Commit Graph

  • 20406758b6 updated datamodels and providing tech rendering divious1 2019-04-25 13:05:27 -04:00
  • 7e6c59287a write only once bpatel 2019-04-24 18:18:49 -07:00
  • 5f7f42e487 update to use spec 1 bpatel 2019-04-24 18:10:40 -07:00
  • 76457c0454 providing tech update on analytic_Stories bpatel 2019-04-24 16:22:53 -07:00
  • 1abb8e5d7e generate code bpatel 2019-04-24 15:09:11 -07:00
  • aeb70c9ec7 reference bpatel 2019-04-24 15:08:31 -07:00
  • b4fe5a97ac updated src files divious1 2019-04-24 17:51:21 -04:00
  • e9168daea5 Merge branch 'develop' of github.com:splunk/security-content into develop divious1 2019-04-24 17:45:36 -04:00
  • 5f04862fdd updating conf files divious1 2019-04-24 17:45:28 -04:00
  • 5be7983c5d Merge pull request #52 from splunk/CRL-1391_phishing_payload_detection Jose Enrique Hernandez 2019-04-24 17:24:11 -04:00
  • a258d98598 narratives bpatel 2019-04-24 13:17:11 -07:00
  • fc5743fd38 references bpatel 2019-04-24 11:42:16 -07:00
  • ac53da2583 Merge pull request #51 from splunk/CRL-1379_detect_phishing_frameworks Bhavin Patel 2019-04-24 11:05:32 -07:00
  • 87ce0942e3 url in howtoimplement CRL-1379_detect_phishing_frameworks bpatel 2019-04-24 11:04:34 -07:00
  • 1ac0a6f336 updating playbook url divious1 2019-04-24 14:01:14 -04:00
  • 6b8daec1ac Merge pull request #44 from splunk/CRL-1379_detect_phishing_frameworks Russ Nolen 2019-04-24 11:06:21 -05:00
  • de0dc66549 fixing url for evilginx to evilginx2 Russ Nolen 2019-04-24 11:02:16 -05:00
  • 4cb88ab6ff search update- syntax fixing bpatel 2019-04-23 20:26:06 -07:00
  • 62df393b0a manifest update with narrative bpatel 2019-04-23 19:59:11 -07:00
  • a7506fa712 new conf files bpatel 2019-04-23 19:24:37 -07:00
  • 88e42f2242 ascii ugh bpatel 2019-04-23 19:22:58 -07:00
  • 541fcafcd0 manifest bpatel 2019-04-23 19:18:28 -07:00
  • a0967ddaff phantom dets bpatel 2019-04-23 17:39:58 -07:00
  • f9bfe416fa minor bpatel 2019-04-23 17:21:30 -07:00
  • 8fe35490f5 manifest updates, phantom configs bpatel 2019-04-23 17:18:09 -07:00
  • 2a212c9942 Merge pull request #50 from splunk/spec_update Bhavin Patel 2019-04-23 14:42:00 -07:00
  • d897c1e5d7 Merge branch 'develop' into spec_update Jose Enrique Hernandez 2019-04-23 17:41:41 -04:00
  • 64abae1d75 correct issue with asset_type divious1 2019-04-23 17:40:18 -04:00
  • e2e6717801 force updated src files divious1 2019-04-23 17:33:23 -04:00
  • de08bc7eb1 Merge pull request #49 from splunk/spec_update Bhavin Patel 2019-04-23 14:31:28 -07:00
  • e805cb3ca2 fixed issue with phantom investigations being rendered divious1 2019-04-23 17:30:58 -04:00
  • e5137f6579 Merge pull request #48 from splunk/spec_update Bhavin Patel 2019-04-23 14:18:25 -07:00
  • 729913dda1 fixed an issue with generating cross pollinated content divious1 2019-04-23 17:17:33 -04:00
  • 039a8b83cb Merge pull request #47 from splunk/bump_version Bhavin Patel 2019-04-23 13:29:37 -07:00
  • 070a1eeeae bumped version bump_version divious1 2019-04-23 16:26:08 -04:00
  • 85cd0ea768 Merge pull request #46 from splunk/spec_update Bhavin Patel 2019-04-23 13:03:18 -07:00
  • 5e4ba79fa0 Merge branch 'develop' into spec_update Jose Enrique Hernandez 2019-04-23 15:59:44 -04:00
  • c472e2271e fixed categories divious1 2019-04-23 15:55:22 -04:00
  • 4186e81f2f json dump a field bpatel 2019-04-23 12:25:23 -07:00
  • 51be492a69 next steps string test bpatel 2019-04-23 12:04:03 -07:00
  • 62fd493f3e updated mappings in analytic_stories.conf divious1 2019-04-23 13:06:40 -04:00
  • dead462e2f updated mappings in analytic_stories.conf divious1 2019-04-23 13:05:50 -04:00
  • 91e4739e14 minor fixes bpatel 2019-04-22 18:26:01 -07:00
  • f0597100fa Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-04-22 20:33:56 -04:00
  • 60049a267e fixed issue with generating investigations and baselines on analytic_stories.conf divious1 2019-04-22 20:33:37 -04:00
  • facfe3f3ba updates with json dumps bpatel 2019-04-22 16:05:49 -07:00
  • 7ae6a0c83f json dumps bpatel 2019-04-22 16:01:19 -07:00
  • 22794c74e8 updates to gen code bpatel 2019-04-22 15:55:55 -07:00
  • a4fb08f126 naming issues in generate code, json dumps on mapping bpatel 2019-04-22 15:40:43 -07:00
  • e521959931 gen code bpatel 2019-04-22 15:07:19 -07:00
  • 9faa09339d Merge branch 'spec_update' of https://github.com/splunk/security-content into spec_update bpatel 2019-04-22 14:58:39 -07:00
  • fda13a0259 flake update and print bpatel 2019-04-22 14:58:28 -07:00
  • e4ac436819 Merge pull request #45 from splunk/CRL-1391_phishing_payload_detection Jose Enrique Hernandez 2019-04-22 17:53:13 -04:00
  • b6e6601198 Merge branch 'develop' into spec_update Jose Enrique Hernandez 2019-04-22 17:51:51 -04:00
  • f4d04c1fd1 running generator code bpatel 2019-04-22 14:50:29 -07:00
  • 284c2e0241 Merge branch 'develop' into spec_update divious1 2019-04-22 17:47:43 -04:00
  • 20a686c377 updated src files divious1 2019-04-22 17:45:42 -04:00
  • 2f216fec69 updated generator to include baseline and investigations on savedsearches.conf divious1 2019-04-22 17:41:36 -04:00
  • d6ac502752 updates from develop bpatel 2019-04-22 14:32:00 -07:00
  • 48bd58862d generate code again bpatel 2019-04-22 14:27:25 -07:00
  • a1a8ac22f8 generate code bpatel 2019-04-22 14:17:27 -07:00
  • 41999d363c validate and generate bpatel 2019-04-22 14:15:13 -07:00
  • 36542bae18 Merge branch 'develop' into CRL-1391_phishing_payload_detection Bhavin Patel 2019-04-22 14:05:56 -07:00
  • 926298f6cd validate errors bpatel 2019-04-22 13:51:30 -07:00
  • 9754e8a242 removing conf files bpatel 2019-04-22 12:41:50 -07:00
  • 7336624652 conflicts, merge spec update to this branch bpatel 2019-04-22 11:44:26 -07:00
  • 1c2d96c084 updating generator with some bugs divious1 2019-04-19 13:47:22 -04:00
  • 0fd38954c1 updating src files [ci skip] research bot 2019-04-19 15:36:06 +00:00
  • edcee75ffa updating src files [ci skip] v2.0.0 research bot 2019-04-19 15:03:22 +00:00
  • af2f7a7502 Merge branch 'spec_update' into develop divious1 2019-04-19 11:00:21 -04:00
  • fa3e66bf07 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-04-19 10:59:41 -04:00
  • a4efc519f9 Merge branch 'develop' into spec_update divious1 2019-04-19 10:58:47 -04:00
  • 7e8f267b81 fixes, run the genenrate code and validate bpatel 2019-04-18 17:05:55 -07:00
  • 8b82737055 updating validation to print verbose divious1 2019-04-18 19:56:12 -04:00
  • 4e17ca4774 Revert "cron update" bpatel 2019-04-18 16:15:24 -07:00
  • 72106a2bf0 dyn dns 2.0 bpatel 2019-04-18 15:17:56 -07:00
  • 746878cab9 cron update bpatel 2019-04-18 15:03:35 -07:00
  • 8c88bc8463 more searches to 2.0 bpatel 2019-04-18 15:00:55 -07:00
  • ce0eeade0f spec updates, searches to 2.0 bpatel 2019-04-18 14:39:01 -07:00
  • 3d43375341 fixes and udpates bpatel 2019-04-18 13:15:16 -07:00
  • 29ac460ce8 uuid bpatel 2019-04-18 12:57:22 -07:00
  • 68bc80c267 story file bpatel 2019-04-18 12:52:02 -07:00
  • 89cd9071ac updating a few v2 searches divious1 2019-04-18 15:33:40 -04:00
  • 8293a204b8 updating CI to use our new scripts divious1 2019-04-18 15:20:23 -04:00
  • d41996fa34 wrapped up most logic for the generator divious1 2019-04-18 15:15:42 -04:00
  • e0142d44fd fixed CI divious1 2019-04-18 14:42:43 -04:00
  • 63a4e6582f removed dns_hijack as it will be over written in v2 divious1 2019-04-18 14:38:24 -04:00
  • bdfc72749a updated validate script, included phantom in generator, fixed some stories to v2 divious1 2019-04-18 11:28:26 -04:00
  • 1fc8eb4d83 added generator for savedsearches, need to implement phantom divious1 2019-04-17 22:05:43 -04:00
  • 7a03712b5d adding usecase lib divious1 2019-04-17 10:25:34 -04:00
  • c1bb108cca search updates bpatel 2019-04-16 18:20:27 -07:00
  • a449fbb8f7 updating Censys in providing technologies bpatel 2019-04-16 11:25:19 -07:00
  • cff0563d28 phantom invesigation object bpatel 2019-04-16 11:20:37 -07:00
  • 7dd840e551 all objects now land in story generator divious1 2019-04-15 21:43:26 -04:00
  • 2663ea9510 spec update for a mitre field bpatel 2019-04-15 14:10:45 -07:00
  • 920c3397e9 validate.py in CI config bpatel 2019-04-15 14:01:02 -07:00
  • 18c76cd1ee Merge branch 'develop' into CRL-1391_phishing_payload_detection bpatel 2019-04-15 13:58:47 -07:00
  • 4509938d99 strings for a config bpatel 2019-04-15 13:39:53 -07:00
  • 86662c3c0a CI errors bpatel 2019-04-15 13:37:49 -07:00
  • cc8868007d config update to use validate.py bpatel 2019-04-15 13:21:37 -07:00