Commits

Commit history

1. Commits on Jan 13, 2020

   • updated search/metadata, tested in attack_range

     patel-bhavin

     committed
     54c9bc9View commit details

     Copy full SHA for 54c9bc9

     View code at this pointBrowse repository at this point
2. Commits on Dec 16, 2019

   • naming updates, jinja macros updates

     patel-bhavin

     committed
     8ae3ebdView commit details

     Copy full SHA for 8ae3ebd

     View code at this pointBrowse repository at this point
3. Commits on Dec 11, 2019

   • fixing the files that didnt update the macros correctly

     patel-bhavin

     committed
     b379395View commit details

     Copy full SHA for b379395

     View code at this pointBrowse repository at this point

   • added summariesonly and fixed ctime

     josehelps

     committed
     f8e3113View commit details

     Copy full SHA for f8e3113

     View code at this pointBrowse repository at this point

   • introduced security_content_ctime as a macro, renamed all our searches to use this new macro, removing ES dependecy

     josehelps

     committed
     f9bdf7eView commit details

     Copy full SHA for f9bdf7e

     View code at this pointBrowse repository at this point
4. Commits on Nov 26, 2019

   • CRL-1645 - New detection "Abnormally High AWS Instances Terminated by User - MLTK"

     

     Jason Brewer

     committed
     95f73c9View commit details

     Copy full SHA for 95f73c9

     View code at this pointBrowse repository at this point
5. Commits on Nov 25, 2019

   • CRL-1646 - changing from user to src_user

     

     Jason Brewer

     committed
     604e2ecView commit details

     Copy full SHA for 604e2ec

     View code at this pointBrowse repository at this point

   • CRL-1646 , CRL-1697 - Making minor tweaks to excessive run instance detections (using ARN vs username) added -MLTK to labels. Added reference for Cloud Compute Instance Created With Previously Unse…

     Show description for 38be9eb
     

     Jason Brewer

     committed
     38be9ebView commit details

     Copy full SHA for 38be9eb

     View code at this pointBrowse repository at this point
6. Commits on Nov 22, 2019

   • CRL-1646 - Adjusting how to implement to quote the string and escape the newlines to soothe our tool chain.

     

     Jason Brewer

     committed
     12d6587View commit details

     Copy full SHA for 12d6587

     View code at this pointBrowse repository at this point
7. Commits on Nov 21, 2019

   • CRL-1646 - fixing stats.

     

     Jason Brewer

     committed
     37cdeabView commit details

     Copy full SHA for 37cdeab

     View code at this pointBrowse repository at this point

   • CRL-1646 - Updating to add input_filter macro to searches and to reference baseline search from detection search.

     

     Jason Brewer

     committed
     3d1846cView commit details

     Copy full SHA for 3d1846c

     View code at this pointBrowse repository at this point
8. Commits on Nov 20, 2019

   • CRL-1646 - Modifying search to see if my yml is wrong for a multiline object with pipes.

     

     Jason Brewer

     committed
     f21db84View commit details

     Copy full SHA for f21db84

     View code at this pointBrowse repository at this point

   • CRL-1646 - Implemented : Update Detection for abnormally_high_instances_launched to use MLTK

     

     Jason Brewer

     committed
     b3b4f4eView commit details

     Copy full SHA for b3b4f4e

     View code at this pointBrowse repository at this point
9. Commits on Oct 24, 2019

   • updates to propery use cloud_infrastructure

     

     Rico Valdez

     committed
     7fa96a7View commit details

     Copy full SHA for 7fa96a7

     View code at this pointBrowse repository at this point
10. Commits on Oct 16, 2019

    • Changed json to yml

      

      Patrick Bareiss

      committed
      af66ed5View commit details

      Copy full SHA for af66ed5

      View code at this pointBrowse repository at this point
11. Commits on Oct 8, 2019

    • Merge branch 'develop' into cloud_cryptominig

      

      David Dorsey

      committed
      85a637bView commit details

      Copy full SHA for 85a637b

      View code at this pointBrowse repository at this point
12. Commits on Oct 4, 2019

    • Files for new cloud cryptominig story.

      Show description for 82e8b21
      

      David Dorsey

      committed
      82e8b21View commit details

      Copy full SHA for 82e8b21

      View code at this pointBrowse repository at this point
13. Commits on Oct 3, 2019

    • Started to create Cloud Cryptomining story

      Show description for cc6209a
      

      David Dorsey

      committed
      cc6209aView commit details

      Copy full SHA for cc6209a

      View code at this pointBrowse repository at this point
14. Commits on Sep 30, 2019

    • Fixed issue inside of where clause

      

      David Dorsey

      committed
      aec9dd5View commit details

      Copy full SHA for aec9dd5

      View code at this pointBrowse repository at this point
15. Commits on Sep 4, 2019

    • removing html tags

      josehelps

      committed
      fe0b0e1View commit details

      Copy full SHA for fe0b0e1

      View code at this pointBrowse repository at this point
16. Commits on Jul 25, 2019

    • All manifests converted to spec v2

      

      Rico Valdez

      committed
      80c6870View commit details

      Copy full SHA for 80c6870

      View code at this pointBrowse repository at this point
17. Commits on Jul 18, 2019

    • fixing stories that are using product_type

      josehelps

      committed
      06f5aa7View commit details

      Copy full SHA for 06f5aa7

      View code at this pointBrowse repository at this point
18. Commits on May 30, 2019

    • merge and testing the package

      patel-bhavin

      committed
      6dd4f4dView commit details

      Copy full SHA for 6dd4f4d

      View code at this pointBrowse repository at this point
19. Commits on May 23, 2019

    • text updates and removed isOutlier from search output

      

      Rico Valdez

      committed
      43ef842View commit details

      Copy full SHA for 43ef842

      View code at this pointBrowse repository at this point
20. Commits on May 17, 2019

    • removing datamodel

      patel-bhavin

      committed
      4616971View commit details

      Copy full SHA for 4616971

      View code at this pointBrowse repository at this point

    • bringing the branch upto date with develop

      patel-bhavin

      committed
      cb2c30dView commit details

      Copy full SHA for cb2c30d

      View code at this pointBrowse repository at this point

    • changed detection searches to use start_time and end_time vs firstTime and lastTime, included links to docs on algorithm, and included mention of re-running support search in the how_to_implement f…

      Show description for 438ac72
      

      Rico Valdez

      committed
      438ac72View commit details

      Copy full SHA for 438ac72

      View code at this pointBrowse repository at this point
21. Commits on May 15, 2019

    • updated names of the support searches and updates stories accordingly

      

      Rico Valdez

      committed
      2f1cdcaView commit details

      Copy full SHA for 2f1cdca

      View code at this pointBrowse repository at this point
22. Commits on May 14, 2019

    • Updating baseines/update_previously_seen_aws_users.json to use sourcetype search in sync with previously_seen_aws_users.json syntax.

      

      Jason Brewer

      committed
      c40a264View commit details

      Copy full SHA for c40a264

      View code at this pointBrowse repository at this point
23. Commits on May 13, 2019

    • CRL-1428 - Updating per code review feedback.

      

      Jason Brewer

      committed
      0e320c6View commit details

      Copy full SHA for 0e320c6

      View code at this pointBrowse repository at this point
24. Commits on May 10, 2019

    • going back to hyphens

      

      Rico Valdez

      committed
      2286622View commit details

      Copy full SHA for 2286622

      View code at this pointBrowse repository at this point

    • testing removing the hyphen from smb traffic spike

      

      Rico Valdez

      committed
      ead7741View commit details

      Copy full SHA for ead7741

      View code at this pointBrowse repository at this point

    • fixed title on support searches and updated relevant stories

      

      Rico Valdez

      committed
      97d82b6View commit details

      Copy full SHA for 97d82b6

      View code at this pointBrowse repository at this point

    • pushing Brianna edits

      

      Rico Valdez

      committed
      9890705View commit details

      Copy full SHA for 9890705

      View code at this pointBrowse repository at this point
25. Commits on May 9, 2019

    • search tweaks (mostly output formatting) based on discussion with Bhavin

      

      Rico Valdez

      committed
      bd42f11View commit details

      Copy full SHA for bd42f11

      View code at this pointBrowse repository at this point