Commit Graph

4352 Commits

Author SHA1 Message Date
patel-bhavin b44fe4b8d8 text and yml updates 2022-01-10 16:59:08 -08:00
pyth0n1c c508820126 Branch was auto-updated. 2022-01-10 14:37:31 -08:00
patel-bhavin a8d236c1c2 test results passed from CI 2022-01-10 13:22:24 -08:00
patel-bhavin 69c2787e51 text updates 2022-01-10 13:21:39 -08:00
pyth0n1c 4bc8539d78 Branch was auto-updated. 2022-01-10 13:06:27 -08:00
pyth0n1c 4a4f99e7a9 Branch was auto-updated. 2022-01-10 13:06:26 -08:00
Bhavin Patel 3362c243ae Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:59:21 -08:00
Bhavin Patel 26f945c52a Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:56:56 -08:00
Bhavin Patel fabd820804 Update linux_setuid_using_chmod_utility.yml 2022-01-10 12:55:51 -08:00
Bhavin Patel 19d907da37 Update linux_service_started_or_enabled.yml 2022-01-10 12:53:45 -08:00
Bhavin Patel a505181149 Update linux_service_restarted.yml 2022-01-10 12:52:25 -08:00
Bhavin Patel 8bd5c20eac Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:46:34 -08:00
Bhavin Patel 4a08f745b2 Update linux_service_file_created_in_systemd_directory.yml 2022-01-10 12:41:02 -08:00
Bhavin Patel 527d8103b8 Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:33:47 -08:00
Bhavin Patel 2944d1690b Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:32:10 -08:00
Bhavin Patel b60f4a2b5a Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:30:55 -08:00
pyth0n1c ef018cd9cb Branch was auto-updated. 2022-01-10 12:11:45 -08:00
pyth0n1c 10e575a793 Branch was auto-updated. 2022-01-10 12:11:36 -08:00
pyth0n1c 787a5afd99 Branch was auto-updated. 2022-01-10 12:11:34 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059
The Haag at The Gates
2022-01-10 12:11:15 -08:00
tccontre ef99a8c8bc Update linux_sudoers_tmp_file_creation.yml 2022-01-10 12:36:33 +01:00
tccontre f48713b301 Update linux_possible_append_command_to_at_allow_config_file.yml 2022-01-10 09:46:50 +01:00
tccontre 265a1f0494 Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.yml 2022-01-10 09:44:05 +01:00
tccontre 72859e63e8 Update linux_possible_append_command_to_at_allow_config_file.yml 2022-01-10 09:43:33 +01:00
mhaag-spl 89f37444f4 Update msi_module_loaded_by_non_system_binary.yml 2022-01-06 10:06:40 -07:00
tccontre cebc5ac4fd Update linux_edit_cron_table_parameter.yml 2022-01-05 16:38:48 +01:00
tccontre 204670cbe1 Update linux_at_allow_config_file_creation.yml 2022-01-05 16:33:43 +01:00
root 2e9f51cca4 Added detection testing service results inLinux File Created In Kernel Driver Directory 2022-01-05 14:34:31 +00:00
root 64dfd4a621 Added detection testing service results inLinux Install Kernel Module Using Modprobe Utility 2022-01-05 13:08:14 +00:00
root a1a6087bcd Added detection testing service results inLinux Sudoers Tmp File Creation 2022-01-05 12:38:46 +00:00
tccontre 06ffa22394 Update linux_sudoers_tmp_file_creation.yml 2022-01-05 13:20:37 +01:00
tccontre ab844e062f linux_persist_priv_batch_3 2022-01-05 13:17:08 +01:00
root fb306cb79b Added detection testing service results inLinux Visudo Utility Execution 2022-01-05 12:12:09 +00:00
tccontre 14534c2f53 Merge branch 'linux_persist_priv_batch_3' of github.com:splunk/security_content into linux_persist_priv_batch_3 2022-01-05 12:48:02 +01:00
tccontre 377a4822f7 linux_persist_priv_batch_3 2022-01-05 12:47:45 +01:00
root 78e61e8ee4 Added detection testing service results inLinux Change File Owner To Root 2022-01-05 11:42:47 +00:00
tccontre 37185f3e0d linux_persist_priv_batch_3 2022-01-05 11:34:57 +01:00
tccontre 78732dfe2d Update linux_file_creation_in_profile_directory.yml 2022-01-04 18:00:42 +01:00
tccontre e8cde0b1f6 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 17:59:26 +01:00
pyth0n1c e10f55348c Updated Detection Text
Updated Text of Detection "Suspicious Process DNS Query Known Abuse Web Services"
2022-01-04 08:47:13 -08:00
pyth0n1c 8891384376 Small Text Update
Small Text Update to "Loading Of Dynwrapx Module"
2022-01-04 08:42:39 -08:00
tccontre 7420f730d4 Update suspicious_process_dns_query_known_abuse_web_services.yml 2022-01-04 17:39:17 +01:00
pyth0n1c 249c784daf Small Text Updates
Small Text Updates to "Loading Of Dynwrapx Module"
2022-01-04 08:38:05 -08:00
pyth0n1c 5702bf9c7d Minor Text Updates
Minor Text Updates to "System Info Gathering Using Dxdiag Application"
2022-01-04 08:36:46 -08:00
pyth0n1c 54e6931e48 Minor Text Updates
Minor updates to the text of  "Suspicious Process DNS Query Known Abuse Web Services"
2022-01-04 08:31:04 -08:00
pyth0n1c cff1c5dd74 Update Text of Detection
Minor update to text of "Possible Browser Pass View Parameter"
2022-01-04 08:23:36 -08:00
pyth0n1c 3c6c0dc575 Minor Text Update
Minor update to text of "Loading Of Dynwrapx Module"
2022-01-04 08:21:15 -08:00
Detection Testing Service 79808deea1 Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2 2022-01-04 11:36:48 +00:00
root 4c40ac8961 Added detection testing service results inLinux Setuid Using Chmod Utility 2022-01-04 11:36:47 +00:00
root 1be58f55d2 Added detection testing service results inLinux Service Restarted 2022-01-04 11:35:23 +00:00