admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
15,173 Commits 697 Branches 195 Tags
contentctl_optimizations
Commit Graph

15173 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c d6cfeecc50 Forcing use of offline mitre enrichment data... FOR SPEEEEEED 2022-04-07 13:15:54 -07:00
pyth0n1c 372d9f60c7 caching api calls and pickling data to make it as fast as possible. 2022-04-07 13:11:03 -07:00
Bhavin Patel 48cb17f56d Merge pull request #2153 from splunk/springshowers 
Spring for Shells
 2022-04-06 14:47:14 -07:00
patel-bhavin 2c8fa42b98 minor updates and gitignore 2022-04-06 14:03:06 -07:00
mhaag-spl f457ffed90 Update java_writing_jsp_file.yml 2022-04-06 13:47:38 -06:00
mhaag-spl 9f370036f5 Update web_spring4shell_http_request_class_module.yml 2022-04-06 10:26:23 -06:00
mhaag-spl 8649a7c990 Web Spring4Shell HTTP Request Class Module 2022-04-06 09:58:24 -06:00
mhaag-spl ebb920f47d rename 2022-04-06 08:39:34 -06:00
pyth0n1c bdfa26a0ed Branch was auto-updated. 2022-04-05 14:52:17 -07:00
Bhavin Patel c5528e72ea Merge pull request #2113 from splunk/InDirectToVideo 
LOLBin
 2022-04-05 14:51:59 -07:00
mhaag-spl bc2ab62ee8 typo 2022-04-05 15:41:35 -06:00
mhaag-spl a03b6719de function and CVE-2022-22965 fixes 2022-04-05 15:36:38 -06:00
pyth0n1c 082d15ac3d Updating paths to dataset for testing 2022-04-05 14:14:42 -07:00
pyth0n1c 39c8ab5e12 Branch was auto-updated. 2022-04-05 13:56:48 -07:00
Bhavin Patel 1b5deca353 Merge pull request #2150 from splunk/hermeticwipertag 
Hermeticwipertag
 2022-04-05 13:56:21 -07:00
pyth0n1c fd5a14cae3 Reverting changes that we made to the 
macros file.
 2022-04-05 13:37:51 -07:00
pyth0n1c 9638205131 Fixed paths to attack data sets 
and updated required_fields
format to matrch the rest of the
detections in the repo.
 2022-04-05 13:36:36 -07:00
pyth0n1c ec2c1bff73 Branch was auto-updated. 2022-04-05 13:12:38 -07:00
pyth0n1c 4503340635 Branch was auto-updated. 2022-04-05 13:12:33 -07:00
Bhavin Patel 0f0bac3789 Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo 
Fix Detection Testing YML
 2022-04-05 13:12:05 -07:00
mhaag-spl 0da666fc10 nix write jsp 2022-04-05 12:38:53 -06:00
mhaag-spl 6ebca18614 Spring4Shell 2022-04-05 11:53:23 -06:00
pyth0n1c c7e1a04873 Update windows_indirect_command_execution_via_forfiles.yml 
Updated dataset.  Need to update again after dataset is merged from branch into main of attack_data
 2022-04-05 10:21:42 -07:00
pyth0n1c 30ff35bcd8 Update windows_indirect_command_execution_via_pcalua.yml 
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
 2022-04-05 10:20:58 -07:00
pyth0n1c b385ef2ead Update windows_indirect_command_execution_via_pcalua.yml 
Adding second reference for pcalua.exe
 2022-04-05 10:15:26 -07:00
pyth0n1c 0cde033ac1 Update windows_indirect_command_execution_via_pcalua.yml 
Added UUID
 2022-04-05 10:13:20 -07:00
pyth0n1c 71fe3edea7 Update windows_indirect_command_execution_via_forfiles.yml 
Added UUID
 2022-04-05 10:12:45 -07:00
pyth0n1c 90424b7e0c Update windows_indirect_command_execution_via_forfiles.yml 
Updated description info on forfiles detection yaml
 2022-04-05 10:08:49 -07:00
pyth0n1c 2d2fdb6be0 Update windows_indirect_command_execution_via_pcalua.yml 
Updated description in YML
 2022-04-05 10:05:21 -07:00
pyth0n1c 90abd35b92 Previously had uses and run keys in the 
same step.  That caused all jobs
to fail at parsing the workflow yml.
 2022-04-05 09:40:41 -07:00
Rod Soto 901a73aa5f secondbatchwinprivesctaghermeticwiper 2022-04-05 08:02:47 -07:00
Rod Soto b3cd632c29 hermeticwipertagswindowsprivesc 2022-04-05 07:55:03 -07:00
P4T12ICK 9e79d31e66 Merge pull request #2131 from splunk/mac_os_detections 
plutil mac os detection
 2022-04-05 15:37:48 +02:00
pyth0n1c eb0cbac38e Branch was auto-updated. 2022-04-04 16:57:13 -07:00
Jose Enrique Hernandez 16175e510f Merge pull request #2149 from splunk/NightlyDetectionTestingS3Artifacts 
Nightly detection testing s3 artifacts
 2022-04-04 19:56:56 -04:00
pyth0n1c eafc7f7867 Branch was auto-updated. 2022-04-04 16:39:04 -07:00
pyth0n1c 3e2136f784 Branch was auto-updated. 2022-04-04 16:38:59 -07:00
Jose Enrique Hernandez 273367a2e0 Merge pull request #2148 from splunk/IncreasePostWidth 
Increased the width of research.splunk.com posts
 2022-04-04 19:38:41 -04:00
pyth0n1c 93176ca83b Updated S3 upload code to proper bucket path 2022-04-04 15:52:49 -07:00
pyth0n1c 8abf0592fc Converting string to fstring 2022-04-04 15:32:09 -07:00
pyth0n1c 0209621f81 Code to generate and upload 
pass rate badge after completion
of a scheduled run.  Also uploads
the summary_test_results.json file
for use on research.splunk.com
 2022-04-04 15:29:28 -07:00
pyth0n1c a01e3c8734 Increased the width of the posts 
for all of the content.  This reduces
the extremely large whitespace
columns on the sides of all the
content and is a more efficient
use of space.
 2022-04-04 13:38:50 -07:00
pyth0n1c 2287e6597f Branch was auto-updated. 2022-04-04 12:41:37 -07:00
Bhavin Patel 2a054936cc Merge pull request #2074 from splunk/TR_1550_Kerberos_Coverage_2 
Active Directory Kerberos Attacks - Part 2
 2022-04-04 12:41:17 -07:00
Bhavin Patel 665c25a728 Update kerberos_tgt_request_using_rc4_encryption.yml 2022-04-04 12:04:55 -07:00
research bot 5caec4b36b updating docs and package bits [ci skip] 2022-04-04 18:15:20 +00:00
pyth0n1c 067efc3485 Branch was auto-updated. 2022-04-04 09:25:57 -07:00
pyth0n1c 6046907270 Branch was auto-updated. 2022-04-04 09:25:55 -07:00
tccontre f6f5db9ade Merge pull request #2147 from splunk/descp_fix 
descp_fix
v3.37.1 		2022-04-04 18:25:34 +02:00
tccontre 3ca03bc7fa descp_fix 2022-04-04 17:11:12 +02:00