2020 Commits

Author SHA1 Message Date
Bhavin Patel 0506f93a4f Merge pull request #520 from splunk/security_hub_response
Security hub response
v3.0.3
2020-06-25 14:08:55 -07:00
Bhavin Patel 836c123569 Update abnormally_high_aws_instances_launched_by_user.yml 2020-06-25 13:57:54 -07:00
rvaldez617 b5e4ebff23 Merge branch 'develop' into security_hub_response 2020-06-25 14:45:01 -06:00
Bhavin Patel 0cf88ffdc2 Merge pull request #524 from splunk/awsgcpk8s
Awsgcpk8s
2020-06-25 13:34:46 -07:00
Bhavin Patel 957b39837f Merge branch 'develop' into awsgcpk8s 2020-06-25 13:26:56 -07:00
Rod Soto e432a4ab50 fixedservaccounatct 2020-06-25 14:52:41 -04:00
Rod Soto 6ea3604481 fixedaddedcondition 2020-06-25 14:36:18 -04:00
Bhavin Patel 4b13ddff94 Merge pull request #521 from splunk/awsgcpk8s
Awsgcpk8s
2020-06-25 09:50:31 -07:00
Bhavin Patel cbcd614236 Merge branch 'develop' into awsgcpk8s 2020-06-25 09:39:42 -07:00
trogdorsey fb3c848285 Merge pull request #522 from splunk/improve_deployment_handling
new deployment configurations
2020-06-25 11:30:45 -05:00
Patrick Bareiss 7a236f3dd0 new deployment configurations 2020-06-25 10:02:36 +02:00
Patrick Bareiss 85f13dd926 new deployment configurations 2020-06-25 09:53:44 +02:00
Bhavin Patel e2fa17ebde Merge branch 'develop' into security_hub_response 2020-06-24 17:22:16 -07:00
bpatel c812c56d87 updates with T1530 2020-06-24 17:21:02 -07:00
bpatel 3c1d9cb416 adding T1098 2020-06-24 17:11:33 -07:00
bpatel f955708bfc adding mitre id 2020-06-24 17:09:27 -07:00
Jose Enrique Hernandez 23e86ec9ad Merge pull request #519 from splunk/dependabot/pip/virtualenv-20.0.25
Bump virtualenv from 20.0.23 to 20.0.25
2020-06-24 16:23:01 -04:00
Jose Enrique Hernandez 08386f30d7 Merge branch 'develop' into dependabot/pip/virtualenv-20.0.25 2020-06-24 15:52:44 -04:00
bpatel 7490418230 fixing errors for validate 2020-06-24 11:06:22 -07:00
Bhavin Patel 06245b9f3d Merge branch 'develop' into awsgcpk8s 2020-06-24 10:42:26 -07:00
Bhavin Patel 300e56f4dc Merge pull request #518 from splunk/CRL-1787_improvements_credential_dumping
update detection for credential dumping
2020-06-24 10:36:32 -07:00
Rod Soto 3c9fd3d376 awskubectl 2020-06-23 22:11:05 -04:00
Rod Soto b6737234fe awsfailureserv 2020-06-23 21:20:37 -04:00
bpatel 047680d82e untested playbook- remove for now 2020-06-23 16:59:30 -07:00
Rod Soto 368c72824d k8sawssensitverole 2020-06-23 19:44:44 -04:00
Jose Enrique Hernandez b734ee908b Merge branch 'develop' into CRL-1787_improvements_credential_dumping 2020-06-23 17:52:22 -04:00
Rod Soto d7bb41378e awssentobj 2020-06-23 15:58:11 -04:00
Rod Soto 8f89d328d6 RBACAWSsearch 2020-06-23 15:32:12 -04:00
Rod Soto 8225616f3d firstgcpawssearch 2020-06-23 14:51:45 -04:00
dependabot-preview[bot] 2f6a4898aa Bump virtualenv from 20.0.23 to 20.0.25
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.23 to 20.0.25.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.23...20.0.25)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-23 18:28:23 +00:00
Bhavin Patel e94bbc285d Merge pull request #517 from splunk/remove_dead_links
we can run this manually lets take it off CI, causes too much noise
2020-06-23 10:46:29 -07:00
divious1 5af4d06843 we can run this manually lets take it off CI, causes too much noise 2020-06-23 12:57:14 -04:00
Patrick Bareiss 8a5017fc3e update detection for credential dumping 2020-06-23 18:57:03 +02:00
bpatel c1ccd745a2 updated search 2020-06-22 13:34:58 -07:00
P4T12ICK a23a6908b6 Merge pull request #513 from splunk/broken_url_update
Broken url update
2020-06-22 09:35:03 +02:00
Patrick Bareiss a15641cdbb Merge branch 'develop' into broken_url_update 2020-06-22 09:29:14 +02:00
dependabot-preview[bot] 120208df4d Merge pull request #514 from splunk/dependabot/pip/identify-1.4.20 2020-06-21 23:30:07 +00:00
dependabot-preview[bot] c869cf1c93 Bump identify from 1.4.19 to 1.4.20
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.19 to 1.4.20.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.19...v1.4.20)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-21 23:23:24 +00:00
Joseph Zadeh 05022cc657 update broken technet url pointer to netsh. 2020-06-20 18:34:03 -07:00
Joseph Zadeh 5112a6ddc3 fix broken attack range link in docs. 2020-06-20 18:32:18 -07:00
dependabot-preview[bot] d2c0389477 Merge pull request #512 from splunk/dependabot/pip/certifi-2020.6.20 2020-06-20 16:29:13 +00:00
dependabot-preview[bot] abfcaf57c1 Bump certifi from 2020.4.5.2 to 2020.6.20
Bumps [certifi](https://github.com/certifi/python-certifi) from 2020.4.5.2 to 2020.6.20.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](https://github.com/certifi/python-certifi/compare/2020.04.05.2...2020.06.20)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-20 16:22:36 +00:00
research bot 3ea3cee74f updating docs and package bits [ci skip] 2020-06-18 19:55:08 +00:00
rvaldez617 605d0c414d Merge pull request #511 from splunk/updating_readme_fixes
clean up of docs
v3.0.2
2020-06-18 13:38:27 -06:00
Jose Enrique Hernandez 14f99345f3 Merge branch 'develop' into updating_readme_fixes 2020-06-18 13:13:52 -04:00
Jose Enrique Hernandez b4664f0f17 Merge pull request #476 from splunk/aws_cross_account_activity_fix
minor tweak
2020-06-18 13:13:30 -04:00
divious1 3a96de67c0 clean up of docs 2020-06-17 21:43:18 -04:00
rvaldez617 0b1adabe8f Merge branch 'develop' into aws_cross_account_activity_fix 2020-06-17 16:16:54 -06:00
Bhavin Patel 8c4fb32882 Merge pull request #505 from splunk/CRL-1771-update-story-windows-service-abuse
testing and update of story Windows Service Abuse
2020-06-17 14:48:28 -07:00
Bhavin Patel 82c209b539 Merge branch 'develop' into CRL-1771-update-story-windows-service-abuse 2020-06-17 14:25:20 -07:00