admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,806 Commits 697 Branches 195 Tags
data_source_bug_fix
Commit Graph

432 Commits

Author SHA1 Message Date
Michael Haag a548ed769a Hellcat United (#3723) 
* Hellcat United

* fixes

* 🍱

* 1 mas

* Update powershell_4104_hunting.yml
 2025-10-16 16:53:02 -07:00
Bhavin Patel afb75a6bac Merge branch 'develop' into ctl_515 2025-09-29 12:07:09 -07:00
Bhavin Patel 5d1bef9b7e Update detections/network/internal_vertical_port_scan.yml 
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
 2025-09-25 13:36:44 -07:00
Bhavin Patel c707acec73 updating story 2025-09-25 09:07:12 -07:00
Bhavin Patel b4cd4142b6 updating detection file 2025-09-25 09:05:39 -07:00
Bhavin Patel 0e175604a3 Update version and date in vertical port scan config 2025-09-18 09:59:27 -07:00
Bhavin Patel bf375ab503 updating search 2025-09-17 14:55:20 -07:00
ljstella d6f03a2d24 Bumped versions 2025-09-09 08:49:59 -04:00
ljstella 8d0935f037 Update attack_data links 2025-09-09 08:35:57 -04:00
Teoderick Contreras 897986eaa5 objectivity_stealer 2025-08-25 18:46:15 +02:00
Teoderick Contreras e99692b3e6 objectivity_stealer 2025-08-22 09:54:09 +02:00
Bhavin Patel 227bb64ccc remove drilldown 2025-08-21 14:04:16 -07:00
Bhavin Patel 6a561d6119 updating macro 2025-08-21 13:10:38 -07:00
Bhavin Patel 23944ac544 adding detection from pcap 2025-08-21 12:59:30 -07:00
Bhavin Patel 5efc96202d updating spl 2025-08-21 12:21:54 -07:00
Michael Haag c58213d18e Create cisco_configuration_archive_logging_analysis.yml 2025-08-21 13:18:04 -06:00
Michael Haag 900803f962 Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018 2025-08-21 13:16:33 -06:00
Michael Haag aea4629c0a Create cisco_configuration_file_exfiltration_attempts.yml 2025-08-21 13:16:32 -06:00
Bhavin Patel 62f32549c9 fixing dd 2025-08-21 11:17:12 -07:00
Bhavin Patel d895fa6034 yaml fixes 2025-08-21 11:12:52 -07:00
Michael Haag 9bc27c2b0d Create cisco_tftp_server_configuration_for_data_exfiltration.yml 2025-08-21 11:43:59 -06:00
Michael Haag ec698f88ec Create cisco_network_interface_modifications.yml 2025-08-21 11:43:03 -06:00
Michael Haag 91c9a99d62 Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018 2025-08-21 11:27:07 -06:00
Michael Haag 1781f034ba Create cisco_snmp_community_string_configuration_changes.yml 2025-08-21 11:26:58 -06:00
Bhavin Patel 7ec158832d adding a new detections for snort with static tundra sigs 2025-08-21 10:17:54 -07:00
Bhavin Patel 94a7f291e8 updating dataset link 2025-08-21 10:17:54 -07:00
Michael Haag b24cb334a3 Create cisco_ios_suspicious_privileged_account_creation.yml 2025-08-21 11:06:59 -06:00
Bhavin Patel c31013241b updatings with snort detection and lookup also contentctl 2025-08-21 09:43:02 -07:00
Michael Haag 125486536c DS + new 2025-08-21 10:08:59 -06:00
Raven Tait 5e948ce3fc Updates for 3886 2025-08-18 15:17:37 -04:00
Teoderick Contreras ed31e4367e rdp_artifacts_and_evasion 2025-08-07 14:29:17 +02:00
Br3akp0int ce1bfce684 Merge branch 'develop' into rdp_artifacts_and_evasion 2025-08-06 11:49:38 +02:00
Michael Haag 7883693801 Merge branch 'develop' into scatteringspider 2025-08-01 10:21:00 -06:00
Teoderick Contreras 8c265f4881 rdp_artifacts_and_evasion 2025-08-01 10:13:08 +02:00
Michael Haag ea0121c2f1 Scattered Spider Tags 2025-07-31 10:54:21 -06:00
Teoderick Contreras 96786372a3 interlock_ransomware 2025-07-28 11:58:45 +02:00
Nasreddine Bencherchali 1075307e29 Update detections/network/windows_gather_victim_network_info_through_ip_check_web_services.yml 2025-07-21 21:01:20 +02:00
Bhavin Patel f3505b9a33 Merge branch 'develop' into quasar_and_loader 2025-07-18 12:17:52 -07:00
Nasreddine Bencherchali 77de82e744 Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-18 01:08:25 +02:00
Nasreddine Bencherchali 669eb8b4ba Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-17 20:58:55 +02:00
Nasreddine Bencherchali 799faa2a1e Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-17 20:46:33 +02:00
Nasreddine Bencherchali 523e5f4b94 add ftd equivalent analytic 2025-07-17 20:43:29 +02:00
Teoderick Contreras d5402b4dcc quasar_and_loader 2025-07-17 14:51:43 +02:00
Teoderick Contreras 98a7e95306 quasar_and_loader 2025-07-16 10:23:20 +02:00
Nasreddine Bencherchali ad398c0707 small tweaks 2025-07-10 16:43:54 +02:00
Nasreddine Bencherchali 909693a201 update action value to alight with new ta ver 2025-07-10 16:41:49 +02:00
Nasreddine Bencherchali 8ffb683440 Merge branch 'develop' into nvm-batch1 2025-07-07 01:23:13 +02:00
Bhavin Patel e6e3145dc0 updating description 2025-07-03 14:26:07 -07:00
Nasreddine Bencherchali 6527190e18 up version for ci overlords 2025-07-01 23:18:54 +02:00
Nasreddine Bencherchali 75ec47e99a add new detections, story and other cool things 2025-07-01 23:04:48 +02:00