Commit Graph

11 Commits

Author SHA1 Message Date
Chris Moore b9b21e1e30
Add documentation to provide a link from detector creation to detection rule creation in using rules docs (#4829)
* fix#4828 link to detection rule creation

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4828 link to detection rule creation

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4828 link to detection rule creation

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4828 link to detection rule creation

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-08-17 17:22:04 -07:00
Chris Moore 169f71427c
Fix correlation engine documentation by removing all instances of the experimental flag for 2.9 (#4635)
* fix#4631 correlation rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4631 correlation rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4631 correlation rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4631 correlation rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4631 correlation rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-07-25 14:03:50 -07:00
Chris Moore 22fd96e80b
Add documentation for detector rule creation updates (#4499)
* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4413 detection rule updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-07-19 17:44:07 -07:00
Chris Moore 4f0fb7e9c6
Add documentation for Security Analytics UI updates for 2.8 (#4208)
* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#4134 SecAnalytics UI updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-06-02 13:19:55 -07:00
Chris Moore cffae76ac2
Add correlation engine to Security Analytics documentation (#3814)
* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3566 correlation engine

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-05-02 10:36:27 -07:00
Chris Moore 7bc7f0e5e9
Add formatting fixes for Security Analytics (#3128)
* fix#3126-sec-analytics-formatting

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3126-sec-analytics-formatting

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-02-28 16:16:45 -08:00
Chris Moore b49f5fcd76
Add documentation for log type updates in Security Analytics - pt. 2 (#3083)
* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#3018-sec-analytics-2.6-II

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-02-28 10:13:59 -08:00
Chris Moore 8b8d9685d7
Security Analytics—additional updates following 2.5 release (#2515)
* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* Update _security-analytics/sec-analytics-config/detectors-config.md

Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>

* Update _security-analytics/sec-analytics-config/detectors-config.md

Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-updates-revisit

Signed-off-by: cwillum <cwmmoore@amazon.com>

---------

Signed-off-by: cwillum <cwmmoore@amazon.com>
Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>
2023-01-31 17:58:14 -08:00
Chris Moore f89e111983
Updates to Security Analytics documentation (#2408)
* fix#2400-revisions-to-current

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-SecAnalytics-updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-SecAnalytics-updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-SecAnalytics-updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-SecAnalytics-updates

Signed-off-by: cwillum <cwmmoore@amazon.com>

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-01-18 09:46:44 -08:00
Chris Moore e641a3bb0c
Add new Rules documentation that covers YAML Editor view (#2407)
* fix#2400-yaml-editor-rules

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-yaml-editor-rules

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#2400-yaml-editor-rules

Signed-off-by: cwillum <cwmmoore@amazon.com>

Signed-off-by: cwillum <cwmmoore@amazon.com>
2023-01-13 17:24:40 -08:00
Chris Moore 605edd5ac3
Add documentation for Security Analytics plugin (#1824)
* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* Delete admin-api.md

* Delete api-index.md

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics (#1901)

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

* fix#939-sec-analytics

Signed-off-by: cwillum <cwmmoore@amazon.com>

Signed-off-by: cwillum <cwmmoore@amazon.com>
Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>
Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>
2022-11-18 10:19:06 -08:00