127 Commits

Author SHA1 Message Date
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
patel-bhavin a78c180836 file update 2022-07-26 17:21:56 -07:00
patel-bhavin 8672c8d824 security sercvices deleteion activities 2022-07-26 16:54:42 -07:00
patel-bhavin 7eea768cde new detection putbucket lifecycle 2022-07-25 16:29:57 -07:00
Bhavin Patel c55b3ed7e0 Merge pull request #2287 from splunk/TR-2222
AWS Defense Evasion Stop Logging Cloudtrail
2022-07-25 10:48:37 -07:00
gowthamarajr c2decc3b9c Add AWS defense evasion
1. Update Cloudtrail
2. Delete CloudWatch log group
2022-07-19 11:56:41 -04:00
mvelazco d6dd5098be adding new detection 2022-07-14 13:29:55 -04:00
patel-bhavin 5bf8a69beb delete cloudtrail 2022-07-13 12:49:43 -07:00
patel-bhavin c0996437b5 remove update 2022-07-13 11:40:55 -07:00
mvelazco b615728924 fixing file path 2022-07-13 14:38:13 -04:00
mvelazco 7807c66f73 adding new detection 2022-07-13 14:16:09 -04:00
patel-bhavin 9756e681f7 aws cloudtrail stop logging 2022-07-12 17:47:58 -07:00
mvelazco 18aa9f2e7a adding new detection 2022-07-12 18:03:26 -04:00
mvelazco f8e28dde20 adding new detection 2022-07-12 13:54:32 -04:00
mvelazco 743b94d8a9 updating test files 2022-07-12 11:22:38 -04:00
mvelazco ba163055eb adding 2 detections 2022-07-11 17:29:18 -04:00
patel-bhavin 4d4a4767d7 search, data and yml updates 2022-05-17 17:36:49 -07:00
P4T12ICK 4ffa5540e4 github actions detection 2022-04-04 11:08:39 +02:00
pyth0n1c 9710f9888e Renamed two test files whose detection files are in the experimental detection folder. Since the new branch looks for an fails on these, we fix them here. 2022-03-23 13:40:31 -07:00
pyth0n1c e61e35c3f6 In a previous update, baselines were moved into the baselines folder, but the path to the baselines was not updated in the test files. All of the paths have now been updated. 2022-03-18 16:10:52 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
patel-bhavin 7321055bc5 timewindow 2022-02-28 11:59:42 -08:00
patel-bhavin bdb357cbc2 detection update 2022-02-28 11:28:27 -08:00
P4T12ICK 8cf8fc40ac reporting integrated 2022-02-24 16:18:56 +01:00
P4T12ICK 32798f21ab old test file format 2022-02-07 10:50:32 +01:00
P4T12ICK 228cc28a3b after changing test file format 2022-01-27 16:12:01 +01:00
pyth0n1c 97c83a1864 Created Experimental folder in tests,
as well as cloud, endpoint, and network 
subfolders, and moved some tests into it.
This corresponds with the experimental 
folder in detections.
2021-11-30 09:47:01 -08:00
pyth0n1c 84e54e26d6 Changing to the correct baseline paths after restructuring repo 2021-11-29 16:44:40 -08:00
divious1 1f6c5070d0 cleaned up cruft from repo 2021-09-28 17:18:51 -04:00
P4T12ICK 99f0349e9f circle ci detecction 2021-09-02 10:42:01 +02:00
P4T12ICK 7f980b6a46 circle ci detecction 2021-09-01 17:54:38 +02:00
github-actions[bot] 4f9691205f Branch was auto-updated. 2021-09-01 12:32:24 +00:00
P4T12ICK dcbc0f95ad github detection 2021-09-01 13:56:23 +02:00
P4T12ICK 175fcfc3d8 github detections 2021-09-01 11:28:05 +02:00
tccontre 9c0d231357 devsec3 2021-09-01 11:13:52 +02:00
P4T12ICK 8d51af0e53 add dataset 2021-09-01 10:54:03 +02:00
github-actions[bot] 8034abf451 Branch was auto-updated. 2021-08-27 11:15:56 +00:00
tccontre 426d5c4c85 dev_git 2021-08-27 12:58:41 +02:00
github-actions[bot] 8bddedb93b Branch was auto-updated. 2021-08-27 09:00:00 +00:00
github-actions[bot] 35398496bc Branch was auto-updated. 2021-08-27 08:59:54 +00:00
github-actions[bot] b8efb4ea95 Branch was auto-updated. 2021-08-27 08:21:41 +00:00
github-actions[bot] fff8689f1f Branch was auto-updated. 2021-08-27 08:21:40 +00:00
github-actions[bot] 0c1a1c79b7 Branch was auto-updated. 2021-08-27 08:21:37 +00:00
P4T12ICK 080eae88ef k8s scanner detection 2021-08-24 14:48:31 +02:00
P4T12ICK 53bf235622 k8s scanner detection 2021-08-24 14:39:15 +02:00
P4T12ICK 3aad8766c2 new detection rfi k8s 2021-08-24 09:58:47 +02:00