Commits

Commit history

1. Commits on Jun 25, 2020

   • Updated baseline deployments

     

     David Dorsey

     committed
     07ce28fView commit details

     Copy full SHA for 07ce28f

     View code at this pointBrowse repository at this point

   • Fixed the first time previously seen windows service search to work

     Show description for 8438bf7
     

     David Dorsey

     committed
     8438bf7View commit details

     Copy full SHA for 8438bf7

     View code at this pointBrowse repository at this point
2. Commits on Jun 17, 2020

   • Merge branch 'develop' into CRL-1771-update-story-windows-service-abuse

     patel-bhavin

     authored
     82c209bView commit details

     Copy full SHA for 82c209b

     View code at this pointBrowse repository at this point
3. Commits on Jun 16, 2020

   • removed searches that depend on non-extracted fields

     

     Rico Valdez

     committed
     e96a91aView commit details

     Copy full SHA for e96a91a

     View code at this pointBrowse repository at this point
4. Commits on Jun 15, 2020

   • testing and update of story Windows Service Abuse

     

     Patrick Bareiss

     committed
     f892cdaView commit details

     Copy full SHA for f892cda

     View code at this pointBrowse repository at this point
5. Commits on Jun 9, 2020

   • text updates for ES and AWS add-on version

     

     Rico Valdez

     committed
     36a29c3View commit details

     Copy full SHA for 36a29c3

     View code at this pointBrowse repository at this point

   • rename search names

     patel-bhavin

     committed
     f4bc32fView commit details

     Copy full SHA for f4bc32f

     View code at this pointBrowse repository at this point
6. Commits on Jun 8, 2020

   • yml updates for validate

     patel-bhavin

     committed
     9aafe24View commit details

     Copy full SHA for 9aafe24

     View code at this pointBrowse repository at this point

   • updates for fixes noted by Bhavin

     

     Rico Valdez

     committed
     32b200fView commit details

     Copy full SHA for 32b200f

     View code at this pointBrowse repository at this point
7. Commits on Jun 5, 2020

   • Merge branch 'develop' into CRL-1766-auth-dm-updates

     Show description for af64fab
     

     Rico Valdez

     committed
     af64fabView commit details

     Copy full SHA for af64fab

     View code at this pointBrowse repository at this point
8. Commits on May 28, 2020

   • file name updates, initial migration to spec 3. dm2_yml files are legacy for reference and will be removed before merging

     

     Rico Valdez

     committed
     ac3003cView commit details

     Copy full SHA for ac3003c

     View code at this pointBrowse repository at this point

   • converted to spec3 and other updates

     patel-bhavin

     committed
     72d3ab8View commit details

     Copy full SHA for 72d3ab8

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into CRL-1766-auth-dm-updates

     Show description for 04f6e03
     

     Rico Valdez

     committed
     04f6e03View commit details

     Copy full SHA for 04f6e03

     View code at this pointBrowse repository at this point
9. Commits on May 26, 2020

   • new files for updated detections

     

     Rico Valdez

     committed
     1d9beb8View commit details

     Copy full SHA for 1d9beb8

     View code at this pointBrowse repository at this point
10. Commits on May 25, 2020

    • Updated searches

      

      Patrick Bareiss

      committed
      729419bView commit details

      Copy full SHA for 729419b

      View code at this pointBrowse repository at this point
11. Commits on May 14, 2020

    • bug in generate

      

      Patrick Bareiss

      committed
      9a50a74View commit details

      Copy full SHA for 9a50a74

      View code at this pointBrowse repository at this point
12. Commits on May 12, 2020

    • bug in generate

      

      Patrick Bareiss

      committed
      151bbbaView commit details

      Copy full SHA for 151bbba

      View code at this pointBrowse repository at this point
13. Commits on May 6, 2020

    • new generate script

      

      Patrick Bareiss

      committed
      cda505dView commit details

      Copy full SHA for cda505d

      View code at this pointBrowse repository at this point
14. Commits on May 5, 2020

    • updated content

      

      Patrick Bareiss

      committed
      cc464c8View commit details

      Copy full SHA for cc464c8

      View code at this pointBrowse repository at this point
15. Commits on Apr 30, 2020

    • WIP validate script

      

      Patrick Bareiss

      committed
      442a575View commit details

      Copy full SHA for 442a575

      View code at this pointBrowse repository at this point

    • WIP

      

      Patrick Bareiss

      committed
      7cbc9a9View commit details

      Copy full SHA for 7cbc9a9

      View code at this pointBrowse repository at this point
16. Commits on Apr 29, 2020

    • Converted all objects to new spec

      

      Patrick Bareiss

      committed
      d2e8222View commit details

      Copy full SHA for d2e8222

      View code at this pointBrowse repository at this point
17. Commits on Mar 4, 2020

    • fixing reported error

      josehelps

      committed
      799d22dView commit details

      Copy full SHA for 799d22d

      View code at this pointBrowse repository at this point
18. Commits on Jan 13, 2020

    • updated search/metadata, tested in attack_range

      patel-bhavin

      committed
      54c9bc9View commit details

      Copy full SHA for 54c9bc9

      View code at this pointBrowse repository at this point
19. Commits on Dec 16, 2019

    • naming updates, jinja macros updates

      patel-bhavin

      committed
      8ae3ebdView commit details

      Copy full SHA for 8ae3ebd

      View code at this pointBrowse repository at this point
20. Commits on Dec 11, 2019

    • fixing the files that didnt update the macros correctly

      patel-bhavin

      committed
      b379395View commit details

      Copy full SHA for b379395

      View code at this pointBrowse repository at this point

    • added summariesonly and fixed ctime

      josehelps

      committed
      f8e3113View commit details

      Copy full SHA for f8e3113

      View code at this pointBrowse repository at this point

    • introduced security_content_ctime as a macro, renamed all our searches to use this new macro, removing ES dependecy

      josehelps

      committed
      f9bdf7eView commit details

      Copy full SHA for f9bdf7e

      View code at this pointBrowse repository at this point
21. Commits on Nov 26, 2019

    • CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK"

      

      Jason Brewer

      committed
      95f73c9View commit details

      Copy full SHA for 95f73c9

      View code at this pointBrowse repository at this point
22. Commits on Nov 25, 2019

    • CRL-1646 - changing from user to src_user

      

      Jason Brewer

      committed
      604e2ecView commit details

      Copy full SHA for 604e2ec

      View code at this pointBrowse repository at this point

    • CRL-1646 , CRL-1697 - Making minor tweaks to excessive run instance detections (using ARN vs username) added -MLTK to labels. Added reference for Cloud Compute Instance Created With Previously Unse…

      Show description for 38be9eb
      

      Jason Brewer

      committed
      38be9ebView commit details

      Copy full SHA for 38be9eb

      View code at this pointBrowse repository at this point
23. Commits on Nov 22, 2019

    • CRL-1646 - Adjusting how to implement to quote the string and escape the newlines to soothe our tool chain.

      

      Jason Brewer

      committed
      12d6587View commit details

      Copy full SHA for 12d6587

      View code at this pointBrowse repository at this point
24. Commits on Nov 21, 2019

    • CRL-1646 - fixing stats.

      

      Jason Brewer

      committed
      37cdeabView commit details

      Copy full SHA for 37cdeab

      View code at this pointBrowse repository at this point

    • CRL-1646 - Updating to add input_filter macro to searches and to reference baseline search from detection search.

      

      Jason Brewer

      committed
      3d1846cView commit details

      Copy full SHA for 3d1846c

      View code at this pointBrowse repository at this point
25. Commits on Nov 20, 2019

    • CRL-1646 - Modifying search to see if my yml is wrong for a multiline object with pipes.

      

      Jason Brewer

      committed
      f21db84View commit details

      Copy full SHA for f21db84

      View code at this pointBrowse repository at this point