Commit Graph

  • adf26a76d8 Merge branch 'spec_update' of https://github.com/splunk/security-content into spec_update bpatel 2019-03-26 20:30:29 -04:00
  • 130e6fc9c6 renames: bpatel 2019-03-26 20:30:21 -04:00
  • c615358fea updating readme, adding logo divious1 2019-03-26 13:49:48 -04:00
  • 58d082d2bd baseline spec bpatel 2019-03-26 13:44:02 -04:00
  • 94ab0a3e21 Merge branch 'spec_update' of https://github.com/splunk/security-content into spec_update bpatel 2019-03-26 13:41:00 -04:00
  • c400c6657f support spec to support splunk/phantom bpatel 2019-03-26 13:40:52 -04:00
  • 821eee8afe minor spelling mistakes divious1 2019-03-26 13:39:10 -04:00
  • f6bc3566f3 updated dirs and README divious1 2019-03-26 13:36:04 -04:00
  • 7a9241433f removing ds store osx files divious1 2019-03-26 13:22:34 -04:00
  • c0b7672df1 updated project structure divious1 2019-03-26 10:28:12 -04:00
  • 59769ac51d Merge branch 'spec_update' of github.com:splunk/security-content into spec_update divious1 2019-03-25 16:27:00 -04:00
  • 8c3a6b2796 skeleton of generic detection spec divious1 2019-03-25 16:26:51 -04:00
  • a80a62513c spec update bpatel 2019-03-25 16:26:47 -04:00
  • bbe3e20a0a story spec update bpatel 2019-03-25 12:05:36 -04:00
  • a62845362b added content-version file api_prep divious1 2019-03-18 12:25:35 -04:00
  • e65d16a57d first cut at phishing story based on re-use Rico Valdez 2019-03-13 15:17:24 -06:00
  • d4f973359d local is true 1296 bpatel 2019-03-13 11:43:09 -07:00
  • 38b0a2bc86 risk parameter bpatel 2019-03-13 11:04:42 -07:00
  • f4b06eb8fe Merge pull request #35 from splunk/release_notes spec 1386 Bhavin Patel 2019-03-06 10:02:04 -08:00
  • 5c6a4e3651 version bumps for release notes release_notes bpatel 2019-03-06 09:49:57 -08:00
  • 8fcab010a4 updating src files [ci skip] research bot 2019-03-05 20:21:44 +00:00
  • 8bc82301d1 Merge pull request #34 from splunk/sysmon_to_endpoint v1.0.36 Jose Enrique Hernandez 2019-03-05 15:20:18 -05:00
  • 9a1b5bdfea Merge pull request #27 from splunk/CRL-1301 Jose Enrique Hernandez 2019-03-05 15:13:43 -05:00
  • ca0333fbb6 update to dates sysmon_to_endpoint bpatel 2019-03-05 11:47:22 -08:00
  • 2d5eb18add Merge branch 'develop' into sysmon_to_endpoint bpatel 2019-03-05 11:35:37 -08:00
  • 564b40acb3 Merge pull request #33 from splunk/add_args_to_bins Bhavin Patel 2019-03-05 11:31:46 -08:00
  • 71ca1a7fd9 updating src files [ci skip] research bot 2019-03-05 19:03:45 +00:00
  • 43481fe130 Merge pull request #31 from splunk/dns_hijack_update v1.0.35 Jose Enrique Hernandez 2019-03-05 13:59:34 -05:00
  • 2b04d0f014 Merge branch 'develop' into add_args_to_bins add_args_to_bins Jose Enrique Hernandez 2019-03-05 10:15:03 -05:00
  • 365bd2af6e allow us to run them locally divious1 2019-03-05 10:09:56 -05:00
  • 938603ed73 first time seen bpatel 2019-03-04 18:20:21 -08:00
  • be1c729f9a search update bpatel 2019-03-04 17:14:40 -08:00
  • 83a994b04c Fixed a few typos. dns_hijack_update bblacet 2019-03-04 16:04:05 -08:00
  • 9d24b94d39 same render fixes divious1 2019-03-04 11:13:20 -05:00
  • 81b8e78b06 more render errors divious1 2019-03-04 11:11:27 -05:00
  • f8afa6122b minor error in rendering content divious1 2019-03-04 10:36:45 -05:00
  • fe0f87d693 lame mistake bpatel 2019-03-01 16:27:36 -08:00
  • 0e9d6b87a0 to Endpoint bpatel 2019-03-01 16:24:12 -08:00
  • b3bb3dc2c8 Merge branch 'CRL-1301' of https://github.com/splunk/security-content into CRL-1301 CRL-1301 bpatel 2019-03-01 13:28:01 -08:00
  • bfb88345f1 spec updates for data_eventtypes and manifest updates bpatel 2019-03-01 13:27:17 -08:00
  • 9b1fae89a7 changes to search bpatel 2019-03-01 12:48:45 -08:00
  • ba559d0238 this is a cool join bpatel 2019-03-01 12:29:16 -08:00
  • 132fd84f7d CI related updates in manifests bpatel 2019-03-01 12:01:03 -08:00
  • 71d41ccd84 Merge branch 'develop' into CRL-1301 Bhavin Patel 2019-03-01 11:45:46 -08:00
  • 65503f0f39 typo bpatel 2019-03-01 11:30:41 -08:00
  • 9ea3352a84 CI failing bpatel 2019-03-01 11:19:20 -08:00
  • 57085a0cd6 Merge pull request #30 from splunk/validate_manifest_update Jose Enrique Hernandez 2019-03-01 14:06:33 -05:00
  • 8260bc7af3 updating valid datamodels validate_manifest_update bpatel 2019-03-01 11:04:10 -08:00
  • a7bc4146c7 Change bpatel 2019-03-01 10:57:08 -08:00
  • 63a18cb6e9 almost there bpatel 2019-02-28 18:32:21 -08:00
  • 9a1ba67a18 more endpoint bpatel 2019-02-28 18:04:50 -08:00
  • 5c71b3e44a updating searches bpatel 2019-02-28 17:48:45 -08:00
  • 9139133170 eventtype update bpatel 2019-02-28 16:51:45 -08:00
  • 7bf823f066 using Change datamodel bpatel 2019-02-28 16:37:40 -08:00
  • d6b423ba14 updating src files [ci skip] research bot 2019-02-28 01:18:00 +00:00
  • 1d2c421bad Merge pull request #29 from splunk/dns_hijack_update Bhavin Patel 2019-02-27 17:14:00 -08:00
  • 79c296aaa1 removing extra quote divious1 2019-02-27 20:11:59 -05:00
  • 286ff000fb updating src files [ci skip] research bot 2019-02-28 01:10:48 +00:00
  • b1f04e7cb9 Merge pull request #28 from splunk/dns_hijack_update Jose Enrique Hernandez 2019-02-27 20:09:24 -05:00
  • 759034732a minor rendering errors divious1 2019-02-27 20:07:01 -05:00
  • c6ed1ffcc9 updating src files [ci skip] research bot 2019-02-28 00:48:22 +00:00
  • 94a98bdf55 updates to mod dates bpatel 2019-02-27 16:11:18 -08:00
  • e6edd07294 updates to use eventtypes bpatel 2019-02-27 16:03:59 -08:00
  • 69fc49346f Merge pull request #22 from splunk/dns_hijack_update Bhavin Patel 2019-02-27 13:48:26 -08:00
  • f228adf7ad updating the search bpatel 2019-02-27 12:46:51 -08:00
  • 63d92144db Merge branch 'develop' into dns_hijack_update Jose Enrique Hernandez 2019-02-27 15:45:30 -05:00
  • d7857bb692 Merge branch 'develop' into dns_hijack_update divious1 2019-02-27 15:42:20 -05:00
  • e51efbcd90 udpates bpatel 2019-02-27 12:40:03 -08:00
  • 8b456720a9 updating the how to implement divious1 2019-02-27 15:34:09 -05:00
  • e8178f7760 Merge pull request #26 from splunk/dhs_dns_story Jose Enrique Hernandez 2019-02-27 11:17:26 -05:00
  • 5264fa352a fixing ci error for wrong datamodel divious1 2019-02-26 16:04:21 -05:00
  • 25386cb2a3 Merge pull request #25 from splunk/minor_readme_updates Jose Enrique Hernandez 2019-02-25 18:11:03 -05:00
  • dd3f20a9e2 updating search from a bug that rico found divious1 2019-02-25 18:07:05 -05:00
  • 852b632742 added phantom skeleton divious1 2019-02-25 12:56:55 -05:00
  • a3cd035ef4 new search manifest and story update dhs_dns_story Rico Valdez 2019-02-22 15:48:46 -07:00
  • 0983a0b4c0 added russ on random minor_readme_updates divious1 2019-02-21 19:45:31 -05:00
  • a855818a6f updating src files [ci skip] research bot 2019-02-22 00:32:31 +00:00
  • 868eb85fb9 Merge pull request #24 from splunk/CRL-1286 Bhavin Patel 2019-02-21 16:21:20 -08:00
  • b26c8546bb updating src files [ci skip] research bot 2019-02-21 21:57:36 +00:00
  • 5766df4388 Fixed a thing. CRL-1268-da-ess-contentupdate-help-document bblacet 2019-02-21 12:56:31 -08:00
  • 40dcc00b37 flake CRL-1286 bpatel 2019-02-21 12:27:56 -08:00
  • d9459ca3d4 Changes to fix em dash errors and a couple other typos. Hopefully, I didn't break anything while moving to the new server (since I had to clone the new repo and create my own branch via command line, which I haven't done before). I got a weird message that LFs would be replaced by CRLFs. Dunno if that was bad! CRL-1285-review-stories-with-emdash-code bblacet 2019-02-20 19:24:43 -08:00
  • e5542506c0 Merge pull request #23 from splunk/phil_bug Jose Enrique Hernandez 2019-02-19 13:16:31 -05:00
  • 9dcafb980b search udpated phil_bug bpatel 2019-02-14 17:20:12 -08:00
  • 573e904f20 added the detection search divious1 2019-02-14 17:09:53 -08:00
  • 819945a733 Merge branch 'CRL-1309_prohibited_apps_launching_cmd_lookup' into dns_hijack_update divious1 2019-02-14 10:14:15 -08:00
  • ea9cce90a7 adding support search to story divious1 2019-02-14 10:13:28 -08:00
  • c54eb9734d adding discovery search divious1 2019-02-14 10:11:28 -08:00
  • 2157006efc updated story with new searches divious1 2019-02-13 13:56:03 -08:00
  • 69ec28dbda updating src files [ci skip] research bot 2019-02-12 01:35:51 +00:00
  • d070c229a3 Merge pull request #21 from splunk/dhs_dns_story Jose Enrique Hernandez 2019-02-11 17:34:16 -08:00
  • f5d3df4cec Merge branch 'develop' into dhs_dns_story divious1 2019-02-11 17:32:02 -08:00
  • 2338492681 updating src files [ci skip] v1.0.34 research bot 2019-02-12 01:23:00 +00:00
  • 497d42845d fixing title divious1 2019-02-11 17:19:37 -08:00
  • 7baf2bfc5f updating src files [ci skip] research bot 2019-02-12 01:07:32 +00:00
  • c6d5336260 Merge pull request #20 from splunk/dhs_dns_story Jose Enrique Hernandez 2019-02-11 16:12:49 -08:00
  • d1e3b3d835 more of the same divious1 2019-02-11 14:51:42 -08:00
  • 28c6e3a050 fixing more ascii error divious1 2019-02-11 14:47:42 -08:00
  • 5f1aaffe9f ascii issue divious1 2019-02-11 14:43:19 -08:00
  • 6cc7d00a74 we do not support href divious1 2019-02-11 14:29:50 -08:00