86 Commits

Author	SHA1	Message	Date
bpatel	f354a10c34	investigate KV store update:	2019-10-03 11:07:26 -07:00
bpatel	3876690db3	investigate KV store update:	2019-10-03 11:06:15 -07:00
divious1	a07fa1ce88	fixed bug with story parsing and added error condition if no results are returned	2019-10-03 13:40:35 -04:00
bpatel	1cabe30f28	bug fix in run detect function	2019-10-02 17:34:00 -07:00
bpatel	98e018be0a	kvstore in investigate	2019-10-02 17:19:58 -07:00
divious1	7d0ddc452c	cleaned up some functions	2019-10-02 18:25:55 -04:00
bpatel	5d0904df7a	investigation update	2019-10-01 21:40:14 -07:00
bpatel	a6add43af8	updating object	2019-10-01 15:11:29 -07:00
divious1	d73299f47e	Merge branch 'run_detections' of github.com:splunk/security-content into run_detections	2019-09-26 16:56:27 -07:00
divious1	308e6e57c4	investigate is working just missing parsing results	2019-09-26 16:55:32 -07:00
bpatel	3418ef903f	cleaning up	2019-09-26 16:49:06 -07:00
bpatel	834dda11c5	bug fixes	2019-09-26 16:32:29 -07:00
divious1	348ef43cbf	fixing a bug with detect	2019-09-26 13:37:58 -07:00
bpatel	7651463417	Merge branch 'run_detections' of https://github.com/splunk/security-content into run_detections	2019-09-26 13:19:07 -07:00
bpatel	83e36dd298	investigate generations	2019-09-26 13:18:09 -07:00
divious1	62b90633b7	moved complex logic into functions	2019-09-26 11:59:05 -07:00
divious1	4d51948eb1	updated detections to a new object type	2019-09-25 17:58:22 -07:00
bpatel	7ea62a91ab	remoove risk params and use entities	2019-09-19 11:03:25 -07:00
bpatel	e1310d2192	adding ss.conf spec and example	2019-09-12 16:27:11 -07:00
bpatel	a04729b663	changed process to process name	2019-09-12 09:55:57 -07:00
bpatel	64a8d8990d	static method error	2019-09-11 18:37:19 -07:00
bpatel	6061aec7f8	adding detection results to KV store	2019-09-11 17:05:57 -07:00
bpatel	4d221f5d18	added entities field and updated spec files	2019-09-04 16:36:08 -07:00
bpatel	c1208b0fb2	adding investigate.py	2019-09-04 16:16:10 -07:00
bpatel	4fdf20ce0d	Merge branch 'develop' into run_detections	2019-09-04 10:32:54 -07:00
research bot	6a2216b974	updating docs and package bits [ci skip]	2019-08-27 22:45:42 +00:00
divious1	d8975a5f70	CRL-1598 removed incorrect stanza	2019-08-15 10:14:36 -04:00
bpatel	5e72c3b94d	errrors in file	2019-08-12 15:27:27 -07:00
bpatel	402581dacd	Merge branch 'develop' into run_detections	2019-08-06 13:48:32 -07:00
research bot	bf7ed96204	updating docs and package bits [ci skip]	2019-07-29 20:58:00 +00:00
bpatel	2a676649e4	updates with investigations blog	2019-07-09 18:27:16 -07:00
research bot	ba93592517	updating docs and package bits [ci skip]	2019-06-20 17:04:06 +00:00
bpatel	4be6a8b12d	checks for no results	2019-06-19 16:34:21 -07:00
bpatel	2bb6b0db8e	removing comments	2019-06-18 19:55:17 -07:00
bpatel	f44311a62b	adding time mods to the code	2019-06-18 19:23:12 -07:00
research bot	d666b6a941	updating package files [ci skip]	2019-06-18 19:48:21 +00:00
bpatel	510fae58d2	update version	2019-06-18 12:37:45 -07:00
bpatel	c02e6b86b3	updating manifest in the app	2019-06-18 12:35:01 -07:00
bpatel	0bef6ad501	commands.conf updates	2019-06-17 20:32:57 -07:00
bpatel	79f4f50e5d	updates to running detections	2019-06-17 20:23:20 -07:00
research bot	445f1335de	updating package files [ci skip]	2019-06-17 22:06:59 +00:00
divious1	5cc3a7904a	added back use_case_lib	2019-06-17 17:29:05 -04:00
bpatel	37d8e4bd53	removing the use_case_library.conf file from package	2019-06-17 13:38:21 -07:00
bpatel	13b65c086f	missing js folder	2019-06-17 13:09:27 -07:00
bpatel	c987702e0c	updated code	2019-06-17 11:44:49 -07:00
divious1	7ce7ed273e	I think this fixes it	2019-06-17 14:40:56 -04:00
bpatel	661dd050a1	time udpates to dashboard	2019-06-11 15:39:33 -07:00
bpatel	f8a4c7aab5	flake8	2019-06-07 13:49:49 -07:00
research bot	384a6ed03f	updating package files [ci skip]	2019-06-06 21:37:15 +00:00
divious1	a44ac648f0	added a basic readme for us base on splunkbase	2019-06-06 13:07:17 -04:00