673 Commits

Author	SHA1	Message	Date
Bhavin Patel	dcab2f1867	update ocsf	2023-06-13 11:06:53 -07:00
srv-rr-gh-researchbt	9ae2d3de5f	Branch was auto-updated.	2023-06-12 11:29:19 -07:00
P4T12ICK	d06ea2ac3d	mark as experimental	2023-06-02 19:05:41 +02:00
P4T12ICK	3a7fe5db25	ASL Detections	2023-06-02 18:28:03 +02:00
P4T12ICK	17b2ab2a2f	Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections	2023-05-30 16:26:10 +02:00
P4T12ICK	5899d5692d	bug fix	2023-05-30 16:25:14 +02:00
srv-rr-gh-researchbt	c02a8e613c	Branch was auto-updated.	2023-05-25 17:58:28 -07:00
srv-rr-gh-researchbt	f50de23f9e	Branch was auto-updated.	2023-05-25 17:58:15 -07:00
P4T12ICK	2d790ca2d7	Add new asl detections	2023-05-23 15:24:07 +02:00
patel-bhavin	30ad4d6eab	only kvstore conversion	2023-05-22 17:35:13 -07:00
P4T12ICK	a5470fc031	New migrated asl detection	2023-05-22 17:27:43 +02:00
P4T12ICK	166affa597	ASL detections	2023-05-22 15:15:50 +02:00
patel-bhavin	b11c7f7a26	referenfce and test update	2023-05-17 15:05:01 -07:00
srv-rr-gh-researchbt	1c88fe306f	Branch was auto-updated.	2023-05-15 13:17:16 -07:00
patel-bhavin	5f1c38800a	search text updates	2023-05-15 12:52:17 -07:00
patel-bhavin	a885bbb300	filter for aws	2023-05-04 17:16:57 -07:00
patel-bhavin	ee2c44aba9	aws correlation	2023-05-04 17:10:36 -07:00
patel-bhavin	a442e23cf8	updating risk	2023-05-04 16:21:32 -07:00
patel-bhavin	e682f813e6	updates	2023-05-04 15:46:04 -07:00
patel-bhavin	7127cfebe2	validate fixes	2023-05-01 18:19:31 -07:00
patel-bhavin	c108c62648	new s3 verrsioning	2023-05-01 18:15:01 -07:00
patel-bhavin	c0ee1f8f2a	updates and new searches	2023-04-28 15:16:46 -07:00
patel-bhavin	18d0ba580d	bucket replication	2023-04-28 15:00:22 -07:00
mvelazco	42d6118072	updating dataset url	2023-04-28 16:28:06 -04:00
mvelazco	d7c5f65092	Update azure_ad_privileged_role_assigned_to_service_principal.yml	2023-04-28 15:59:42 -04:00
mvelazco	2b68fab81c	adding new detection	2023-04-28 14:48:34 -04:00
patel-bhavin	09c7a3a20b	new detection	2023-04-27 14:33:58 -07:00
mvelazco	9470ecba23	updated detection descriptions	2023-04-27 13:55:17 -04:00
mvelazco	89e3612fac	adding new detection	2023-04-26 18:21:33 -04:00
mvelazco	a6ed51c1a8	adding new detection	2023-04-26 18:03:46 -04:00
mvelazco	7e4a51ec5e	updating descriptions	2023-04-25 17:39:10 -04:00
mvelazco	39a1645e69	adding new detection	2023-04-25 17:04:46 -04:00
mvelazco	1841df5e4f	adding detection	2023-04-25 16:11:37 -04:00
mvelazco	50a09ee19f	updating detection	2023-04-25 15:07:55 -04:00
mvelazco	b5c1e23801	updating detection	2023-04-25 14:55:48 -04:00
mvelazco	8a71193989	updating detection	2023-04-25 14:23:38 -04:00
patel-bhavin	41be995a53	AWS exfil via JOBCREATED	2023-04-24 18:14:34 -07:00
srv-rr-gh-researchbt	99f83c40f4	Branch was auto-updated.	2023-04-18 14:27:44 -07:00
Bhavin Patel	64f4af2b09	Update aws_multiple_users_failing_to_authenticate_from_ip.yml	2023-04-18 14:15:23 -07:00
Bhavin Patel	d1d72506cb	Update aws_multiple_users_failing_to_authenticate_from_ip.yml	2023-04-18 14:14:15 -07:00
patel-bhavin	159f22e9af	manual test	2023-04-18 13:00:52 -07:00
srv-rr-gh-researchbt	5ec0834875	Branch was auto-updated.	2023-04-18 11:46:50 -07:00
patel-bhavin	a9c33e7702	fixing observables	2023-04-18 09:53:16 -07:00
patel-bhavin	925da0d998	exfiltrate everything	2023-04-14 10:30:25 -07:00
patel-bhavin	5bc647e6ce	merge with develop	2023-04-14 10:20:27 -07:00
patel-bhavin	95da1c3b3f	new anomaly detection	2023-04-10 19:16:09 -07:00
patel-bhavin	c453ab592d	new_datasync_detection	2023-04-10 16:10:09 -07:00
patel-bhavin	6126674761	updated all yml, remove kc,nist,cis, updaated with 3.64.0 new content	2023-04-04 17:15:38 -05:00
patel-bhavin	efab71809b	making experimental to test and adding manual tag	2023-04-03 16:03:11 -05:00
patel-bhavin	f535458728	detection testing fixes	2023-04-03 15:58:04 -05:00