:00
patel-bhavin 932b49ccfd fixes to validate 2023-04-17 16:06:37 -07:00
patel-bhavin fc34672ca4 updates to ymls 2023-04-17 15:23:53 -07:00
patel-bhavin 4a9ce12739 adding risk=other to all configs 2023-04-17 15:00:26 -07:00
pyth0n1c 3754611943 Fix a number of experimental and 
deprecated detections so that
they do not raise error when run
out of the box.
 2023-04-11 16:27:40 -07:00
pyth0n1c 66eb63e06c Fixing how smoketest is passed 
to detection wrapper
 2023-04-11 12:49:49 -07:00
pyth0n1c 94a7845f9c Add experimental support for smoketest. 
That means running all detections
without replaying data or checking
correctness.
 2023-04-11 12:48:49 -07:00
P4T12ICK 6c0b883df8 update reporting 2023-04-05 14:53:09 +02:00
P4T12ICK d6514a32ad rebase with develop 2023-04-05 08:41:48 +02:00
srv-rr-gh-researchbt 1738be22b7 Branch was auto-updated. 2023-03-30 23:39:21 -07:00
P4T12ICK d3f883427d updated srs detections 2023-03-31 08:38:45 +02:00
srv-rr-gh-researchbt 4ad9288052 Branch was auto-updated. 2023-03-30 01:31:04 -07:00
P4T12ICK a7394535c6 updated detections 2023-03-30 10:30:26 +02:00
srv-rr-gh-researchbt c134c49e8c Branch was auto-updated. 2023-03-27 02:05:34 -07:00
P4T12ICK a322f0119a updated srs detections 2023-03-27 11:04:52 +02:00
srv-rr-gh-researchbt bdb8ae4855 Branch was auto-updated. 2023-03-23 02:45:23 -07:00
P4T12ICK 69c9c7083a merged with develop 2023-03-23 10:45:01 +01:00
srv-rr-gh-researchbt 0720332039 Branch was auto-updated. 2023-03-20 01:19:06 -07:00
P4T12ICK db3709827e updated ssa detections 2023-03-20 09:18:29 +01:00
srv-rr-gh-researchbt 1233209de8 Branch was auto-updated. 2023-03-17 05:23:37 -07:00
P4T12ICK 0956ec8da1 add customer_uid to detection report 2023-03-17 13:22:55 +01:00
srv-rr-gh-researchbt ab28004b7e Branch was auto-updated. 2023-03-16 01:45:49 -07:00
P4T12ICK 3641d0cff0 merged with develop 2023-03-16 09:45:09 +01:00
P4T12ICK 153b2d44ae merged with develop 2023-03-16 09:44:35 +01:00
srv-rr-gh-researchbt faf877bd73 Branch was auto-updated. 2023-03-15 12:55:25 -07:00
P4T12ICK 5316ece6e0 improvements ssa detections 2023-03-15 20:54:59 +01:00
srv-rr-gh-researchbt 449643aa0d Branch was auto-updated. 2023-03-15 01:37:29 -07:00
P4T12ICK cf199e49b9 improvements ssa detections 2023-03-15 09:36:56 +01:00
srv-rr-gh-researchbt e4f20a958a Branch was auto-updated. 2023-03-07 02:27:52 -08:00
P4T12ICK 517ab37092 improved sigma converter 2023-03-07 11:27:12 +01:00
Bhavin Patel 07d1fc4a28 Merge branch 'develop' into TR_2410_Domain_Controller_Attacks 2023-03-06 10:19:45 -08:00
srv-rr-gh-researchbt 4b9933816e Branch was auto-updated. 2023-03-06 02:27:58 -08:00
P4T12ICK 684cad0ff9 update sigma ba conversion 2023-03-06 11:26:51 +01:00
pyth0n1c 2c87b92e01 Updated a few more paths for apps 2023-03-03 11:04:43 -08:00
pyth0n1c 12315feb53 Update the baseline in validate_args and test_config_github_actions to use the latest versions of all apps. Also include replay fix for windows ta data ingest via hec and upload 2023-03-03 10:23:03 -08:00
srv-rr-gh-researchbt 33f8071c5c Branch was auto-updated. 2023-03-03 04:28:37 -08:00