Commit Graph

5616 Commits

Author SHA1 Message Date
Rod Soto 92a782df3c fixedtagcb 2022-05-03 09:45:47 -07:00
pyth0n1c 4bbac58971 Branch was auto-updated. 2022-05-02 13:27:07 -07:00
Lou Stella eff1576b4b Required Fields 2022-05-02 15:22:41 -05:00
Lou Stella 3f7fdbb0dd Cleaned up search 2022-05-02 15:15:47 -05:00
pyth0n1c c51b02f1d7 Branch was auto-updated. 2022-05-02 13:07:07 -07:00
pyth0n1c d09da59202 Branch was auto-updated. 2022-05-02 13:07:06 -07:00
Lou Stella 6fe602533b Removed detection 2022-05-02 14:30:43 -05:00
mvelazco 1ddbd68f21 adding missing req fields 2022-05-02 14:52:18 -04:00
mvelazco c3037dc1b8 minor changes 2022-05-02 14:25:25 -04:00
patel-bhavin 489829b2a6 Merge branch 'develop' into cyclopsblink_fix 2022-05-02 11:06:38 -07:00
mhaag-spl b9be566fe8 service 2022-05-02 11:40:31 -06:00
pyth0n1c ffb1bf2e1a Branch was auto-updated. 2022-05-02 08:59:30 -07:00
pyth0n1c 92e4622843 Branch was auto-updated. 2022-05-02 08:59:29 -07:00
Lou Stella 80e87b95d9 Dates & Refs 2022-05-02 09:50:39 -05:00
Rod Soto 5b59b4cf50 changedateindes 2022-04-29 15:03:37 -07:00
Rod Soto a71f12b921 Merge branch 'TR-1828' of github.com:splunk/security_content into TR-1828 2022-04-29 10:18:39 -07:00
Rod Soto c43dc89bbf detectionsforlocalprivescpathtraversal 2022-04-29 10:17:14 -07:00
Lou Stella c61f8670f8 CVE-2021-33845 2022-04-29 11:31:33 -05:00
tccontre 1106c798a3 cyclopsblink_fix 2022-04-29 17:47:59 +02:00
tccontre 6194e9075d Update linux_iptables_firewall_modification.yml 2022-04-29 17:40:36 +02:00
tccontre a1ad406a56 Update linux_iptables_firewall_modification.yml 2022-04-29 17:10:53 +02:00
tccontre 0d9944051f Update linux_iptables_firewall_modification.yml 2022-04-29 17:02:50 +02:00
tccontre 0785cb279f Update linux_iptables_firewall_modification.yml 2022-04-29 16:09:09 +02:00
tccontre 8c334270d8 cyclopsblink_fix 2022-04-29 12:11:29 +02:00
tccontre 37d0a8b7bd cyclopsblink_fix 2022-04-29 12:06:55 +02:00
mvelazco fce3ecbfa6 updating analytic story name 2022-04-28 18:10:40 -04:00
mhaag-spl 4afce144f2 krb 2022-04-28 09:18:03 -06:00
Jose Enrique Hernandez ab74318614 Merge pull request #2178 from splunk/TR1807fix
Removing false positives
2022-04-27 16:01:35 -04:00
Lou Stella 28566660fa Removing false positives 2022-04-27 14:13:01 -05:00
Lou Stella 32ac037646 updated message 2022-04-27 13:37:29 -05:00
Lou Stella de6ccbbf9c CVE-2022-27183 2022-04-27 12:44:48 -05:00
pyth0n1c 46fcfbdf7c Branch was auto-updated. 2022-04-25 11:32:00 -07:00
Bhavin Patel 93b1f025dc Update windows_registry_modification_for_safe_mode_persistence.yml 2022-04-25 13:46:43 -04:00
Bhavin Patel 324b7b9dfc Update windows_iso_lnk_file_creation.yml
minor change
2022-04-25 13:44:30 -04:00
tccontre 1acfac609c industroyer2 2022-04-25 12:03:54 +02:00
tccontre 11d372b63c industroyer2 2022-04-25 09:36:55 +02:00
Michael Haag e04e3690f8 Update windows_registry_delete_task_sd.yml 2022-04-22 11:37:08 -06:00
Michael Haag 7d4e75523f Update windows_drivers_loaded_by_signature.yml 2022-04-22 10:32:33 -06:00
mhaag-spl abd668b260 updates and story 2022-04-22 10:21:29 -06:00
mhaag-spl 6ba1225077 SD Delete 2022-04-18 10:55:08 -06:00
mhaag-spl 12350f451e Update nltest_domain_trust_discovery.yml 2022-04-18 10:01:25 -06:00
pyth0n1c 5d8d3c0613 Branch was auto-updated. 2022-04-14 13:55:46 -07:00
d1vious fdcd471d5d moving to experimental 2022-04-14 16:37:54 -04:00
pyth0n1c 3cdd79a0dd Branch was auto-updated. 2022-04-14 13:34:35 -07:00
mhaag-spl 327042ede5 Merge branch 'fishsticks' of https://github.com/splunk/security_content into fishsticks 2022-04-14 14:13:26 -06:00
mhaag-spl b356157dc0 Update ssa___windows_rundll32_comsvcs_memory_dump.yml 2022-04-14 14:13:22 -06:00
pyth0n1c ef83f1ed8f Branch was auto-updated. 2022-04-14 13:09:52 -07:00
pyth0n1c 9ff0da4725 Branch was auto-updated. 2022-04-14 13:09:51 -07:00
Michael Haag ccffa29e3f Merge pull request #2171 from splunk/ssa_mshta_fix
Unicode + Regex = There be demons
2022-04-14 14:09:32 -06:00
mhaag-spl 79ee477a19 comsvcs 2022-04-14 14:04:13 -06:00