admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 20242b93e6 data path update bpatel 2021-01-13 18:27:06 -08:00
  • b7c0137282 test timing bpatel 2021-01-13 17:57:49 -08:00
  • 0b6757738e search error bpatel 2021-01-13 17:29:45 -08:00
  • 13ae19a958 uuid bpatel 2021-01-13 17:26:33 -08:00
  • c5e6238e20 updated lookup name bpatel 2021-01-13 17:21:27 -08:00
  • f74ebbea1c Merge branch 'develop' into TR-318_mfa Bhavin Patel 2021-01-13 17:19:00 -08:00
  • ab6d8cdfe1 new detection file and test data bpatel 2021-01-13 16:30:19 -08:00
  • a3193582e4 Merge branch 'lookup_name_duplicate' of github.com:splunk/security-content into lookup_name_duplicate bpatel 2021-01-13 15:49:10 -08:00
  • acd855474b minor bpatel 2021-01-13 15:49:03 -08:00
  • c1325067f1 Merge branch 'develop' into lookup_name_duplicate Bhavin Patel 2021-01-13 15:35:33 -08:00
  • 24128d4982 updating lookup name to avoid duplicates and deprecattion bpatel 2021-01-13 15:34:24 -08:00
  • 0b025a11c3 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-13 17:59:49 +01:00
  • 843d99f9d9 moved detections P4T12ICK 2021-01-13 17:59:31 +01:00
  • b3996834e6 Branch was auto-updated. github-actions[bot] 2021-01-13 14:49:56 +00:00
  • f5b0df6920 Branch was auto-updated. github-actions[bot] 2021-01-13 14:49:54 +00:00
  • f7969df8c2 Branch was auto-updated. github-actions[bot] 2021-01-13 14:49:52 +00:00
  • 54f52cca25 Branch was auto-updated. github-actions[bot] 2021-01-13 14:49:51 +00:00
  • e03132e7d5 Branch was auto-updated. github-actions[bot] 2021-01-13 14:49:49 +00:00
  • f9fa62cf67 Branch was auto-updated. github-actions[bot] 2021-01-13 14:49:47 +00:00
  • 3904c837fa Merge pull request #1094 from splunk/dependabot/pip/botocore-1.19.53 dependabot[bot] 2021-01-13 14:49:25 +00:00
  • 5c60992f68 Bump botocore from 1.19.52 to 1.19.53 dependabot[bot] 2021-01-13 14:44:01 +00:00
  • c52323392e Merge pull request #1095 from splunk/dependabot/pip/boto3-1.16.53 dependabot[bot] 2021-01-13 14:42:51 +00:00
  • b803026060 Bump boto3 from 1.16.52 to 1.16.53 dependabot[bot] 2021-01-13 14:03:28 +00:00
  • 008db8245f merged with develop P4T12ICK 2021-01-13 14:32:54 +01:00
  • 96f8c9056a merged with develop P4T12ICK 2021-01-13 14:30:51 +01:00
  • 36c97ae874 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-13 14:26:11 +01:00
  • 7006049099 merged with develop P4T12ICK 2021-01-13 14:26:00 +01:00
  • 0f4f7a4288 Merge branch 'detection_testing_branch' of https://github.com/splunk/security-content into detection_testing_branch Detection Testing Service 2021-01-13 13:24:59 +00:00
  • 783c24cbe4 Added detection testing service results inDetect New Open S3 Buckets over AWS CLI root 2021-01-13 13:24:58 +00:00
  • 4a626c5246 merged with develop P4T12ICK 2021-01-13 14:21:09 +01:00
  • 8d40be7a12 improved detections and tests P4T12ICK 2021-01-13 14:05:53 +01:00
  • 65f935b24f Added detection testing service results inDetect New Open S3 buckets root 2021-01-12 14:58:47 +00:00
  • c057b7048f Branch was auto-updated. github-actions[bot] 2021-01-12 14:57:57 +00:00
  • 82f2486e4b Merge pull request #1092 from splunk/dependabot/pip/botocore-1.19.52 dependabot[bot] 2021-01-12 14:57:36 +00:00
  • 8a704afd74 Branch was auto-updated. github-actions[bot] 2021-01-12 14:51:20 +00:00
  • 09d8bc4fe1 Branch was auto-updated. github-actions[bot] 2021-01-12 14:51:18 +00:00
  • f826319bf7 Merge pull request #1089 from splunk/dependabot/pip/s3transfer-0.3.4 dependabot[bot] 2021-01-12 14:50:58 +00:00
  • 446ce95cb6 Bump botocore from 1.19.51 to 1.19.52 dependabot[bot] 2021-01-12 14:45:09 +00:00
  • 4ee8707b09 Bump azure-core from 1.9.0 to 1.10.0 dependabot[bot] 2021-01-12 14:45:04 +00:00
  • 905c5cf16a Bump s3transfer from 0.3.3 to 0.3.4 dependabot[bot] 2021-01-12 14:45:04 +00:00
  • 5f74ddc8ab Merge pull request #1090 from splunk/dependabot/pip/boto3-1.16.52 dependabot[bot] 2021-01-12 14:44:15 +00:00
  • e31e1b4ace Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-12 15:38:48 +01:00
  • 994989b086 improved detections and tests P4T12ICK 2021-01-12 15:38:32 +01:00
  • c99e244a05 Bump boto3 from 1.16.51 to 1.16.52 dependabot[bot] 2021-01-12 14:02:46 +00:00
  • e18710a8ed Merge branch 'detection_testing_branch' of https://github.com/splunk/security-content into detection_testing_branch Detection Testing Service 2021-01-12 10:33:23 +00:00
  • be3736fc61 Added detection testing service results inAWS Network Access Control List Created with All Open Ports root 2021-01-12 10:33:22 +00:00
  • fd58b28807 Added detection testing service results inAWS Network Access Control List Deleted root 2021-01-12 10:33:02 +00:00
  • e1e595c654 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-12 11:13:38 +01:00
  • 1073cff2f7 improved detections and tests P4T12ICK 2021-01-12 11:13:17 +01:00
  • 62014e7658 Merge pull request #1088 from splunk/1490-bcdedit P4T12ICK 2021-01-12 09:30:33 +01:00
  • 84fef240a1 Update bcdedit_failure_recovery_modification.yml mhaag-spl 2021-01-11 16:12:59 -07:00
  • a2fa25f9bc Added detection testing service results inBCDEdit Failure Recovery Modification root 2021-01-11 23:08:28 +00:00
  • 723d3dac11 minor syntax error Jose Enrique Hernandez 2021-01-11 17:51:42 -05:00
  • b7d9fb164b Update bcdedit_failure_recovery_modification.yml mhaag-spl 2021-01-11 15:45:45 -07:00
  • def94c4623 Update bcdedit_failure_recovery_modification.test.yml mhaag-spl 2021-01-11 13:57:05 -07:00
  • d99e66f367 T1490 BCDedit mhaag-spl 2021-01-11 12:25:19 -07:00
  • dd8d642973 Added detection testing service results inAWS Detect Users with KMS keys performing encryption S3 root 2021-01-11 14:56:55 +00:00
  • 73b29808ee Added detection testing service results inAWS Detect Users creating keys with encrypt policy without MFA root 2021-01-11 14:31:23 +00:00
  • 5d481c95ab bug fix detection P4T12ICK 2021-01-11 15:13:05 +01:00
  • 83ad7fbae7 Branch was auto-updated. github-actions[bot] 2021-01-11 14:11:04 +00:00
  • c2508e8404 Branch was auto-updated. github-actions[bot] 2021-01-11 14:11:02 +00:00
  • c9e66ed6bd Branch was auto-updated. github-actions[bot] 2021-01-11 14:11:01 +00:00
  • 8af7cac864 Merge pull request #1084 from splunk/dependabot/pip/identify-1.5.12 dependabot[bot] 2021-01-11 14:10:40 +00:00
  • 1cffa2e0fc Bump importlib-metadata from 3.3.0 to 3.4.0 dependabot[bot] 2021-01-11 14:03:34 +00:00
  • 1eb3de9609 Bump virtualenv from 20.2.2 to 20.3.0 dependabot[bot] 2021-01-11 14:03:33 +00:00
  • dc9efbf09d Bump importlib-resources from 4.1.1 to 5.0.0 dependabot[bot] 2021-01-11 14:03:32 +00:00
  • 48bb6a978d Bump identify from 1.5.11 to 1.5.12 dependabot[bot] 2021-01-11 14:03:29 +00:00
  • b7175cbc08 updated detection and test file P4T12ICK 2021-01-11 14:28:14 +01:00
  • 4383db4e83 update detection P4T12ICK 2021-01-11 13:31:02 +01:00
  • 818e176498 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-01-10 09:54:17 -08:00
  • d8182bc8ad Merge pull request #1082 from splunk/TR-223 Jose Enrique Hernandez 2021-01-08 17:58:28 -05:00
  • 1edc936662 Syntax change in first_time_event Ignacio Bermudez Corrales 2021-01-08 11:10:12 -08:00
  • 6304b53e65 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-08 15:52:36 +01:00
  • d0bea9eecf detection testing cloud P4T12ICK 2021-01-08 15:51:45 +01:00
  • 6164e15bdc Branch was auto-updated. github-actions[bot] 2021-01-08 14:16:01 +00:00
  • 00a5291569 Merge pull request #1081 from splunk/dependabot/pip/boto3-1.16.51 dependabot[bot] 2021-01-08 14:15:39 +00:00
  • 7ce147217c Bump boto3 from 1.16.50 to 1.16.51 dependabot[bot] 2021-01-08 14:09:40 +00:00
  • 363b9464b8 Branch was auto-updated. github-actions[bot] 2021-01-08 14:09:16 +00:00
  • 5f4135cb0b Merge pull request #1080 from splunk/dependabot/pip/botocore-1.19.51 dependabot[bot] 2021-01-08 14:08:53 +00:00
  • e42b1fae0d Bump botocore from 1.19.50 to 1.19.51 dependabot[bot] 2021-01-08 14:02:57 +00:00
  • b19c8f4107 Bump dnspython from 2.0.0 to 2.1.0 dependabot[bot] 2021-01-08 14:02:53 +00:00
  • 2af42c6f65 Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls root 2021-01-08 13:00:41 +00:00
  • fd427dde35 small change P4T12ICK 2021-01-08 13:29:04 +01:00
  • a75b94ee87 updating docs and package bits [ci skip] research bot 2021-01-07 20:47:59 +00:00
  • 060cd72540 Merge pull request #1065 from splunk/issue_848_dest_mac v3.11.0 Jose Enrique Hernandez 2021-01-07 12:37:23 -05:00
  • 3398b5c927 Branch was auto-updated. github-actions[bot] 2021-01-07 15:56:50 +00:00
  • c0c8358563 Merge pull request #1030 from splunk/TR-320-suspicious-rights-delegation Jose Enrique Hernandez 2021-01-07 10:56:27 -05:00
  • 01f1b85b58 Branch was auto-updated. github-actions[bot] 2021-01-07 14:52:29 +00:00
  • 0381f57b57 Branch was auto-updated. github-actions[bot] 2021-01-07 14:52:28 +00:00
  • da8ca9afab Merge pull request #1076 from splunk/dependabot/pip/botocore-1.19.50 dependabot[bot] 2021-01-07 14:52:05 +00:00
  • 643588c288 Bump botocore from 1.19.49 to 1.19.50 dependabot[bot] 2021-01-07 14:45:04 +00:00
  • 860bbec43a Merge pull request #1077 from splunk/dependabot/pip/boto3-1.16.50 dependabot[bot] 2021-01-07 14:44:17 +00:00
  • 8df36c2e0c Merge branch 'develop' into TR-320-suspicious-rights-delegation P4T12ICK 2021-01-07 15:28:30 +01:00
  • 8bb0ce7dfa Bump boto3 from 1.16.49 to 1.16.50 dependabot[bot] 2021-01-07 14:02:31 +00:00
  • 8c66036d3a Branch was auto-updated. github-actions[bot] 2021-01-06 23:21:35 +00:00
  • e2d7a88d9d Merge pull request #1075 from splunk/supernova_webshell Bhavin Patel 2021-01-06 15:21:15 -08:00
  • 64dc7d0486 Branch was auto-updated. github-actions[bot] 2021-01-06 23:14:39 +00:00
  • aa6845d91d Branch was auto-updated. github-actions[bot] 2021-01-06 23:14:37 +00:00
  • 7a76b1b645 Merge pull request #1035 from splunk/appinspect_service_account Bhavin Patel 2021-01-06 15:14:15 -08:00
  • fe13a41290 Merge branch 'develop' into supernova_webshell Jose Enrique Hernandez 2021-01-06 18:09:13 -05:00