admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 235beccb12 Bump typing from 3.7.4 to 3.7.4.1 dependabot-preview[bot] 2019-09-12 16:29:44 +00:00
  • ca109f84db Merge pull request #201 from splunk/dependabot/pip/virtualenv-16.7.5 Jose Enrique Hernandez 2019-09-12 12:29:34 -04:00
  • e5a67a7145 Merge pull request #197 from splunk/dependabot/pip/pre-commit-1.18.3 Jose Enrique Hernandez 2019-09-12 12:29:03 -04:00
  • d5d03995d0 Bump identify from 1.4.6 to 1.4.7 dependabot-preview[bot] 2019-09-12 16:28:42 +00:00
  • c6e5e85581 Merge pull request #203 from splunk/dependabot/pip/semantic-version-2.8.2 Jose Enrique Hernandez 2019-09-12 12:28:38 -04:00
  • 9a2575b771 Merge pull request #204 from splunk/dependabot/pip/configparser-4.0.1 Jose Enrique Hernandez 2019-09-12 12:27:55 -04:00
  • 54819dbe80 Merge pull request #207 from splunk/dependabot/pip/importlib-metadata-0.22 Jose Enrique Hernandez 2019-09-12 12:27:27 -04:00
  • 295a8587ea Bump importlib-metadata from 0.19 to 0.22 dependabot-preview[bot] 2019-09-12 05:39:52 +00:00
  • 64a8d8990d static method error bpatel 2019-09-11 18:37:19 -07:00
  • 6061aec7f8 adding detection results to KV store bpatel 2019-09-11 17:05:57 -07:00
  • af1a9d89e7 correcting new line char divious1 2019-09-11 15:58:02 -04:00
  • 404b9566e2 process to process_name CRL-1617 bpatel 2019-09-10 15:42:27 -07:00
  • 6a38c841ee Bump configparser from 3.8.1 to 4.0.1 dependabot-preview[bot] 2019-09-10 05:46:23 +00:00
  • 8caf104960 Bump semantic-version from 2.6.0 to 2.8.2 dependabot-preview[bot] 2019-09-09 06:08:29 +00:00
  • 4d221f5d18 added entities field and updated spec files bpatel 2019-09-04 16:36:08 -07:00
  • c1208b0fb2 adding investigate.py bpatel 2019-09-04 16:16:10 -07:00
  • d15531c6fb fixing new line char error divious1 2019-09-04 16:44:39 -04:00
  • dceb4ab5d7 fixed issues with new line escaping divious1 2019-09-04 15:59:40 -04:00
  • 4fdf20ce0d Merge branch 'develop' into run_detections bpatel 2019-09-04 10:32:54 -07:00
  • bb0a440b62 removing example repo as all content is now v2 divious1 2019-09-04 12:44:43 -04:00
  • 979938f707 cleaned up markdown logic from scripts divious1 2019-09-04 12:42:58 -04:00
  • 4849a89daf Fixed listing from markdown divious1 2019-09-04 12:33:15 -04:00
  • fe0b0e1133 removing html tags divious1 2019-09-04 12:20:27 -04:00
  • 75e50cb544 Bump virtualenv from 16.7.2 to 16.7.5 dependabot-preview[bot] 2019-09-04 05:40:13 +00:00
  • 0a9d6cbc8e Bump pre-commit from 1.18.1 to 1.18.3 dependabot-preview[bot] 2019-08-28 10:32:30 +00:00
  • 6a2216b974 updating docs and package bits [ci skip] research bot 2019-08-27 22:45:42 +00:00
  • 866e929d37 just found the function call missing narrative for the splunk wiki markup CRL-1589_fix_tag_error divious1 2019-08-27 17:13:52 -04:00
  • 621f26301b Merge pull request #192 from splunk/CRL-1607-Fix-Weird-Italics v1.0.42 Jose Enrique Hernandez 2019-08-27 16:53:52 -04:00
  • d0a384fdb5 Bump zipp from 0.5.2 to 0.6.0 dependabot-preview[bot] 2019-08-26 06:14:38 +00:00
  • 5972936635 Update dyn_dns_queries.json Brianna 2019-08-23 12:09:04 -07:00
  • db5c8576d4 Update dyn_dns_queries.json Brianna 2019-08-23 12:03:57 -07:00
  • 6fe35074e1 Merge pull request #190 from splunk/add_missing_tactic Bhavin Patel 2019-08-22 09:41:24 -07:00
  • 1cc3fe534b Modified att&ck mappings for these files. Mostly just added the high level tactic, but also tweaked some incluidng smb spike searches and ones about creating accounts Rico Valdez 2019-08-22 09:57:45 -06:00
  • 2a58224efa Merge pull request #187 from splunk/v2Manifests rvaldez617 2019-08-16 11:10:12 -06:00
  • a78378c0ea Merge pull request #186 from splunk/CRL-1598_metadata_bug Bhavin Patel 2019-08-15 17:48:48 -07:00
  • 42788cc933 Owner reviewed bpatel 2019-08-15 17:37:44 -07:00
  • d8975a5f70 CRL-1598 removed incorrect stanza divious1 2019-08-15 10:14:36 -04:00
  • b2bd09a588 Merge pull request #183 from splunk/CRL-1592_DNS_Query_Length_bug rvaldez617 2019-08-14 10:11:54 -06:00
  • 019791e8bd Merge pull request #185 from splunk/CRL-1591 Jose Enrique Hernandez 2019-08-14 12:10:32 -04:00
  • 36c856ebde Merge pull request #184 from splunk/dependabot/pip/identify-1.4.6 Jose Enrique Hernandez 2019-08-14 12:09:34 -04:00
  • 984a6879ce Merge pull request #182 from splunk/dependabot/pip/pre-commit-1.18.1 Jose Enrique Hernandez 2019-08-14 12:08:18 -04:00
  • 4667357506 Merge pull request #181 from splunk/dependabot/pip/configparser-3.8.1 Jose Enrique Hernandez 2019-08-14 12:07:48 -04:00
  • 64bd4259e2 Merge pull request #177 from splunk/dependabot/pip/pyyaml-5.1.2 Jose Enrique Hernandez 2019-08-14 12:05:33 -04:00
  • 2f46c0cca7 Merge pull request #178 from splunk/dependabot/pip/jsonschema-3.0.2 Jose Enrique Hernandez 2019-08-14 12:04:59 -04:00
  • f278ff5b9d updated to v2 spec divious1 2019-08-14 12:03:19 -04:00
  • 902a2dff7d Merge pull request #180 from splunk/v2Manifests Jose Enrique Hernandez 2019-08-14 11:58:06 -04:00
  • dacd5b1d55 removed src field from table, as it is not available and results in a blank column. Also incremented the version as a significant change was made to the search Rico Valdez 2019-08-13 15:46:49 -06:00
  • 1dc4964261 remove incorrect stanzas bpatel 2019-08-13 11:53:57 -07:00
  • 0e0e442e68 Bump identify from 1.4.5 to 1.4.6 dependabot-preview[bot] 2019-08-13 06:05:08 +00:00
  • 5168a396ef updated search divious1 2019-08-12 19:42:30 -04:00
  • 5e72c3b94d errrors in file bpatel 2019-08-12 15:27:27 -07:00
  • d2ab5d7aba Bump pre-commit from 1.17.0 to 1.18.1 dependabot-preview[bot] 2019-08-12 06:58:11 +00:00
  • 0a389a8612 Bump configparser from 3.7.4 to 3.8.1 dependabot-preview[bot] 2019-08-12 06:57:30 +00:00
  • 8eb0084ae0 re-applying some fixes for channel. Also, merging in develop broke the spec file, so fixed that. Rico Valdez 2019-08-06 20:47:35 -06:00
  • 83b3a18f71 removed all .bu files and re-generated the investigation manifests with the fixed field name and values as strings. Rico Valdez 2019-08-06 20:30:03 -06:00
  • 6c226ce055 renamed offset keys for timing divious1 2019-08-06 18:00:52 -04:00
  • b82eaa7750 fixing merge conflicts divious1 2019-08-06 17:45:35 -04:00
  • 5836446617 fixed channel in stories, minor tweaks to detections. Also - updated spec to allow validation to pass for UBA detection, as well as updated validation script Rico Valdez 2019-08-06 14:58:39 -06:00
  • 402581dacd Merge branch 'develop' into run_detections bpatel 2019-08-06 13:48:32 -07:00
  • b8711d99be modifications to baselines, investigations as appropriate and added usecase field to stories Rico Valdez 2019-08-06 13:38:09 -06:00
  • 49b0f2c80f Bump jsonschema from 3.0.1 to 3.0.2 dependabot-preview[bot] 2019-08-02 05:56:48 +00:00
  • 79b9d5e402 Bump pyyaml from 5.1.1 to 5.1.2 dependabot-preview[bot] 2019-08-01 06:02:46 +00:00
  • 8e866fab4f Merge tag 'v1.0.41' divious1 2019-07-30 12:38:36 -04:00
  • bf7ed96204 updating docs and package bits [ci skip] research bot 2019-07-29 20:58:00 +00:00
  • 54e360bed9 Merge pull request #157 from splunk/dependabot/pip/typing-3.7.4 v1.0.41 Jose Enrique Hernandez 2019-07-29 14:57:19 -04:00
  • 663e294aae Merge pull request #158 from splunk/dependabot/pip/pathlib2-2.3.4 Jose Enrique Hernandez 2019-07-29 14:56:57 -04:00
  • 0fc91f64c8 Merge pull request #159 from splunk/dependabot/pip/zipp-0.5.2 Jose Enrique Hernandez 2019-07-29 14:56:44 -04:00
  • 9f66220d16 Merge pull request #171 from splunk/move_doc_gen_collapse Bhavin Patel 2019-07-29 11:55:37 -07:00
  • b60ee685c3 Bump pathlib2 from 2.3.3 to 2.3.4 dependabot-preview[bot] 2019-07-29 18:52:14 +00:00
  • 72de6fbb3b Bump typing from 3.6.6 to 3.7.4 dependabot-preview[bot] 2019-07-29 18:51:51 +00:00
  • 37fd7a921c Bump zipp from 0.5.1 to 0.5.2 dependabot-preview[bot] 2019-07-29 18:51:51 +00:00
  • e0a9944b82 Merge pull request #165 from splunk/dependabot/pip/cfgv-2.0.1 Jose Enrique Hernandez 2019-07-29 14:51:21 -04:00
  • 8dc0cbb997 Merge pull request #174 from splunk/dependabot/pip/pyrsistent-0.15.4 Jose Enrique Hernandez 2019-07-29 14:50:56 -04:00
  • c5d9a6eb7b Merge pull request #175 from splunk/dependabot/pip/virtualenv-16.7.2 Jose Enrique Hernandez 2019-07-29 14:50:35 -04:00
  • a24d613d7b Merge pull request #176 from splunk/dependabot/pip/importlib-metadata-0.19 Jose Enrique Hernandez 2019-07-29 14:49:42 -04:00
  • b7fcf3ade1 fixing issue where i wiped out most of the original code divious1 2019-07-29 14:47:02 -04:00
  • e762136534 Merge branch 'develop' bpatel 2019-07-29 11:43:00 -07:00
  • a550d79be6 fixed duplicate investigations and added new content for latest release Rico Valdez 2019-07-29 11:53:01 -06:00
  • 5dde18ff54 resolving conflicts divious1 2019-07-29 13:52:42 -04:00
  • c7f3256dc0 Bump importlib-metadata from 0.18 to 0.19 dependabot-preview[bot] 2019-07-29 06:29:12 +00:00
  • f0a5ccfee6 Bump virtualenv from 16.6.1 to 16.7.2 dependabot-preview[bot] 2019-07-29 06:28:36 +00:00
  • 730f7da8ab Bump pyrsistent from 0.15.2 to 0.15.4 dependabot-preview[bot] 2019-07-29 06:28:04 +00:00
  • 2e4418bbfe Merge pull request #173 from splunk/endpoint_bugfix Bhavin Patel 2019-07-26 13:06:12 -07:00
  • fab3eea2b4 Merge pull request #156 from splunk/CRL-1572_doc_gen Bhavin Patel 2019-07-26 13:02:35 -07:00
  • 4687636a53 fixes for 2 broken searches - CRL-1586 & 1587 Rico Valdez 2019-07-26 14:01:27 -06:00
  • 03195cf747 Merge pull request #172 from splunk/CRL-1584-updated-spec-docs Bhavin Patel 2019-07-26 13:01:24 -07:00
  • ff645ae86a Merge pull request #170 from splunk/CRL-1580 Bhavin Patel 2019-07-26 12:53:15 -07:00
  • b1ac41233f Update story.spec.json briannablacet 2019-07-26 12:52:29 -07:00
  • a41d7a9991 minor modifications base on Jes feedback divious1 2019-07-26 15:48:09 -04:00
  • 6c15dc4db4 fixing a key in manifest bpatel 2019-07-26 12:41:44 -07:00
  • fa63216143 Merge pull request #161 from splunk/CRL-1577 Bhavin Patel 2019-07-26 12:30:05 -07:00
  • 57118d085c Merge pull request #167 from splunk/CRL-1580 Bhavin Patel 2019-07-26 12:26:53 -07:00
  • 6002457d6c Update detections.spec.json briannablacet 2019-07-25 18:22:39 -07:00
  • d70c80b62c Update investigations.spec.json briannablacet 2019-07-25 17:14:44 -07:00
  • 16ae8c67ef Update baselines.spec.json briannablacet 2019-07-25 17:11:24 -07:00
  • c37ecd6f97 Update investigations.spec.json briannablacet 2019-07-25 15:48:11 -07:00
  • 09116b5cf9 Update baselines.spec.json briannablacet 2019-07-25 15:44:39 -07:00
  • 8bf2c3c491 Update investigations.spec.json briannablacet 2019-07-25 15:10:16 -07:00
  • 5090c726fd Merge pull request #168 from splunk/CRL-1584_schema_doc_update rvaldez617 2019-07-25 15:29:49 -06:00
  • 132e21b14e updated docs divious1 2019-07-25 17:13:31 -04:00