admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 05657d48df Branch was auto-updated. 2021-11-19 00:38:45 -08:00
Bhavin Patel f9b37ff8ab Branch was auto-updated. 2021-11-19 00:38:44 -08:00
Bhavin Patel 8493dca184 Branch was auto-updated. 2021-11-19 00:38:43 -08:00
Bhavin Patel e1bd020e51 Branch was auto-updated. 2021-11-19 00:38:36 -08:00
Bhavin Patel 63eaf77d49 Branch was auto-updated. 2021-11-19 00:38:35 -08:00
Bhavin Patel 2f534f53d9 Branch was auto-updated. 2021-11-19 00:38:34 -08:00
tccontre dda5f844f0 Merge pull request #1838 from splunk/ioc_detections 
ioc_detections
 2021-11-19 09:38:15 +01:00
pyth0n1c 1f5386b776 Mostly done with overhaul to arguments. Initial testing show that it looks good. Now to integrate the newly parsed arguments in with the rewritten run behavior. 2021-11-18 16:56:46 -08:00
pyth0n1c aca21ef285 Changes to the interface used to construct the config file and perform additional validation of the file 2021-11-18 15:44:01 -08:00
mvelazco a9f6b03646 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 16:26:34 -05:00
mvelazco 399ebb4e7f adding extra detection 2021-11-18 16:26:32 -05:00
Detection Testing Service 0b568f6169 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 21:05:53 +00:00
root f18afbbd8c Added detection testing service results inExecutable File Written in Administrative SMB Share 2021-11-18 21:05:53 +00:00
pyth0n1c cf8d5f2dff Much better configuration parsing, validation, and substitution of defaults using jsonschema. 2021-11-18 13:01:55 -08:00
Bhavin Patel a86c908630 Branch was auto-updated. 2021-11-18 12:58:51 -08:00
Bhavin Patel 1539fcb1cc Branch was auto-updated. 2021-11-18 12:58:50 -08:00
Bhavin Patel a4bcaef6db Branch was auto-updated. 2021-11-18 12:58:43 -08:00
Bhavin Patel 266b6e1151 Branch was auto-updated. 2021-11-18 12:58:42 -08:00
Bhavin Patel daffaeac60 Branch was auto-updated. 2021-11-18 12:58:41 -08:00
Bhavin Patel 19eb60a778 Branch was auto-updated. 2021-11-18 12:58:40 -08:00
Bhavin Patel 3ddbaae002 Branch was auto-updated. 2021-11-18 12:58:38 -08:00
Michael Haag a449b3d5cf Merge pull request #1825 from splunk/prodigal_haag 
The Prodigal Haag Returns
 2021-11-18 13:58:18 -07:00
mvelazco e7f395d6a5 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 15:43:58 -05:00
mvelazco 7d25f2599c updating other detections 2021-11-18 15:43:56 -05:00
root b78ea71386 Added detection testing service results inLoading Of Dynwrapx Module 2021-11-18 14:28:20 +00:00
tccontre 08cc78c723 ioc_detections 2021-11-18 15:10:02 +01:00
tccontre ee2e94cd0d Merge branch 'ioc_detections' of github.com:splunk/security_content into ioc_detections 2021-11-18 13:00:41 +01:00
tccontre f2f3eb3231 ioc_detections 2021-11-18 13:00:20 +01:00
root 8d42e73720 Added detection testing service results inSuspicious Process DNS Query Known Abuse Web Services 2021-11-18 11:27:52 +00:00
tccontre b20185a037 Update ssa___attempt_to_delete_services.yml 2021-11-18 12:11:02 +01:00
tccontre d7b23700ef Update information_sabotage.yml 2021-11-18 12:10:21 +01:00
tccontre b566f7c72f ioc_detections 2021-11-18 12:05:43 +01:00
pyth0n1c 82d53ccbd9 Moving to json based configuration files and a framework to generate that file, too 2021-11-17 16:23:39 -08:00
pyth0n1c 56f4223ecd Added some supporting code that will make generating config files and validating arguments easier. 2021-11-17 14:09:28 -08:00
mhaag-spl 7ba2d8d412 removed 2021-11-17 14:47:49 -07:00
mhaag-spl 18ad17726e Update windows_enable_defaultaccount.yml 2021-11-17 12:01:58 -07:00
Detection Testing Service 7014972391 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-17 18:00:11 +00:00
root a442e207fe Added detection testing service results inRemote Process Instantiation via WinRM and PowerShell Script Block 2021-11-17 18:00:10 +00:00
root bba838dde1 Added detection testing service results inRemote Process Instantiation via WinRM and PowerShell 2021-11-17 17:59:33 +00:00
Detection Testing Service 4f356d3398 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-17 17:38:32 +00:00
root 16218d8d85 Added detection testing service results inRemote Process Instantiation via WMI and PowerShell Script Block 2021-11-17 17:38:32 +00:00
Detection Testing Service 75e7628f04 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-17 17:34:46 +00:00
root 5c8c71e813 Added detection testing service results inRemote Process Instantiation via WMI and PowerShell 2021-11-17 17:34:45 +00:00
root 59ad0b224b Added detection testing service results inRemote Process Instantiation via DCOM and PowerShell Script Block 2021-11-17 17:32:46 +00:00
Detection Testing Service 006c70ca7c Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:29:56 +00:00
root 1697f8fdc1 Added detection testing service results inRunas Execution in CommandLine 2021-11-17 17:29:56 +00:00
Detection Testing Service 476656b206 Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:21:52 +00:00
root be52e7f820 Added detection testing service results inNetwork Discovery Using Route Windows App 2021-11-17 17:21:51 +00:00
Detection Testing Service 9060785858 Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:18:18 +00:00
root 0d919f6d15 Added detection testing service results inCSC Net On The Fly Compilation 2021-11-17 17:18:17 +00:00