admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • a23969f1c1 Merge branch 'develop' into CRL-1379_detect_phishing_frameworks bpatel 2019-04-15 13:18:02 -07:00
  • 1b7f6b66bd search update for joining the Web logs bpatel 2019-04-15 12:33:59 -07:00
  • 3fdc15a41b added baselines to generator divious1 2019-04-15 15:12:15 -04:00
  • ef1652997b OR clause in the search bpatel 2019-04-15 11:27:39 -07:00
  • d8fde46723 new csv files for legit domains bpatel 2019-04-15 11:15:48 -07:00
  • 86d64712ce description: bpatel 2019-04-15 10:41:37 -07:00
  • 61c394bb9c added phishlets for other providers Jose Enrique Hernandez 2019-04-15 11:39:53 -04:00
  • bb6ac0cb08 included other evilnginx detections Jose Enrique Hernandez 2019-04-15 11:35:10 -04:00
  • 63d6194192 outlook search bpatel 2019-04-12 18:03:52 -07:00
  • 221d9a0341 added 2 to evilginx name and update generator divious1 2019-04-12 18:57:00 -04:00
  • f5ed3db214 changed the words 'change analysis' to 'endpoint'. CRL-1363-Remote-Registry-Key-search-description-wrong bblacet 2019-04-12 15:03:32 -07:00
  • 4148ea43c3 added to phishing story divious1 2019-04-11 14:45:34 -04:00
  • 0c4c5390ea adding detection of lnk file launching a process divious1 2019-04-11 13:43:26 -04:00
  • ad6a52f49c adding phishing payloads story divious1 2019-04-09 16:02:27 -04:00
  • 420f8d1488 Merge pull request #41 from splunk/api_prep payloads fix-typos-in-dns-record-changed-search Bhavin Patel 2019-04-09 12:46:56 -07:00
  • 5512f7f543 Merge pull request #36 from splunk/1297 Jose Enrique Hernandez 2019-04-09 15:42:12 -04:00
  • 3265358511 Merge branch 'develop' into 1297 1297 Jose Enrique Hernandez 2019-04-09 15:41:21 -04:00
  • 23c6b08a03 Merge pull request #37 from splunk/1296 Jose Enrique Hernandez 2019-04-09 15:40:35 -04:00
  • 4be0765249 Merge pull request #39 from splunk/CRL-1349 Jose Enrique Hernandez 2019-04-09 15:40:04 -04:00
  • e031f41ec9 Merge pull request #40 from splunk/CRL-1386 Jose Enrique Hernandez 2019-04-09 15:28:20 -04:00
  • 46f68d62fe updating config for ci CRL-1386 divious1 2019-04-09 15:20:05 -04:00
  • 6ecf6b5bb0 updating config for ci divious1 2019-04-09 15:16:42 -04:00
  • 360f53345e updating setup tools to fix error divious1 2019-04-09 14:58:07 -04:00
  • c5ba54be63 updating setup tools to fix error divious1 2019-04-09 14:56:25 -04:00
  • 6d50218d43 updating CI to latest python image divious1 2019-04-09 14:47:53 -04:00
  • aa205852f9 spec 2 manifests bpatel 2019-04-09 11:34:37 -07:00
  • 8ee0606d6c first commit divious1 2019-04-09 14:17:13 -04:00
  • 00a13b450a update to the generator divious1 2019-04-09 13:43:53 -04:00
  • 2f371400fe outlook writing zips phishing_story bpatel 2019-04-08 16:18:18 -07:00
  • 8b43418a16 investivate using cert logs bpatel 2019-04-08 15:46:09 -07:00
  • a9f1731dd0 evil ginx search bpatel 2019-04-04 14:52:36 -07:00
  • 4e08aa61bc docs bpatel 2019-04-03 08:54:00 -07:00
  • 018cd8256c examples in spec files and docs bpatel 2019-04-02 17:00:32 -07:00
  • cfeccbd73e removed example spec divious1 2019-04-02 17:31:57 -05:00
  • 87c1490320 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-04-02 17:31:29 -05:00
  • 6112fcc9e6 updating schedule field in specs, also corrected validation logic divious1 2019-04-02 17:31:02 -05:00
  • d76848cb39 correct mistakes with the sub schema validation divious1 2019-04-02 17:03:55 -05:00
  • 6b852b50c3 fixed error in validate divious1 2019-04-02 17:03:26 -05:00
  • 43093da142 story spec with example and docs bpatel 2019-04-02 14:28:20 -07:00
  • b923dc56c3 updated investigations divious1 2019-04-02 14:47:10 -04:00
  • a9bb9bad0d updated spec and examples to correct some def errors divious1 2019-04-02 14:34:35 -04:00
  • 9cd8ba0343 skeleton of generate tool, removed old validation tool divious1 2019-04-02 14:33:27 -04:00
  • 35f8c61e8c oneOF example bpatel 2019-04-02 10:55:59 -07:00
  • 81770a38c8 application to endpoint bpatel 2019-04-01 14:45:12 -07:00
  • e562cc1e37 updated with baseline searches divious1 2019-04-01 16:36:17 -04:00
  • eed03e646b Updating the search to use endpoint DM CRL-1349 bpatel 2019-04-01 11:26:51 -07:00
  • af192d416d fixed errors with investigative validations divious1 2019-03-30 15:19:40 -04:00
  • f05f011e6b added investigative check functions divious1 2019-03-29 22:59:27 -04:00
  • fd6a55d7f4 updated mitre mappings divious1 2019-03-29 13:44:40 -04:00
  • a627f86f2d Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-03-29 13:34:28 -04:00
  • 1e965b3db5 udpated validate script to check detections divious1 2019-03-29 13:32:53 -04:00
  • 6c24bb91d9 spec omne enums and v2 examples bpatel 2019-03-29 12:45:15 -04:00
  • a2f431b6cc baseline update bpatel 2019-03-29 12:14:44 -04:00
  • 568771a14a Merge branch 'spec_update' of https://github.com/splunk/security-content into spec_update bpatel 2019-03-29 11:12:47 -04:00
  • 6ce4f809af updates bpatel 2019-03-28 12:46:04 -04:00
  • 341ee8b0c2 better printing for story divious1 2019-03-28 12:42:06 -04:00
  • bdbe20f992 detection spec update bpatel 2019-03-28 12:23:29 -04:00
  • 33eff9361c adding logic for checking story content divious1 2019-03-28 12:16:08 -04:00
  • fe3e471ffa validate story skeleton divious1 2019-03-28 12:00:14 -04:00
  • a5d69e8acc update veuve categories in story: bpatel 2019-03-28 10:55:53 -04:00
  • 57269d8cdb added example to story divious1 2019-03-27 23:35:27 -04:00
  • 6c44cc6054 updated readme divious1 2019-03-27 23:20:36 -04:00
  • 66f1c68311 updated readme divious1 2019-03-27 23:19:31 -04:00
  • bc405a63ad updated readme divious1 2019-03-27 23:17:30 -04:00
  • a011965498 added docs readme divious1 2019-03-27 23:16:26 -04:00
  • b6ee0378ca docs and updated response schema divious1 2019-03-27 23:08:17 -04:00
  • bd4849a256 updated spec and docs for investigations divious1 2019-03-27 23:05:07 -04:00
  • eab7cea48f updated spec and docs for investigations divious1 2019-03-27 22:57:38 -04:00
  • 10238a1cf6 fixing baseline divious1 2019-03-27 19:29:02 -04:00
  • ba9b46e009 updating bpatel 2019-03-27 19:25:06 -04:00
  • fb287b5750 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-03-27 19:12:14 -04:00
  • 048784ad66 updating story spec and others name to prep for auto doc generationgit status divious1 2019-03-27 19:05:48 -04:00
  • a5d8d2cad7 updates to enum bpatel 2019-03-27 18:54:42 -04:00
  • 5b10971172 naming changed bpatel 2019-03-27 18:37:39 -04:00
  • 2c3ee036b8 updated readme with doc gen instructions divious1 2019-03-27 18:20:53 -04:00
  • c473db1d6a merge conflicts divious1 2019-03-27 17:24:10 -04:00
  • 28239d6705 added docs for specs divious1 2019-03-27 17:22:44 -04:00
  • c57c7b5357 more spec jdpate bpatel 2019-03-27 16:53:27 -04:00
  • cbcd0371c5 entitirees bpatel 2019-03-27 16:47:56 -04:00
  • af17d1ea19 fixes bpatel 2019-03-27 16:43:29 -04:00
  • c7cb162ecd response bpatel 2019-03-27 16:38:29 -04:00
  • db8ce1a9cd emojis and stuff bpatel 2019-03-27 14:26:17 -04:00
  • c17a169367 baseline updates bpatel 2019-03-27 14:00:29 -04:00
  • de1b66abb0 splunk example bpatel 2019-03-27 13:45:45 -04:00
  • 7ee0f625e8 detection bpatel 2019-03-27 12:08:34 -04:00
  • 3717c4ddb6 updated schema versions divious1 2019-03-27 11:35:18 -04:00
  • c793eabf85 Merge branch 'spec_update' of https://github.com/splunk/security-content into spec_update bpatel 2019-03-27 11:27:36 -04:00
  • 9833427a4f product_up bpatel 2019-03-27 11:27:29 -04:00
  • 3b8d1ac231 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-03-27 11:13:17 -04:00
  • af66893917 removed unecessary prefixes divious1 2019-03-27 11:13:11 -04:00
  • a121e91d72 uba detection bpatel 2019-03-27 11:09:51 -04:00
  • f334e81732 updates bpatel 2019-03-27 11:05:14 -04:00
  • aa67083954 moved examples into their own folder divious1 2019-03-27 10:34:24 -04:00
  • bdddbe76c8 Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-03-27 10:29:58 -04:00
  • 722c2e2031 renamed things a bit divious1 2019-03-27 10:29:44 -04:00
  • 5d75e12a0b spec update bpatel 2019-03-27 10:25:44 -04:00
  • 31ff0c50f2 name conventions on file bpatel 2019-03-26 21:28:07 -04:00
  • 0063df9c6d id mappings bpatel 2019-03-26 21:26:19 -04:00
  • 185ab94068 example updates bpatel 2019-03-26 21:22:35 -04:00
  • f622335cda spec and structure bpatel 2019-03-26 21:15:04 -04:00