admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
d1vious 4e0be9816c easter 2021-10-06 11:03:28 -04:00
tccontre 383834a11b Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-06 14:58:53 +02:00
root ba99c4cee8 Added detection testing service results inSdelete Application Execution 2021-10-06 10:45:31 +00:00
root b910a05650 Added detection testing service results inWscript Or Cscript Suspicious Child Process 2021-10-06 09:52:34 +00:00
tccontre fb296c8508 privilege_escalation_persistence 2021-10-06 11:15:47 +02:00
Bhavin Patel 1e043de8b1 Branch was auto-updated. 2021-10-05 15:17:31 -07:00
Bhavin Patel 2782b80c83 Branch was auto-updated. 2021-10-05 15:17:30 -07:00
Bhavin Patel 820a5d3081 Branch was auto-updated. 2021-10-05 15:17:29 -07:00
Bhavin Patel 92f1139b00 Branch was auto-updated. 2021-10-05 15:17:24 -07:00
Bhavin Patel 4de1dc9a4d Branch was auto-updated. 2021-10-05 15:17:23 -07:00
Bhavin Patel 1422f287b9 Branch was auto-updated. 2021-10-05 15:17:22 -07:00
Bhavin Patel 64e69c8ef6 Branch was auto-updated. 2021-10-05 15:17:21 -07:00
Bhavin Patel 652af4ce87 Merge pull request #1679 from splunk/remove_unused_files 
Remove unused files
 2021-10-05 15:17:03 -07:00
Detection Testing Service e5541e5ae1 Merge branch 'pterodactyl' of https://github.com/splunk/security_content into pterodactyl 2021-10-05 21:28:05 +00:00
root fa190b9700 Added detection testing service results inProcess Writing DynamicWrapperX 2021-10-05 21:28:04 +00:00
Detection Testing Service 2d9047605e Merge branch 'pterodactyl' of https://github.com/splunk/security_content into pterodactyl 2021-10-05 21:27:15 +00:00
root 87d7b8a114 Added detection testing service results inWinhlp32 Spawning a Process 2021-10-05 21:27:14 +00:00
root 8cd4c56855 Added detection testing service results inMalicious InProcServer32 Modification 2021-10-05 21:23:41 +00:00
mhaag-spl 8181c7d15a Update malicious_inprocserver32_modification.yml 2021-10-05 15:02:46 -06:00
mhaag-spl fe02d867a9 fix 2021-10-05 14:59:00 -06:00
mhaag-spl 8daecc268c test files 2021-10-05 14:54:17 -06:00
mhaag-spl 05be27e16a fixes 2021-10-05 14:33:23 -06:00
mhaag-spl b802809a35 Tomorrow Never Haags 
Malicious InProcServer32 Modification
Process Writing DynamicWrapperX
Winhlp32 Spawning a Process
 2021-10-05 14:31:17 -06:00
root dc5033186d Added detection testing service results inDetect Exchange Web Shell, ProxyLogon 2021-10-05 16:18:46 +00:00
Lou Stella 30e0c7f43b Merge pull request #1691 from splunk/TR-1023 
TR-1023: Fine tuning of formatting for playbooks
 2021-10-05 10:59:23 -05:00
mhaag-spl eb39fe5937 Updated PowerShell and Exchange Web Shell 2021-10-05 09:50:13 -06:00
Lou Stella fcfdd0ef65 Update ransomware_investigate_and_contain.yml 
Updated tags
 2021-10-05 10:45:06 -05:00
mhaag-spl ada65ebb2d Merge branch 'develop' into PowerHaag 2021-10-05 09:23:58 -06:00
root 9079efb692 Added detection testing service results inDisable Security Logs Using MiniNt Registry 2021-10-05 14:00:35 +00:00
root ca610d934f Added detection testing service results inEnable WDigest UseLogonCredential Registry 2021-10-05 13:07:19 +00:00
root 457fc3c73a Added detection testing service results inRundll32 Shimcache Flush 2021-10-05 12:11:12 +00:00
root 1304e38f5a Added detection testing service results inSuspicious Copy on System32 2021-10-05 11:50:49 +00:00
tccontre 82633e151a privilege_escalation_persistence 2021-10-05 11:56:48 +02:00
dependabot[bot] 9b0f6d763a Bump ansible-runner from 1.4.7 to 2.0.2 
Bumps [ansible-runner](https://github.com/ansible/ansible-runner) from 1.4.7 to 2.0.2.
- [Release notes](https://github.com/ansible/ansible-runner/releases)
- [Commits](https://github.com/ansible/ansible-runner/compare/1.4.7...2.0.2)

---
updated-dependencies:
- dependency-name: ansible-runner
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-04 23:50:42 +00:00
Bhavin Patel 814ebc54e1 Merge pull request #1697 from splunk/dependabot/pip/urllib3-1.26.7 
Bump urllib3 from 1.26.6 to 1.26.7
 2021-10-04 16:50:20 -07:00
patel-bhavin f1d5fa175f remove actors maps 2021-10-04 16:33:44 -07:00
patel-bhavin 8476b32d1b remove usage searches 2021-10-04 13:21:29 -07:00
patel-bhavin 043cfb5b2a add description 2021-10-04 13:16:29 -07:00
Detection Testing Service 437981cd79 Merge branch 'privilege_escalation_persistence' of https://github.com/splunk/security_content into privilege_escalation_persistence 2021-10-04 11:42:28 +00:00
root 80ceb52382 Added detection testing service results inPowershell Reflective Load 2021-10-04 11:42:27 +00:00
root f896318955 Added detection testing service results inMSBuild Suspicious Spawned By Script Process 2021-10-04 11:41:23 +00:00
tccontre 9007d5bae9 privilege_escalation_persistence 2021-10-04 13:17:04 +02:00
root 2f32f733a8 Added detection testing service results inRegsvr32 Silent Param Dll Loading 2021-10-04 10:13:07 +00:00
tccontre 31f5669d11 cars-mitre 2021-10-04 11:36:50 +02:00
tccontre ff39ef4a93 cars-mitre 2021-10-04 11:33:46 +02:00
dependabot[bot] 9d64bc229b Bump urllib3 from 1.26.6 to 1.26.7 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.6 to 1.26.7.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.6...1.26.7)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-01 23:01:07 +00:00
dependabot[bot] bcef2f2055 Bump azure-identity from 1.6.0 to 1.6.1 
Bumps [azure-identity](https://github.com/Azure/azure-sdk-for-python) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.6.0...azure-identity_1.6.1)

---
updated-dependencies:
- dependency-name: azure-identity
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-01 23:01:04 +00:00
dependabot[bot] b6db744a9c Bump azure-mgmt-compute from 20.0.0 to 23.0.0 
Bumps [azure-mgmt-compute](https://github.com/Azure/azure-sdk-for-python) from 20.0.0 to 23.0.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-mgmt-compute_20.0.0...azure-mgmt-compute_23.0.0)

---
updated-dependencies:
- dependency-name: azure-mgmt-compute
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-01 23:00:51 +00:00
dependabot[bot] a4b168a534 Bump jsonschema from 3.2.0 to 4.0.1 
Bumps [jsonschema](https://github.com/Julian/jsonschema) from 3.2.0 to 4.0.1.
- [Release notes](https://github.com/Julian/jsonschema/releases)
- [Changelog](https://github.com/Julian/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/Julian/jsonschema/compare/v3.2.0...v4.0.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-01 23:00:45 +00:00
patel-bhavin 8245f04e53 remove 2021-10-01 13:49:50 -07:00