admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
15,441 Commits 697 Branches 195 Tags
IncludeEventCountInResults
Commit Graph

183 Commits

Author SHA1 Message Date
Rod Soto 92a782df3c fixedtagcb 2022-05-03 09:45:47 -07:00
patel-bhavin 489829b2a6 Merge branch 'develop' into cyclopsblink_fix 2022-05-02 11:06:38 -07:00
tccontre 1106c798a3 cyclopsblink_fix 2022-04-29 17:47:59 +02:00
d1vious fdcd471d5d moving to experimental 2022-04-14 16:37:54 -04:00
pyth0n1c ec2c1bff73 Branch was auto-updated. 2022-04-05 13:12:38 -07:00
Rod Soto 901a73aa5f secondbatchwinprivesctaghermeticwiper 2022-04-05 08:02:47 -07:00
Rod Soto 8298acf18e powershelldetectionstaghermetic 2022-03-31 15:29:51 -07:00
pyth0n1c 779fc5ff47 Branch was auto-updated. 2022-03-28 17:02:28 -07:00
patel-bhavin 16017f3304 bug fix 2022-03-28 16:11:04 -07:00
mvelazco f58ae1f243 Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2 2022-03-22 12:48:11 -04:00
mvelazco 4e5d5926b3 minor changes 2022-03-22 12:48:09 -04:00
patel-bhavin 99829330c1 all the changes again 2022-03-16 13:35:48 -07:00
P4T12ICK 5dd13ea167 fix broken detections 2022-03-14 15:51:05 +01:00
P4T12ICK e6c8254ede Added automaticc generation of finding report 2022-03-14 12:12:48 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 886da3c92e merged with develop 2022-03-04 14:35:50 +01:00
P4T12ICK f76df6b741 fixed validate issues 2022-03-04 14:15:47 +01:00
patel-bhavin a67a8a4da6 Merge branch 'develop' into refactored_security_content 2022-03-03 12:51:11 -08:00
research bot 67ecd29d53 updating docs and package bits [ci skip] 2022-03-03 18:22:29 +00:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
pyth0n1c 0e779f6491 Branch was auto-updated. 2022-02-25 12:29:59 -08:00
Lou Stella d3322283c3 Added risk_severity 2022-02-25 13:49:21 -06:00
Lou Stella 9f65b5d0d4 Updated required fields 2022-02-25 13:48:04 -06:00
Xiao Lin 7b8f6b22e2 update search 2022-02-25 10:03:01 -08:00
Lou Stella 760747cea2 Small update to body 2022-02-25 10:46:46 -06:00
Lou Stella ca2163ae8c Moved to Experimental 2022-02-25 10:40:46 -06:00
research bot 5c8268f137 updating docs and package bits [ci skip] 2022-02-15 23:10:10 +00:00
Bhavin Patel baab603657 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:45:28 -08:00
Xiao Lin a1e6d3e225 update search string 2022-02-09 16:36:10 -08:00
Xiao Lin 9a04a4e833 fix a typo 2022-02-09 16:36:10 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
patel-bhavin e7eab5af71 push 2022-02-07 14:45:37 -08:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
P4T12ICK f9468a908a generate SSA package 2022-02-02 08:41:54 +01:00
research bot e52d00b53d updating docs and package bits [ci skip] 2022-01-31 20:04:12 +00:00
Bhavin Patel 3efcb99124 Merge pull request #1875 from splunk/ssa_multilogin 
Anomalous usage of account credentials
 2022-01-27 14:55:25 -08:00
Bhavin Patel 7fd71050fe Merge pull request #1878 from splunk/ssa_1 
Disable Defender AntiVirus Registry- SSA
 2022-01-27 14:51:23 -08:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
patel-bhavin fe5db9e78e adding lookup files 2022-01-26 15:34:10 -08:00
patel-bhavin cca42c0009 moving to expermental 2022-01-24 15:31:15 -08:00
pyth0n1c dd538478f4 Branch was auto-updated. 2022-01-24 10:40:44 -08:00
research bot 23a0acc37d updating docs and package bits [ci skip] 2022-01-21 21:02:48 +00:00
Lou Stella 3ad47776fb Moving to experimental 2022-01-21 14:16:51 -06:00
d1vious 72d33b23ac moving to match what prod should have 2022-01-21 12:29:13 -05:00
mvelazco 852df4c6e7 Merge pull request #1943 from splunk/Fixing-Wrong-Data-Models 
Fixing Wrong Data Models
 2022-01-18 16:28:55 -05:00
mvelazco 3105bda778 fixing wrong data models 
Lateral Movement analytic story
 2022-01-18 15:48:01 -05:00
mvelazco 774317fc97 adding missing '|' 
Fixing issue reported on https://github.com/splunk/security_content/issues/1904
 2022-01-18 11:08:19 -05:00
P4T12ICK 96ba6f8e73 fixed more detections 2022-01-18 13:51:37 +01:00