Commit Graph

  • a5193dc9c6 Merge pull request #629 from splunk/dependabot/pip/identify-1.4.29 dependabot-preview[bot] 2020-08-24 16:31:30 +00:00
  • 9b956cc8c2 [TR-82] add in logic for risk tagging after synching with ESCU requirements/annotations. jzsplunk 2020-08-24 09:27:44 -07:00
  • 5805dd794b Bump identify from 1.4.28 to 1.4.29 dependabot-preview[bot] 2020-08-24 16:26:18 +00:00
  • ee737a0799 Merge branch 'develop' into coverage_update Jose Enrique Hernandez 2020-08-24 12:20:49 -04:00
  • 6443822362 Merge branch 'develop' into fixawsk8sfailuresrcuser fixawsk8sfailuresrcuser Jose Enrique Hernandez 2020-08-24 12:20:40 -04:00
  • bf91c4e501 Merge branch 'develop' into mbjerkeland-develop Jose Enrique Hernandez 2020-08-24 12:20:13 -04:00
  • e0f3ad1030 Merge branch 'develop' into PR_609 Jose Enrique Hernandez 2020-08-24 12:20:02 -04:00
  • 441f54a4f6 Merge pull request #627 from splunk/dependabot/pip/pre-commit-2.7.1 dependabot-preview[bot] 2020-08-24 05:31:27 +00:00
  • 8377003694 Merge branch 'develop' into PR_609 Jose Enrique Hernandez 2020-08-24 01:26:09 -04:00
  • b9e4c0b921 Merge branch 'develop' into mbjerkeland-develop Jose Enrique Hernandez 2020-08-24 01:26:02 -04:00
  • 0fd01f08dd Merge branch 'develop' into coverage_update Jose Enrique Hernandez 2020-08-24 01:25:53 -04:00
  • a8b832b4ae Merge branch 'develop' into dependabot/pip/pre-commit-2.7.1 Jose Enrique Hernandez 2020-08-24 01:25:45 -04:00
  • 5886b2dbff Merge pull request #628 from splunk/dependabot/pip/nodeenv-1.5.0 dependabot-preview[bot] 2020-08-24 05:09:37 +00:00
  • dddf13d05c Merge branch 'develop' into coverage_update Jose Enrique Hernandez 2020-08-24 01:05:25 -04:00
  • 764a4283de Merge branch 'develop' into dependabot/pip/pre-commit-2.7.1 Jose Enrique Hernandez 2020-08-24 01:05:10 -04:00
  • 42f85908ad Merge branch 'develop' into dependabot/pip/nodeenv-1.5.0 Jose Enrique Hernandez 2020-08-24 01:04:58 -04:00
  • 21c1dcb759 Merge branch 'develop' into PR_609 Jose Enrique Hernandez 2020-08-24 01:04:48 -04:00
  • 1c1ce46004 Merge branch 'develop' into mbjerkeland-develop Jose Enrique Hernandez 2020-08-24 01:04:40 -04:00
  • 7f7b4150ff Merge pull request #611 from splunk/TR-122 Jose Enrique Hernandez 2020-08-24 01:04:22 -04:00
  • a26414f16d Merge branch 'develop' into TR-122 Jose Enrique Hernandez 2020-08-24 00:39:35 -04:00
  • 76d05aee12 Merge branch 'develop' into mbjerkeland-develop Jose Enrique Hernandez 2020-08-24 00:36:00 -04:00
  • 686ea3c55d Merge branch 'develop' into PR_609 Jose Enrique Hernandez 2020-08-24 00:35:15 -04:00
  • 2236ed9318 Merge branch 'develop' into fixawsk8sfailuresrcuser Jose Enrique Hernandez 2020-08-24 00:33:50 -04:00
  • 786e68db83 Bump nodeenv from 1.4.0 to 1.5.0 dependabot-preview[bot] 2020-08-23 18:39:19 +00:00
  • 8eb71a0544 Bump pre-commit from 2.6.0 to 2.7.1 dependabot-preview[bot] 2020-08-23 18:06:56 +00:00
  • 365c0904b5 Merge branch 'develop' into coverage_update Jose Enrique Hernandez 2020-08-22 01:22:38 -04:00
  • fb69d6f6c4 updated both maps fixed errors with coverage divious1 2020-08-22 01:18:14 -04:00
  • c587aa1893 Merge pull request #624 from splunk/dependabot/pip/attackcti-0.3.3 dependabot-preview[bot] 2020-08-21 05:00:35 +00:00
  • 58ed589c15 Bump attackcti from 0.3.2 to 0.3.3 dependabot-preview[bot] 2020-08-21 04:55:41 +00:00
  • c0c6c4db97 newfixawsdetectpkey Rod Soto 2020-08-20 16:39:25 -04:00
  • c0aafb749b Merge pull request #621 from splunk/fixawsk8sfailuresrcuser Bhavin Patel 2020-08-20 12:25:40 -07:00
  • 80860d37f4 Created manifests for unseen city, region, and country and updated logic to reflect each case David Dorsey 2020-08-20 14:07:21 -05:00
  • 7de781c8f0 Manifest cleanup David Dorsey 2020-08-20 13:15:14 -05:00
  • 94a40701a7 Merge pull request #622 from splunk/dependabot/pip/attrs-20.1.0 dependabot-preview[bot] 2020-08-20 17:58:31 +00:00
  • 031548e36f Bump attrs from 19.3.0 to 20.1.0 dependabot-preview[bot] 2020-08-20 17:53:56 +00:00
  • 8b532f7358 fixedsrcuserfromtable Rod Soto 2020-08-20 12:02:44 -04:00
  • fdfcc03651 Merge branch 'develop' into mitrests mitrests Bhavin Patel 2020-08-19 19:20:53 -07:00
  • 94707e9cfd addedmitretoawssearches Rod Soto 2020-08-19 21:16:13 -04:00
  • 8136f73bda Merge branch 'develop' into mbjerkeland-develop Bhavin Patel 2020-08-19 14:43:54 -07:00
  • 31a332bb9b adding story to response bpatel 2020-08-19 14:39:24 -07:00
  • 00f51defe8 shannons PR bug fixes bpatel 2020-08-19 14:37:01 -07:00
  • 52e21c9907 resetting the md file bpatel 2020-08-19 10:24:40 -07:00
  • b4ab45f299 Updated baseline searches for cloud provisioning activities. Broke them out into an initial search and update search Updated them to use kv store Updated Cloud Provisioning from previously unseen ip address to relfect changes in baseline searches. Added new fields to make the detection more actionable Added the lookup manifest and a macro manifest David Dorsey 2020-08-19 10:28:05 -05:00
  • dd4e61837c bug updates bpatel 2020-08-18 16:33:58 -07:00
  • fb00fffd3f work in progress file Rico Valdez 2020-08-18 17:01:29 -06:00
  • 0328c2d98f Merge branch 'TR-41_aws_ec2_mods' of github.com:splunk/security-content into TR-41_aws_ec2_mods Rico Valdez 2020-08-18 17:00:44 -06:00
  • 9302baefaf new files for translated detections Rico Valdez 2020-08-18 16:38:38 -06:00
  • a0730b0878 new files - not finalized Rico Valdez 2020-08-18 16:38:13 -06:00
  • 63abcbf343 Merge pull request #613 from splunk/TR-145_bug Bhavin Patel 2020-08-18 15:34:31 -07:00
  • 32346eef6a Merge branch 'develop' into TR-145_bug TR-145_bug Bhavin Patel 2020-08-18 15:29:06 -07:00
  • 6de58bce6a Update api_call_by_user_baseline.yml Bhavin Patel 2020-08-18 15:28:54 -07:00
  • 866212a733 [TR-82] remove hard coded risk parameters in j2 template. jzsplunk 2020-08-18 13:34:25 -07:00
  • d3b4d65e69 [TR-82] update detection markdown. jzsplunk 2020-08-18 13:30:21 -07:00
  • 45c0efe7ee [TR-82] code cleanup for generate.py jzsplunk 2020-08-18 13:21:33 -07:00
  • 84283e4123 [TR-82] add logic for updating risk parameters in saved searches.conf jzsplunk 2020-08-18 12:42:10 -07:00
  • 83d8ce47a5 Removed a few API calls that are not really modifications David Dorsey 2020-08-18 13:47:04 -05:00
  • e6248f0e77 Merge branch 'develop' into mbjerkeland-develop inspired 2020-08-18 15:08:30 +02:00
  • 6ab60c1557 Merge pull request #617 from splunk/dependabot/pip/virtualenv-20.0.31 dependabot-preview[bot] 2020-08-17 15:38:51 +00:00
  • 55639a2e56 Bump virtualenv from 20.0.30 to 20.0.31 dependabot-preview[bot] 2020-08-17 15:34:42 +00:00
  • 1786a44a13 Merge branch 'develop' into mbjerkeland-develop inspired 2020-08-17 09:30:14 +02:00
  • 968e73ca98 Merge pull request #616 from splunk/dependabot/pip/identify-1.4.28 dependabot-preview[bot] 2020-08-16 18:46:35 +00:00
  • d6a5c18bac Bump identify from 1.4.27 to 1.4.28 dependabot-preview[bot] 2020-08-16 18:41:34 +00:00
  • d10bafadf3 Merge pull request #615 from splunk/dependabot/pip/identify-1.4.27 dependabot-preview[bot] 2020-08-16 00:43:08 +00:00
  • 0aafd593c8 Bump identify from 1.4.25 to 1.4.27 dependabot-preview[bot] 2020-08-16 00:39:38 +00:00
  • 4c7cb2488c Polish Mikael Bjerkeland 2020-08-14 23:08:02 +02:00
  • 584ef0aff9 Updates Mikael Bjerkeland 2020-08-14 22:59:11 +02:00
  • 897d25a7f8 Present times in ISO8601 instead of US style Mikael Bjerkeland 2020-08-12 23:45:53 +02:00
  • 289cec6fde Now validating? Mikael Bjerkeland 2020-08-12 23:32:48 +02:00
  • b748b3ee9c converted lookup to collection divious1 2020-08-12 17:29:18 -04:00
  • ff4cf63e3e Fixed up my mistakes. Should hopefully validate now Mikael Bjerkeland 2020-08-12 23:26:57 +02:00
  • cc4d23469c . Mikael Bjerkeland 2020-08-12 23:26:26 +02:00
  • d820c2d914 Retrying Mikael Bjerkeland 2020-08-12 23:21:43 +02:00
  • 0022aff02f WIP to add scores to the parent technique update_mapping_code divious1 2020-08-12 17:16:05 -04:00
  • c12f8b2a6e Added ARP Poisoning Detection for Cisco Devices Mikael Bjerkeland 2020-08-12 10:55:10 +02:00
  • dd10e6e3cb Adding macros Mikael Bjerkeland 2020-08-12 09:17:32 +02:00
  • 9eb49b723c Description update Mikael Bjerkeland 2020-08-11 23:33:57 +02:00
  • a3e9363271 Added Layer 2 Network Detection to detect Rogue DHCP Servers Mikael Bjerkeland 2020-08-11 23:29:42 +02:00
  • 516f009492 Merge pull request #610 from splunk/new_CI_testing_pipeline Jose Enrique Hernandez 2020-08-10 15:17:56 -04:00
  • 1db6e6096d some translated searches for change DM Rico Valdez 2020-08-08 18:04:57 -06:00
  • 7ec2ca7f8b new CI pipeline new_CI_testing_pipeline Patrick Bareiss 2020-08-07 17:08:21 +02:00
  • 2f04c868e4 new detections for security hub alerts bpatel 2020-08-06 14:44:50 -07:00
  • acb7856bbc updating docs and package bits [ci skip] research bot 2020-08-04 21:37:21 +00:00
  • 9bff8a38dd Merge pull request #608 from splunk/F5_TMUI v3.0.5 Bhavin Patel 2020-08-04 14:23:59 -07:00
  • 94e5d4dffd adding a response task bpatel 2020-08-04 14:15:14 -07:00
  • 971c2dc696 adding a response task bpatel 2020-08-04 14:14:12 -07:00
  • 32e5fc5331 Merge branch 'develop' into F5_TMUI Jose Enrique Hernandez 2020-08-04 17:09:39 -04:00
  • 5b586dcb46 Merge pull request #607 from splunk/SIGRed Jose Enrique Hernandez 2020-08-04 17:08:55 -04:00
  • 58f47148b9 ymls and updates bpatel 2020-08-04 14:04:38 -07:00
  • 8617674eed response to new story bpatel 2020-08-04 13:23:26 -07:00
  • 63f266629e porting ymls into a newe PR bpatel 2020-08-04 12:55:12 -07:00
  • a1b00860d8 Merge pull request #578 from splunk/relative_path_and_type_consideration Bhavin Patel 2020-08-04 12:40:23 -07:00
  • 8227b5351f codec error bpatel 2020-08-04 12:33:28 -07:00
  • 6e2da07f65 fixes TR-43 bpatel 2020-08-04 12:12:01 -07:00
  • b3b5d561e6 Merge branch 'develop' into relative_path_and_type_consideration Jose Enrique Hernandez 2020-08-04 15:05:54 -04:00
  • 49ec440a21 Merge pull request #606 from splunk/dependabot/pip/virtualenv-20.0.30 dependabot-preview[bot] 2020-08-04 17:26:57 +00:00
  • 62aca55091 Bump virtualenv from 20.0.29 to 20.0.30 dependabot-preview[bot] 2020-08-04 17:22:19 +00:00
  • 0e203651c8 Merge pull request #601 from splunk/removing_slack_from_ci Bhavin Patel 2020-08-04 10:05:48 -07:00
  • 6e595aa13a Merge pull request #590 from splunk/nocaps Bhavin Patel 2020-08-04 09:54:56 -07:00
  • 7c5bd96fa8 Merge branch 'develop' into removing_slack_from_ci Bhavin Patel 2020-08-04 09:48:33 -07:00
  • 3c3d42c375 Merge pull request #602 from splunk/dependabot/pip/cfgv-3.2.0 dependabot-preview[bot] 2020-07-31 18:07:05 +00:00