admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jose Enrique Hernandez 8b653259b0 Update ssa___detect_dump_lsass_memory_using_comsvcs.yml 2021-09-21 11:35:19 -04:00
mhaag-spl 8b33a65bae Update schtasks_used_for_forcing_a_reboot.yml 2021-09-21 09:24:42 -06:00
mhaag-spl 71a9bed8f4 Revert "Update windows_event_log_cleared.yml" 
This reverts commit 8761bf0f85.
 2021-09-21 09:15:56 -06:00
mhaag-spl c9b15f05c8 Revert "Update wermgr_process_create_executable_file.yml" 
This reverts commit 4fafdf721d.
 2021-09-21 09:13:07 -06:00
mvelazco 3ce8c88ded minor metdata fixes 2021-09-21 11:08:13 -04:00
Detection Testing Service a99cc1d237 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:52:48 +00:00
root 3a276a5de5 Added detection testing service results inW3WP Spawning Shell 2021-09-21 14:52:47 +00:00
Detection Testing Service 93106eb720 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:43:46 +00:00
root fd83d611f2 Added detection testing service results inWermgr Process Spawned CMD Or Powershell Process 2021-09-21 14:43:46 +00:00
Detection Testing Service ceedcdd040 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:35:05 +00:00
root 5423a13fff Added detection testing service results inWinword Spawning PowerShell 2021-09-21 14:35:04 +00:00
Detection Testing Service e852db0c5b Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:32:55 +00:00
root 020f8f8ebc Added detection testing service results inWinword Spawning Cmd 2021-09-21 14:32:55 +00:00
mhaag-spl 4fafdf721d Update wermgr_process_create_executable_file.yml 
Updated to tstat
 2021-09-21 08:25:16 -06:00
mhaag-spl 8761bf0f85 Update windows_event_log_cleared.yml 2021-09-21 08:19:22 -06:00
divious1 8035090837 adding narrative to story 2021-09-20 21:23:13 -04:00
divious1 a9b6443859 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-20 21:21:12 -04:00
divious1 ab81b944a5 fixed error with source display 2021-09-20 21:15:42 -04:00
Jose Enrique Hernandez f198805ee7 Update CNAME 2021-09-20 20:57:34 -04:00
Jose Enrique Hernandez 4fe7345162 Update CNAME 2021-09-20 20:57:10 -04:00
Jose Enrique Hernandez ffd2ff4035 Create CNAME 2021-09-20 20:56:41 -04:00
divious1 b8a6b1e0db added source field to link to yml 2021-09-20 20:45:22 -04:00
pyth0n1c e0961ad0d3 Still some issues when running more than one container in parallel. Might be a management port issue, but needs debugging. 2021-09-20 17:21:46 -07:00
divious1 493ad40df5 minor issue with playbooks linking 2021-09-20 19:09:09 -04:00
divious1 3f5b30a8b2 working stories 2021-09-20 18:35:03 -04:00
Detection Testing Service a22ca80392 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 18:59:09 +00:00
root c904226897 Added detection testing service results inDetect Renamed RClone 2021-09-20 18:59:08 +00:00
Detection Testing Service 3c072fa9bb Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 18:57:35 +00:00
root e82ed3d21d Added detection testing service results inDetect Renamed 7-Zip 2021-09-20 18:57:34 +00:00
root 2694a29473 Added detection testing service results inDetect Renamed PSExec 2021-09-20 18:57:27 +00:00
mhaag-spl 628fe8f257 removing originalfilename artifacts 2021-09-20 12:37:32 -06:00
divious1 7384541200 working navigation, updated detection listing and index pages 2021-09-20 14:30:43 -04:00
root cd70758c21 Added detection testing service results inOffice Document Spawned Child Process To Download 2021-09-20 18:21:07 +00:00
mhaag-spl ea9cfddf1c Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 12:05:19 -06:00
pyth0n1c f30a4c6997 Re-added rebuild code for full test. 2021-09-20 11:05:17 -07:00
Detection Testing Service 8a2401bedf Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 18:05:06 +00:00
mhaag-spl 70e1c9a454 Update office_document_spawned_child_process_to_download.yml 2021-09-20 12:05:05 -06:00
root 7ed4be864e Added detection testing service results inSuspicious SearchProtocolHost no Command Line Arguments 2021-09-20 18:05:05 +00:00
pyth0n1c 0cd2cd850f Duplicate folder names were clobbering each other. Also commented around initial steps to speed up testing time. We will re use the docker containers that we initially built each time for testing. 2021-09-20 11:01:06 -07:00
Detection Testing Service 479384a6c1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 17:58:13 +00:00
root 28f03fcbcd Added detection testing service results inSuspicious Rundll32 with no Command Line Arguments 2021-09-20 17:58:12 +00:00
Detection Testing Service 7d3c68faa1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 17:54:58 +00:00
root 9373763ea3 Added detection testing service results inSuspicious GPUpdate no Command Line Arguments 2021-09-20 17:54:58 +00:00
Detection Testing Service 583db3e726 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 17:51:29 +00:00
root 0a34def1b3 Added detection testing service results inSuspicious DLLHost no Command Line Arguments 2021-09-20 17:51:28 +00:00
mhaag-spl 0718d28f83 Update suspicious_searchprotocolhost_no_command_line_arguments.yml 2021-09-20 11:42:34 -06:00
mhaag-spl 14f9bea865 mwc hunting and rundll32 fix 2021-09-20 11:39:40 -06:00
mhaag-spl 4096b496a5 Update suspicious_gpupdate_no_command_line_arguments.yml 2021-09-20 11:34:25 -06:00
mhaag-spl 4320d4ab5b Update suspicious_dllhost_no_command_line_arguments.yml 2021-09-20 11:32:31 -06:00
root 5d2d0384e3 Added detection testing service results inDetect regsvcs with no Command Line Arguments 2021-09-20 17:21:26 +00:00