admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 4e385c59ba updating package files research bot 2019-05-21 23:31:11 +00:00
  • 494feb93e2 updating package files research bot 2019-05-21 23:30:10 +00:00
  • 9f1efafe4c Merge branch 'migrate_app_es_soc' of github.com:splunk/security-content into migrate_app_es_soc divious1 2019-05-21 16:25:07 -07:00
  • 1e4051395f added build number divious1 2019-05-21 16:24:58 -07:00
  • 09027ed109 version .1 bpatel 2019-05-21 16:07:19 -07:00
  • 7594aa3d82 updating package files [ci skip] research bot 2019-05-21 19:50:38 +00:00
  • e24b2060ff changed ci workflow to commit generated package file on every push divious1 2019-05-21 12:49:36 -07:00
  • e1d0025ec8 migrated app, updated ci job, and docs divious1 2019-05-21 12:35:33 -07:00
  • caf323614c remove flake8 for now bpatel 2019-05-21 12:01:57 -07:00
  • 3a130fc8e0 version 1 bpatel 2019-05-21 11:44:06 -07:00
  • 70ff2a9cb3 arn to user bpatel 2019-05-17 12:12:46 -07:00
  • 4616971e38 removing datamodel bpatel 2019-05-17 12:03:31 -07:00
  • cb2c30de86 bringing the branch upto date with develop bpatel 2019-05-17 11:50:36 -07:00
  • 0c99704777 field name error support_description_bug bpatel 2019-05-17 11:31:21 -07:00
  • 824ed3f678 generating src files bpatel 2019-05-17 11:27:44 -07:00
  • 7483590c54 Merge pull request #80 from splunk/mltk_content_tweaks rvaldez617 2019-05-17 12:05:28 -06:00
  • 3c3599d322 CRL-1428 - Reverting investigative searches. Jason Brewer 2019-05-17 10:58:25 -07:00
  • 438ac72bda changed detection searches to use start_time and end_time vs firstTime and lastTime, included links to docs on algorithm, and included mention of re-running support search in the how_to_implement for detections. Also fixed release #, and fixed incorrect risk object (was dest, should be src) on query length dns searches Rico Valdez 2019-05-17 11:17:49 -06:00
  • a1cd3de1ab Merge pull request #79 from splunk/appinspect-bugs rvaldez617 2019-05-15 15:19:28 -06:00
  • e4e88a53b4 src files bpatel 2019-05-15 14:12:35 -07:00
  • 3eaf538fe8 removing duplicate is_visible and local-true from commands.conf bpatel 2019-05-15 14:06:09 -07:00
  • 2bd4244ebf Merge pull request #78 from splunk/fix_references_mltk Bhavin Patel 2019-05-15 13:05:02 -07:00
  • 27dda7bf7c output of generate Rico Valdez 2019-05-15 14:03:45 -06:00
  • a5bc5d1ce6 Merge pull request #77 from splunk/fix_references_mltk Bhavin Patel 2019-05-15 12:59:38 -07:00
  • 25e629b8db fixes for references to renamed searches Rico Valdez 2019-05-15 13:56:49 -06:00
  • a1f2964dc8 CLR-1428 - removing comments and "search_type" keys. Jason Brewer 2019-05-15 10:58:12 -07:00
  • ddb68a64bb Merge pull request #76 from splunk/name_update_mltk Jose Enrique Hernandez 2019-05-15 13:57:16 -04:00
  • 2f1cdca631 updated names of the support searches and updates stories accordingly Rico Valdez 2019-05-15 11:51:39 -06:00
  • c24a20afc6 lame - adding spaces bpatel 2019-05-14 19:07:57 -07:00
  • 2dcc2fc636 CRL-1428 - Removing outputlookup from detection search. It is creating inconsistencies in the lookup. Jason Brewer 2019-05-14 12:55:09 -07:00
  • c40a264da5 Updating baseines/update_previously_seen_aws_users.json to use sourcetype search in sync with previously_seen_aws_users.json syntax. Jason Brewer 2019-05-14 11:42:49 -07:00
  • 0e320c6a39 CRL-1428 - Updating per code review feedback. Jason Brewer 2019-05-13 16:05:24 -07:00
  • 7510af7266 files updated to spec2.0 and phantom shell file bpatel 2019-05-13 12:36:05 -07:00
  • 520403e63a Merge pull request #74 from splunk/generate_bugs Jose Enrique Hernandez 2019-05-10 18:59:28 -04:00
  • 1bdd2e93d3 strip quotes in category, markdown for description bpatel 2019-05-10 14:06:39 -07:00
  • 5cc2fbcb0c Merge pull request #73 from splunk/title_fix Bhavin Patel 2019-05-10 13:45:26 -07:00
  • cf53e26de8 Merge branch 'develop' into title_fix Rico Valdez 2019-05-10 14:44:08 -06:00
  • 31aef80a75 ran generate function - commiting the configs Rico Valdez 2019-05-10 14:41:14 -06:00
  • 2286622900 going back to hyphens Rico Valdez 2019-05-10 14:39:34 -06:00
  • ea9ff93302 Merge pull request #72 from splunk/title_fix Bhavin Patel 2019-05-10 13:28:48 -07:00
  • 58fcd303b3 src files bpatel 2019-05-10 13:28:07 -07:00
  • 4fc1963103 Merge pull request #71 from splunk/title_fix Bhavin Patel 2019-05-10 13:23:37 -07:00
  • ead7741cee testing removing the hyphen from smb traffic spike Rico Valdez 2019-05-10 14:10:35 -06:00
  • 16e5c1ad75 Merge pull request #70 from splunk/title_fix Bhavin Patel 2019-05-10 12:53:33 -07:00
  • cf0e7111f0 src files for testing bpatel 2019-05-10 12:52:47 -07:00
  • fa6871faca generate code to test files mltk_3searches bpatel 2019-05-10 12:51:09 -07:00
  • 97d82b606f fixed title on support searches and updated relevant stories Rico Valdez 2019-05-10 13:47:54 -06:00
  • a4cc37ba56 Merge pull request #69 from splunk/generate_bug_baselinev1 Bhavin Patel 2019-05-10 12:10:44 -07:00
  • d7aead3b45 removing created and update to reference bpatel 2019-05-10 12:04:25 -07:00
  • 797fabfc70 Merge pull request #68 from splunk/generate_bug_baselinev1 Jose Enrique Hernandez 2019-05-10 13:53:16 -04:00
  • 631fce783d src files bpatel 2019-05-10 10:49:29 -07:00
  • e9135bc01d description for baselinev1 bpatel 2019-05-10 10:47:01 -07:00
  • 769b32d611 Merge pull request #67 from splunk/mltk_3searches Bhavin Patel 2019-05-10 10:13:02 -07:00
  • 98907055ff pushing Brianna edits Rico Valdez 2019-05-10 09:10:48 -06:00
  • dd0892edc8 running locally bpatel 2019-05-09 14:30:01 -07:00
  • bd42f11bb6 search tweaks (mostly output formatting) based on discussion with Bhavin Rico Valdez 2019-05-09 14:18:55 -06:00
  • 22100df132 fixed a non-ascii char that got in there Rico Valdez 2019-05-09 11:43:49 -06:00
  • d8aac902fb Slight search tweak and another text updates Rico Valdez 2019-05-09 10:54:36 -06:00
  • 12be9cdacc added a line to the how-to-implement for the model building manifests Rico Valdez 2019-05-09 09:53:43 -06:00
  • 6cdedee427 fixed an erronous change to the original spec file Rico Valdez 2019-05-08 15:57:04 -06:00
  • f8fe738bce another typo Rico Valdez 2019-05-08 15:43:18 -06:00
  • 37f6e78d6f another typo Rico Valdez 2019-05-08 15:40:59 -06:00
  • 0a6beee328 fixing typo Rico Valdez 2019-05-08 15:37:16 -06:00
  • be6701df8d fix some hyphen issues Rico Valdez 2019-05-08 15:33:18 -06:00
  • 318a41d3c9 translated to v1 spec Rico Valdez 2019-05-08 15:13:20 -06:00
  • a78865213d fixing some json structure after Brianna edits Rico Valdez 2019-05-08 10:25:59 -06:00
  • e9df2198d1 various changes for grammar, punctuation, and flow bblacet 2019-05-08 08:47:43 -07:00
  • 781924aaca Various changes for grammar, punctuation, and flow. bblacet 2019-05-07 16:52:42 -07:00
  • 39a8489a84 added a null cron_schedule to try to fix validation on baseline searches Rico Valdez 2019-05-07 14:46:05 -06:00
  • 13f7508c46 fixes to entities Rico Valdez 2019-05-07 14:32:04 -06:00
  • 030683cbed created 3 new searches and associated support searches that are mltk versions of existing searches. Also added them to the appropriate stories and fixed the non-capitalized title for an investigative search - updated associated stories for that as well. Rico Valdez 2019-05-07 13:57:23 -06:00
  • d6e95f7ec7 Merge pull request #63 from splunk/CRL-1348 Jose Enrique Hernandez 2019-05-07 14:42:01 -04:00
  • 7b4f48b330 Merge pull request #64 from splunk/brianna_as_reviwer Jose Enrique Hernandez 2019-05-07 14:22:23 -04:00
  • 6472504c85 fixing auto assigned users divious1 2019-05-07 14:20:02 -04:00
  • 6ec66236dd search and datamodel update bpatel 2019-05-07 11:18:24 -07:00
  • 98b66cc478 Merge pull request #61 from splunk/brianna_as_reviwer Jose Enrique Hernandez 2019-05-07 14:15:18 -04:00
  • a32dc49b0d adding brianna as the default reviewer divious1 2019-05-07 14:14:06 -04:00
  • 67cbbde5d7 Merge pull request #60 from splunk/CRL-1416 Philip Royer 2019-05-06 15:10:34 -04:00
  • 6284acdf37 updates to name and links bpatel 2019-05-06 11:48:35 -07:00
  • cb367c1998 Merge branch 'develop' of github.com:splunk/security-content into develop divious1 2019-05-03 23:43:18 -04:00
  • ebcfb72e50 updating automating on the project divious1 2019-05-03 23:36:20 -04:00
  • e25dc0ed9b CRL-1428 - Updating story/manifest to v2 and updating a related investigative search, get_notable_info.json, to v2. I missed it in my last sweep. Jason Brewer 2019-05-01 10:24:24 -07:00
  • 7950452a95 CRL-1428 - Updating relevant searches to spec v2. Jason Brewer 2019-04-30 17:03:34 -07:00
  • ad553d50d4 updating src files [ci skip] research bot 2019-04-29 21:25:06 +00:00
  • 7a8f2d01a9 Merge pull request #59 from splunk/file_writes_fix v1.0.37 Jose Enrique Hernandez 2019-04-29 17:13:50 -04:00
  • f761e9066c fixing broken detection search - suspicious_file_writes file_writes_fix Rico Valdez 2019-04-29 14:35:27 -06:00
  • 77ad425799 Merge pull request #58 from splunk/spec_update rvaldez617 2019-04-29 13:53:49 -06:00
  • 34f4a1ca98 typo spec_update divious1 2019-04-29 15:51:57 -04:00
  • 50fb65a58c minor rendering updates divious1 2019-04-29 15:31:44 -04:00
  • caf14955d5 updating src files [ci skip] research bot 2019-04-26 19:56:42 +00:00
  • a9b081e97d Merge pull request #57 from splunk/CRL-1391_phishing_payload_detection Jose Enrique Hernandez 2019-04-26 15:54:43 -04:00
  • f298c52387 date updates CRL-1391_phishing_payload_detection bpatel 2019-04-26 11:22:34 -07:00
  • ddad8fb162 CRL-1428 - Adding new user City, Region, and Country detections and needed baseline changes. Jason Brewer 2019-04-25 15:59:30 -07:00
  • 93ace4dac7 narrative update bpatel 2019-04-25 15:30:39 -07:00
  • b57d3641ce Merge pull request #55 from splunk/escu_2.0_bugs Bhavin Patel 2019-04-25 14:55:40 -07:00
  • e552a8831e fixing bugs escu_2.0_bugs divious1 2019-04-25 17:53:28 -04:00
  • 7df41e7d37 Merge pull request #54 from splunk/CRL-1391_phishing_payload_detection Jose Enrique Hernandez 2019-04-25 16:20:25 -04:00
  • 52f20cf934 created date in use case lib bpatel 2019-04-25 12:20:04 -07:00
  • e69b9bf457 markdown for use_Case_lib bpatel 2019-04-25 11:52:28 -07:00
  • ba97452af9 Merge pull request #53 from splunk/CRL-1391_phishing_payload_detection Jose Enrique Hernandez 2019-04-25 14:05:37 -04:00