admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 2698937b7e Branch was auto-updated. 2021-10-14 16:19:37 -07:00
Bhavin Patel ce313d15a0 Branch was auto-updated. 2021-10-14 16:19:36 -07:00
Lou Stella f12e3270bf Merge pull request #1728 from splunk/docs_add_playbooks 
gtags fixed
 2021-10-14 18:19:21 -05:00
divious1 19f07cfc45 gtags fixed 2021-10-14 19:16:54 -04:00
Bhavin Patel 44f285cf17 Branch was auto-updated. 2021-10-14 15:45:22 -07:00
Bhavin Patel 11919fda59 Branch was auto-updated. 2021-10-14 15:45:21 -07:00
Bhavin Patel a6f9041334 Branch was auto-updated. 2021-10-14 15:45:19 -07:00
Bhavin Patel 0dfa950441 Branch was auto-updated. 2021-10-14 15:45:17 -07:00
Bhavin Patel c0a1518148 Branch was auto-updated. 2021-10-14 15:45:13 -07:00
Bhavin Patel 2c4b3a19b4 Branch was auto-updated. 2021-10-14 15:45:12 -07:00
Bhavin Patel b737ccaf5c Branch was auto-updated. 2021-10-14 15:45:11 -07:00
Bhavin Patel 8cb34cee47 Branch was auto-updated. 2021-10-14 15:45:08 -07:00
Bhavin Patel c615b82513 Branch was auto-updated. 2021-10-14 15:45:07 -07:00
Bhavin Patel bfd6315783 Branch was auto-updated. 2021-10-14 15:45:03 -07:00
Bhavin Patel dc63c73593 Branch was auto-updated. 2021-10-14 15:45:02 -07:00
Jose Enrique Hernandez d80e9fa3da Merge pull request #1727 from splunk/docs_add_playbooks 
Docs add playbooks
 2021-10-14 18:44:42 -04:00
divious1 f93111eef9 Merge branch 'docs_add_playbooks' of github.com:splunk/security_content into docs_add_playbooks 2021-10-14 18:40:21 -04:00
divious1 1b708e87e2 adding dynamic index 2021-10-14 18:40:15 -04:00
Bhavin Patel 7f25e5ba35 Branch was auto-updated. 2021-10-14 15:29:07 -07:00
Bhavin Patel 688bcfb2ff Branch was auto-updated. 2021-10-14 15:29:06 -07:00
Bhavin Patel 7d60473dcd Branch was auto-updated. 2021-10-14 15:29:05 -07:00
Jose Enrique Hernandez 9357940da8 Update CNAME 2021-10-14 18:28:48 -04:00
pyth0n1c 9f91279c51 Changed affected Registry.registry_value_name 
fields to Registry.registry_value_data and changed
value from DWORD(0x...) to 0x...
This probably does not cover all the detections that
will need to be addressed in this fix, but is a good
initial pass to see if the fixes and new TA are working
properly.
 2021-10-14 14:58:03 -07:00
pyth0n1c 3f01dc7409 Touched a number of detections to see if they 
fail with the current sysmon TA before testing
against the sysmon TA update.
 2021-10-14 14:24:25 -07:00
divious1 03db53cbdf finished playbook examples 2021-10-14 14:48:48 -04:00
mhaag-spl 7c7583a169 Process_id to Process_guid 
Changed from process_id to process_guid. Per issue #1635.
 2021-10-14 08:56:19 -06:00
tccontre 63b2266c04 CARS_UPDATE_MITRE_ID_B7 
CARS_UPDATE_MITRE_ID_B7
 2021-10-14 10:24:20 +02:00
tccontre a18d1c9aec Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-14 10:11:16 +02:00
pyth0n1c b607f8a99d Some small config updates 2021-10-13 12:31:02 -07:00
Bhavin Patel b90aa993cf Branch was auto-updated. 2021-10-13 05:54:02 -07:00
Bhavin Patel aa4d233119 Branch was auto-updated. 2021-10-13 05:53:56 -07:00
Bhavin Patel c9fe91cc03 Branch was auto-updated. 2021-10-13 05:53:55 -07:00
Bhavin Patel 598624ed74 Branch was auto-updated. 2021-10-13 05:53:54 -07:00
Bhavin Patel 6d4c7fd19e Branch was auto-updated. 2021-10-13 05:53:53 -07:00
tccontre fce06ed262 Merge pull request #1700 from splunk/pterodactyl 
Tomorrow Never Haags
 2021-10-13 14:53:35 +02:00
tccontre af7ff4052e CARS_UPDATE_MITRE_ID_B6 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:24:10 +02:00
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5 
CARS_UPDATE_MITRE_ID_B5
 2021-10-13 11:20:47 +02:00
tccontre 14e3597bf4 CARS_UPDATE_MITRE_ID_B4 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:13:24 +02:00
tccontre da17a2a938 CARS_UPDATE_MITRE_ID_B3 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:07:20 +02:00
tccontre 0323ec0401 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-13 09:24:30 +02:00
d1vious 583f24f559 working playbook collection 2021-10-12 21:06:53 -04:00
pyth0n1c 1a131ead59 More changes for testing. Prep for long-term test of all detection with results output to file. 2021-10-12 17:22:10 -07:00
divious1 3488a5ebac playbook skeleton 2021-10-12 19:41:23 -04:00
Bhavin Patel 5d7d741898 Branch was auto-updated. 2021-10-12 14:01:29 -07:00
Michael Haag be69d68150 Merge pull request #1718 from splunk/devsecops_bug 
errors and text updates
 2021-10-12 15:01:12 -06:00
Bhavin Patel fdeab27703 Branch was auto-updated. 2021-10-12 13:11:00 -07:00
Bhavin Patel 46b7d220cc Branch was auto-updated. 2021-10-12 13:10:59 -07:00
Bhavin Patel 08d172d13b Merge pull request #1716 from splunk/CARS_UPDATE_MITRE_ID_B1 
Cars update mitre id b1
 2021-10-12 13:10:40 -07:00
Bhavin Patel f67ee09979 revert deployments: - Send to Phantom 2021-10-12 13:08:33 -07:00
patel-bhavin 05972240f4 story name 2021-10-12 13:03:43 -07:00