124fd0d465
Fix search string to be more broad
2022-09-15 11:22:05 -07:00
50a2d18163
fixing missing test
2022-09-14 19:20:57 -04:00
e027f13add
removing risk objects from correlation searches on savedsearchesconf to avoid circular risk loop
2022-09-14 18:33:15 -04:00
940598b6c2
pass CI testing
2022-09-13 16:52:39 -04:00
64908593d4
adds RBA to correlation rule titles
2022-09-13 13:11:51 -04:00
c1be892bd1
Merge branch 'develop' into eliminate_duplicate_python_requirements_files
2022-08-26 12:09:54 -07:00
157a434a53
Merge pull request #2335 from yaleman/patch-1
...
Grammar correction in documentation template
2022-08-23 15:02:11 -05:00
4ac73c8614
Branch was auto-updated.
2022-08-22 14:51:20 -07:00
82f771dc08
Branch was auto-updated.
2022-08-22 14:51:12 -07:00
b0c3232991
adding microsoft cloud services ta
2022-08-22 17:38:49 -04:00
729574b236
grammar correction in template
2022-08-18 13:32:34 +10:00
799bdbae5b
we do not use it
2022-08-16 15:45:06 -04:00
b91a7b5e96
Branch was auto-updated.
2022-08-16 09:07:10 -07:00
bc331db06c
Print error instead of bailing out on enrichment failure
2022-08-16 11:04:24 -05:00
00ecb2ce7f
Branch was auto-updated.
2022-08-12 13:35:59 -07:00
4f6c1f20d3
Fixed template files that were modified in error
2022-08-12 13:15:41 -07:00
a17b44daf7
Remove lookups from copied ESCU directory.
2022-08-12 12:09:17 -07:00
f632813720
Changes to a number of files to make them suitable for use in an app by a different name.
2022-08-11 16:54:05 -07:00
f8e3fb6d4a
code to update templates files that must change for an app with different name to work
2022-08-11 15:14:17 -07:00
dbce915e4d
Branch was auto-updated.
2022-08-11 12:16:18 -07:00
2c0888a090
Merge branch 'develop' into Clean_and_Deploy
2022-08-11 11:12:49 -07:00
97bc95f773
bug fix
2022-08-04 14:55:21 +02:00
1ee1b76968
Branch was auto-updated.
2022-08-04 00:42:05 -07:00
0fb17dd617
bug fix
2022-08-04 09:28:56 +02:00
939493337d
adding research site links
2022-08-03 17:34:32 -04:00
87a8bc0442
Merged develop into this branch and resolved merge conflicts.
2022-08-03 06:47:22 -07:00
9dac698c46
solve merge conflicts
2022-08-01 11:39:02 +02:00
bcb943d150
fix tests
2022-08-01 11:31:23 +02:00
02930ad974
Change from ResultsReader to
...
JSONResultsReader since
ResultsReader was deprecated
in the latest Splunk SDK.
2022-07-21 12:38:15 -07:00
51edd7950a
Condensed multiple requirements.txt
...
files into single requirements.txt in
the root of security_content.
Removed explicit calls to python3
in CI/CD workflows and inside of
the docker_detection_testing tool.
These are not required and in fact
should not be done since python
interpreters started by the
detection tester inherit the
venv the parent was run under.
2022-07-20 15:53:20 -07:00
b21d754be3
attack_data_helper
2022-07-20 10:54:59 +02:00
d5d7725afe
JSON file contained the words None, which is correctly for Python code, instead of null which is valid JSON
2022-07-19 13:47:05 -07:00
dc95a7fbfb
Branch was auto-updated.
2022-07-19 13:09:36 -07:00
93cf4d1d3f
Merge branch 'develop' into 20220715_app_baseline
2022-07-19 12:57:52 -07:00
72c1153383
Branch was auto-updated.
2022-07-19 12:40:38 -07:00
236f0ce71f
Branch was auto-updated.
2022-07-19 12:36:12 -07:00
bf4c565f79
Branch was auto-updated.
2022-07-19 12:36:08 -07:00
d4779f44ad
Branch was auto-updated.
2022-07-19 11:16:25 -07:00
03ccafe319
Branch was auto-updated.
2022-07-19 11:16:21 -07:00
d04c5e49f5
Branch was auto-updated.
2022-07-19 11:16:17 -07:00
ad975d46c2
Updating a few more links in test files from Fireeye
...
to Mandiant to match the source files.
2022-07-19 10:14:21 -07:00
7554992aa0
Updates to reduce duplication in the check_references code. Other updates to fix a number of issues introduced which cause Pytests to fail
2022-07-18 15:58:12 -07:00
b71e570891
Update cobalt_strike_named_pipes.yml
...
Updated to Hunting
2022-07-15 10:16:14 -06:00
9a3302512a
Update Office 365 AddOn to 4.0
2022-07-15 09:13:10 -07:00
ea70270940
Update CIM and MS Sysmon as well
2022-07-15 09:04:21 -07:00
e993ff1dce
Updating baseline to latest apps as of
...
20220715. Apps have already been
uploaded to S3.
2022-07-15 08:48:32 -07:00
1cdfb1916f
Fixed paths in content generation to use the input path instead of hardcoded relative paths.
2022-07-15 08:02:17 -07:00
97ad9beaa2
Fixed the pathing issue for reporting.
2022-07-15 06:44:25 -07:00
20ab9f27ce
Moved id collision checking into
...
the Utils module since it will
be used by the Factory and the
BA Factory. Updated a duplicate
UUID to mitigate the collision
issue raised on GitHub.
2022-07-12 15:06:35 -07:00
9b21029bea
Added logic for checking to
...
see if there are duplicate ids
for any/all kinds of content that
have an ID associated with it.
2022-07-12 14:26:34 -07:00
pyth0n1c