Commit Graph

12922 Commits

Author SHA1 Message Date
sec-researcher 0bfb8ba325 Filter blocked traffic because it made a lot of false positive specially when something like port scan happen, also add description to "how_to_implement" section to limit result just to organization private and public IP range for more accurate result 2021-08-19 18:59:04 +04:30
mvelazco fcdd9de006 Create active_directory_discovery.yml 2021-08-19 09:56:23 -04:00
P4T12ICK dd419961e7 container upload aws ecr 2021-08-19 15:51:17 +02:00
tccontre a7f7f0b090 dev_sec2 2021-08-19 15:45:36 +02:00
github-actions[bot] 740d3a5aff Branch was auto-updated. 2021-08-19 13:35:55 +00:00
github-actions[bot] 23c7b7dc36 Branch was auto-updated. 2021-08-19 13:35:53 +00:00
P4T12ICK 354cd08838 Merge pull request #1570 from splunk/aws_eks_detections
container upload aws ecr
2021-08-19 15:35:28 +02:00
P4T12ICK d1933b28da container upload aws ecr 2021-08-19 15:07:12 +02:00
mhaag-spl 0e19432a1d msbuild and microsoftworkflowcompiler 2021-08-19 06:57:11 -06:00
P4T12ICK 4c242df80e container upload aws ecr 2021-08-19 14:07:23 +02:00
github-actions[bot] 59ae237866 Branch was auto-updated. 2021-08-19 11:15:58 +00:00
github-actions[bot] 2ed8ce4c7a Branch was auto-updated. 2021-08-19 11:15:56 +00:00
tccontre 417b37128f Merge pull request #1563 from splunk/dev_ops_uc
dev_ops_uc
2021-08-19 13:15:27 +02:00
github-actions[bot] 5039e0a773 Branch was auto-updated. 2021-08-19 11:07:29 +00:00
github-actions[bot] c0b5b96365 Branch was auto-updated. 2021-08-19 11:07:26 +00:00
github-actions[bot] d9360e030a Branch was auto-updated. 2021-08-19 11:07:18 +00:00
tccontre 63d21f2e46 Merge pull request #1552 from splunk/conti_leak
conti_leak
2021-08-19 13:06:54 +02:00
tccontre c7b6dfd9f3 dev_ops_uc 2021-08-19 12:08:22 +02:00
tccontre ceb9c848a2 dev_ops_uc 2021-08-19 12:05:53 +02:00
tccontre 5c8bd617be dev_ops_uc 2021-08-19 12:03:28 +02:00
P4T12ICK 6eec6d28a6 Merge branch 'develop' into conti_leak 2021-08-19 10:39:31 +02:00
patel-bhavin c7bc4d7243 rename 2021-08-18 13:49:15 -07:00
research bot 2ca7ca8bec updating docs and package bits [ci skip] 2021-08-18 19:10:04 +00:00
pyth0n1c 8681ca59d2 Rolling back to previous requirements.txt file. 2021-08-18 11:36:31 -07:00
pyth0n1c 12b95f5a3a Using pip to update all the requirements and save off the versions as an artifact. 2021-08-18 11:27:50 -07:00
pyth0n1c fedf42d570 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-18 10:57:46 -07:00
pyth0n1c f29578deaa Updated the requirements.txt file using pur. 2021-08-18 10:57:32 -07:00
mhaag-spl bd37cde924 Merge branch 'Haagust' of https://github.com/splunk/security_content into Haagust 2021-08-18 11:14:22 -06:00
mhaag-spl 495a94bbbc Update process_esentutl.yml 2021-08-18 11:14:13 -06:00
Michael Haag b7a8e5c579 Merge branch 'develop' into Haagust 2021-08-18 11:00:17 -06:00
mhaag-spl 7acfff10d9 Update esentutl_sam_copy.yml 2021-08-18 10:59:50 -06:00
research bot 2c9e7b58a8 updating docs and package bits [ci skip] 2021-08-18 16:56:31 +00:00
mhaag-spl 47817a2b37 Merge branch 'Haagust' of https://github.com/splunk/security_content into Haagust 2021-08-18 10:54:38 -06:00
mhaag-spl cdd44a91ab Update esentutl_sam_copy.yml 2021-08-18 10:54:32 -06:00
research bot 703d22457f updating docs and package bits [ci skip] 2021-08-18 16:54:18 +00:00
Michael Haag e1ac9603d3 Merge branch 'develop' into Haagust 2021-08-18 10:53:07 -06:00
mhaag-spl 1eb1f40ae0 esentutil
Related to Conti leaks
2021-08-18 10:47:58 -06:00
github-actions[bot] 628ed6b76b Branch was auto-updated. 2021-08-18 16:24:27 +00:00
github-actions[bot] 82dd3f6540 Branch was auto-updated. 2021-08-18 16:24:23 +00:00
github-actions[bot] 1919c9f073 Branch was auto-updated. 2021-08-18 16:24:23 +00:00
github-actions[bot] f2b75a2e7d Branch was auto-updated. 2021-08-18 16:24:22 +00:00
Bhavin Patel 232895de96 Merge pull request #1566 from splunk/pretty_yaml_error
fix for type
v3.27.0
2021-08-18 09:24:04 -07:00
patel-bhavin 19fad3da58 fix for type 2021-08-18 09:13:13 -07:00
mhaag-spl 09f29ad081 macros 2021-08-18 09:50:08 -06:00
Detection Testing Service 02a22a0564 Merge branch 'conti_leak' of https://github.com/splunk/security_content into conti_leak 2021-08-18 15:48:22 +00:00
root a0fa0a2610 Added detection testing service results in7zip CommandLine To SMB Share Path 2021-08-18 15:48:21 +00:00
root 65273870d1 Added detection testing service results inUAC Bypass With Colorui COM Object 2021-08-18 15:46:05 +00:00
tccontre 5f87d79e1c Merge branch 'dev_ops_uc' of github.com:splunk/security_content into dev_ops_uc 2021-08-18 15:58:55 +02:00
tccontre 1bde88fc3f dev_ops_uc 2021-08-18 15:58:35 +02:00
github-actions[bot] cc928f010d Branch was auto-updated. 2021-08-18 13:39:07 +00:00