Jose Enrique Hernandez 8bc82301d1 Merge pull request #34 from splunk/sysmon_to_endpoint
Sysmon to endpoint
2019-03-05 15:20:18 -05:00
2019-03-05 10:09:56 -05:00
2019-02-21 19:45:31 -05:00
2018-12-20 14:32:13 -05:00
2018-12-20 16:25:33 -05:00
2019-02-04 18:30:03 -05:00
2018-12-18 16:14:16 -05:00
2019-02-21 19:45:31 -05:00
2019-02-08 21:53:42 -05:00

branch build status
develop develop status
master master status

security-content

Contains a collection of security stories with their corresponding detection, investigative, contexual and support splunk searches

Consumption

Can be consumed using:

Structure

src/ - splunk content app source files, includes lookups, binaries, and defaul config files

Developing

For getting pre-commit checks, install the hooks see below for steps:

  1. Install circleci CLI Tool
  2. create virtualenv and install requirements: virtualenv venv && source venv/bin/activate && pip install -r requirements.txt
  3. install pre-commit pre-commit install

To test a local change to CI or build make sure you are running docker and then circleci local execute -e GITHUB_TOKEN=$GITHUB_TOKEN --branch <your branch>

S
Description
Automated archival mirror of github.com/splunk/security_content
Readme Apache-2.0 332 MiB
Languages
Python 64.5%
Jupyter Notebook 35.5%