9021 Commits

Author SHA1 Message Date
Bhavin Patel 232895de96 Merge pull request #1566 from splunk/pretty_yaml_error
fix for type
v3.27.0
2021-08-18 09:24:04 -07:00
patel-bhavin 19fad3da58 fix for type 2021-08-18 09:13:13 -07:00
P4T12ICK ab3915f56d Merge pull request #1565 from splunk/aws_ecr_detections
AWS ECR detections
2021-08-18 15:38:43 +02:00
P4T12ICK 3270cdc014 aws ecr dataset 2021-08-18 14:53:28 +02:00
P4T12ICK 2075f8a9fd AWS ECR detections 2021-08-18 14:07:45 +02:00
P4T12ICK 1cae849652 AWS ECR detections 2021-08-18 13:04:30 +02:00
P4T12ICK 51967d9f89 AWS ECR detections 2021-08-18 13:00:09 +02:00
P4T12ICK c10d11aa94 AWS ECR detections 2021-08-18 12:57:22 +02:00
P4T12ICK 1f6d8fd2f2 Merge pull request #1564 from splunk/update_detection_testing
Automated Detection Testing PR update_detection_testing
2021-08-17 14:47:48 +02:00
root 769114303d Added detection testing service results inAttempted Credential Dump From Registry via Reg exe 2021-08-17 11:42:16 +00:00
P4T12ICK eb08775564 Merge branch 'develop' into update_detection_testing 2021-08-17 13:14:51 +02:00
root 35581ae80d Added detection testing service results inAttempted Credential Dump From Registry via Reg exe 2021-08-17 11:07:18 +00:00
P4T12ICK f3e723e1d0 update detection testing 2021-08-17 11:03:00 +02:00
Bhavin Patel 08ed88bd88 Merge pull request #1530 from splunk/analytic_types
add analytic types to detections
2021-08-16 16:06:14 -07:00
patel-bhavin e1ff3993cd run generate again 2021-08-16 15:57:44 -07:00
patel-bhavin 8ae3aa8ba9 conflicts and tests 2021-08-16 15:34:57 -07:00
Bhavin Patel a659d56501 Merge pull request #1554 from splunk/misko_scores
Misko: Adding RBA fields to SSA detections
2021-08-16 12:02:03 -07:00
github-actions[bot] acd9ec2006 Branch was auto-updated. 2021-08-16 18:36:24 +00:00
Bhavin Patel 4462c6b68c Merge pull request #1558 from splunk/renaming_to_match_ssa_names
Rename detect_phishing_content___ssa.yml to ssa___detect_phishing_con…
2021-08-16 11:36:10 -07:00
Bhavin Patel 5e20436911 Merge branch 'develop' into misko_scores 2021-08-16 11:24:20 -07:00
Bhavin Patel 209e9f300c Merge branch 'develop' into renaming_to_match_ssa_names 2021-08-16 11:20:12 -07:00
research bot a2bb49f089 updating docs and package bits [ci skip] 2021-08-12 18:43:04 +00:00
github-actions[bot] d8cb7677e0 Branch was auto-updated. 2021-08-12 18:15:39 +00:00
github-actions[bot] 1e4fe37d63 Branch was auto-updated. 2021-08-12 18:15:38 +00:00
pyth0n1c 2df1975e5f Merge pull request #1559 from splunk/appinspect_failures
fixes
v3.26.0
2021-08-12 11:15:21 -07:00
patel-bhavin cd4df7567a fixes 2021-08-12 09:47:40 -07:00
Jose Enrique Hernandez d1d2aa92dc Rename detect_phishing_content___ssa.yml to ssa___detect_phishing_content.yml 2021-08-12 12:26:04 -04:00
github-actions[bot] 74e20eb919 Branch was auto-updated. 2021-08-12 08:59:58 +00:00
tccontre c8d21347b1 Merge pull request #1549 from splunk/icedid
icedid
2021-08-12 10:59:31 +02:00
tccontre dcfab01e14 icedid 2021-08-12 09:25:43 +02:00
github-actions[bot] f078e35f81 Branch was auto-updated. 2021-08-11 19:35:37 +00:00
github-actions[bot] e0507705c3 Branch was auto-updated. 2021-08-11 19:35:31 +00:00
github-actions[bot] 7fef077ac9 Branch was auto-updated. 2021-08-11 19:35:30 +00:00
Michael Haag c84a3b3b25 Merge pull request #1555 from splunk/blackbolt_1
duplicate
2021-08-11 13:35:12 -06:00
patel-bhavin 9f71b88e6c duplicate 2021-08-11 11:24:14 -07:00
miskoSplunk 055ed9ca2d Merge branch 'develop' into misko_scores 2021-08-10 15:14:52 -07:00
Stanislav Miskovic 971315f40e Fixing score rounding for two detections 2021-08-10 14:57:40 -07:00
Stanislav Miskovic 64b1a1f926 Correcting non-integer scores for two detections 2021-08-10 14:53:31 -07:00
P4T12ICK 6607ca9508 Merge branch 'develop' into analytic_types 2021-08-10 11:02:18 +02:00
Stanislav Miskovic 833ffcc2e7 Misko: Adding RBA fields to SSA detections - message, risk_score, impact, confidence, context, observable, etc. 2021-08-09 17:55:28 -07:00
github-actions[bot] 7c85b0dfd8 Branch was auto-updated. 2021-08-09 18:42:36 +00:00
Jose Enrique Hernandez da6a9c2d0f Merge pull request #1550 from splunk/ssa_TR-770_add_event_id
TR-770 added event_id to ssa detections
2021-08-09 11:42:14 -07:00
root 4e3dc7fe9c Added detection testing service results inSqlite Module In Temp Folder 2021-08-05 15:43:52 +00:00
tccontre 9a79673dbd Merge branch 'icedid' of github.com:splunk/security_content into icedid 2021-08-05 17:22:51 +02:00
tccontre 5e8393c3b7 icedid 2021-08-05 17:22:35 +02:00
root 665a99e197 Added detection testing service results inSuspicious IcedID Regsvr32 Cmdline 2021-08-05 14:54:43 +00:00
Detection Testing Service 765f7a184f Merge branch 'icedid' of https://github.com/splunk/security_content into icedid 2021-08-05 14:26:04 +00:00
root 442cbd9787 Added detection testing service results inDrop IcedID License dat 2021-08-05 14:26:02 +00:00
Detection Testing Service ba91dfc63f Merge branch 'icedid' of https://github.com/splunk/security_content into icedid 2021-08-05 14:25:26 +00:00
root a79f8718eb Added detection testing service results inIcedID Exfiltrated Archived File Creation 2021-08-05 14:25:26 +00:00