Commit Graph

  • f8e9685874 Added detection testing service results inDetect AWS Console Login by User from New City automated_detection_testing_1608244906 root 2020-12-17 22:56:45 +00:00
  • e9eac869ae Added detection testing service results inDetect AWS Console Login by User from New City automated_detection_testing_1608239803 root 2020-12-17 21:31:42 +00:00
  • ae67c5f146 Merge branch 'develop' into TR-320-suspicious-rights-delegation Bhavin Patel 2020-12-17 13:07:31 -08:00
  • 224478807d test push bpatel 2020-12-17 12:34:52 -08:00
  • b8326d8b38 Merge branch 'sunburst_detections' of github.com:splunk/security-content into sunburst_detections divious1 2020-12-17 13:53:29 -05:00
  • ca1ae13328 renaming dragonfly divious1 2020-12-17 13:53:20 -05:00
  • 56d4471b78 Merge branch 'develop' into sunburst_detections Jose Enrique Hernandez 2020-12-17 13:01:38 -05:00
  • 58eade42b6 adding new detection and test for sunburst divious1 2020-12-17 12:20:26 -05:00
  • c6edd5dd27 Added detection testing service results inO365 Excessive Authentication Failures Alert root 2020-12-17 11:17:16 +00:00
  • eee9e6bb2f bug fix P4T12ICK 2020-12-17 12:00:53 +01:00
  • 366a7b8213 Added detection testing service results inO365 PST export alert root 2020-12-17 10:56:41 +00:00
  • 2c62bc7ede bug fix P4T12ICK 2020-12-17 11:40:00 +01:00
  • 504a11d8be bug fix P4T12ICK 2020-12-17 11:22:22 +01:00
  • 5598782ca0 Added detection testing service results inO365 Disable MFA root 2020-12-17 10:21:24 +00:00
  • 48ada30a34 o365 disable mfa P4T12ICK 2020-12-17 11:02:20 +01:00
  • d8fa8188e5 Merge branch 'rodo365' into TR-320-suspicious-rights-delegation P4T12ICK 2020-12-17 10:49:59 +01:00
  • ee9d4131bc filter bpatel 2020-12-16 18:26:07 -08:00
  • fdb698cdb3 new detection for login failure bpatel 2020-12-16 16:26:25 -08:00
  • db03702098 Merge pull request #998 from splunk/detection_testing_part_two Bhavin Patel 2020-12-16 12:40:27 -08:00
  • 018d1bd766 addedmacros rodo365 Rod Soto 2020-12-16 14:32:10 -05:00
  • 6c47a0d56e excessiveauthfailures Rod Soto 2020-12-16 14:28:48 -05:00
  • 4c7b7c0397 updated CI job divious1 2020-12-16 14:17:18 -05:00
  • 8b1b7bd5a6 fixandnewdisablemfa Rod Soto 2020-12-16 14:16:20 -05:00
  • 6204c225c9 added logic to pass a username password a service account divious1 2020-12-16 13:56:19 -05:00
  • d9f0ee461a o365rodetections Rod Soto 2020-12-16 13:49:57 -05:00
  • 07aa33af22 Merge branch 'develop' into detection_testing_part_two P4T12ICK 2020-12-16 15:59:31 +01:00
  • 81162132d7 wrong detections in deprecated P4T12ICK 2020-12-16 15:59:08 +01:00
  • 7410b6d670 Merge branch 'develop' into TR-320-suspicious-rights-delegation P4T12ICK 2020-12-16 15:56:45 +01:00
  • 4c49c04851 Added detection testing service results inO365 Suspicious Admin Email Forwarding root 2020-12-16 14:50:54 +00:00
  • a2bc2aa5df Added detection testing service results inO365 Suspicious User Email Forwarding root 2020-12-16 14:25:18 +00:00
  • f3077833b5 Merge pull request #1033 from splunk/dependabot/pip/boto3-1.16.37 dependabot[bot] 2020-12-16 14:08:43 +00:00
  • 5f929693fd new detections P4T12ICK 2020-12-16 15:03:56 +01:00
  • 9a27082aa5 Bump boto3 from 1.16.34 to 1.16.37 dependabot[bot] 2020-12-16 14:03:07 +00:00
  • 9a775408c8 new detections P4T12ICK 2020-12-16 14:31:05 +01:00
  • b2173f3875 new detections P4T12ICK 2020-12-16 14:10:32 +01:00
  • 79d6e03537 changes P4T12ICK 2020-12-16 12:54:29 +01:00
  • e454632602 Merge branch 'TR-320-suspicious-rights-delegation' of github.com:splunk/security-content into TR-320-suspicious-rights-delegation P4T12ICK 2020-12-16 12:52:52 +01:00
  • eef0129ada changes P4T12ICK 2020-12-16 12:52:14 +01:00
  • 20d9d3d5f2 updating docs and package bits [ci skip] research bot 2020-12-16 05:24:45 +00:00
  • d60b67b631 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-12-15 20:47:17 -08:00
  • ffe4cbb019 Merge pull request #1032 from splunk/appinspect v3.9.1 Jose Enrique Hernandez 2020-12-15 21:38:22 -05:00
  • 1075e6b175 adding the lost lookup file bpatel 2020-12-15 18:30:54 -08:00
  • 225f0f39a8 typo bpatel 2020-12-15 17:53:47 -08:00
  • 8dd25a12fa test lookup fromd eprecated bpatel 2020-12-15 17:47:52 -08:00
  • 67bf89fc72 eerh bpatel 2020-12-15 17:25:30 -08:00
  • 76dce6edfd Merge branch 'develop' into deprecated_aws_searches Bhavin Patel 2020-12-15 16:18:59 -08:00
  • 54ce838484 Merge pull request #1012 from splunk/workbench_token Bhavin Patel 2020-12-15 16:14:46 -08:00
  • 2cb19b6953 tsting dp42_test bpatel 2020-12-15 15:10:40 -08:00
  • 45ec7a24c3 Merge branch 'develop' into deprecated_aws_searches Bhavin Patel 2020-12-15 15:02:56 -08:00
  • 9cd075da65 Merge pull request #988 from splunk/dependabot/pip/azure-mgmt-network-17.0.0 Bhavin Patel 2020-12-15 14:18:58 -08:00
  • 510541fdd5 Added detection testing service results inO365 Suspicious Rights Delegation root 2020-12-15 17:49:06 +00:00
  • 70e12c231b Added detection testing service results inO365 Suspicious Rights Delegation root 2020-12-15 15:57:03 +00:00
  • c1ad08d364 changes P4T12ICK 2020-12-15 16:27:18 +01:00
  • 8b563122bb changes P4T12ICK 2020-12-15 13:59:33 +01:00
  • 58627b44f9 changes P4T12ICK 2020-12-15 12:27:16 +01:00
  • 6de3aaafe4 detection O365 suspicious-rights-delegation P4T12ICK 2020-12-15 12:24:30 +01:00
  • 77dd26a2f0 sc tasks for sunburst bpatel 2020-12-14 20:48:11 -08:00
  • 7fa41599d5 adding sunburst as tags for relavant detections bpatel 2020-12-14 20:29:04 -08:00
  • 0aeae24adf deprecated AWS seaches that have been translated bpatel 2020-12-14 13:09:24 -08:00
  • 0068925e47 Merge pull request #959 from splunk/TR-253 Ignacio 2020-12-14 10:09:44 -08:00
  • 495619a78c Merge branch 'develop' into TR-253 Ignacio 2020-12-14 09:32:55 -08:00
  • e56ae4c7bc Merge pull request #1022 from splunk/TR-203 Bhavin Patel 2020-12-14 09:05:32 -08:00
  • ecc74e967e bug fix P4T12ICK 2020-12-14 16:37:49 +01:00
  • 473d5d5d80 bug fix P4T12ICK 2020-12-14 16:35:09 +01:00
  • 8694a20d86 bug fix P4T12ICK 2020-12-14 16:31:35 +01:00
  • 392f45dc41 bug fix P4T12ICK 2020-12-14 16:27:45 +01:00
  • a7efb4cb49 bug fix P4T12ICK 2020-12-14 16:27:14 +01:00
  • 83a1691a59 new detection sunburst P4T12ICK 2020-12-14 15:43:00 +01:00
  • 0ecf15ea2d Merge pull request #1024 from splunk/TR-240-analytics-story-annotation trogdorsey 2020-12-11 20:31:49 -06:00
  • 9c42a2f304 [TR-240] add analytics_story as additional annotation in savedsearches.conf jzsplunk 2020-12-11 15:51:57 -08:00
  • 2251f29bf1 Merge pull request #1018 from splunk/fix_bugs Bhavin Patel 2020-12-11 15:31:18 -08:00
  • 55bc463eb2 Merge branch 'develop' into fix_bugs Bhavin Patel 2020-12-11 13:09:53 -08:00
  • d9121d00a2 Merge branch 'develop' into workbench_token Bhavin Patel 2020-12-11 13:08:27 -08:00
  • 3038cd9efa Merge pull request #1023 from splunk/dependabot/pip/botocore-1.19.35 dependabot[bot] 2020-12-11 21:06:59 +00:00
  • 87e8f9bc8a Merge branch 'develop' into dependabot/pip/azure-mgmt-network-17.0.0 Jose Enrique Hernandez 2020-12-11 16:04:25 -05:00
  • be2f0a896e Merge branch 'develop' into TR-203 David Dorsey 2020-12-11 15:00:01 -06:00
  • 583bdd299f Bump botocore from 1.19.33 to 1.19.35 dependabot[bot] 2020-12-11 20:59:49 +00:00
  • 7b660b14f6 Merge pull request #1020 from splunk/dependabot/pip/boto3-1.16.34 dependabot[bot] 2020-12-11 20:58:42 +00:00
  • a0aa8f0d70 Updated jquery to 3.5.1 David Dorsey 2020-12-11 14:04:33 -06:00
  • 9352ea8d48 Bump boto3 from 1.16.33 to 1.16.34 dependabot[bot] 2020-12-11 14:03:46 +00:00
  • 4de48dd5e7 Merge branch 'develop' into fix_bugs P4T12ICK 2020-12-11 10:51:34 +01:00
  • 5fee68375f fix_bugs P4T12ICK 2020-12-11 10:51:02 +01:00
  • 4be5d0fd0b final commit bpatel 2020-12-10 15:46:31 -08:00
  • 171b7ddf7b response search updates bpatel 2020-12-10 15:25:04 -08:00
  • dbe000141f search update bpatel 2020-12-10 11:11:55 -08:00
  • b631e4704d Merge pull request #1015 from splunk/dependabot/pip/mock-4.0.3 dependabot[bot] 2020-12-10 14:11:06 +00:00
  • 7f0a9eb2ee Bump mock from 4.0.2 to 4.0.3 dependabot[bot] 2020-12-10 14:03:26 +00:00
  • f446a20758 updating jinja with null: bpatel 2020-12-09 18:20:48 -08:00
  • 1d70f2b1e2 testing double reps bpatel 2020-12-09 17:58:14 -08:00
  • 0ce8973183 updating docs and package bits [ci skip] research bot 2020-12-09 23:08:18 +00:00
  • 3e242e83b5 build number test remove_wrong_workbench_panels bpatel 2020-12-09 14:55:00 -08:00
  • 6881f35581 updating docs and package bits [ci skip] research bot 2020-12-09 22:47:27 +00:00
  • c1c11aa4be Merge branch 'develop' into remove_wrong_workbench_panels Bhavin Patel 2020-12-09 14:17:39 -08:00
  • 1970587534 Merge pull request #1000 from splunk/update_appinspect Bhavin Patel 2020-12-09 14:17:03 -08:00
  • 5424b64d7d Merge branch 'develop' into update_appinspect Bhavin Patel 2020-12-09 14:04:49 -08:00
  • 8cac22ce41 Merge pull request #1010 from splunk/dependabot/pip/boto3-1.16.33 dependabot[bot] 2020-12-09 22:02:47 +00:00
  • 2102c487e3 Bump boto3 from 1.16.30 to 1.16.33 dependabot[bot] 2020-12-09 21:58:05 +00:00
  • 0f30210059 Merge pull request #1011 from splunk/dependabot/pip/botocore-1.19.33 dependabot[bot] 2020-12-09 21:56:28 +00:00
  • 60a1288118 Bump botocore from 1.19.30 to 1.19.33 dependabot[bot] 2020-12-09 21:53:01 +00:00
  • c778d6660e Merge pull request #1005 from splunk/dependabot/pip/path-15.0.1 dependabot[bot] 2020-12-09 21:52:12 +00:00