Commit Graph

  • 7f8f35c507 trying to do a file name change here Rico Valdez 2020-05-26 14:38:32 -06:00
  • 788a09cdef fix as the strptime function wasn't correct Rico Valdez 2020-05-26 14:33:08 -06:00
  • 1d9beb8d47 new files for updated detections Rico Valdez 2020-05-26 14:19:05 -06:00
  • 9f37259089 updates for auth versions Rico Valdez 2020-05-26 14:17:55 -06:00
  • 275d05a88b spliting liche into its own job divious1 2020-05-26 12:27:01 -04:00
  • d42eede575 moved out liche test divious1 2020-05-26 12:20:51 -04:00
  • 408ad484fa Merge pull request #475 from splunk/dependabot/pip/nodeenv-1.3.5 dependabot-preview[bot] 2020-05-26 14:38:39 +00:00
  • 116b1dbb23 Bump nodeenv from 1.3.3 to 1.3.5 dependabot-preview[bot] 2020-05-26 14:33:11 +00:00
  • 3111e36496 Merge pull request #471 from splunk/dependabot/pip/pyrsistent-0.16.0 dependabot-preview[bot] 2020-05-26 14:31:56 +00:00
  • d1d4044dd6 Bump pyrsistent from 0.15.6 to 0.16.0 dependabot-preview[bot] 2020-05-26 14:26:45 +00:00
  • 7f914b2676 Merge pull request #453 from splunk/dependabot/pip/pre-commit-2.4.0 dependabot-preview[bot] 2020-05-26 14:25:42 +00:00
  • 080f641715 Merge pull request #474 from splunk/dependabot/pip/configparser-5.0.0 dependabot-preview[bot] 2020-05-26 14:25:30 +00:00
  • a53e1aabb2 Bump configparser from 4.0.2 to 5.0.0 dependabot-preview[bot] 2020-05-26 14:19:14 +00:00
  • 19e17e9975 Bump pre-commit from 2.3.0 to 2.4.0 dependabot-preview[bot] 2020-05-26 14:19:13 +00:00
  • c1299874ce Merge pull request #473 from splunk/dependabot/pip/cfgv-3.1.0 dependabot-preview[bot] 2020-05-26 14:18:06 +00:00
  • 0fa68bed60 Merge pull request #472 from splunk/dependabot/pip/pytz-2020.1 dependabot-preview[bot] 2020-05-26 14:17:59 +00:00
  • 62f5042d7c Bump cfgv from 2.0.1 to 3.1.0 dependabot-preview[bot] 2020-05-26 14:13:17 +00:00
  • 95372f2a2f Bump pytz from 2019.3 to 2020.1 dependabot-preview[bot] 2020-05-26 14:12:55 +00:00
  • 72985808cf Merge pull request #470 from splunk/spec_3_bug_fix Jose Enrique Hernandez 2020-05-25 12:18:06 -04:00
  • 32a9f80a5b content api tested Patrick Bareiss 2020-05-25 18:09:31 +02:00
  • e9c7ae28a5 small bug bix Patrick Bareiss 2020-05-25 18:00:46 +02:00
  • d01770cc18 Merge pull request #455 from splunk/dependabot/pip/more-itertools-8.3.0 dependabot-preview[bot] 2020-05-25 15:37:51 +00:00
  • 3096361c1a Merge pull request #463 from splunk/dependabot/pip/virtualenv-20.0.21 dependabot-preview[bot] 2020-05-25 15:37:28 +00:00
  • f335588da6 Merge pull request #466 from splunk/dependabot/pip/six-1.15.0 dependabot-preview[bot] 2020-05-25 15:37:06 +00:00
  • 0991f6498c Bump more-itertools from 8.2.0 to 8.3.0 dependabot-preview[bot] 2020-05-25 15:32:43 +00:00
  • d1e645e183 Bump virtualenv from 20.0.20 to 20.0.21 dependabot-preview[bot] 2020-05-25 15:32:43 +00:00
  • 3da73d36d0 Bump six from 1.14.0 to 1.15.0 dependabot-preview[bot] 2020-05-25 15:32:43 +00:00
  • 55a17c65f9 Merge pull request #469 from splunk/spec_3_prepare_release P4T12ICK 2020-05-25 17:31:26 +02:00
  • d3ef1dabc4 test content api Patrick Bareiss 2020-05-25 17:17:47 +02:00
  • 69e061606b test content api Patrick Bareiss 2020-05-25 17:10:08 +02:00
  • b9128cee7b small bug Patrick Bareiss 2020-05-25 17:00:05 +02:00
  • fd024fb4c0 small bug Patrick Bareiss 2020-05-25 16:46:38 +02:00
  • 4cf0fabd9c updating API docs spec_3_develop Jose Enrique Hernandez 2020-05-25 09:44:01 -04:00
  • 086209ae42 updated README Patrick Bareiss 2020-05-25 12:50:48 +02:00
  • f229e1e6a4 updated README Patrick Bareiss 2020-05-25 12:47:10 +02:00
  • 4fc0b7555b dry run master api update Patrick Bareiss 2020-05-25 11:42:58 +02:00
  • 1646307615 dry run master api update Patrick Bareiss 2020-05-25 11:33:25 +02:00
  • 8977f7b02b dry run master api update Patrick Bareiss 2020-05-25 11:23:28 +02:00
  • 27244b14f6 broken link Patrick Bareiss 2020-05-25 11:15:15 +02:00
  • 7b1d282ca7 dry run master api update Patrick Bareiss 2020-05-25 11:11:27 +02:00
  • f86d1cd590 dry run master api update Patrick Bareiss 2020-05-25 11:09:44 +02:00
  • 729419b24d Updated searches Patrick Bareiss 2020-05-25 11:06:36 +02:00
  • 052a7d7872 run generate Patrick Bareiss 2020-05-25 10:46:40 +02:00
  • 6b966dd4e3 merged with develop Patrick Bareiss 2020-05-25 10:44:29 +02:00
  • 48882024ad merged with develop Patrick Bareiss 2020-05-25 10:43:58 +02:00
  • 2ed0930441 merging in asx button fix divious1 2020-05-22 14:23:11 -04:00
  • 841db96e07 removed flake8, added more verbosity to generate divious1 2020-05-22 01:30:25 -04:00
  • 2512a90f59 minor readme fixes spec_3_minor_udpates divious1 2020-05-22 00:30:56 -04:00
  • 3789e49d9a Merge pull request #468 from splunk/dependabot/pip/identify-1.4.16 dependabot-preview[bot] 2020-05-21 23:51:38 +00:00
  • b25b580ce0 Bump identify from 1.4.15 to 1.4.16 dependabot-preview[bot] 2020-05-21 23:45:36 +00:00
  • b4577d54c8 fixedazk8srolesto Rod Soto 2020-05-21 18:52:12 -04:00
  • 6086fa8e2b azk8srolesto Rod Soto 2020-05-21 18:41:32 -04:00
  • c422d7191a Merge pull request #465 from splunk/spec_3_feature Bhavin Patel 2020-05-21 08:48:47 -07:00
  • 2e7d50b6d0 newstoryconfsecazk8s Rod Soto 2020-05-20 19:09:29 -04:00
  • 0748085eca azpodscandetect Rod Soto 2020-05-20 15:38:53 -04:00
  • e165bad244 updated ELI5 suspicious_zoom_process bpatel 2020-05-20 12:38:44 -07:00
  • 74cef240c5 manifeft updates bpatel 2020-05-20 12:10:40 -07:00
  • 5cdd5ac784 fixedawsmacrosnametoaz Rod Soto 2020-05-20 14:41:09 -04:00
  • 87494bfa21 Merge pull request #464 from jwindley-splunk/patch-4 Bhavin Patel 2020-05-20 11:11:52 -07:00
  • c5e25d7355 generate a mitre enrichment lookup Patrick Bareiss 2020-05-20 14:23:16 +02:00
  • a4ec26d2a0 Update reg_manipulating_services.yml jwindley-splunk 2020-05-20 12:56:25 +01:00
  • bf80f1cfbf Updated how to implement David Dorsey 2020-05-19 20:56:43 -05:00
  • e4339a4259 Took out firstTime in the | table at the end David Dorsey 2020-05-19 20:52:25 -05:00
  • 39b8472322 Merge pull request #460 from splunk/spec_3_readme Bhavin Patel 2020-05-19 15:33:43 -07:00
  • 4ac5dc4dff k8sScan Rod Soto 2020-05-19 14:20:10 -04:00
  • 8751bb4135 Merge branch 'suspicious_zoom_process' of github.com:splunk/security-content into suspicious_zoom_process David Dorsey 2020-05-19 16:06:19 -05:00
  • a07b2f4858 Bug fixes David Dorsey 2020-05-19 16:05:55 -05:00
  • 66041ce1d1 name and uuid update bpatel 2020-05-19 13:36:10 -07:00
  • 35665882d5 name update bpatel 2020-05-19 13:21:40 -07:00
  • 0bf2d9041b name and uuid bpatel 2020-05-19 13:19:41 -07:00
  • f0d00b1bac Merge branch 'suspicious_zoom_process' of github.com:splunk/security-content into suspicious_zoom_process David Dorsey 2020-05-19 15:04:24 -05:00
  • 334e4a4978 Helps if I use the correct search ID for a detection David Dorsey 2020-05-19 15:03:58 -05:00
  • 950fac7307 minor bug bpatel 2020-05-19 13:00:06 -07:00
  • aabe7dab14 Merge branch 'develop' into suspicious_zoom_process bpatel 2020-05-19 12:32:38 -07:00
  • f1f26dce81 Updated to support lookups in collections David Dorsey 2020-05-19 14:06:02 -05:00
  • d64cbafc56 adding a tested mitre ID mitre_id_update bpatel 2020-05-19 12:00:31 -07:00
  • 873c46184e Merge pull request #459 from jwindley-splunk/patch-3 Bhavin Patel 2020-05-19 11:56:20 -07:00
  • 0f1ba706b9 k8sScan azurek8sdetection Rod Soto 2020-05-19 14:20:10 -04:00
  • c76ebad945 updated Readme Patrick Bareiss 2020-05-19 17:00:31 +02:00
  • d2350dd6a8 updated Readme Patrick Bareiss 2020-05-19 16:53:35 +02:00
  • e48da8e952 Merge pull request #458 from splunk/spec3_ui P4T12ICK 2020-05-19 16:12:59 +02:00
  • e3f6752724 Update create_or_delete_network_shares.yml jwindley-splunk 2020-05-19 10:35:27 +01:00
  • ad6cf3a4c2 adding docs for spec files bpatel 2020-05-18 17:00:15 -07:00
  • 2b33d4fe86 spec documentation using jsonschema2md bpatel 2020-05-18 16:41:58 -07:00
  • 8d303f57c5 remove old files bpatel 2020-05-18 16:28:14 -07:00
  • 4124fedf12 remove mitre tatic from filters bpatel 2020-05-18 15:46:56 -07:00
  • bb190be50d remove Providing Technologies bpatel 2020-05-18 14:21:47 -07:00
  • 2e8f9dfee5 Merge pull request #456 from zelienka/patch-1 Bhavin Patel 2020-05-18 13:07:37 -07:00
  • f2fcabe907 link update bpatel 2020-05-18 12:25:30 -07:00
  • 9f11288073 supress fields updated bpatel 2020-05-18 12:23:07 -07:00
  • eb6039e449 Merge pull request #457 from jwindley-splunk/patch-2 Bhavin Patel 2020-05-18 11:58:04 -07:00
  • d72c44f626 minor link update bpatel 2020-05-18 11:40:04 -07:00
  • 530037ad16 Fixed typo in search, search optimization Vilém Zelienka 2020-05-18 15:42:03 +02:00
  • 2b0c42b8dc Update attrib_to_hide_files.yml jwindley-splunk 2020-05-18 12:11:33 +01:00
  • 2982fc3e8a Merge pull request #452 from splunk/new_generate_script Bhavin Patel 2020-05-15 12:07:58 -07:00
  • fcfea82cd4 make small changes Patrick Bareiss 2020-05-14 11:30:28 +02:00
  • e9e81cd1de bug in generate Patrick Bareiss 2020-05-14 10:11:16 +02:00
  • 9a50a74ee7 bug in generate Patrick Bareiss 2020-05-14 10:00:55 +02:00
  • 347c94032e bug in generate Patrick Bareiss 2020-05-13 11:09:33 +02:00
  • eedb7c49e2 bug in generate Patrick Bareiss 2020-05-13 10:46:58 +02:00