Commit Graph

5500 Commits

Author SHA1 Message Date
patel-bhavin 2c8fa42b98 minor updates and gitignore 2022-04-06 14:03:06 -07:00
mhaag-spl f457ffed90 Update java_writing_jsp_file.yml 2022-04-06 13:47:38 -06:00
mhaag-spl 9f370036f5 Update web_spring4shell_http_request_class_module.yml 2022-04-06 10:26:23 -06:00
mhaag-spl 8649a7c990 Web Spring4Shell HTTP Request Class Module 2022-04-06 09:58:24 -06:00
mhaag-spl ebb920f47d rename 2022-04-06 08:39:34 -06:00
pyth0n1c bdfa26a0ed Branch was auto-updated. 2022-04-05 14:52:17 -07:00
Bhavin Patel c5528e72ea Merge pull request #2113 from splunk/InDirectToVideo
LOLBin
2022-04-05 14:51:59 -07:00
mhaag-spl a03b6719de function and CVE-2022-22965 fixes 2022-04-05 15:36:38 -06:00
pyth0n1c 39c8ab5e12 Branch was auto-updated. 2022-04-05 13:56:48 -07:00
pyth0n1c 9638205131 Fixed paths to attack data sets
and updated required_fields
format to matrch the rest of the
detections in the repo.
2022-04-05 13:36:36 -07:00
pyth0n1c ec2c1bff73 Branch was auto-updated. 2022-04-05 13:12:38 -07:00
mhaag-spl 0da666fc10 nix write jsp 2022-04-05 12:38:53 -06:00
mhaag-spl 6ebca18614 Spring4Shell 2022-04-05 11:53:23 -06:00
pyth0n1c c7e1a04873 Update windows_indirect_command_execution_via_forfiles.yml
Updated dataset.  Need to update again after dataset is merged from branch into main of attack_data
2022-04-05 10:21:42 -07:00
pyth0n1c 30ff35bcd8 Update windows_indirect_command_execution_via_pcalua.yml
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
2022-04-05 10:20:58 -07:00
pyth0n1c b385ef2ead Update windows_indirect_command_execution_via_pcalua.yml
Adding second reference for pcalua.exe
2022-04-05 10:15:26 -07:00
pyth0n1c 0cde033ac1 Update windows_indirect_command_execution_via_pcalua.yml
Added UUID
2022-04-05 10:13:20 -07:00
pyth0n1c 71fe3edea7 Update windows_indirect_command_execution_via_forfiles.yml
Added UUID
2022-04-05 10:12:45 -07:00
pyth0n1c 90424b7e0c Update windows_indirect_command_execution_via_forfiles.yml
Updated description info on forfiles detection yaml
2022-04-05 10:08:49 -07:00
pyth0n1c 2d2fdb6be0 Update windows_indirect_command_execution_via_pcalua.yml
Updated description in YML
2022-04-05 10:05:21 -07:00
Rod Soto 901a73aa5f secondbatchwinprivesctaghermeticwiper 2022-04-05 08:02:47 -07:00
Rod Soto b3cd632c29 hermeticwipertagswindowsprivesc 2022-04-05 07:55:03 -07:00
pyth0n1c 2287e6597f Branch was auto-updated. 2022-04-04 12:41:37 -07:00
Bhavin Patel 665c25a728 Update kerberos_tgt_request_using_rc4_encryption.yml 2022-04-04 12:04:55 -07:00
pyth0n1c 067efc3485 Branch was auto-updated. 2022-04-04 09:25:57 -07:00
pyth0n1c 6046907270 Branch was auto-updated. 2022-04-04 09:25:55 -07:00
tccontre 3ca03bc7fa descp_fix 2022-04-04 17:11:12 +02:00
pyth0n1c ea9969a6f1 Branch was auto-updated. 2022-04-04 05:07:04 -07:00
pyth0n1c 0126bba9f4 Branch was auto-updated. 2022-04-04 05:07:01 -07:00
P4T12ICK 9354dad823 improved GitHub detection 2022-04-04 13:23:37 +02:00
pyth0n1c f89e4664e1 Branch was auto-updated. 2022-04-04 04:15:08 -07:00
pyth0n1c 92957c039d Branch was auto-updated. 2022-04-04 04:15:07 -07:00
pyth0n1c 6208c5d2ec Branch was auto-updated. 2022-04-04 03:47:15 -07:00
pyth0n1c 6e72249df8 Branch was auto-updated. 2022-04-04 03:47:13 -07:00
pyth0n1c 172e06ad6c Branch was auto-updated. 2022-04-04 03:47:11 -07:00
P4T12ICK 4ffa5540e4 github actions detection 2022-04-04 11:08:39 +02:00
P4T12ICK 4049334910 small change 2022-04-04 10:43:01 +02:00
tccontre 6a4b0b2581 service_name_added 2022-04-04 09:50:56 +02:00
tccontre e0e83fc266 service_name_added 2022-04-04 09:49:00 +02:00
mvelazco 94d9c211f0 Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2 2022-04-01 11:59:22 -04:00
mvelazco 96e3a537d9 adding extra references 2022-04-01 11:59:20 -04:00
pyth0n1c 0f897416ef Branch was auto-updated. 2022-04-01 08:12:11 -07:00
pyth0n1c 4efe461ae1 Branch was auto-updated. 2022-04-01 08:12:03 -07:00
P4T12ICK 41f3b86ed4 bug fix description log4j detection 2022-04-01 15:46:48 +02:00
P4T12ICK a2bc62ddc6 Recreated Issue 2019 2022-04-01 15:36:25 +02:00
Rod Soto 8298acf18e powershelldetectionstaghermetic 2022-03-31 15:29:51 -07:00
mvelazco 30a97b14fd adding new kerberos constrained delegation discovery 2022-03-31 14:34:31 -04:00
P4T12ICK 8c84a7826d plutil mac os detection 2022-03-29 15:39:30 +02:00
pyth0n1c 779fc5ff47 Branch was auto-updated. 2022-03-28 17:02:28 -07:00
pyth0n1c 5ebdf37bff Branch was auto-updated. 2022-03-28 17:02:27 -07:00