admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

1143 Commits

Author SHA1 Message Date
github-actions[bot] cae111f759 Branch was auto-updated. 2021-04-23 12:24:22 +00:00
github-actions[bot] 10db696fe8 Branch was auto-updated. 2021-04-23 12:24:15 +00:00
P4T12ICK ebffd874e8 fix the 101% detection coverage 2021-04-23 14:11:58 +02:00
tcontreras 044b01c28c Merge branch 'net_exfil' of github.com:splunk/security_content into net_exfil 2021-04-23 14:07:28 +02:00
tcontreras e86eb625fb stream_source 2021-04-23 14:07:00 +02:00
github-actions[bot] ad1361674b Branch was auto-updated. 2021-04-22 20:59:56 +00:00
github-actions[bot] 50a55e688d Branch was auto-updated. 2021-04-22 20:59:54 +00:00
github-actions[bot] 7b8d883b63 Branch was auto-updated. 2021-04-22 20:59:42 +00:00
github-actions[bot] cb8ce9b777 Branch was auto-updated. 2021-04-22 20:59:41 +00:00
mhaag-spl c1e90a20b7 Anomalous Usage of 7z 2021-04-22 13:27:47 -06:00
mhaag-spl aa62997e60 removed detections 2021-04-22 11:52:20 -06:00
mhaag-spl 56c645560a Update winword_spawning_windows_script_host.test.yml 2021-04-22 11:29:59 -06:00
mhaag-spl 77d1364c16 Office Product Spawning Rundll32 with no DLL 2021-04-22 11:20:45 -06:00
mhaag-spl 2b40cfec8b remove root aws detections and update aws detection 2021-04-22 10:21:36 -06:00
mhaag-spl 88688f9960 duplicate detection 2021-04-22 10:10:47 -06:00
mhaag-spl 029c463ce8 Update searchprotocolhost_with_no_command_line_with_network.test.yml 2021-04-22 10:00:32 -06:00
mhaag-spl b86ece00d8 Update winword_spawning_cmd.test.yml 2021-04-22 09:52:23 -06:00
mhaag-spl c00de66c2f winword cmd 2021-04-22 09:50:32 -06:00
mhaag-spl 6973e30290 winword wsh 2021-04-22 09:23:46 -06:00
mhaag-spl 5f85f5e7e9 Excel WSH 2021-04-22 07:38:08 -06:00
tcontreras 162b9f0cc3 net_exfil 2021-04-22 15:37:09 +02:00
mvelazco 0ae6b31e32 Merge branch 'develop' into password_spraying_TR-515 2021-04-21 13:56:43 -07:00
mvelazco 4647b51f9c Fixing yaml issues 2021-04-21 16:54:55 -04:00
mvelazco 9782bf5029 removing detection with no dataset 2021-04-21 16:10:29 -04:00
mvelazco 6bfafdd4a5 removing unused filepath 2021-04-21 16:07:26 -04:00
mvelazco 35525253a4 file and detection name updates 2021-04-21 16:04:12 -04:00
divious1 2d5ea36b0f upgrading detection to avoid FPs and also added bodies 2021-04-21 15:54:11 -04:00
mhaag-spl 59b1f289d7 Excel posh 2021-04-21 13:11:40 -06:00
mhaag-spl ae87327c98 dllhost test again 2021-04-21 11:55:18 -06:00
mhaag-spl a22e361f72 Update dllhost_with_no_command_line_arguments_with_network.test.yml 2021-04-21 11:19:30 -06:00
mhaag-spl a386c06827 Update winword_spawning_powershell.test.yml 2021-04-21 10:55:51 -06:00
mhaag-spl 86a0a2e117 Winword spawning powershell 2021-04-21 10:52:23 -06:00
github-actions[bot] 7b5c265ff4 Branch was auto-updated. 2021-04-21 08:48:41 +00:00
mvelazco 629928024f minor - fixing filename 2021-04-20 18:43:30 -04:00
mvelazco 8380603e54 Update multiple_disabled_users_failing_to_authenticate_from_one_source_using_kerberos.test.yml 
adding missing test metadata
 2021-04-20 18:38:59 -04:00
github-actions[bot] 365f35b1b7 Branch was auto-updated. 2021-04-20 22:28:59 +00:00
github-actions[bot] 9b3dd8fbd4 Branch was auto-updated. 2021-04-20 22:28:58 +00:00
mvelazco c0169b76ee adding dataset metadata 2021-04-20 17:41:57 -04:00
mhaag-spl 310bbc8884 Update dllhost_with_no_command_line_arguments_with_network.test.yml 2021-04-20 15:16:14 -06:00
bpatel c0e9a5dc1d search name and file renames 2021-04-20 13:10:00 -07:00
mhaag-spl 0a55bf791f updated queries 2021-04-20 13:05:11 -06:00
mhaag-spl 64288e39c7 searchprotocolhost 2021-04-19 13:41:41 -06:00
mhaag-spl 962aa311d2 Update dllhost_with_no_command_line_arguments_with_network.test.yml 2021-04-19 13:10:15 -06:00
mhaag-spl 1d6c20d587 dllhost and gpupdate fix 2021-04-19 13:08:04 -06:00
mhaag-spl 5daf227b3f gpupdate 2021-04-19 12:58:24 -06:00
mhaag-spl c143c99ad8 Update winevent_scheduled_task_created_to_spawn_shell.test.yml 2021-04-19 12:37:35 -06:00
mhaag-spl 9579f2d708 Update rundll32_with_no_command_line_arguments_with_network.test.yml 2021-04-19 11:57:51 -06:00
mhaag-spl b2dc244920 rundll32 2021-04-19 11:21:05 -06:00
tcontreras a5cf51e9d5 task_sched 2021-04-19 18:58:16 +02:00
mhaag-spl ac370189ee winevent fix 2021-04-19 10:39:42 -06:00