admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
28,167 Commits 697 Branches 195 Tags
develop
Commit Graph

56 Commits

Author SHA1 Message Date
Namratha Sreekanta 3743f161a8 DGA Performance fix 2023-09-25 12:55:51 -07:00
Namratha Sreekanta 0782930137 Adding missing lookup files 2023-06-12 13:56:20 -07:00
Namratha Sreekanta d828cd5d6b adding json file 2023-05-19 13:42:07 -07:00
Namratha Sreekanta e4a676f792 changing spl and notebook for feature transformations 2023-05-19 13:24:00 -07:00
Namratha Sreekanta 6139b72dac initial commit for dns data exfil 2023-05-02 14:25:07 -07:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
srv-rr-gh-researchbt 133ce96ef8 Branch was auto-updated. 2023-02-07 09:43:53 -08:00
ksharad-splunk 58476fa5fe Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml 2023-02-07 15:35:43 +01:00
ksharad-splunk 22560697cf Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.json 2023-02-07 15:35:31 +01:00
ksharad-splunk 559d7cae62 Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.ipynb 2023-02-07 15:35:11 +01:00
Kumar Sharad e9ed13ea31 Detection name update 2023-02-07 15:31:48 +01:00
tccontre c681e8d78b security_content_commonalities_notebook 2023-02-07 09:43:42 +01:00
tccontre 7d45ae6677 security_content_commonalities_notebook 2023-02-03 16:33:19 +01:00
tccontre 68e3d5016a security_content_commonalities_notebook 2023-02-03 16:31:31 +01:00
tccontre 5b50f663a6 security_content_commonalities_notebook 2023-02-03 16:27:39 +01:00
tccontre b791a7e458 security_content_commonalities_notebook 2023-02-03 13:59:07 +01:00
Kumar Sharad 87d5b60b0a Detect suspicious Filename updates 2023-01-27 17:23:58 +01:00
srv-rr-gh-researchbt 36b96aca95 Branch was auto-updated. 2023-01-24 15:06:27 -08:00
Namratha Sreekanta 820f3c935e fixing error with model dir and result column 2023-01-24 14:42:32 -08:00
srv-rr-gh-researchbt 1acbc9eabe Branch was auto-updated. 2023-01-24 12:36:10 -08:00
Kumar Sharad 944b7a7e82 Detect Suspicious Filename 2023-01-23 17:24:37 +01:00
Namratha Sreekanta 6195517045 adding detect suspicious dns txt records using pretrained model in dsdl 2023-01-17 15:26:01 -08:00
Namratha Sreekanta 2932ebb1fa Adding more feedback 2022-09-23 16:28:58 -07:00
Namratha Sreekanta 34b6e08638 Changing README.md instructions 2022-09-22 16:32:17 -07:00
Namratha Sreekanta 83eb61820e Changing README.md instructions 2022-09-22 16:30:31 -07:00
Namratha Sreekanta 055f0a175a adding review comments 2022-09-21 13:20:47 -07:00
Namratha Sreekanta f5fb35ec4c changing README and few fields regarding the search 2022-09-20 16:00:12 -07:00
Namratha Sreekanta 43c213a74c modifying the search and adding a README file 2022-09-20 11:20:13 -07:00
Namratha Sreekanta 24cbcc1af2 changing notebook code and adding json file for the model, moved all contents under dga_dltk folder 2022-09-16 17:32:18 -07:00
Namratha Sreekanta d1788686d5 initial commit for dga 2022-09-15 17:50:36 -07:00
d1vious 41db7931fd removing notebooks 2022-06-13 16:05:21 -04:00
Michael Hart 8773f14523 More edits 2021-06-29 14:48:27 -04:00
Michael Hart 04c4263b56 Adding edits 2021-06-29 09:47:37 -04:00
Michael Hart 4dbc42c86c Initial commit 2021-06-28 22:10:15 -04:00
Xiao Lin 04f8db150a Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 22:40:23 +00:00
Xiao Lin da26faa9d9 change input field names 2020-10-28 22:57:25 +00:00
miskoSplunk 4ca69a1e0f Rename CredentialExtraction_SSA.ipynb to ssa___CredentialExtraction.ipynb 2020-10-27 11:31:43 -07:00
Xiao Lin 4b933ff9ef add test notebooks 2020-10-22 20:54:31 +00:00
Jose Enrique Hernandez f84dd4ad4a Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-10-22 14:13:07 -04:00
Xiao Lin edd0dcfc70 update test notebook 2020-10-21 17:30:46 -07:00
Stanislav Miskovic 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals 2020-10-21 16:41:54 -07:00
peter 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa 2020-10-19 16:24:52 -07:00
peter-cg dba3722795 Updating credential dumping notebooks 2020-10-19 15:01:20 -07:00
Stanislav Miskovic 8aa5392c50 Adding SSA detections for credential extraction from dumped secure stores or live Windows systems. 2020-10-19 01:42:14 -07:00
Ignacio 14b88aa2af Merge branch 'develop' into lolbas-fixes 2020-10-16 15:46:58 -07:00
Xiao Lin 7a9be3fa01 add 2020-10-16 15:34:26 -07:00
Ignacio d857af2a0a Merge branch 'develop' into lolbas-fixes 2020-10-16 10:01:17 -07:00
Ignacio Bermudez Corrales 7981684b5f Merge branch 'lolbas-fixes' of github.com:splunk/security-content into lolbas-fixes 2020-10-15 14:54:18 -07:00
Ignacio Bermudez Corrales e04592401b unusual lolbas short time period 2020-10-15 14:53:59 -07:00