admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,697 Commits 697 Branches 195 Tags
CleanUpDatamodelsAndRequiredFields
Commit Graph

105 Commits

Author SHA1 Message Date
pyth0n1c 2a5a055a7f Branch was auto-updated. 2022-07-19 10:46:12 -07:00
Michael Haag 0a56c2470f proto fix 2022-07-14 09:50:41 -06:00
Michael Haag 8ec266233b Windows Protocol Handler 2022-07-12 14:43:39 -06:00
pyth0n1c 012b360989 Branch was auto-updated. 2022-07-07 07:56:47 -07:00
Jose Enrique Hernandez 9cc85a614f Update security_services.csv 2022-07-07 10:43:17 -04:00
Kumar Sharad 28c799e829 model to detect risky commands 2022-06-29 23:45:27 +02:00
Kumar Sharad 8d568ae416 model to detect risky commands 2022-06-23 22:43:22 +02:00
Kumar Sharad 7328ea1aa3 model to detect risky commands 2022-06-22 19:34:06 +02:00
Kumar Sharad defa7b1bd0 model to detect risky commands 2022-06-22 16:57:52 +02:00
Kumar Sharad 629e5c2e5e model to detect risky commands 2022-06-22 16:47:07 +02:00
Kumar Sharad de7c604cd2 model to detect risky commands 2022-06-22 16:45:48 +02:00
Kumar Sharad f067ded253 model to detect risky commands 2022-06-22 16:39:33 +02:00
Kumar Sharad fe84f9fbf9 model to detect risky commands 2022-06-22 16:39:33 +02:00
Kumar Sharad 1120d578e5 model to detect risky commands 2022-06-22 16:39:33 +02:00
Kumar Sharad 96652af2bf model to detect risky commands 2022-06-22 16:39:33 +02:00
Kumar Sharad 67f35bba10 model to detect risky commands 2022-06-22 16:39:33 +02:00
Kumar Sharad 7bb299490f model to detect risky commands 2022-06-21 17:47:31 +02:00
Kumar Sharad f45aadfb8e model to detect risky commands 2022-06-21 17:43:49 +02:00
Kumar Sharad 8228c36d18 model to detect risky commands 2022-06-21 15:39:48 +02:00
Kumar Sharad 693ee6c03d model to detect risky commands 2022-06-21 14:55:46 +02:00
Lou Stella c7dadd566a updating mitre_enrichment lookup 2022-05-20 16:15:18 -05:00
Lou Stella 9fb1439059 Adding node.exe as an app not allowed to spawn cmd.exe 2022-05-02 14:34:06 -05:00
P4T12ICK 403ad09629 disable detection enrichment for stories 2022-03-30 14:29:57 +02:00
patel-bhavin bf0c64023f lookups 2022-03-29 08:37:14 -07:00
P4T12ICK afc1860132 Add Mitre Attack Csv generation 2022-03-29 12:14:20 +02:00
P4T12ICK 0fe8a854ec fixed api and mitre attack enrichment 2022-03-28 14:03:10 +02:00
Lou Stella 49b2b9f0d4 Updated ransomware_extensions.csv 2022-03-01 11:19:55 -06:00
patel-bhavin 68dde34dc8 rename typo 2022-02-24 14:14:13 -08:00
patel-bhavin 52d0996b0a combined the rest 2 2022-02-17 16:28:19 -08:00
patel-bhavin 9d780700de lookupss 2022-02-16 16:23:19 -08:00
Bhavin Patel 14c145c133 Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline 
Potentially malicious code on commandline
 2022-01-28 13:27:59 -08:00
patel-bhavin fe5db9e78e adding lookup files 2022-01-26 15:34:10 -08:00
Michael Haag 67e413d0e0 Update __mlspl_unusual_commandline_detection.yml 2022-01-26 11:26:25 -07:00
Michael Hart 39d7121dcd Updating mlmodel to 5.3.x specification as well as the test apparatus 2022-01-25 21:42:16 -05:00
mhaag-spl befe09f77c Nirsoft Software 2022-01-24 15:07:20 -07:00
Michael Hart e962bfb4bd Merge branch 'develop' of github.com:splunk/security_content into potentially_malicious_code_on_commandline 2022-01-21 19:26:39 -05:00
pyth0n1c ad2324d863 Branch was auto-updated. 2022-01-20 16:07:09 -08:00
patel-bhavin 6d13de615c duplicate 2022-01-20 15:50:28 -08:00
mhaag-spl 5bfcf2eea3 InstallUtil and DotNet Assemblies 2022-01-20 14:34:04 -07:00
Michael Hart 14db58ca19 Adding a yaml file to ensure that contentctl copies the mlmodel file to the right place 2022-01-20 08:32:39 -05:00
Michael Hart 82e6efb466 Adding in model lookup file 2022-01-19 20:04:16 -05:00
mhaag-spl ee3e77b45c DefaultAccount 2021-11-15 14:30:14 -07:00
P4T12ICK 45fd279a31 updated detections 2021-09-06 10:59:00 +02:00
P4T12ICK 99f0349e9f circle ci detecction 2021-09-02 10:42:01 +02:00
P4T12ICK 7f980b6a46 circle ci detecction 2021-09-01 17:54:38 +02:00
P4T12ICK bbf0a39460 new detection 2021-08-23 13:07:23 +02:00
P4T12ICK 9f6ec5febb new detection 2021-08-23 11:39:21 +02:00
P4T12ICK 622442cd3a new detection 2021-08-23 10:21:21 +02:00
P4T12ICK 749df59357 new detection 2021-08-23 10:17:40 +02:00
patel-bhavin c3db579480 lookup bug in generate 2021-07-13 11:52:17 -05:00