admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,721 Commits 697 Branches 195 Tags
adding_ssa_detection
Commit Graph

7888 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 9e02e76ab5 Branch was auto-updated. 2023-04-25 16:58:58 -07:00
tccontre 8fefd6a3f0 do_not_step_on_the_redline 2023-04-25 16:47:38 +02:00
Michael Haag ce7f5ffeb7 Create active_directory_lateral_movement_identified.yml 2023-04-19 12:37:17 -06:00
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 39a3446248 Branch was auto-updated. 2023-04-18 11:46:39 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin dc44d23e81 issue 2568 fix 2023-04-17 17:19:34 -07:00
srv-rr-gh-researchbt 664fafdd1c Branch was auto-updated. 2023-04-17 17:03:37 -07:00
srv-rr-gh-researchbt 1a73d58514 Branch was auto-updated. 2023-04-17 17:03:24 -07:00
srv-rr-gh-researchbt 6a2f587aeb Branch was auto-updated. 2023-04-17 16:53:24 -07:00
srv-rr-gh-researchbt 72ab2d082e Branch was auto-updated. 2023-04-17 16:53:10 -07:00
srv-rr-gh-researchbt 5f5f0aa76b Branch was auto-updated. 2023-04-17 16:53:09 -07:00
Bhavin Patel 69296ac7d1 Update okta_threatinsight_suspected_passwordspray_attack.yml 2023-04-17 16:46:08 -07:00
Bhavin Patel 2aafdb6cfe Merge branch 'develop' into sandworm_data_destruction 2023-04-17 16:44:20 -07:00
srv-rr-gh-researchbt 2a717b761a Branch was auto-updated. 2023-04-17 16:26:22 -07:00
srv-rr-gh-researchbt 73f0a8dc50 Branch was auto-updated. 2023-04-17 16:26:21 -07:00
srv-rr-gh-researchbt d3ebc2795c Branch was auto-updated. 2023-04-17 16:26:19 -07:00
patel-bhavin fc34672ca4 updates to ymls 2023-04-17 15:23:53 -07:00
Michael Haag 747bf67e8a I AM THE RDP 2023-04-17 15:18:40 -06:00
srv-rr-gh-researchbt febf103b87 Branch was auto-updated. 2023-04-17 13:11:24 -07:00
srv-rr-gh-researchbt 02803d91be Branch was auto-updated. 2023-04-17 13:11:16 -07:00
srv-rr-gh-researchbt 126c88c59b Branch was auto-updated. 2023-04-17 13:11:12 -07:00
srv-rr-gh-researchbt 6a6fb9a0c1 Branch was auto-updated. 2023-04-17 13:04:10 -07:00
srv-rr-gh-researchbt 21c5a0bcae Branch was auto-updated. 2023-04-17 13:04:05 -07:00
srv-rr-gh-researchbt 6955f7d8c6 Branch was auto-updated. 2023-04-17 13:03:53 -07:00
srv-rr-gh-researchbt 50f7e69d8f Branch was auto-updated. 2023-04-17 13:03:52 -07:00
Lou Stella ed394e2ce1 Removing extra 11186 around field name 2023-04-17 15:00:52 -05:00
Lou Stella dbcf0b2e31 properly name generated macro 2023-04-17 14:53:23 -05:00
Michael Haag 59c4718b7e inventory 2023-04-14 12:02:42 -06:00
Michael Haag 3706e5562a Update windows_impair_defenses_disable_hvci.yml 2023-04-14 10:42:04 -06:00
Michael Haag df736d2d08 HVCI Disable and story 2023-04-14 10:32:12 -06:00
tccontre f276d22e6c data_destruction_wiper_story 2023-04-14 10:50:14 +02:00
tccontre 033c45858c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:45:52 +02:00
tccontre 68e61ae4cd Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:44:14 +02:00
tccontre 5311028ec7 Update malicious_powershell_process___encoded_command.yml 2023-04-14 10:42:16 +02:00
tccontre ecf8ff90d4 Update detect_mimikatz_with_powershell_script_block_logging.yml 2023-04-14 10:40:15 +02:00
tccontre e1c4580b9c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:39:01 +02:00
tccontre bf4daef2ca Update winevent_scheduled_task_created_within_public_path.yml 2023-04-14 10:38:20 +02:00
tccontre 357de299b3 Update powershell_loading_dotnet_into_memory_via_reflection.yml 2023-04-14 10:36:29 +02:00
tccontre 60ec2a1c2c Update powershell_fileless_script_contains_base64_encoded_content.yml 2023-04-14 10:35:54 +02:00
tccontre 53b7dc49e9 Update cmd_carry_out_string_command_parameter.yml 2023-04-14 10:34:44 +02:00
tccontre d460df3354 Update any_powershell_downloadstring.yml 2023-04-14 10:33:19 +02:00
patel-bhavin 61d4414f2f fix up with 4.0 2023-04-13 11:30:14 -07:00