admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
26,069 Commits 697 Branches 195 Tags
deprecated_mapping
Commit Graph

374 Commits

Author SHA1 Message Date
Bhavin Patel 49fa1c1900 Merge branch 'develop' into cisco_ai_defense 2025-02-20 15:02:29 -08:00
Nasreddine Bencherchali 7df0472037 update exchange macro 2025-02-19 21:11:52 +01:00
Nasreddine Bencherchali ba36467ece feat: add new analytic story and analytic 2025-02-19 11:22:18 +01:00
Nasreddine Bencherchali c16e7a1a74 feat: add auditpol macro 2025-02-19 11:22:18 +01:00
Bhavin Patel 47c2f4fc20 Merge branch 'develop' into other-updates 2025-02-18 09:22:56 -08:00
research-bot 2933334f4c updaing for validate 2025-02-14 13:42:13 -08:00
research-bot c1a10beef5 drafting a search 2025-02-14 12:53:18 -08:00
Bhavin Patel 690874895b Merge branch 'develop' into app_dynamics_alerts 2025-02-13 11:15:10 -08:00
research-bot 0544e801b2 adding draft detections 2025-02-04 11:55:10 -08:00
tccontre f78bd48e7c analytics_enhancement 2025-02-03 18:34:10 +01:00
tccontre 37db646b29 analytics_enhancement 2025-02-03 18:28:47 +01:00
Nasreddine Bencherchali a6c06d03c5 update: windows event log macros 2025-01-30 20:32:27 +01:00
Nasreddine Bencherchali 8cf6cfecf6 rba changes 2025-01-22 20:18:12 +01:00
Nasreddine Bencherchali 3452135c58 update more office analytics and others 2025-01-20 18:29:42 +01:00
Nasreddine Bencherchali 0d976cfffe additional updates and fixes 2025-01-20 16:42:07 +01:00
Nasreddine Bencherchali 082368e86d update reg analytics 2025-01-15 15:55:16 +01:00
Nasreddine Bencherchali 4f16cb3115 update office macro 2025-01-14 20:02:52 +01:00
Nasreddine Bencherchali efa8b09ad3 update powershell analytics 2025-01-14 19:34:31 +01:00
Bhavin Patel 7e2a3877ae Branch was auto-updated. 2025-01-14 10:02:37 -08:00
Bhavin Patel fa2ba7c031 Branch was auto-updated. 2025-01-14 09:04:48 -08:00
Bhavin Patel 6709e590a0 Branch was auto-updated. 2025-01-14 09:04:46 -08:00
Nasreddine Bencherchali 1f060bbddf update to analytics using net 2025-01-13 22:20:46 +01:00
Patrick Bareiss 186061fa94 new detection 2025-01-08 13:53:03 +01:00
dluxtron 3d8919f1c6 reverting macro change 2025-01-08 15:11:19 +10:00
research-bot e66bb09cf4 updating macro 2025-01-07 12:15:23 -08:00
dluxtron 0a1c14df72 fixing syntax & updating macro 2025-01-07 16:51:06 +10:00
dluxtron 0454541c41 Uploading new detections 2025-01-06 16:19:32 +10:00
Nasreddine Bencherchali d8434fbe3a Merge branch 'develop' into issue_3245 2024-12-19 20:36:35 +01:00
research-bot 360a91ebbb remove index 2024-12-18 13:32:03 -08:00
research-bot 99d78af47e udpating ransomware detection 2024-12-12 16:57:42 -08:00
Bhavin Patel 197997fe7c Branch was auto-updated. 2024-12-02 14:18:41 -08:00
Nasreddine Bencherchali d4aed3d50c fix env typo in macros 2024-11-26 23:43:48 +01:00
Nasreddine Bencherchali 038c0af073 enhance coverage - first batch 2024-11-26 14:06:12 +01:00
Michael Haag 8f8a6bd3b4 Raiders of the Lost RDP: The Haag Crusade 2024-11-25 11:44:23 -07:00
Bhavin Patel ad93e8b719 Branch was auto-updated. 2024-11-06 16:01:23 -08:00
research-bot 606354ad63 fixes with new dataset links and spl, macro name update, filter name addtion 2024-11-04 16:45:20 -08:00
Bryan Pluta 1861e6a709 atp detection and macros 2024-10-30 15:50:54 -05:00
dluxtron b17c2d1e17 fixing SPL 2024-10-17 15:41:19 +10:00
Bhavin Patel b2c176c938 Branch was auto-updated. 2024-08-22 22:16:22 +05:30
Michael Haag 39f4e3dadc Guardians of the Haaglaxy 
## Story
- Ivanti Virtual Traffic Manager CVE-2024-7593

## Analytic
- Ivanti VTM New Account Creation
 2024-08-20 10:53:01 -06:00
Bhavin Patel c6ac1365e4 Branch was auto-updated. 2024-08-13 11:36:01 -07:00
Michael Haag 78fb540ca0 Update linux_hosts.yml 2024-08-13 09:34:53 -06:00
tccontre c6d3eac542 linux_auditd_detection 2024-08-09 10:46:52 +02:00
Bhavin Patel 6e2d8fc0b5 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-08-05 17:48:59 -07:00
tccontre f28b995ce3 crowdstrike_analytics 2024-07-31 11:10:41 +02:00
Lou Stella 462ab1971a Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-29 10:10:26 -05:00
ljstella a980709e4b Modified macro name for clarity, updated how to implements with details 2024-07-26 14:11:24 -05:00
Lou Stella 09eb52ec50 Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 10:32:02 -05:00
Bhavin Patel d99d5e5222 Branch was auto-updated. 2024-07-25 16:36:10 -05:00
ljstella 8b3c53f1a0 formatting on macro 2024-07-25 07:33:12 -05:00