admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,165 Commits 697 Branches 195 Tags
v3.0.4
Commit Graph

2165 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel a079a093b8 Merge pull request #563 from splunk/yet_another_map_bug 
forgot to get rid of tdqm
v3.0.4 		2020-07-15 13:59:40 -07:00
divious1 440fcfb3ae fixed print msg 2020-07-15 16:53:49 -04:00
divious1 217aabfe72 forgot to get rid of tdqm 2020-07-15 16:46:37 -04:00
Bhavin Patel 8ef987da5d Merge pull request #562 from splunk/mitre_map_bug 
minor arg bug
 2020-07-15 13:26:14 -07:00
divious1 a250cceed2 minor arg bug 2020-07-15 16:19:40 -04:00
dependabot-preview[bot] 9b08ad29c1 Merge pull request #560 from splunk/dependabot/pip/virtualenv-20.0.27 2020-07-15 18:56:17 +00:00
Jose Enrique Hernandez 6cd1b26d36 Merge branch 'develop' into dependabot/pip/virtualenv-20.0.27 2020-07-15 14:51:44 -04:00
Jose Enrique Hernandez 9c23451998 Merge pull request #561 from splunk/TR-49 
updating spl and FP
 2020-07-15 14:51:21 -04:00
Bhavin Patel c1747aaa21 Merge branch 'develop' into TR-49 2020-07-15 10:29:46 -07:00
Bhavin Patel a1a2ce7e0c Merge pull request #559 from splunk/update_README 
overhauled or readme
 2020-07-15 10:26:24 -07:00
dependabot-preview[bot] d7a324cb01 Bump virtualenv from 20.0.26 to 20.0.27 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.26 to 20.0.27.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/20.0.27/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.26...20.0.27)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-15 17:22:31 +00:00
Bhavin Patel d5e560c4d6 Merge branch 'develop' into update_README 2020-07-15 10:15:33 -07:00
Bhavin Patel b034e224c4 Merge pull request #547 from splunk/mitre_maps 
Adds a MITRE ATTACK Nav Map of all of our detections
 2020-07-15 10:15:09 -07:00
Bhavin Patel 52f8c45892 Merge branch 'develop' into update_README 2020-07-15 10:12:29 -07:00
bpatel 73507de98c updating spl and FP 2020-07-14 17:50:43 -07:00
divious1 170660e742 fixing space 2020-07-14 16:13:28 -04:00
divious1 c2a89d1dd7 adding mitre map to readme 2020-07-14 16:05:26 -04:00
Bhavin Patel d23064ec18 Merge pull request #557 from splunk/gcpk8plussearches 
Gcpk8plussearches
 2020-07-14 11:32:30 -07:00
divious1 48ee5353bd overhauled or readme 2020-07-14 00:11:11 -04:00
bpatel ea717a66fc adding ffilter, sigh 2020-07-13 17:05:30 -07:00
Bhavin Patel 68ee505590 Merge branch 'develop' into gcpk8plussearches 2020-07-13 16:45:48 -07:00
dependabot-preview[bot] 7475e16264 Merge pull request #558 from splunk/dependabot/pip/typing-3.7.4.3 2020-07-13 23:37:01 +00:00
dependabot-preview[bot] 2ee93f0075 Bump typing from 3.7.4.1 to 3.7.4.3 
Bumps [typing](https://github.com/python/typing) from 3.7.4.1 to 3.7.4.3.
- [Release notes](https://github.com/python/typing/releases)
- [Commits](https://github.com/python/typing/compare/3.7.4.1...3.7.4.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-13 23:32:08 +00:00
bpatel 3b1e639db2 rename file 2020-07-13 16:30:28 -07:00
Bhavin Patel da9ecd71fa Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-07-13 16:12:47 -07:00
Bhavin Patel a8c021a41e Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml 
typos
 2020-07-13 16:06:17 -07:00
Rod Soto 71032608db Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches 2020-07-13 19:03:08 -04:00
Rod Soto 6dbc996d9c fixbackticks 2020-07-13 19:01:57 -04:00
Bhavin Patel 62ab2b89e9 Merge branch 'develop' into gcpk8plussearches 2020-07-13 15:47:35 -07:00
Rod Soto 57fbe00de0 fixednamesmacros 2020-07-13 18:45:46 -04:00
Rod Soto 7fe2b89386 fixedsrctypewithmacro 2020-07-13 18:20:38 -04:00
Rod Soto b504edb561 fixedsourcetypeissue 2020-07-13 18:19:06 -04:00
Bhavin Patel 2c27c80c8a Merge pull request #552 from splunk/netsh-fix 
Netsh fix
 2020-07-13 09:59:29 -07:00
Bhavin Patel 186196684d Update processes_launching_netsh.yml 
updated the screen, test screenshot in the comments
 2020-07-13 09:53:43 -07:00
Rod Soto f0fe477413 k8sgcpkubectlcallssarch 2020-07-11 23:38:08 -04:00
Rod Soto c32b00dc7b k8sgcpservaccforbiddenfailure 2020-07-11 22:50:41 -04:00
Rod Soto 4895d18619 k8sgcpsensitiverole 2020-07-11 21:26:00 -04:00
Rod Soto 4935f2a095 k8sgcpsenobjaccess 2020-07-11 20:55:48 -04:00
Rod Soto ce8d85ad06 gcpRBACdetection 2020-07-11 19:40:46 -04:00
Jose Enrique Hernandez 046d8ab015 Merge branch 'develop' into mitre_maps 2020-07-10 23:18:59 -04:00
divious1 e9cf649460 fixing merge error 2020-07-10 23:10:02 -04:00
jkuepker 6f54e15d91 Changed WHERE clause to fix broken search and renamed values(Processes.process) to Processes.process to match other field names for readability. 2020-07-10 22:11:09 -04:00
Rod Soto 4d9f634adf k8sgcpmactivesabypod 2020-07-10 19:39:21 -04:00
dependabot-preview[bot] 074955617d Merge pull request #549 from splunk/dependabot/pip/identify-1.4.23 2020-07-10 18:59:36 +00:00
dependabot-preview[bot] 0bb83f89ec Bump identify from 1.4.21 to 1.4.23 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.21 to 1.4.23.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.21...v1.4.23)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-10 18:53:44 +00:00
Rod Soto 3f79168731 addedgcpscansearch 2020-07-10 08:35:59 -04:00
jzsplunk 3a41964a07 Merge pull request #543 from splunk/new_testing_file 
new pass condition handling
 2020-07-10 01:06:52 -07:00
jzsplunk 5cc42f10de Merge branch 'develop' into new_testing_file 2020-07-10 00:57:35 -07:00
Jose Enrique Hernandez 1db067750d Merge pull request #546 from splunk/T1526detections 
addedmitretechnique
 2020-07-10 02:02:35 -04:00
divious1 5fd3f63947 fixed but with actors 2020-07-10 01:35:55 -04:00