admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,119 Commits 697 Branches 195 Tags
dev_move_cloud
Commit Graph

9119 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
root e0b24a1984 Added detection testing service results inSuspicious Rundll32 PluginInit 2021-08-05 14:08:16 +00:00
Detection Testing Service 4990119ca4 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid 2021-08-05 14:00:50 +00:00
root 7ac92524f1 Added detection testing service results inSuspicious IcedID Rundll32 Cmdline 2021-08-05 14:00:49 +00:00
Detection Testing Service 6d6f066d47 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid 2021-08-05 13:45:15 +00:00
root de016c4686 Added detection testing service results inRundll32 Process Creating Exe Dll Files 2021-08-05 13:45:14 +00:00
Detection Testing Service 890546ac8b Merge branch 'icedid' of https://github.com/splunk/security_content into icedid 2021-08-05 13:36:43 +00:00
root 0fde378b6f Added detection testing service results inRundll32 DNSQuery 2021-08-05 13:36:42 +00:00
root f9d9e07f7b Added detection testing service results inRundll32 CreateRemoteThread In Browser 2021-08-05 13:34:25 +00:00
root 4d47c30783 Added detection testing service results inRundll32 Create Remote Thread To A Process 2021-08-05 13:10:18 +00:00
tccontre ede0bd7675 icedid 2021-08-05 13:48:42 +02:00
tccontre 34377e6310 icedid 2021-08-05 13:42:29 +02:00
tccontre 6ccaf94f2f icedid 2021-08-05 13:39:05 +02:00
tccontre c7e8f72fa6 icedid 2021-08-05 13:36:35 +02:00
tccontre 8539d351da icedid 2021-08-04 11:49:52 +02:00
peter-cg f8fc79d4e1 Adding event_id extraction 2021-08-03 14:56:18 -05:00
Jose Enrique Hernandez b8fea6311e Delete powershell_encoded_command.yml 2021-08-03 14:56:17 -05:00
divious1 d7000e7608 added event_id to ssa detections 2021-08-03 14:56:17 -05:00
github-actions[bot] d7bd3e880c Branch was auto-updated. 2021-08-03 19:55:29 +00:00
github-actions[bot] a89a087b07 Branch was auto-updated. 2021-08-03 19:55:24 +00:00
peter 62e6c006b0 Merge pull request #1547 from splunk/ssa_TR-778 
TR-778: SSA/BA/SAC stage->gstage
 2021-08-03 14:55:08 -05:00
peter-cg 23b22e95d4 Event delimiting bugfix and some event upload error checking 2021-08-03 14:53:11 -05:00
tccontre 51b72ea3b3 icedid 2021-08-03 14:24:34 +02:00
tccontre 3f9c187e11 icedid 2021-08-03 13:00:06 +02:00
tccontre 5de991e461 icedid_mod_sig 2021-07-30 17:46:06 +02:00
tccontre 1722daa514 icedid_mod_sig 2021-07-30 17:33:42 +02:00
tccontre 2d13569fff icedid story 2021-07-30 12:34:15 +02:00
research bot df85ff33ad updating docs and package bits [ci skip] 2021-07-29 21:15:45 +00:00
github-actions[bot] 3a2991bab7 Branch was auto-updated. 2021-07-29 20:32:13 +00:00
github-actions[bot] cde8a9154a Branch was auto-updated. 2021-07-29 20:32:08 +00:00
github-actions[bot] af7b97618b Branch was auto-updated. 2021-07-29 20:32:05 +00:00
Jose Enrique Hernandez a3237b801b Merge pull request #1548 from splunk/risk_bugs 
Multi Risk and Threat object support
 2021-07-29 16:31:47 -04:00
patel-bhavin 9fbeb683ca testing ymls 2021-07-29 12:43:02 -07:00
tccontre 5054148a72 story 2021-07-29 17:14:14 +02:00
tccontre d2129cb6d2 icedid 2021-07-29 15:19:44 +02:00
patel-bhavin 483ee87950 minor 2021-07-28 16:33:55 -07:00
patel-bhavin 4864774de7 testing risk refactor 2021-07-28 16:30:28 -07:00
peter-cg 61c6d8b3d9 Adding SSA compile_check util 2021-07-28 17:22:48 -05:00
peter-cg a38fef77ce Increase execution time limit 2021-07-28 16:40:50 -05:00
research bot 4b3e48b6f4 updating docs and package bits [ci skip] 2021-07-28 20:27:55 +00:00
peter-cg c15909c35d Perform basic tests if no detections/tests have changed but CI code has changed 2021-07-28 14:47:42 -05:00
github-actions[bot] 944d121191 Branch was auto-updated. 2021-07-28 19:22:28 +00:00
github-actions[bot] 59dc3ee87f Branch was auto-updated. 2021-07-28 19:22:22 +00:00
Jose Enrique Hernandez 5f0418ce2b Merge pull request #1545 from splunk/blackbolt_duplicate 
From @https://github.com/BlackB0lt
 2021-07-28 15:22:03 -04:00
peter-cg 4fd8e9ec42 Move from stage to gstage 2021-07-28 14:20:08 -05:00
peter-cg 914a04abb2 Adding token validation 2021-07-28 14:20:08 -05:00
peter-cg 1a68258954 Uploading all data at once 2021-07-28 14:16:13 -05:00
peter-cg 089906ba48 Cleaning up some error reporting and adding activation-wait-loop 2021-07-28 14:16:13 -05:00
patel-bhavin 9460c02297 Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate 2021-07-28 11:45:02 -07:00
patel-bhavin 04e23cba8b search update 2021-07-28 11:44:51 -07:00
Detection Testing Service 76335f0ea7 Merge branch 'blackbolt_duplicate' of https://github.com/splunk/security_content into blackbolt_duplicate 2021-07-28 18:20:18 +00:00