2402 Commits

Author SHA1 Message Date
Rod Soto be932e4381 Merge pull request #680 from splunk/zerologon_CVE-2020-1472
Detect Zerologon Attack CVE-2020-1472 Story and detections
v3.0.7
2020-09-18 19:22:02 -04:00
divious1 4f8b5cd6a9 fixed some issues with panels that are empty failing generate 2020-09-18 19:16:28 -04:00
divious1 660135b77a adding 4742 detection 2020-09-18 18:39:50 -04:00
divious1 b78035c976 adding macros 2020-09-18 17:36:46 -04:00
divious1 39f5939bc9 zero logon skeleton 2020-09-18 17:16:25 -04:00
Bhavin Patel 784a0bb691 Merge pull request #632 from splunk/fixedawsstsassumerole
fixedassumedroleaws
2020-09-17 11:11:08 -07:00
dependabot-preview[bot] a156661f6f Merge pull request #672 from splunk/dependabot/pip/identify-1.5.2 2020-09-17 18:08:08 +00:00
dependabot-preview[bot] cc841bbdfb Bump identify from 1.5.0 to 1.5.2
Bumps [identify](https://github.com/chriskuehl/identify) from 1.5.0 to 1.5.2.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.5.0...v1.5.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-17 18:03:05 +00:00
dependabot-preview[bot] 4413638595 Merge pull request #673 from splunk/dependabot/pip/pyrsistent-0.17.3 2020-09-17 18:01:54 +00:00
Bhavin Patel 3d14c802fd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 11:00:31 -07:00
dependabot-preview[bot] 9cf02705dd Bump pyrsistent from 0.17.2 to 0.17.3
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.2 to 0.17.3.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.2...v0.17.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-17 17:56:38 +00:00
dependabot-preview[bot] 8aaa45b698 Merge pull request #669 from splunk/dependabot/pip/taxii2-client-2.2.2 2020-09-17 17:55:15 +00:00
Bhavin Patel ec3e8a9dbd Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:49:56 -07:00
dependabot-preview[bot] 6f62d4da0a Bump taxii2-client from 2.2.1 to 2.2.2
Bumps [taxii2-client](https://github.com/oasis-open/cti-taxii-client) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/oasis-open/cti-taxii-client/releases)
- [Changelog](https://github.com/oasis-open/cti-taxii-client/blob/master/CHANGES.txt)
- [Commits](https://github.com/oasis-open/cti-taxii-client/compare/v2.2.1...v2.2.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-17 17:49:30 +00:00
Bhavin Patel 2c2692eb4f Merge pull request #665 from splunk/gcpoauth
Gcpoauth
2020-09-17 10:48:18 -07:00
Bhavin Patel 997a2714df Merge branch 'develop' into fixedawsstsassumerole 2020-09-17 10:27:10 -07:00
Bhavin Patel 2031fcded2 Merge branch 'develop' into gcpoauth 2020-09-17 10:26:37 -07:00
Bhavin Patel 7c8dd3519b Merge pull request #677 from splunk/copyright_readme
add license to readme
2020-09-16 09:07:27 -07:00
P4T12ICK 7f6b8595b8 add license to readme 2020-09-16 17:59:51 +02:00
Bhavin Patel 02ac11cfd8 Merge branch 'develop' into gcpoauth 2020-09-14 13:24:54 -07:00
bpatel f1ebf3b8d5 formatting error 2020-09-14 13:23:55 -07:00
bpatel 52739bc3ab yml updates 2020-09-14 13:12:51 -07:00
Rod Soto 57ee3f98a5 addedref 2020-09-14 15:56:03 -04:00
Rod Soto 80e2fd37d6 fixedawsforgcp 2020-09-14 15:33:39 -04:00
Bhavin Patel 796617a83c Merge branch 'develop' into fixedawsstsassumerole 2020-09-10 13:26:07 -07:00
Bhavin Patel ef3fee0a81 Update aws_detect_sts_assume_role_abuse.yml
using cloudtrail as input macro
2020-09-10 13:25:39 -07:00
Jose Enrique Hernandez 2fadf948da Merge pull request #630 from splunk/TR-82-risk-tagging
[TR-82] add in logic for risk tagging after synching with ESCU requirements
2020-09-10 12:23:59 -04:00
divious1 8daac1602b Merge branch 'TR-82-risk-tagging' of github.com:splunk/security-content into TR-82-risk-tagging 2020-09-10 12:17:26 -04:00
divious1 9bfc5f9f4e updated spec docs and also added one more example 2020-09-10 12:17:21 -04:00
Jose Enrique Hernandez c76fc34e3f Merge branch 'develop' into TR-82-risk-tagging 2020-09-09 23:33:03 -04:00
dependabot-preview[bot] f76e66d184 Merge pull request #659 from splunk/dependabot/pip/pyrsistent-0.17.2 2020-09-09 09:47:32 +00:00
dependabot-preview[bot] 8d1b7e1395 Bump pyrsistent from 0.17.1 to 0.17.2
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.1 to 0.17.2.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.1...v0.17.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-09 09:42:22 +00:00
dependabot-preview[bot] 9cdc721ad6 Merge pull request #656 from splunk/dependabot/pip/pyrsistent-0.17.1 2020-09-09 07:36:36 +00:00
dependabot-preview[bot] 027b8ce1a1 Bump pyrsistent from 0.17.0 to 0.17.1
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.0 to 0.17.1.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.0...v0.17.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-09 07:31:42 +00:00
dependabot-preview[bot] 83a35dcc65 Merge pull request #655 from splunk/dependabot/pip/pyrsistent-0.17.0 2020-09-08 19:42:40 +00:00
dependabot-preview[bot] c8a4d57195 Bump pyrsistent from 0.16.0 to 0.17.0
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.16.0...v0.17.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-08 19:38:00 +00:00
jzsplunk 19f3778dda Merge branch 'develop' into TR-82-risk-tagging 2020-09-08 09:52:12 -07:00
P4T12ICK 66f74754f6 Merge pull request #646 from splunk/update_test_files
updated test files
2020-09-07 13:27:51 +02:00
P4T12ICK 3e0cfa84cb updated test files 2020-09-07 13:18:03 +02:00
dependabot-preview[bot] 8400f241ca Merge pull request #642 from splunk/dependabot/pip/identify-1.5.0 2020-09-05 19:41:11 +00:00
dependabot-preview[bot] e6d5e4eda7 Bump identify from 1.4.30 to 1.5.0
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.30 to 1.5.0.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.30...v1.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-05 19:34:10 +00:00
dependabot-preview[bot] 8361e993be Merge pull request #641 from splunk/dependabot/pip/attrs-20.2.0 2020-09-05 10:43:31 +00:00
dependabot-preview[bot] 443de49218 Bump attrs from 20.1.0 to 20.2.0
Bumps [attrs](https://github.com/python-attrs/attrs) from 20.1.0 to 20.2.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/20.1.0...20.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-05 10:37:59 +00:00
bpatel 637ec487df risk validation 2020-09-03 11:30:09 -07:00
bpatel 20b1130737 Merge branch 'TR-82-risk-tagging' of https://github.com/splunk/security-content into TR-82-risk-tagging 2020-09-03 11:10:26 -07:00
bpatel 11db020423 risk validation 2020-09-03 11:09:52 -07:00
jzsplunk ee38b1d8cd [TR-82] reset markdown to whats in develop. 2020-09-02 12:07:14 -07:00
bpatel 367dd69bd7 generate testing 2020-09-02 11:07:08 -07:00
jzsplunk 1fac31b330 [TR-82] reset markdown to whats in develop. 2020-09-02 10:44:22 -07:00
jzsplunk 0db46f89dc [TR-82] first cut of validation logic for risk scoring. 2020-09-01 17:55:14 -07:00