admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,721 Commits 697 Branches 195 Tags
adding_ssa_detection
Commit Graph

19721 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
srv-rr-gh-researchbt d26f1c5bb7 Branch was auto-updated. 2023-05-01 11:44:43 -07:00
Bhavin Patel c22fc6b876 Merge pull request #2636 from splunk/RIR 
Create active_directory_lateral_movement_identified.yml
 2023-05-01 11:44:04 -07:00
srv-rr-gh-researchbt e87c3bc5f2 Branch was auto-updated. 2023-04-26 11:19:10 -07:00
srv-rr-gh-researchbt faf045a153 Branch was auto-updated. 2023-04-26 11:19:09 -07:00
Bhavin Patel 00d69b28d5 Merge pull request #2643 from splunk/yaml_create 
adding required fields
 2023-04-26 11:18:45 -07:00
srv-rr-gh-researchbt 2044b38acb Branch was auto-updated. 2023-04-26 10:59:54 -07:00
srv-rr-gh-researchbt 400039312e Branch was auto-updated. 2023-04-26 10:59:52 -07:00
srv-rr-gh-researchbt 436a9304f7 Branch was auto-updated. 2023-04-26 10:59:51 -07:00
Bhavin Patel 6a96a3fe23 Merge pull request #2646 from splunk/ssa_gen_fix 
removed sfc to normalize with 4.0.1
 2023-04-26 10:59:13 -07:00
Lou Stella 20b851f643 removed sfc to normalize with 4.0.1 2023-04-26 09:12:44 -05:00
srv-rr-gh-researchbt 9e02e76ab5 Branch was auto-updated. 2023-04-25 16:58:58 -07:00
srv-rr-gh-researchbt 9ba5896118 Branch was auto-updated. 2023-04-25 16:58:56 -07:00
srv-rr-gh-researchbt 00e861f8d3 Branch was auto-updated. 2023-04-25 16:58:50 -07:00
Bhavin Patel a002b14bbb Merge pull request #2641 from splunk/do_not_step_on_the_redline 
do_not_step_on_the_redline
 2023-04-25 16:58:32 -07:00
patel-bhavin 29c841b945 adding a field 2023-04-25 13:30:37 -07:00
tccontre 8fefd6a3f0 do_not_step_on_the_redline 2023-04-25 16:47:38 +02:00
srv-rr-gh-researchbt dd430eae7e Branch was auto-updated. 2023-04-20 13:09:36 -07:00
srv-rr-gh-researchbt ddcab9aa35 Branch was auto-updated. 2023-04-20 13:09:36 -07:00
research bot 16526a4b02 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-20 20:09:06 +00:00
srv-rr-gh-researchbt 2fb0e14deb Branch was auto-updated. 2023-04-20 12:18:30 -07:00
srv-rr-gh-researchbt 37b4d3b29c Branch was auto-updated. 2023-04-20 12:18:29 -07:00
Lou Stella 9231773766 Merge pull request #2638 from splunk/TR-3094 
[TR-3094] Removed sfc.exe, which has frequent collisions with AMP for Endpoints
v4.0.1 		2023-04-20 14:17:15 -05:00
Lou Stella 838118f3ca version bump 2023-04-20 13:32:18 -05:00
Lou Stella e875bbafce Updated description for grammar 2023-04-20 12:54:02 -05:00
Lou Stella bc212909ec Removed sfc.exe, which has frequent collisions with AMP for Endpoints 2023-04-20 12:48:51 -05:00
patel-bhavin 1eee93c843 adding files for missing detection 2023-04-19 19:25:56 -07:00
Michael Haag ce7f5ffeb7 Create active_directory_lateral_movement_identified.yml 2023-04-19 12:37:17 -06:00
research bot 7b6c1c5e0e Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-18 21:55:52 +00:00
Bhavin Patel e2c6c24bc9 Merge pull request #2633 from splunk/manual_test_flag 
manual test
v4.0.0 		2023-04-18 14:27:17 -07:00
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
Bhavin Patel 2d98d82cf5 Merge pull request #2620 from splunk/blacklotus 
BlackLotus Campaign
 2023-04-18 12:41:48 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 39a3446248 Branch was auto-updated. 2023-04-18 11:46:39 -07:00
Bhavin Patel 7ec528b892 Merge pull request #2632 from splunk/TR-3110 
adding risk=other to all configs
 2023-04-18 11:46:22 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin dc44d23e81 issue 2568 fix 2023-04-17 17:19:34 -07:00
srv-rr-gh-researchbt 664fafdd1c Branch was auto-updated. 2023-04-17 17:03:37 -07:00
srv-rr-gh-researchbt 1a73d58514 Branch was auto-updated. 2023-04-17 17:03:24 -07:00
Bhavin Patel 4261e70954 Merge pull request #2613 from splunk/sandworm_data_destruction 
sandworm_data_destruction
 2023-04-17 17:03:05 -07:00
srv-rr-gh-researchbt 14d5e4f739 Branch was auto-updated. 2023-04-17 16:57:26 -07:00
srv-rr-gh-researchbt 0f03e6211c Branch was auto-updated. 2023-04-17 16:57:24 -07:00
srv-rr-gh-researchbt d55b3753f9 Branch was auto-updated. 2023-04-17 16:57:10 -07:00
Bhavin Patel 9924a35dd0 Merge pull request #2584 from splunk/virustotal_v3_dynamic_analysis_playbooks 
virustotal_v3_dynamic_analysis_playbooks
 2023-04-17 16:56:49 -07:00
srv-rr-gh-researchbt 6a2f587aeb Branch was auto-updated. 2023-04-17 16:53:24 -07:00