 Jose Enrique Hernandez
|
ce62d1b326
|
Update doc_detections.j2
|
2022-04-12 16:13:06 -04:00 |
|
|
Jose Enrique Hernandez
|
1cc6ed2697
|
Merge pull request #2163 from splunk/ssa_mshta_fix
MSHTA Child Process fix
|
2022-04-12 14:28:48 -04:00 |
|
|
Lou Stella
|
ec66e01b78
|
Fixed formatting
|
2022-04-12 13:11:57 -05:00 |
|
|
Lou Stella
|
da5eb1be3a
|
Updated logic & fixed pathing
|
2022-04-12 12:01:48 -05:00 |
|
|
Lou Stella
|
63968601d2
|
parentheses to separate logic
|
2022-04-12 11:40:08 -05:00 |
|
|
tccontre
|
095210542a
|
Merge pull request #2157 from splunk/cyclopsblink
cyclopsblink
|
2022-04-12 13:13:15 +02:00 |
|
|
tccontre
|
ba3dd9f2a6
|
Update cyclops_blink.yml
|
2022-04-12 12:21:30 +02:00 |
|
|
tccontre
|
143b243003
|
Update linux_stdout_redirection_to_dev_null_file.yml
|
2022-04-12 12:21:20 +02:00 |
|
|
tccontre
|
43c89619b2
|
Update linux_kworker_process_commandline.yml
|
2022-04-12 12:21:10 +02:00 |
|
|
tccontre
|
58aa54a1da
|
Update linux_iptables_firewall_modification.yml
|
2022-04-12 12:21:00 +02:00 |
|
|
research bot
|
41e354485e
|
updating docs and package bits [ci skip]
|
2022-04-12 00:00:09 +00:00 |
|
|
research bot
|
0d71323325
|
updating docs and package bits [ci skip]
v3.38.0
|
2022-04-11 22:55:36 +00:00 |
|
|
pyth0n1c
|
127f1beca8
|
Branch was auto-updated.
|
2022-04-11 10:46:40 -07:00 |
|
|
Bhavin Patel
|
9a829d9a67
|
Merge pull request #2152 from splunk/detection_improvement_mac_os
improved MacOS detection
|
2022-04-11 10:46:14 -07:00 |
|
|
pyth0n1c
|
b384f2b137
|
Branch was auto-updated.
|
2022-04-11 10:23:27 -07:00 |
|
|
pyth0n1c
|
5179f27fe1
|
Branch was auto-updated.
|
2022-04-11 10:23:26 -07:00 |
|
|
Bhavin Patel
|
8a75b7ee7c
|
Merge pull request #2158 from splunk/hunt
Haags Dream Land
|
2022-04-11 10:23:01 -07:00 |
|
|
Bhavin Patel
|
a921f72806
|
Merge pull request #2156 from splunk/enrich-detection-code-deletion
Removed enrich detection script and Github Action stage
|
2022-04-11 09:32:39 -07:00 |
|
|
pyth0n1c
|
ef9b64c968
|
Updated detection-testing.yml
to the same as the version in
develop so that testing can
proceed. Since there is a PR
open, why didn't this auto
update?
|
2022-04-08 06:34:56 -07:00 |
|
|
tccontre
|
6ec5e58608
|
Update cyclops_blink.yml
|
2022-04-08 09:49:46 +02:00 |
|
|
mhaag-spl
|
d3e26be675
|
T# add
|
2022-04-07 15:06:13 -06:00 |
|
|
mhaag-spl
|
305a20bc54
|
Hunting
Changed to hunting, added renamed logic to not use the process_macro
Issue #2010
|
2022-04-07 14:39:56 -06:00 |
|
|
tccontre
|
1470c6713c
|
Update linux_stdout_redirection_to_dev_null_file.yml
|
2022-04-07 15:10:06 +02:00 |
|
|
tccontre
|
8b6970f5c7
|
Update linux_kworker_process_commandline.yml
|
2022-04-07 15:01:53 +02:00 |
|
|
tccontre
|
fcba8c2731
|
cyclopsblink
|
2022-04-07 14:58:11 +02:00 |
|
|
tccontre
|
c1035681a2
|
cyclopsblink
|
2022-04-07 14:53:59 +02:00 |
|
|
akhunti
|
c55e114dac
|
Removed enrich detection script and Github Action stage
|
2022-04-07 12:11:15 +05:30 |
|
|
pyth0n1c
|
e62b2ae8be
|
Branch was auto-updated.
|
2022-04-06 14:47:40 -07:00 |
|
|
Bhavin Patel
|
48cb17f56d
|
Merge pull request #2153 from splunk/springshowers
Spring for Shells
|
2022-04-06 14:47:14 -07:00 |
|
|
patel-bhavin
|
2c8fa42b98
|
minor updates and gitignore
|
2022-04-06 14:03:06 -07:00 |
|
|
mhaag-spl
|
f457ffed90
|
Update java_writing_jsp_file.yml
|
2022-04-06 13:47:38 -06:00 |
|
|
mhaag-spl
|
9f370036f5
|
Update web_spring4shell_http_request_class_module.yml
|
2022-04-06 10:26:23 -06:00 |
|
|
mhaag-spl
|
8649a7c990
|
Web Spring4Shell HTTP Request Class Module
|
2022-04-06 09:58:24 -06:00 |
|
|
mhaag-spl
|
ebb920f47d
|
rename
|
2022-04-06 08:39:34 -06:00 |
|
|
pyth0n1c
|
257957fa5b
|
Branch was auto-updated.
|
2022-04-05 14:52:19 -07:00 |
|
|
pyth0n1c
|
bdfa26a0ed
|
Branch was auto-updated.
|
2022-04-05 14:52:17 -07:00 |
|
|
Bhavin Patel
|
c5528e72ea
|
Merge pull request #2113 from splunk/InDirectToVideo
LOLBin
|
2022-04-05 14:51:59 -07:00 |
|
|
mhaag-spl
|
bc2ab62ee8
|
typo
|
2022-04-05 15:41:35 -06:00 |
|
|
mhaag-spl
|
a03b6719de
|
function and CVE-2022-22965 fixes
|
2022-04-05 15:36:38 -06:00 |
|
|
pyth0n1c
|
082d15ac3d
|
Updating paths to dataset for testing
|
2022-04-05 14:14:42 -07:00 |
|
|
pyth0n1c
|
39c8ab5e12
|
Branch was auto-updated.
|
2022-04-05 13:56:48 -07:00 |
|
|
pyth0n1c
|
01b94c45f4
|
Branch was auto-updated.
|
2022-04-05 13:56:47 -07:00 |
|
|
Bhavin Patel
|
1b5deca353
|
Merge pull request #2150 from splunk/hermeticwipertag
Hermeticwipertag
|
2022-04-05 13:56:21 -07:00 |
|
|
pyth0n1c
|
fd5a14cae3
|
Reverting changes that we made to the
macros file.
|
2022-04-05 13:37:51 -07:00 |
|
|
pyth0n1c
|
9638205131
|
Fixed paths to attack data sets
and updated required_fields
format to matrch the rest of the
detections in the repo.
|
2022-04-05 13:36:36 -07:00 |
|
|
pyth0n1c
|
ec2c1bff73
|
Branch was auto-updated.
|
2022-04-05 13:12:38 -07:00 |
|
|
pyth0n1c
|
0fe4d397f4
|
Branch was auto-updated.
|
2022-04-05 13:12:36 -07:00 |
|
|
pyth0n1c
|
4503340635
|
Branch was auto-updated.
|
2022-04-05 13:12:33 -07:00 |
|
|
Bhavin Patel
|
0f0bac3789
|
Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo
Fix Detection Testing YML
|
2022-04-05 13:12:05 -07:00 |
|
|
mhaag-spl
|
0da666fc10
|
nix write jsp
|
2022-04-05 12:38:53 -06:00 |
|