fb662881d4
Update attempt_to_add_untrusted_certificate_to_certificate_store.yml
2021-03-24 15:19:36 -06:00
249fd0a549
Update Certutil
...
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
2021-03-24 15:15:47 -06:00
070ae88f36
update to remove pathing
2021-03-24 17:11:17 -04:00
73aafd52bf
Branch was auto-updated.
2021-03-24 15:38:07 +00:00
db75dd4275
Branch was auto-updated.
2021-03-24 15:38:06 +00:00
8c2dc82bf9
Merge pull request #1291 from splunk/ssa_pillow_pip_upgrade
...
Ssa pillow pip upgrade
2021-03-24 11:37:45 -04:00
3d5eebe2a7
adding jpeg-dev
2021-03-23 21:06:53 -07:00
00a135ff10
adding zlib-dev
2021-03-23 21:04:32 -07:00
f717f9ac9c
a different way
2021-03-23 21:02:10 -07:00
c995213d54
forcing upgrading pip in ci
2021-03-23 20:52:58 -07:00
bf0d6631af
forcing upgrading pip in ci
2021-03-23 20:51:02 -07:00
97d2c8bccc
cleaned up landing page
2021-03-23 22:44:58 -04:00
90710793f6
adding icons again
2021-03-23 18:05:01 -04:00
8d12500905
adding risk and product tags
2021-03-23 15:03:02 -07:00
7df6e65645
Merge branch 'aws_priv_escalation' of github.com:splunk/security_content into aws_priv_escalation
2021-03-23 13:12:56 -07:00
4e0776d751
updates
2021-03-23 13:12:47 -07:00
ae1e335322
Branch was auto-updated.
2021-03-23 16:31:16 +00:00
53f2f58a0a
Branch was auto-updated.
2021-03-23 16:31:13 +00:00
c3f5aca235
Merge pull request #1287 from splunk/update_docgen
...
TR-489 Update docgen
2021-03-23 12:30:49 -04:00
25a1febeb0
Branch was auto-updated.
2021-03-23 16:20:50 +00:00
3a99bf8df2
Branch was auto-updated.
2021-03-23 16:20:49 +00:00
71c628ac17
Branch was auto-updated.
2021-03-23 16:20:46 +00:00
b15a71d6cd
Merge pull request #1286 from splunk/clop_ransomware
...
Clop ransomware
2021-03-23 17:20:25 +01:00
48120285ba
clop_lookup_entry
2021-03-23 17:00:55 +01:00
9e240c9530
false_positive_field_mod
2021-03-23 16:44:40 +01:00
19d96dac72
ssa detection testing
2021-03-23 15:03:18 +01:00
617ec011d6
ssa detection testing
2021-03-23 14:52:10 +01:00
191e42f58a
clop_detection_mod
2021-03-23 14:13:33 +01:00
b396890b0b
testing ssa detections
2021-03-23 13:50:45 +01:00
526a5c7893
Added detection testing service results inHigh Process Termination Frequency
2021-03-23 12:41:38 +00:00
57e4a62a01
Added detection testing service results inHigh File Deletion Frequency
2021-03-23 12:18:35 +00:00
e08b1ab9a9
testing ssa detections
2021-03-23 13:09:50 +01:00
f95182fca6
Added detection testing service results inProcess Deleting Its Process File Path
2021-03-23 11:59:50 +00:00
3fd704cdcd
Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware
2021-03-23 12:29:08 +01:00
1696edba41
clop_detection_processid_mod
2021-03-23 12:28:54 +01:00
6da776bb4a
Added detection testing service results inClop Ransomware Known Service Name
2021-03-23 11:04:30 +00:00
275c5a4dfb
bug fix
2021-03-23 11:55:56 +01:00
f5bfe97b81
clop_mod_detections_add_processid_comments
2021-03-23 11:33:10 +01:00
fc1d74b624
bug fixes test files
2021-03-23 11:29:05 +01:00
e3e4e2b512
bug fixes test files
2021-03-23 11:06:15 +01:00
0a8ea69864
Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware
2021-03-23 10:57:23 +01:00
791b6f1126
increases max timeout limit
2021-03-23 09:50:29 +01:00
195dec5c2d
Merge branch 'ssa_detection_testing' of github.com:splunk/security-content into ssa_detection_testing
2021-03-23 09:01:09 +01:00
f778e43bef
Merge branch 'develop' into ssa_detection_testing
2021-03-23 09:00:22 +01:00
d7b4d0f818
Branch was auto-updated.
2021-03-23 07:59:39 +00:00
bf465bd253
Branch was auto-updated.
2021-03-23 07:59:38 +00:00
0949eb9272
Branch was auto-updated.
2021-03-23 07:59:33 +00:00
1571523c8f
Branch was auto-updated.
2021-03-23 07:59:32 +00:00
36da0cb9f5
Merge pull request #1284 from splunk/ssa_deprecate_rare_parent_process
...
ssa deprecate rare parent process
2021-03-23 08:59:14 +01:00
0d17d74d44
cleaned up custom js code and configs that are empty
2021-03-22 22:16:16 -04:00
mhaag-spl