admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,721 Commits 697 Branches 195 Tags
adding_ssa_detection
Commit Graph

5404 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 9e02e76ab5 Branch was auto-updated. 2023-04-25 16:58:58 -07:00
tccontre 8fefd6a3f0 do_not_step_on_the_redline 2023-04-25 16:47:38 +02:00
Michael Haag ce7f5ffeb7 Create active_directory_lateral_movement_identified.yml 2023-04-19 12:37:17 -06:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 664fafdd1c Branch was auto-updated. 2023-04-17 17:03:37 -07:00
srv-rr-gh-researchbt 6a2f587aeb Branch was auto-updated. 2023-04-17 16:53:24 -07:00
srv-rr-gh-researchbt 72ab2d082e Branch was auto-updated. 2023-04-17 16:53:10 -07:00
Bhavin Patel 2aafdb6cfe Merge branch 'develop' into sandworm_data_destruction 2023-04-17 16:44:20 -07:00
srv-rr-gh-researchbt 2a717b761a Branch was auto-updated. 2023-04-17 16:26:22 -07:00
srv-rr-gh-researchbt d3ebc2795c Branch was auto-updated. 2023-04-17 16:26:19 -07:00
Michael Haag 747bf67e8a I AM THE RDP 2023-04-17 15:18:40 -06:00
srv-rr-gh-researchbt 6a6fb9a0c1 Branch was auto-updated. 2023-04-17 13:04:10 -07:00
srv-rr-gh-researchbt 21c5a0bcae Branch was auto-updated. 2023-04-17 13:04:05 -07:00
srv-rr-gh-researchbt 6955f7d8c6 Branch was auto-updated. 2023-04-17 13:03:53 -07:00
Lou Stella dbcf0b2e31 properly name generated macro 2023-04-17 14:53:23 -05:00
Michael Haag 59c4718b7e inventory 2023-04-14 12:02:42 -06:00
Michael Haag 3706e5562a Update windows_impair_defenses_disable_hvci.yml 2023-04-14 10:42:04 -06:00
Michael Haag df736d2d08 HVCI Disable and story 2023-04-14 10:32:12 -06:00
tccontre f276d22e6c data_destruction_wiper_story 2023-04-14 10:50:14 +02:00
tccontre 033c45858c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:45:52 +02:00
tccontre 68e61ae4cd Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:44:14 +02:00
tccontre 5311028ec7 Update malicious_powershell_process___encoded_command.yml 2023-04-14 10:42:16 +02:00
tccontre ecf8ff90d4 Update detect_mimikatz_with_powershell_script_block_logging.yml 2023-04-14 10:40:15 +02:00
tccontre e1c4580b9c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:39:01 +02:00
tccontre bf4daef2ca Update winevent_scheduled_task_created_within_public_path.yml 2023-04-14 10:38:20 +02:00
tccontre 357de299b3 Update powershell_loading_dotnet_into_memory_via_reflection.yml 2023-04-14 10:36:29 +02:00
tccontre 60ec2a1c2c Update powershell_fileless_script_contains_base64_encoded_content.yml 2023-04-14 10:35:54 +02:00
tccontre 53b7dc49e9 Update cmd_carry_out_string_command_parameter.yml 2023-04-14 10:34:44 +02:00
tccontre d460df3354 Update any_powershell_downloadstring.yml 2023-04-14 10:33:19 +02:00
patel-bhavin 61d4414f2f fix up with 4.0 2023-04-13 11:30:14 -07:00
patel-bhavin 19c67e3d85 fixup to match 4.0 2023-04-13 11:16:43 -07:00
Michael Haag eebbe77081 Update windows_dns_gather_network_info.yml 2023-04-13 12:13:39 -06:00
Michael Haag 435f535119 fixes 2023-04-13 11:40:53 -06:00
Michael Haag fa7ebebdb7 status 2023-04-13 11:29:07 -06:00
tccontre 2b51ca5ac8 Update powershell_loading_dotnet_into_memory_via_reflection.yml 2023-04-13 19:15:58 +02:00
tccontre df412ca5bb Update powershell_fileless_script_contains_base64_encoded_content.yml 2023-04-13 19:15:34 +02:00
tccontre 6533a9b79e Update cmd_carry_out_string_command_parameter.yml 2023-04-13 19:15:09 +02:00
tccontre 9dfc980e11 Update any_powershell_downloadstring.yml 2023-04-13 19:14:46 +02:00
Michael Haag 3faaaf2f0a updates 2023-04-13 11:07:18 -06:00
tccontre 52391f5615 Merge branch 'develop' into sandworm_data_destruction 2023-04-13 19:07:10 +02:00
tccontre c5bccb239b Merge branch 'develop' into winter_vivern_analytics 2023-04-13 19:02:00 +02:00
pyth0n1c 67d09a1c52 Fixing some syntactic errors with a number of detections. 2023-04-12 10:09:43 -07:00
tccontre e9dfbaef48 Update windows_dns_gather_network_info.yml 2023-04-12 12:29:08 +02:00
tccontre e0b697ab6e sandworm_data_destruction 2023-04-12 12:17:43 +02:00
Bhavin Patel 97992ce077 Update detect_activity_related_to_pass_the_hash_attacks.yml 2023-04-11 08:54:40 -07:00
patel-bhavin a1a9fb5b77 slack pth spl update 2023-04-07 13:19:49 -05:00