Commits

Commit history

1. Commits on Nov 26, 2019

   • CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK"

     

     Jason Brewer

     committed
     95f73c9View commit details

     Copy full SHA for 95f73c9

     View code at this pointBrowse repository at this point
2. Commits on Nov 25, 2019

   • CRL-1646 - changing from user to src_user

     

     Jason Brewer

     committed
     604e2ecView commit details

     Copy full SHA for 604e2ec

     View code at this pointBrowse repository at this point

   • CRL-1646 , CRL-1697 - Making minor tweaks to excessive run instance detections (using ARN vs username) added -MLTK to labels. Added reference for Cloud Compute Instance Created With Previously Unse…

     Show description for 38be9eb
     

     Jason Brewer

     committed
     38be9ebView commit details

     Copy full SHA for 38be9eb

     View code at this pointBrowse repository at this point
3. Commits on Nov 22, 2019

   • CRL-1646 - Adjusting how to implement to quote the string and escape the newlines to soothe our tool chain.

     

     Jason Brewer

     committed
     12d6587View commit details

     Copy full SHA for 12d6587

     View code at this pointBrowse repository at this point
4. Commits on Nov 21, 2019

   • CRL-1646 - fixing stats.

     

     Jason Brewer

     committed
     37cdeabView commit details

     Copy full SHA for 37cdeab

     View code at this pointBrowse repository at this point

   • CRL-1646 - Updating to add input_filter macro to searches and to reference baseline search from detection search.

     

     Jason Brewer

     committed
     3d1846cView commit details

     Copy full SHA for 3d1846c

     View code at this pointBrowse repository at this point
5. Commits on Nov 20, 2019

   • CRL-1646 - Modifying search to see if my yml is wrong for a multiline object with pipes.

     

     Jason Brewer

     committed
     f21db84View commit details

     Copy full SHA for f21db84

     View code at this pointBrowse repository at this point

   • CRL-1646 - Implemented : Update Detection for abnormally_high_instances_launched to use MLTK

     

     Jason Brewer

     committed
     b3b4f4eView commit details

     Copy full SHA for b3b4f4e

     View code at this pointBrowse repository at this point
6. Commits on Oct 24, 2019

   • updates to propery use cloud_infrastructure

     

     Rico Valdez

     committed
     7fa96a7View commit details

     Copy full SHA for 7fa96a7

     View code at this pointBrowse repository at this point
7. Commits on Oct 16, 2019

   • Changed json to yml

     

     Patrick Bareiss

     committed
     af66ed5View commit details

     Copy full SHA for af66ed5

     View code at this pointBrowse repository at this point
8. Commits on Oct 8, 2019

   • Merge branch 'develop' into cloud_cryptominig

     

     David Dorsey

     committed
     85a637bView commit details

     Copy full SHA for 85a637b

     View code at this pointBrowse repository at this point
9. Commits on Oct 4, 2019

   • Files for new cloud cryptominig story.

     Show description for 82e8b21
     

     David Dorsey

     committed
     82e8b21View commit details

     Copy full SHA for 82e8b21

     View code at this pointBrowse repository at this point
10. Commits on Oct 3, 2019

    • Started to create Cloud Cryptomining story

      Show description for cc6209a
      

      David Dorsey

      committed
      cc6209aView commit details

      Copy full SHA for cc6209a

      View code at this pointBrowse repository at this point
11. Commits on Sep 30, 2019

    • Fixed issue inside of where clause

      

      David Dorsey

      committed
      aec9dd5View commit details

      Copy full SHA for aec9dd5

      View code at this pointBrowse repository at this point
12. Commits on Sep 4, 2019

    • removing html tags

      josehelps

      committed
      fe0b0e1View commit details

      Copy full SHA for fe0b0e1

      View code at this pointBrowse repository at this point
13. Commits on Jul 25, 2019

    • All manifests converted to spec v2

      

      Rico Valdez

      committed
      80c6870View commit details

      Copy full SHA for 80c6870

      View code at this pointBrowse repository at this point
14. Commits on Jul 18, 2019

    • fixing stories that are using product_type

      josehelps

      committed
      06f5aa7View commit details

      Copy full SHA for 06f5aa7

      View code at this pointBrowse repository at this point
15. Commits on May 30, 2019

    • merge and testing the package

      patel-bhavin

      committed
      6dd4f4dView commit details

      Copy full SHA for 6dd4f4d

      View code at this pointBrowse repository at this point
16. Commits on May 23, 2019

    • text updates and removed isOutlier from search output

      

      Rico Valdez

      committed
      43ef842View commit details

      Copy full SHA for 43ef842

      View code at this pointBrowse repository at this point
17. Commits on May 17, 2019

    • removing datamodel

      patel-bhavin

      committed
      4616971View commit details

      Copy full SHA for 4616971

      View code at this pointBrowse repository at this point

    • bringing the branch upto date with develop

      patel-bhavin

      committed
      cb2c30dView commit details

      Copy full SHA for cb2c30d

      View code at this pointBrowse repository at this point

    • changed detection searches to use start_time and end_time vs firstTime and lastTime, included links to docs on algorithm, and included mention of re-running support search in the how_to_implement f…

      Show description for 438ac72
      

      Rico Valdez

      committed
      438ac72View commit details

      Copy full SHA for 438ac72

      View code at this pointBrowse repository at this point
18. Commits on May 15, 2019

    • updated names of the support searches and updates stories accordingly

      

      Rico Valdez

      committed
      2f1cdcaView commit details

      Copy full SHA for 2f1cdca

      View code at this pointBrowse repository at this point
19. Commits on May 14, 2019

    • Updating baseines/update_previously_seen_aws_users.json to use sourcetype search in sync with previously_seen_aws_users.json syntax.

      

      Jason Brewer

      committed
      c40a264View commit details

      Copy full SHA for c40a264

      View code at this pointBrowse repository at this point
20. Commits on May 13, 2019

    • CRL-1428 - Updating per code review feedback.

      

      Jason Brewer

      committed
      0e320c6View commit details

      Copy full SHA for 0e320c6

      View code at this pointBrowse repository at this point
21. Commits on May 10, 2019

    • going back to hyphens

      

      Rico Valdez

      committed
      2286622View commit details

      Copy full SHA for 2286622

      View code at this pointBrowse repository at this point

    • testing removing the hyphen from smb traffic spike

      

      Rico Valdez

      committed
      ead7741View commit details

      Copy full SHA for ead7741

      View code at this pointBrowse repository at this point

    • fixed title on support searches and updated relevant stories

      

      Rico Valdez

      committed
      97d82b6View commit details

      Copy full SHA for 97d82b6

      View code at this pointBrowse repository at this point

    • pushing Brianna edits

      

      Rico Valdez

      committed
      9890705View commit details

      Copy full SHA for 9890705

      View code at this pointBrowse repository at this point
22. Commits on May 9, 2019

    • search tweaks (mostly output formatting) based on discussion with Bhavin

      

      Rico Valdez

      committed
      bd42f11View commit details

      Copy full SHA for bd42f11

      View code at this pointBrowse repository at this point

    • fixed a non-ascii char that got in there

      

      Rico Valdez

      committed
      22100dfView commit details

      Copy full SHA for 22100df

      View code at this pointBrowse repository at this point

    • Slight search tweak and another text updates

      

      Rico Valdez

      committed
      d8aac90View commit details

      Copy full SHA for d8aac90

      View code at this pointBrowse repository at this point

    • added a line to the how-to-implement for the model building manifests

      

      Rico Valdez

      committed
      12be9cdView commit details

      Copy full SHA for 12be9cd

      View code at this pointBrowse repository at this point
23. Commits on May 8, 2019

    • translated to v1 spec

      

      Rico Valdez

      committed
      318a41dView commit details

      Copy full SHA for 318a41d

      View code at this pointBrowse repository at this point
24. Commits on May 7, 2019

    • Various changes for grammar, punctuation, and flow.

      bblacet

      committed
      781924aView commit details

      Copy full SHA for 781924a

      View code at this pointBrowse repository at this point