admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,119 Commits 697 Branches 195 Tags
dev_move_cloud
Commit Graph

9119 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] c96ed3cee1 Branch was auto-updated. 2021-06-22 14:26:35 +00:00
github-actions[bot] 05c441a480 Branch was auto-updated. 2021-06-22 14:26:33 +00:00
github-actions[bot] 14980f46b5 Branch was auto-updated. 2021-06-22 14:26:32 +00:00
github-actions[bot] 5aa5aa3347 Branch was auto-updated. 2021-06-22 14:26:31 +00:00
peter 8e6733e922 Merge pull request #1454 from splunk/ssa_remove_old_lolbas 
Removing old, deprecated version of the parent-child-lolbas detection
 2021-06-22 09:26:09 -05:00
peter-cg eeddaf1200 Removing old, deprecated version of the parent-child-lolbas detection 2021-06-22 09:23:48 -05:00
github-actions[bot] 498de21e6c Branch was auto-updated. 2021-06-22 02:30:42 +00:00
github-actions[bot] 0304f6dda9 Branch was auto-updated. 2021-06-22 02:30:41 +00:00
github-actions[bot] ddaef35ab4 Branch was auto-updated. 2021-06-22 02:30:40 +00:00
github-actions[bot] d8e9ff2d0e Branch was auto-updated. 2021-06-22 02:30:39 +00:00
github-actions[bot] 70319a9ad3 Branch was auto-updated. 2021-06-22 02:30:36 +00:00
github-actions[bot] b53edbf0a2 Branch was auto-updated. 2021-06-22 02:30:35 +00:00
github-actions[bot] 7f8ef8904d Branch was auto-updated. 2021-06-22 02:30:34 +00:00
github-actions[bot] 733c071bb1 Branch was auto-updated. 2021-06-22 02:30:34 +00:00
github-actions[bot] ccbf877355 Branch was auto-updated. 2021-06-22 02:30:33 +00:00
github-actions[bot] 35ac3c38a1 Branch was auto-updated. 2021-06-22 02:30:32 +00:00
peter 3008438d10 Merge pull request #1447 from splunk/TR-724_fixing_bodies_error 
TR-723 fixing bodies error
 2021-06-21 21:30:15 -05:00
mhaag-spl 4166bb3104 Update windows_event_log_cleared.yml 2021-06-21 16:15:10 -06:00
mhaag-spl b7e73f5f60 quick updates 2021-06-21 16:14:31 -06:00
mvelazco ee1362204b Merge branch 'TR-745_refactor' of github.com:splunk/security_content into TR-745_refactor 2021-06-21 17:54:47 -04:00
mvelazco 19ea75d969 adding references 2021-06-21 17:50:09 -04:00
mhaag-spl b3d2ddba58 Minor fixes 2021-06-21 15:47:47 -06:00
mvelazco e4f5a3894d fixing errors 
fixing filter name
 2021-06-21 17:10:54 -04:00
mvelazco 8d0b0caa91 Update suspicious_event_log_service_behavior.yml 
updating filter name
 2021-06-21 16:45:52 -04:00
mvelazco 1b7f966a84 re-factoring windows event log cleared detections 2021-06-21 16:40:59 -04:00
Bhavin Patel fe8d16e4a5 Merge branch 'develop' into rba_poc 2021-06-21 12:06:38 -07:00
patel-bhavin 400d591059 minor 2021-06-21 14:06:25 -05:00
David Dorsey 812cc46e65 Fix for TR-763 2021-06-21 13:21:30 -05:00
P4T12ICK d6a3edaa38 small change 2021-06-21 08:53:48 +02:00
divious1 ba2fa59b5e adding 3 rba examples 2021-06-19 22:15:49 -04:00
mhaag-spl ad85879e89 Fixing descriptions 2021-06-18 13:41:54 -06:00
root f612fd6d3e Added detection testing service results inRemote WMI Command Attempt 2021-06-18 17:22:24 +00:00
mhaag-spl 35492c75fb wrong data 2021-06-18 11:00:34 -06:00
mhaag-spl a7b838d473 Update script_execution_via_wmi.yml 2021-06-18 10:58:38 -06:00
mhaag-spl f39a270c0e Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-18 10:55:03 -06:00
mhaag-spl 2b9f393585 Update script_execution_via_wmi.yml 2021-06-18 10:54:52 -06:00
Detection Testing Service ca4ad15654 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-18 16:53:51 +00:00
root 7d543761b6 Added detection testing service results inDetect WMI Event Subscription Persistence 2021-06-18 16:53:50 +00:00
mhaag-spl 1d95339bbd Update script_execution_via_wmi.yml 2021-06-18 10:52:51 -06:00
mhaag-spl 8e9ad3a42b Update script_execution_via_wmi.yml 2021-06-18 10:49:34 -06:00
mhaag-spl 37bd2897bb Update wmi_permanent_event_subscription___sysmon.yml 2021-06-18 10:37:47 -06:00
mhaag-spl 2e9b99ecf1 Updates 2021-06-18 10:34:25 -06:00
mhaag-spl 9396034913 Remote WMI Command Attempt 2021-06-18 10:02:13 -06:00
mhaag-spl f1abd7b538 Update detect_wmi_event_subscription_persistence.yml 2021-06-18 08:59:35 -06:00
mhaag-spl b51f291810 Update detect_wmi_event_subscription_persistence.test.yml 2021-06-18 08:22:36 -06:00
tccontre 4f55be64a0 ssa6 2021-06-18 15:28:08 +02:00
P4T12ICK 68a3ee162d increased timeout 2021-06-18 14:52:53 +02:00
P4T12ICK 865a488f45 wip 2021-06-18 14:43:34 +02:00
P4T12ICK 4a1d53b749 wip 2021-06-18 14:13:07 +02:00
P4T12ICK f474be39f6 Merge branch 'develop' into labeled_data_for_ml 2021-06-18 14:12:44 +02:00