148 Commits

Author	SHA1	Message	Date
Bhavin Patel	bc1871025a	Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml	2023-06-12 14:41:43 -07:00
Bhavin Patel	4293a508af	Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml ... Triggering CI	2023-06-12 14:16:38 -07:00
Namratha Sreekanta	05885bc6f2	changing the search	2023-06-08 14:00:28 -07:00
Namratha Sreekanta	bc20c9c2c0	addressing review feedback	2023-06-08 12:43:07 -07:00
patel-bhavin	2f947af695	fix up yaml for validation	2023-05-23 14:07:22 -07:00
Namratha Sreekanta	d828cd5d6b	adding json file	2023-05-19 13:42:07 -07:00
Namratha Sreekanta	0ef5ed01d5	Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection	2023-05-19 13:30:38 -07:00
Namratha Sreekanta	e4a676f792	changing spl and notebook for feature transformations	2023-05-19 13:24:00 -07:00
srv-rr-gh-researchbt	1007eb9a16	Branch was auto-updated.	2023-05-03 09:41:02 -07:00
Namratha Sreekanta	6139b72dac	initial commit for dns data exfil	2023-05-02 14:25:07 -07:00
srv-rr-gh-researchbt	c79980cce1	Branch was auto-updated.	2023-05-01 15:27:31 -07:00
patel-bhavin	6a5b6acea5	carry over	2023-05-01 12:07:20 -07:00
P4T12ICK	97a1ec3bd5	bug fix validation	2023-04-28 13:53:52 +02:00
patel-bhavin	a9c33e7702	fixing observables	2023-04-18 09:53:16 -07:00
patel-bhavin	dc44d23e81	issue 2568 fix	2023-04-17 17:19:34 -07:00
pyth0n1c	67d09a1c52	Fixing some syntactic errors with a number of detections.	2023-04-12 10:09:43 -07:00
P4T12ICK	153b2d44ae	merged with develop	2023-03-16 09:44:35 +01:00
P4T12ICK	2861d04434	merged with ba ocsf work	2023-03-03 13:28:14 +01:00
P4T12ICK	78909f6429	merged with develop	2023-03-03 12:40:16 +01:00
P4T12ICK	d115bfd4e0	converted ssa detections to ocsf	2023-02-28 12:00:16 +01:00
P4T12ICK	ffa1210a00	merged with develop	2023-02-02 09:15:59 +01:00
P4T12ICK	a23b2470fe	Converted detections v3 to v4	2023-01-20 11:12:47 +01:00
P4T12ICK	fd0c8b349f	updated tags	2023-01-09 09:33:30 +01:00
P4T12ICK	5ae53c9368	Migrated all detections to v4	2023-01-03 13:42:10 +01:00
Michael Haag	b7607dae86	fixes	2022-11-17 10:07:00 -07:00
Michael Haag	99af3c9014	ngrok updates	2022-11-16 13:02:52 -07:00
Michael Haag	fcb888cb27	Reverse Network Proxy	2022-11-16 12:39:48 -07:00
pyth0n1c	d40ca09d61	Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface.	2022-06-23 14:19:17 -07:00
Jose Enrique Hernandez	0288c10f70	Update splunk_identified_ssl_tls_certificates.yml	2022-06-14 08:18:53 -04:00
Lou Stella	a0967fe429	Workbook how_to_implement & references	2022-06-13 16:49:49 -05:00
Michael Haag	66d7814fed	Update splunk_identified_ssl_tls_certificates.yml	2022-06-13 15:43:18 -06:00
Michael Haag	46cd276adf	Update splunk_identified_ssl_tls_certificates.yml	2022-06-13 15:40:49 -06:00
d1vious	97d51b71bf	adding cves	2022-06-01 17:03:00 -04:00
mhaag-spl	6ddebf3a2d	ssl tls ver	2022-05-26 12:28:21 -06:00
pyth0n1c	2557d21335	Branch was auto-updated.	2022-05-16 14:25:41 -04:00
mhaag-spl	77abe77035	F5 BIG-IP	2022-05-10 07:20:46 -06:00
pyth0n1c	578e6bb088	Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.	2022-05-02 17:12:50 -07:00
d1vious	fdcd471d5d	moving to experimental	2022-04-14 16:37:54 -04:00
P4T12ICK	5dd13ea167	fix broken detections	2022-03-14 15:51:05 +01:00
P4T12ICK	e6c8254ede	Added automaticc generation of finding report	2022-03-14 12:12:48 +01:00
P4T12ICK	6f0ee68913	Refactored security content	2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez	d78bb53baa	Revert "Refactored security content"	2022-03-04 15:13:04 -05:00
P4T12ICK	886da3c92e	merged with develop	2022-03-04 14:35:50 +01:00
patel-bhavin	a67a8a4da6	Merge branch 'develop' into refactored_security_content	2022-03-03 12:51:11 -08:00
research bot	67ecd29d53	updating docs and package bits [ci skip]	2022-03-03 18:22:29 +00:00
P4T12ICK	68543a8dc1	merged with develop	2022-03-03 13:11:56 +01:00
d1vious	47dbc6b946	using a different field	2022-02-26 13:39:28 -05:00
d1vious	0d49d7fc55	Merge branch 'CityOfLog4Shells' of github.com:splunk/security_content into CityOfLog4Shells	2022-02-24 23:05:48 -05:00
d1vious	6a50f02ff4	working detection	2022-02-24 23:05:31 -05:00
pyth0n1c	df824e79ac	Branch was auto-updated.	2022-02-18 15:32:15 -08:00