admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tccontre 37185f3e0d linux_persist_priv_batch_3 2022-01-05 11:34:57 +01:00
tccontre fa843067da Merge pull request #1917 from splunk/remocs_desc_update 
remcos_desc_update
 2022-01-05 09:41:08 +01:00
tccontre 78732dfe2d Update linux_file_creation_in_profile_directory.yml 2022-01-04 18:00:42 +01:00
tccontre e8cde0b1f6 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 17:59:26 +01:00
pyth0n1c e10f55348c Updated Detection Text 
Updated Text of Detection "Suspicious Process DNS Query Known Abuse Web Services"
 2022-01-04 08:47:13 -08:00
pyth0n1c 8891384376 Small Text Update 
Small Text Update to "Loading Of Dynwrapx Module"
 2022-01-04 08:42:39 -08:00
tccontre 7420f730d4 Update suspicious_process_dns_query_known_abuse_web_services.yml 2022-01-04 17:39:17 +01:00
pyth0n1c 249c784daf Small Text Updates 
Small Text Updates to "Loading Of Dynwrapx Module"
 2022-01-04 08:38:05 -08:00
pyth0n1c 5702bf9c7d Minor Text Updates 
Minor Text Updates to "System Info Gathering Using Dxdiag Application"
 2022-01-04 08:36:46 -08:00
pyth0n1c 54e6931e48 Minor Text Updates 
Minor updates to the text of  "Suspicious Process DNS Query Known Abuse Web Services"
 2022-01-04 08:31:04 -08:00
pyth0n1c cff1c5dd74 Update Text of Detection 
Minor update to text of "Possible Browser Pass View Parameter"
 2022-01-04 08:23:36 -08:00
pyth0n1c 3c6c0dc575 Minor Text Update 
Minor update to text of "Loading Of Dynwrapx Module"
 2022-01-04 08:21:15 -08:00
Detection Testing Service 79808deea1 Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2 2022-01-04 11:36:48 +00:00
root 4c40ac8961 Added detection testing service results inLinux Setuid Using Chmod Utility 2022-01-04 11:36:47 +00:00
root 1be58f55d2 Added detection testing service results inLinux Service Restarted 2022-01-04 11:35:23 +00:00
tccontre ff3172c7c0 linux_persist_priv_batch_2 2022-01-04 12:15:50 +01:00
tccontre 74dcbf5bbe linux_persist_priv_batch_2 2022-01-04 11:47:11 +01:00
root 472519cac0 Added detection testing service results inLinux File Creation In Init Boot Directory 2022-01-04 10:32:49 +00:00
tccontre f96aa5fbe3 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 11:11:14 +01:00
tccontre 9c96e69754 remcos_desc_update 2022-01-04 10:25:11 +01:00
Lou Stella 94f903d685 Merge pull request #1916 from splunk/adding_not_supported 
modify experimental detections to say not supported
 2022-01-03 13:46:45 -06:00
d1vious 8f0518b5af spelling fix 2022-01-03 14:39:48 -05:00
d1vious 7c1025425a fixed spelling 2022-01-03 14:35:49 -05:00
d1vious 50ba793358 fixing formatting 2022-01-03 12:20:42 -05:00
d1vious 1e731ee7af modify experimental detections to say not supported 2022-01-03 12:03:34 -05:00
tccontre 74b0691d7a Update linux_setuid_using_chmod_utility.yml 2022-01-03 15:52:31 +01:00
tccontre b20d3fed32 Update linux_file_creation_in_init_boot_directory.test.yml 2022-01-03 15:43:18 +01:00
Detection Testing Service cfe4b7148e Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2 2022-01-03 13:06:52 +00:00
root 943802aec6 Added detection testing service results inLinux File Creation In Profile Directory 2022-01-03 13:06:51 +00:00
tccontre 7c2874bb1e linux_persist_priv_batch_2 2022-01-03 13:57:17 +01:00
root 5ea972280c Added detection testing service results inLinux Service File Created In Systemd Directory 2022-01-03 12:38:40 +00:00
tccontre 0140a5a99b Update linux_setuid_using_chmod_utility.yml 2022-01-03 12:54:55 +01:00
tccontre f85658f1a0 linux_persist_priv_batch_2 2022-01-03 12:25:08 +01:00
root 72f7bb0676 Added detection testing service results inLinux Service Started Or Enabled 2022-01-03 10:35:34 +00:00
root 00521f06a5 Added detection testing service results inLinux Setuid Using Setcap Utility 2022-01-03 10:04:59 +00:00
tccontre 780aa81877 Update linux_setuid_using_setcap_utility.yml 2022-01-03 10:40:56 +01:00
tccontre e21247f2d2 linux_persist_priv_batch_2 2021-12-23 12:31:05 +01:00
Detection Testing Service 0d62a0f22c Merge branch 'linux_persist_priv_batch_1' of https://github.com/splunk/security_content into linux_persist_priv_batch_1 2021-12-22 10:54:27 +00:00
root ae6cca1cf4 Added detection testing service results inLinux Add Files In Known Crontab Directories 2021-12-22 10:54:26 +00:00
tccontre 9b3ecff018 Update linux_possible_append_command_to_at_allow_config_file.test.yml 2021-12-22 11:51:16 +01:00
Detection Testing Service 24431a7891 Merge branch 'linux_persist_priv_batch_1' of https://github.com/splunk/security_content into linux_persist_priv_batch_1 2021-12-22 10:25:23 +00:00
root d708418dd8 Added detection testing service results inLinux At Allow Config File Creation 2021-12-22 10:25:23 +00:00
root 9a6806ce75 Added detection testing service results inLinux At Application Execution 2021-12-22 10:22:07 +00:00
root b38beadde2 Added detection testing service results inLinux Edit Cron Table Parameter 2021-12-22 10:03:26 +00:00
tccontre 3a68d044ef Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml 2021-12-22 10:46:27 +01:00
root d1c95a44ad Added detection testing service results inLinux Possible Cronjob Modification With Editor 2021-12-22 09:02:46 +00:00
Bhavin Patel 0ff1e78f11 Branch was auto-updated. 2021-12-21 11:22:19 -08:00
Jose Enrique Hernandez 930a6db140 Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278 2021-12-21 14:21:54 -05:00
root 9243038c09 Added detection testing service results inSuspicious Ticket Granting Ticket Request 2021-12-21 19:06:04 +00:00
mvelazco bb8ae58f84 adding new detection 2021-12-21 13:44:17 -05:00