admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,351 Commits 697 Branches 195 Tags
ccl0utier/develop
Commit Graph

11334 Commits

Author SHA1 Message Date
Bhavin Patel ba171477f3 Merge branch 'develop' into bec_rule_update 2025-07-07 08:15:49 -07:00
Bhavin Patel b67fb01202 Merge branch 'develop' into refactor-attacker_tools_on_endpoint 2025-07-07 07:56:47 -07:00
sventec 7723704e17 add author tag 2025-07-03 19:32:26 -04:00
Bhavin Patel e6e3145dc0 updating description 2025-07-03 14:26:07 -07:00
Bhavin Patel f04d3879c7 Merge branch 'develop' into bec_rule_update 2025-07-03 10:35:17 -07:00
sventec 1132d0d4ec refactor: attacker_tools_on_endpoint performance 
refactor attacker_tools_on_endpoint to improve search performance, using
the same paradigm as detect_remote_access_software_usage_process.
 2025-07-03 10:37:56 -04:00
0xC0FFEEEE a278863c13 remove unneccesary json normalization 2025-07-03 09:17:50 +01:00
Bhavin Patel e09fcea176 Merge branch 'develop' into linux_auditd_daemon_update 2025-07-01 10:55:46 -07:00
0xC0FFEEEE 3ba50a2d97 Add support for Set-InboxRule 2025-07-01 16:42:06 +01:00
Bhavin Patel 7bce976e2c Merge branch 'develop' into diskwiper 2025-06-30 12:55:40 -07:00
Bhavin Patel ccc1946e64 Update potential_password_in_username.yml 
add JIRA
 2025-06-30 11:58:48 -07:00
Teoderick Contreras 4d9f9be0d6 diskwiper 2025-06-27 09:40:18 +02:00
Bhavin Patel e8c046ac1c update ctl version 2025-06-26 12:56:41 -07:00
Bhavin Patel 1f92fa7b7e tests section 2025-06-26 11:32:00 -07:00
Bhavin Patel 94b0321bbc test 2025-06-26 11:30:30 -07:00
Bhavin Patel f5c8bb352d adding manual_Test 2025-06-26 11:28:56 -07:00
Teoderick Contreras f757a996fa linux_auditd_daemon_update 2025-06-26 10:45:53 +02:00
Teoderick Contreras 5f2408a0d5 linux_auditd_daemon_update 2025-06-26 10:42:07 +02:00
ljstella c7cff2e6a7 Correct versions 2025-06-24 13:03:16 -05:00
ljstella 0f3feac263 Version bumps 2025-06-24 12:43:01 -05:00
ljstella 397107f88a Updated docs links in detections 2025-06-24 11:27:59 -05:00
pyth0n1c babd9df0d6 Update print_processor_registry_autostart.yml 
risk message used a field where the datamodel prefix was still included. This meant that it failed the risk message substitution
 2025-06-17 17:09:39 -07:00
Eric McGinnis 64aac40e82 Remove deprecated detections in line with prepublished guidance 2025-06-17 12:44:39 -07:00
pyth0n1c 60656154e7 Merge branch 'develop' into updates-june 2025-06-17 11:54:36 -07:00
Nasreddine Bencherchali 5ccd548758 Merge branch 'develop' into innoloader 2025-06-17 20:33:26 +02:00
Nasreddine Bencherchali cb45d9d030 quick fixes and updates 2025-06-17 20:32:55 +02:00
pyth0n1c 3f3763176b Merge branch 'develop' into innoloader 2025-06-17 10:56:19 -07:00
ljstella 437b5cf59c Version bump 2025-06-17 09:14:07 -05:00
ljstella bded2e9379 Silly casing... 2025-06-17 09:09:53 -05:00
ljstella 342b06c308 Swap detections to experimental as test data no longer matches expectations of TA 2025-06-17 09:08:59 -05:00
ljstella ff624b020a change to supported sourcetype 2025-06-17 09:08:10 -05:00
Nasreddine Bencherchali e342920f37 Update windows_rundll32_webdav_with_network_connection.yml 2025-06-17 11:44:13 +02:00
Nasreddine Bencherchali 4801780532 Merge branch 'develop' into updates-june 2025-06-17 11:15:26 +02:00
Nasreddine Bencherchali 06d9ce5d6c Merge branch 'develop' into fixing-issues-5.8 2025-06-17 11:15:23 +02:00
Nasreddine Bencherchali 27575a878b fix typos 2025-06-17 02:30:48 +02:00
Nasreddine Bencherchali c46c948ae4 more fixes 2025-06-17 02:20:37 +02:00
Nasreddine Bencherchali b0df2c1973 Update windows_files_and_dirs_access_rights_modification_via_icacls.yml 2025-06-17 01:42:32 +02:00
Nasreddine Bencherchali aeeb471de2 Update suspicious_copy_on_system32.yml 2025-06-17 01:38:33 +02:00
Nasreddine Bencherchali dba17e70d0 Update suspicious_copy_on_system32.yml 2025-06-17 01:35:02 +02:00
Nasreddine Bencherchali 1d2e689e99 Update suspicious_copy_on_system32.yml 2025-06-17 01:28:45 +02:00
Nasreddine Bencherchali 99d3d28654 multiple updates and fixes 2025-06-17 01:22:13 +02:00
Nasreddine Bencherchali 6c5aa91dbf more updates 2025-06-16 23:38:10 +02:00
Nasreddine Bencherchali feb9ec41b2 update to fix ci errors 2025-06-16 16:24:51 +02:00
Raven Tait 25617e6770 Initial remote employment fraud detections. 2025-06-12 14:43:59 -04:00
Teoderick Contreras 1cc0dc736c linux_auditd_daemon_update 2025-06-12 13:28:03 +02:00
Nasreddine Bencherchali 8efe3b11d2 add manual_test tag 2025-06-10 21:25:21 +02:00
Nasreddine Bencherchali 05df61c626 Update detect_outbound_smb_traffic.yml 2025-06-10 20:32:31 +02:00
Nasreddine Bencherchali 8af7db1115 Update dllhost_with_no_command_line_arguments_with_network.yml 2025-06-10 20:24:33 +02:00
Nasreddine Bencherchali e27f42b81c more output field fixes 2025-06-10 20:19:54 +02:00
Nasreddine Bencherchali e4c733a3b4 update output fields 2025-06-10 20:07:40 +02:00