admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,952 Commits 697 Branches 195 Tags
clop
Commit Graph

249 Commits

Author SHA1 Message Date
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00
Ignacio Bermudez Corrales 0ec2001838 Renaming test .yaml -> .yml | No events should come out of the detection 2021-03-19 13:52:34 -07:00
github-actions[bot] cf44d1ac60 Branch was auto-updated. 2021-03-19 13:24:18 +00:00
P4T12ICK 6355bb7f72 small bug fixes 2021-03-19 13:30:13 +01:00
P4T12ICK 36f63418f0 detection testing SSA 2021-03-19 10:16:58 +01:00
P4T12ICK d13a1896ef detection testing SSA 2021-03-19 09:37:18 +01:00
Michael Haag b59430ab5d Merge branch 'develop' into mhaag 2021-03-18 21:24:34 -06:00
mhaag-spl 34e69271f3 Updated Detect Exchange Web Shell 
Updated Detect Exchange Web Shell based on data
 2021-03-18 21:00:09 -06:00
P4T12ICK 4741fc9cca updated test file 2021-03-16 12:50:06 +01:00
P4T12ICK d062c34f80 Merge branch 'develop' into patrick_test_branch 2021-03-16 11:52:11 +01:00
mhaag-spl 244284f5ae updating paths 2021-03-12 09:51:51 -07:00
mhaag-spl 6687c01eb9 Update unified_messaging_service_spawning_a_process.test.yml 2021-03-12 08:16:15 -07:00
mhaag-spl 8be17b4404 Update unified_messaging_service_spawning_a_process.test.yml 2021-03-11 13:12:21 -07:00
mhaag-spl 2643be22ff w3wp spawning shell 2021-03-11 12:34:21 -07:00
mhaag-spl 69d73f3dc1 unified messaging service spawning a shell 2021-03-11 12:12:52 -07:00
mhaag-spl 962925bbea Create detect_mshta_renamed.test.yml 2021-03-08 16:27:06 -07:00
mhaag-spl e6ce96e5a1 Detect Mimikatz Using Loaded Images 2021-03-05 13:10:59 -07:00
mhaag-spl 0aa830c26d fixes 2021-03-03 14:54:56 -07:00
mhaag-spl ac49f9ab9e HAFNIUM and more updates 2021-03-03 14:10:11 -07:00
mhaag-spl f408036e4a Create windows_disableantispyware_reg.test.yml 2021-03-02 15:21:55 -07:00
mhaag-spl e6fd5ba6c7 Update any_powershell_downloadstring.test.yml 2021-03-02 15:02:51 -07:00
mhaag-spl faca9affeb Update suspicious_scheduled_task_from_public_directory.test.yml 2021-03-02 15:01:54 -07:00
mhaag-spl d5cdffe5fa Update fodhelper_uac_bypass.test.yml 2021-03-02 12:52:07 -07:00
mhaag-spl 0e18f64414 powershell 2021-03-02 09:43:31 -07:00
mhaag-spl 16627bf207 update url 2021-03-01 18:28:25 -07:00
mhaag-spl 9794fd13fb Any PowerShell DownloadString 2021-03-01 16:02:36 -07:00
mhaag-spl bd2c69ec28 Eventvwr UAC Bypass 2021-03-01 15:18:27 -07:00
mhaag-spl bcbd2ebb19 Fodhelper uac bypass 2021-03-01 13:38:06 -07:00
mhaag-spl 5a09edf797 Suspicious Scheduled Task from Public Directory 2021-03-01 12:45:22 -07:00
mhaag-spl a576744f88 Ryuk Wake on LAN 2021-03-01 10:07:12 -07:00
P4T12ICK 05d3fad633 new test 2021-03-01 16:51:09 +01:00
P4T12ICK a888b771c4 new test 2021-03-01 16:51:05 +01:00
P4T12ICK edaf53ff1c test 2021-03-01 16:44:26 +01:00
P4T12ICK dfab3ba794 small change 2021-03-01 13:13:37 +01:00
P4T12ICK 87e36c489e test branch 2021-03-01 10:36:14 +01:00
mhaag-spl 75998a3ddf SearchprotocolHost 2021-02-23 15:04:11 -07:00
mhaag-spl 393065bc66 Update suspicious_dllhost_no_command_line_arguments.test.yml 2021-02-23 14:22:23 -07:00
mhaag-spl b7f587b127 Update suspicious_gpupdate_no_command_line_arguments.test.yml 2021-02-23 13:48:57 -07:00
mhaag-spl bb5bc07dab fixes and new 2021-02-23 13:04:17 -07:00
mhaag-spl 9188143fea gpupdate no cmdline arguments 2021-02-23 12:34:52 -07:00
mhaag-spl 03db8006d8 Named Pipes + update 2021-02-22 15:26:35 -07:00
github-actions[bot] bd92943d0e Branch was auto-updated. 2021-02-17 19:28:17 +00:00
bpatel 75b8c1a03d _timeupdate 2021-02-17 10:09:38 -08:00
mhaag-spl 756aeb3987 Update detect_regsvcs_with_no_command_line_arguments.test.yml 2021-02-16 11:56:19 -07:00
mhaag-spl 57ce41d8bc regsvcs no clargs 2021-02-16 11:53:55 -07:00
mhaag-spl 098f12300b regasm no cl arguments 2021-02-16 11:22:07 -07:00
mhaag-spl ad7a3d476a regasm-regsvcs-network 2021-02-16 07:16:05 -07:00
mhaag-spl fd3910ae5b test files 2021-02-12 12:10:53 -07:00
mhaag-spl cc10bb66e6 hh renamed 
hh renamed
 2021-02-11 15:15:30 -07:00