17002 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 3b730ffb3c Merge pull request #2327 from splunk/dontfailonenrichment
Print error instead of bailing out on enrichment failure
v3.47.0
2022-08-16 12:06:46 -04:00
Lou Stella bc331db06c Print error instead of bailing out on enrichment failure 2022-08-16 11:04:24 -05:00
Jose Enrique Hernandez 8f541978cc Merge pull request #2326 from splunk/splunk_vulz_aug_16th
adding new detections
2022-08-16 11:40:35 -04:00
d1vious b7e1a5fe94 adding new detections 2022-08-16 11:30:24 -04:00
Bhavin Patel e4b610a837 Merge pull request #2316 from splunk/Clean_and_Deploy
Clean and deploy
2022-08-12 13:35:34 -07:00
pyth0n1c 4f6c1f20d3 Fixed template files that were modified in error 2022-08-12 13:15:41 -07:00
pyth0n1c 4a0424c1ee Branch was auto-updated. 2022-08-12 13:01:02 -07:00
Bhavin Patel 149c19a617 Merge pull request #2318 from splunk/TR_2329_AWS_Credential_Access
Add AWS Credential Access detections
2022-08-12 13:00:43 -07:00
pyth0n1c 1a02a53f5d Updated the order of the options in the help menu for contentctl. This way, the options flow logically from creation to validation to building to deployment. 2022-08-12 12:59:53 -07:00
patel-bhavin 1e4b0353f8 search update 2022-08-12 12:46:25 -07:00
patel-bhavin 6969671bf9 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-12 12:41:19 -07:00
patel-bhavin 24cd1afcb8 updatesusing datamodel 2022-08-12 12:34:02 -07:00
pyth0n1c a17b44daf7 Remove lookups from copied ESCU directory. 2022-08-12 12:09:17 -07:00
pyth0n1c ee0d1c788a Merge branch 'Clean_and_Deploy' of https://github.com/splunk/security_content into Clean_and_Deploy 2022-08-11 16:54:41 -07:00
pyth0n1c f632813720 Changes to a number of files to make them suitable for use in an app by a different name. 2022-08-11 16:54:05 -07:00
pyth0n1c f8e3fb6d4a code to update templates files that must change for an app with different name to work 2022-08-11 15:14:17 -07:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
pyth0n1c e155453b25 Branch was auto-updated. 2022-08-11 12:16:12 -07:00
Bhavin Patel d54565cbaa Merge pull request #2315 from splunk/TR_2301_lotl_awk_docker_node
Add detections for Awk, Node, Docker Lotl
2022-08-11 12:15:51 -07:00
pyth0n1c 14b16fa87b Updated some of the documentation in contentctl.py and updated the README file with usage documentation. 2022-08-11 12:13:18 -07:00
Bhavin Patel 1952b9773b Update aws_credential_access_getpassworddata.yml 2022-08-11 12:10:47 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 0136017be3 Branch was auto-updated. 2022-08-11 11:30:09 -07:00
pyth0n1c 8bc6cc4efa Branch was auto-updated. 2022-08-11 11:30:07 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots
Haag it!
2022-08-11 11:29:48 -07:00
Bhavin Patel dcd8cf43aa Merge pull request #2308 from splunk/dcrat-analytics3
dcrat-analytics3
2022-08-11 11:16:37 -07:00
Bhavin Patel a192bac909 Update windows_gather_victim_host_information_camera.yml 2022-08-11 11:13:41 -07:00
pyth0n1c 2c0888a090 Merge branch 'develop' into Clean_and_Deploy 2022-08-11 11:12:49 -07:00
Bhavin Patel 45ae7df595 Merge branch 'develop' into dcrat-analytics3 2022-08-11 11:03:14 -07:00
Bhavin Patel 0a4a86475f Merge pull request #2317 from splunk/TR-2314
TR-2314 adding research site links to BA
2022-08-10 16:15:42 -07:00
patel-bhavin c4848f5431 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-10 16:03:28 -07:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
pyth0n1c baf591f0d2 Branch was auto-updated. 2022-08-10 11:17:07 -07:00
pyth0n1c 61d5002e35 Branch was auto-updated. 2022-08-10 11:17:02 -07:00
pyth0n1c 5979a6d615 Branch was auto-updated. 2022-08-10 11:17:01 -07:00
pyth0n1c 12f0471a71 Branch was auto-updated. 2022-08-10 11:16:59 -07:00
Bhavin Patel 7f084a04f8 Merge pull request #2313 from splunk/fix_mispelling_ad_pass_spray_story
Update active_directory_password_spraying.yml
2022-08-10 11:16:57 -07:00
Bhavin Patel 2187489cd3 Merge pull request #2307 from splunk/cleaning_dnstwist
fixing base on feedback from users
2022-08-10 11:16:36 -07:00
pyth0n1c 22c0dbfc78 Branch was auto-updated. 2022-08-09 16:57:25 -07:00
pyth0n1c 3f0c5537c7 Branch was auto-updated. 2022-08-09 16:57:24 -07:00
pyth0n1c 7e4516ea4c Branch was auto-updated. 2022-08-09 16:57:23 -07:00
pyth0n1c 022711d876 Branch was auto-updated. 2022-08-09 16:57:22 -07:00
pyth0n1c 2d62c07b81 Branch was auto-updated. 2022-08-09 16:57:18 -07:00
pyth0n1c 99cc720057 Branch was auto-updated. 2022-08-09 16:57:17 -07:00
Bhavin Patel a47086080b Merge pull request #2314 from splunk/faking_appcert
doing a fix to pass appcert
2022-08-09 16:57:00 -07:00
pyth0n1c a7f76dca31 Branch was auto-updated. 2022-08-09 16:46:24 -07:00
pyth0n1c 013d3f3e79 Branch was auto-updated. 2022-08-09 16:46:21 -07:00
pyth0n1c 697c14b151 Branch was auto-updated. 2022-08-09 16:46:20 -07:00
pyth0n1c d928024447 Branch was auto-updated. 2022-08-09 16:46:19 -07:00
pyth0n1c 941a1dac8b Branch was auto-updated. 2022-08-09 16:46:16 -07:00