Commit Graph

8971 Commits

Author SHA1 Message Date
github-actions[bot] 7ac341661e Branch was auto-updated. 2021-07-20 15:20:18 +00:00
Jose Enrique Hernandez d13c170413 Merge pull request #1529 from splunk/ssa_TR-803
SSA TR-803
2021-07-20 11:19:58 -04:00
patel-bhavin 56b576f331 add work load 2021-07-19 14:49:10 -07:00
patel-bhavin b100388abb fixes 2021-07-19 14:44:42 -07:00
peter-cg 502bdcca79 Allow kerberoasting detection to fail 2021-07-19 15:21:05 -05:00
peter-cg f527e9f739 Fixing first_time pass_condition 2021-07-19 14:52:43 -05:00
peter-cg d48dd6a3e2 Merge branch 'ssa_TR-803' of github.com:splunk/security-content into ssa_TR-803 2021-07-19 13:46:17 -05:00
peter-cg 69541f7259 Fixing a couple SSA detections which would not compile 2021-07-19 13:45:50 -05:00
Bhavin Patel 28800ae1a9 Merge branch 'develop' into take_over 2021-07-19 13:37:02 -05:00
patel-bhavin bd87ece758 final tags 2021-07-19 11:36:10 -07:00
github-actions[bot] 2ede0fe0c3 Branch was auto-updated. 2021-07-19 13:54:18 +00:00
github-actions[bot] 55bef97e19 Branch was auto-updated. 2021-07-19 13:54:15 +00:00
github-actions[bot] ff226a2109 Branch was auto-updated. 2021-07-19 13:54:11 +00:00
github-actions[bot] ece2addb3a Branch was auto-updated. 2021-07-19 13:54:11 +00:00
github-actions[bot] e75265c8ea Branch was auto-updated. 2021-07-19 13:54:10 +00:00
github-actions[bot] cab9c823d4 Branch was auto-updated. 2021-07-19 13:54:09 +00:00
P4T12ICK 194494254c Merge pull request #1522 from apger/apger-content-v4
Apger's second round of detection content updates
2021-07-19 15:53:52 +02:00
tccontre 8c20632a14 Update mshta_spawning_rundll32_or_regsvr32_process.test.yml 2021-07-19 15:51:31 +02:00
tccontre 77490505c6 Merge branch 'uac_bypass' of github.com:splunk/security_content into uac_bypass 2021-07-19 15:48:49 +02:00
tccontre 31193b4f4e uac and trickbot 2021-07-19 15:48:28 +02:00
P4T12ICK 5a127cb486 Merge branch 'develop' into apger-content-v4 2021-07-19 15:43:35 +02:00
github-actions[bot] c34639374a Branch was auto-updated. 2021-07-19 13:43:32 +00:00
github-actions[bot] 526f26f0b0 Branch was auto-updated. 2021-07-19 13:43:32 +00:00
github-actions[bot] a9a666f0b4 Branch was auto-updated. 2021-07-19 13:43:31 +00:00
github-actions[bot] 60ecf43843 Branch was auto-updated. 2021-07-19 13:43:30 +00:00
github-actions[bot] 726b9e684d Branch was auto-updated. 2021-07-19 13:43:27 +00:00
github-actions[bot] ce0e9a5909 Branch was auto-updated. 2021-07-19 13:43:22 +00:00
github-actions[bot] b6a0f63238 Branch was auto-updated. 2021-07-19 13:43:21 +00:00
P4T12ICK 6a691588de Merge pull request #1497 from apger/apger-content-v3
start from original develop and add a date change to troubleshoot bui…
2021-07-19 15:43:01 +02:00
peter-cg 57da5a1ec2 Adding pass_condition verification for SSA detections 2021-07-16 16:43:26 -05:00
peter-cg 05cdb0e177 Swapping out LIKE for match_regex to avoid an escaping issue 2021-07-16 14:36:15 -05:00
patel-bhavin 289be39888 RBA support 2021-07-15 16:39:06 -05:00
patel-bhavin ddaa7bfe5f first 10 2021-07-15 14:40:50 -05:00
mhaag-spl 35e9227139 more fixes 2021-07-15 12:15:40 -06:00
apger 7bd3263382 Merge branch 'splunk:develop' into apger-content-v3 2021-07-15 12:54:38 -05:00
apger 603fcb9f1e Merge branch 'splunk:develop' into apger-content-v4 2021-07-15 12:52:27 -05:00
mhaag-spl 00f9d2984b Update any_powershell_downloadstring.yml 2021-07-15 10:22:39 -06:00
mhaag-spl 14529379e9 updates 2021-07-15 10:21:05 -06:00
patel-bhavin 06d9389ca3 update attacker_tooolls metadata 2021-07-15 11:17:16 -05:00
github-actions[bot] 1c699dce66 Branch was auto-updated. 2021-07-15 15:54:56 +00:00
github-actions[bot] 9365ffeff5 Branch was auto-updated. 2021-07-15 15:54:49 +00:00
github-actions[bot] fb5200b134 Branch was auto-updated. 2021-07-15 15:54:48 +00:00
github-actions[bot] 49485e00df Branch was auto-updated. 2021-07-15 15:54:47 +00:00
github-actions[bot] dba7464449 Branch was auto-updated. 2021-07-15 15:54:47 +00:00
github-actions[bot] 6b9cf46bc6 Branch was auto-updated. 2021-07-15 15:54:40 +00:00
Bhavin Patel e76809ab0b Merge pull request #1523 from splunk/error-validate-fix
Validate.py - Risk Score error fix
2021-07-15 10:54:23 -05:00
mhaag-spl 1fc358eeb4 Validate.py
Modified validate to share a bit more info on the score that was incorrect.
2021-07-15 07:07:14 -06:00
mhaag-spl 2b6e6f69d8 Update bits_job_persistence.yml 2021-07-15 07:05:12 -06:00
P4T12ICK 694509e7a4 Merge branch 'develop' into apger-content-v4 2021-07-15 15:01:11 +02:00
P4T12ICK f6c3c443fc Merge branch 'develop' into apger-content-v3 2021-07-15 15:00:31 +02:00