admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,971 Commits 697 Branches 195 Tags
devsec_ops
Commit Graph

721 Commits

Author SHA1 Message Date
github-actions[bot] 5a7f37ffbf Branch was auto-updated. 2021-06-29 18:30:58 +00:00
github-actions[bot] 868a3fe2a1 Branch was auto-updated. 2021-06-28 18:29:50 +00:00
github-actions[bot] e4a7b5a75d Branch was auto-updated. 2021-06-28 18:29:47 +00:00
github-actions[bot] 52aaa53e40 Branch was auto-updated. 2021-06-28 18:29:47 +00:00
github-actions[bot] 73a7d75731 Branch was auto-updated. 2021-06-28 18:29:46 +00:00
Michael Hart 1a26fc38e3 contentctl puts relative link to detection file in wrong place 2021-06-25 15:00:46 -04:00
Michael Hart 518d03b1a1 Detection looks for excessive number of sc.exe start as disabled calls 2021-06-25 14:48:48 -04:00
tccontre 1af19c52c7 rttp5 2021-06-24 10:51:56 +02:00
tccontre 894f110cba Merge branch 'ransom_ttp2' of github.com:splunk/security_content into ransom_ttp2 2021-06-24 10:46:21 +02:00
tccontre fc13134276 rttp4 2021-06-24 10:43:36 +02:00
jzsplunk 5d39a5eed2 [PR-1444] fix branch reversion. 2021-06-24 01:36:15 -07:00
github-actions[bot] 89945a1ae7 Branch was auto-updated. 2021-06-23 23:37:53 +00:00
github-actions[bot] 2364c4a980 Branch was auto-updated. 2021-06-23 23:37:52 +00:00
github-actions[bot] 49052e5c5f Branch was auto-updated. 2021-06-23 23:37:51 +00:00
Jose Enrique Hernandez dbdf39cd28 Revert "ssa" 2021-06-23 17:49:11 -04:00
github-actions[bot] fe7426e818 Branch was auto-updated. 2021-06-23 18:51:10 +00:00
github-actions[bot] 3d484e756b Branch was auto-updated. 2021-06-23 18:51:10 +00:00
github-actions[bot] 62bb6d62f4 Branch was auto-updated. 2021-06-23 18:51:04 +00:00
github-actions[bot] 19bab73bab Branch was auto-updated. 2021-06-23 17:54:38 +00:00
github-actions[bot] 8894544766 Branch was auto-updated. 2021-06-23 17:54:35 +00:00
github-actions[bot] a43aef4a11 Branch was auto-updated. 2021-06-23 17:54:34 +00:00
github-actions[bot] 1511847430 Branch was auto-updated. 2021-06-23 17:54:34 +00:00
tccontre e728f6b661 ssa_d 2021-06-23 14:52:44 +02:00
tccontre 6bcea461e5 Merge branch 'ssa_det' of github.com:splunk/security_content into ssa_det 2021-06-23 14:48:04 +02:00
tccontre 580d73a178 ssa_p2 2021-06-23 14:47:14 +02:00
tccontre 2f249722aa Delete ssa___deny_permission_using_cacls_utility.test.yml 2021-06-23 14:34:19 +02:00
tccontre a0029c5f44 Delete ssa___grant_permission_using_cacls_utility.test.yml 2021-06-23 14:34:10 +02:00
tccontre 950071d533 Delete ssa___modify_acls_permission_of_files_or_folders.test.yml 2021-06-23 14:33:59 +02:00
tccontre 99fceb5476 Delete ssa___wevtutil_usage_to_clear_logs.test.yml 2021-06-23 14:33:48 +02:00
tccontre b193abce66 Delete ssa___wevtutil_usage_to_disable_logs.test.yml 2021-06-23 14:33:41 +02:00
tccontre f8a4f7e508 ssa2 2021-06-23 14:16:05 +02:00
tccontre c7361eca3f ssa5 2021-06-23 13:49:14 +02:00
tccontre 96968c4538 ssa4 2021-06-23 13:49:14 +02:00
tccontre 60f656915b ssa3 2021-06-23 13:49:14 +02:00
tccontre 125c270d12 ssa2 2021-06-23 13:49:14 +02:00
tccontre 400024cf79 ssa2 2021-06-23 13:49:14 +02:00
tccontre 5cf864aad7 ssa 2021-06-23 13:49:14 +02:00
tccontre d45f494438 rttp3 2021-06-23 12:58:56 +02:00
tccontre 2cf1d164d5 ransom_ttp_p2 2021-06-23 12:38:49 +02:00
github-actions[bot] ddea72a2ee Branch was auto-updated. 2021-06-22 21:32:16 +00:00
github-actions[bot] 81b916991d Branch was auto-updated. 2021-06-22 21:32:16 +00:00
github-actions[bot] d5533ca607 Branch was auto-updated. 2021-06-22 21:32:15 +00:00
mvelazco e4f5a3894d fixing errors 
fixing filter name
 2021-06-21 17:10:54 -04:00
mvelazco 1b7f966a84 re-factoring windows event log cleared detections 2021-06-21 16:40:59 -04:00
mhaag-spl ad85879e89 Fixing descriptions 2021-06-18 13:41:54 -06:00
mhaag-spl 35492c75fb wrong data 2021-06-18 11:00:34 -06:00
mhaag-spl 2e9b99ecf1 Updates 2021-06-18 10:34:25 -06:00
mhaag-spl 9396034913 Remote WMI Command Attempt 2021-06-18 10:02:13 -06:00
mhaag-spl b51f291810 Update detect_wmi_event_subscription_persistence.test.yml 2021-06-18 08:22:36 -06:00
tccontre 0106cc56be ssa5 2021-06-18 13:46:01 +02:00