admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

125 Commits

Author SHA1 Message Date
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059 
The Haag at The Gates
 2022-01-10 12:11:15 -08:00
research bot ff3319329e updating docs and package bits [ci skip] 2021-12-15 02:58:27 +00:00
Bhavin Patel 61d583e45e Branch was auto-updated. 2021-12-14 18:47:02 -08:00
d1vious 16b771eae2 adding tags to detections 2021-12-14 19:38:51 -05:00
mhaag-spl 71295432e3 Windows shells 2021-12-13 13:01:45 -07:00
mhaag-spl f3b31c113b java Shells 2021-12-13 11:54:59 -07:00
Bhavin Patel 46083ae36f Branch was auto-updated. 2021-12-09 09:06:16 -08:00
mvelazco 648bf1fc6e minor fixes 2021-12-08 13:41:04 -05:00
mhaag-spl 81a49be5e8 Out of the Gates 
Microsoft Exchange Mailbox Replication service writing Active Server Pages
 2021-12-07 14:46:14 -07:00
mvelazco fc478d80a7 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-06 17:10:00 -05:00
mvelazco efd890e2c2 updating analytic story name 2021-12-06 17:01:58 -05:00
Bhavin Patel e5fd9f9fe7 Branch was auto-updated. 2021-12-06 11:04:13 -08:00
mhaag-spl 25dc457c3c The Unbroken Haag 2021-12-06 11:57:20 -07:00
mvelazco 20425018bc minor fixes 2021-12-03 21:12:31 -05:00
mvelazco 71410ddb7a 3 new detections 2021-12-03 15:58:00 -05:00
mvelazco 918b680350 update experimental detection names 2021-11-30 13:20:42 -05:00
mvelazco b5783ab849 adding 2 experimental detections 2021-11-30 12:51:43 -05:00
mhaag-spl 1aa5852b19 Update exchange_powershell_module_usage.yml 2021-11-15 07:53:20 -07:00
research bot c1410c0e95 updating docs and package bits [ci skip] 2021-11-10 16:16:30 +00:00
Bhavin Patel 1329ff2998 Branch was auto-updated. 2021-11-03 10:43:48 -07:00
patel-bhavin 0dfff97830 yml errors 2021-11-02 18:11:32 -07:00
patel-bhavin 0a9c396e08 search update 2021-11-02 18:03:21 -07:00
patel-bhavin ad5afdc3dc calendar search 2021-11-01 16:14:12 -07:00
patel-bhavin 0539ea52f2 macro update 2021-11-01 13:30:50 -07:00
Bhavin Patel 44d1bafd0c Branch was auto-updated. 2021-10-29 07:58:31 -07:00
d1vious 70d68fe35c moving to prod 2021-10-29 10:56:04 -04:00
Jose Enrique Hernandez a4d3b8480d minor updates given the feedback on issue 1767 2021-10-29 10:54:45 -04:00
research bot a1afa0fa60 updating docs and package bits [ci skip] 2021-10-28 19:55:37 +00:00
Bhavin Patel 8f1af508e4 Branch was auto-updated. 2021-10-25 08:08:50 -07:00
Rod Soto e9d1a85251 prforbhavingsuiteexperimentalsearches 2021-10-24 12:08:39 -07:00
Drew Church 3b18c5abcb Added CVE tags to 35 files 2021-10-22 10:03:24 -07:00
tccontre 9d466adc76 CARS_UPDATE_MITRE_ID_B8 
CARS_UPDATE_MITRE_ID_B8
 2021-10-15 10:22:43 +02:00
tccontre 5226dbd99c privilege_escalation_persistence 2021-10-08 14:23:55 +02:00
divious1 671e91ecd0 moved to experimental due to lack of testing 2021-09-09 17:30:40 -04:00
research bot 2783c3fe43 updating docs and package bits [ci skip] 2021-09-09 19:07:07 +00:00
mhaag-spl e8de140562 fixes 2021-09-01 16:58:23 -06:00
mhaag-spl 06b6d96819 Create exchange_powershell_abuse_via_ssrf.yml 2021-09-01 12:26:03 -06:00
github-actions[bot] e08886eab3 Branch was auto-updated. 2021-08-27 22:52:18 +00:00
research bot 02e58a1dfa updating docs and package bits [ci skip] 2021-08-27 21:52:55 +00:00
Bhavin Patel 9d83664db7 Update exchange_powershell_module_usage.yml 2021-08-27 11:04:01 -07:00
mhaag-spl 77aea09e0d Update exchange_powershell_module_usage.yml 2021-08-25 12:57:35 -06:00
mhaag-spl 25aaf33a98 Update exchange_powershell_module_usage.yml 2021-08-25 12:35:41 -06:00
mhaag-spl 36f3a9c250 Create exchange_powershell_module_usage.yml 2021-08-25 12:31:48 -06:00
Michael Haag b831023bd4 Update protocols_passing_authentication_in_cleartext.yml 
Added a few more changes to make it more clear. Thank you @sec-researcher for updating!
 2021-08-24 07:04:52 -06:00
Amir hossein Mahboubi 0945cc72c9 Update protocols_passing_authentication_in_cleartext.yml 2021-08-21 08:55:07 +04:30
Amir hossein Mahboubi 546e70f2d8 Merge branch 'splunk:develop' into optimized 2021-08-21 08:53:50 +04:30
sec-researcher 0bfb8ba325 Filter blocked traffic because it made a lot of false positive specially when something like port scan happen, also add description to "how_to_implement" section to limit result just to organization private and public IP range for more accurate result 2021-08-19 18:59:04 +04:30
patel-bhavin e1ff3993cd run generate again 2021-08-16 15:57:44 -07:00
Jose Enrique Hernandez d1d2aa92dc Rename detect_phishing_content___ssa.yml to ssa___detect_phishing_content.yml 2021-08-12 12:26:04 -04:00
P4T12ICK 1fca39be77 updated generate 2021-07-20 16:41:53 +02:00