Skip to content

Commit 301bf51

Browse files
author
David Dorsey
committed
Merge branch 'develop' into first_time_windows_service_bug
2 parents c90fcb2 + fb3c848 commit 301bf51

13 files changed

+988
-983
lines changed

deployments/enterprise_security_deployment_configuration.yml renamed to deployments/10_enterprise_security_deployment_configuration.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: Bhavin Patel
66
scheduling:
77
cron_schedule: '0 * * * *'
88
earliest_time: -70m@m
9-
latest_time:
9+
latest_time: -10m@m
1010
schedule_window: auto
1111
alert_action:
1212
notable:

deployments/baseline_cache_hourly_updates.yml renamed to deployments/20_baseline_cache_hourly_updates.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
name: Baseline Cache Hourly Updates
22
id: 1030c701-2acf-4b1a-9970-46c7145caf2d
33
date: '2020-06-24'
4-
description: This configuration file applies to all correlation searches that are used for detection
4+
description: This configuration file applies to all baselines with tag deployments Hourly Cache Updates
55
author: Bhavin Patel
66
scheduling:
7-
cron_schedule: '0 * * * *'
7+
cron_schedule: '55 * * * *'
88
earliest_time: -70m@m
99
latest_time: -10m@m
1010
schedule_window: auto
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
name: Long Running Baseline Searches
2+
id: 6eac9f8b-a35d-4b64-b57f-e5ecde43be6b
3+
date: '2020-06-24'
4+
description: This configuration file applies to all baselines with tag deployments Long Running Baseline
5+
author: Bhavin Patel
6+
scheduling:
7+
cron_schedule: '0 7 * * *'
8+
earliest_time: -7d
9+
latest_time: -now
10+
schedule_window: auto
11+
tags:
12+
deployments:
13+
- Long Running Baseline

lookups/mitre_enrichment.csv

+71-78
Large diffs are not rendered by default.

package/default/analytic_stories.conf

+73-73
Large diffs are not rendered by default.

package/default/collections.conf

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
#############
22
# Automatically generated by generator.py in splunk/security-content
3-
# On Date: 2020-06-18T19:50:40 UTC
3+
# On Date: 2020-06-25T07:52:12 UTC
44
# Author: Splunk Security Research
55
# Contact: research@splunk.com
66
#############

package/default/es_investigations.conf

+60-60
Large diffs are not rendered by default.

package/default/macros.conf

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
#############
22
# Automatically generated by generator.py in splunk/security-content
3-
# On Date: 2020-06-18T19:50:40 UTC
3+
# On Date: 2020-06-25T07:52:12 UTC
44
# Author: Splunk Security Research
55
# Contact: research@splunk.com
66
#############

0 commit comments

Comments
 (0)