admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,085 Commits 697 Branches 195 Tags
docs_CI
Commit Graph

78 Commits

Author SHA1 Message Date
patel-bhavin e1ff3993cd run generate again 2021-08-16 15:57:44 -07:00
Jose Enrique Hernandez d1d2aa92dc Rename detect_phishing_content___ssa.yml to ssa___detect_phishing_content.yml 2021-08-12 12:26:04 -04:00
P4T12ICK 1fca39be77 updated generate 2021-07-20 16:41:53 +02:00
P4T12ICK cfae82505c add analytic types to detections 2021-07-19 17:41:22 +02:00
divious1 022c5be43e Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming" 
This reverts commit 45c138d518.
 2021-06-25 15:03:55 -04:00
divious1 f262360d0a updated CloudTrails to AWS CloudTrails 2021-06-25 14:50:50 -04:00
divious1 45c138d518 updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming 2021-06-25 14:44:02 -04:00
tccontre 09796e3f67 revil 2021-06-04 16:07:02 +02:00
research bot 2d61b8e675 updating docs and package bits [ci skip] 2021-05-24 17:47:29 +00:00
mhaag-spl b411f2b1fc CVE-2021-31166 2021-05-21 11:25:37 -06:00
research bot e80bc45423 updating docs and package bits [ci skip] 2021-05-13 22:09:29 +00:00
bpatel 90cae048e2 Merge branch 'darkside' of github.com:splunk/security_content into darkside 2021-05-13 14:22:16 -07:00
bpatel 888aae21d3 moving to experimental 2021-05-13 14:22:07 -07:00
github-actions[bot] 3790936f7a Branch was auto-updated. 2021-04-22 18:19:49 +00:00
divious1 a8a69a97a5 renaming product to new name 2021-04-21 18:23:09 -04:00
mhaag-spl dc319b6eda Spearphishing Attachments detections 2021-04-21 10:16:49 -06:00
mhaag-spl 1ab256593f Domain Trust Discovery 2021-03-31 13:24:32 -06:00
mhaag-spl 249fd0a549 Update Certutil 
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
 2021-03-24 15:15:47 -06:00
mhaag-spl 00965fbd34 Delete detect_exchange_web_shell.yml 2021-03-19 06:41:51 -06:00
research bot 4b27622a3f updating docs and package bits [ci skip] 2021-03-12 17:32:09 +00:00
divious1 592e63779c fixing merge conflicts 2021-03-12 11:43:55 -05:00
bpatel 40e1f95e2d fixed validation errors 2021-03-11 12:35:04 -08:00
mhaag-spl 2643be22ff w3wp spawning shell 2021-03-11 12:34:21 -07:00
mhaag-spl 69d73f3dc1 unified messaging service spawning a shell 2021-03-11 12:12:52 -07:00
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
P4T12ICK 43644ff368 add required fields 2021-03-11 09:32:33 +01:00
P4T12ICK 6e826b4e68 add required fields and check 2021-03-11 09:11:48 +01:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
mhaag-spl a6265b60df Moving Tor Traffic to Experimental 2021-03-10 11:47:34 -07:00
P4T12ICK c1c1d1733e WIP 2021-03-10 15:22:14 +01:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
mhaag-spl 851a46ed41 Updated name 2021-03-10 06:43:26 -07:00
mhaag-spl 90a385e941 Create detect_exchange_webshell.yml 2021-03-10 06:23:54 -07:00
mhaag-spl 51823d81d3 Sunburst malware renamed NOBELIUM Group 
Renaming Sunburst Malware to NOBELIUM Group
 2021-03-05 10:30:34 -07:00
research bot 746997c92c updating docs and package bits [ci skip] 2021-03-04 20:11:07 +00:00
mhaag-spl fcb9fa5340 W3WP Spawning shells 2021-03-04 06:38:00 -07:00
mhaag-spl ac49f9ab9e HAFNIUM and more updates 2021-03-03 14:10:11 -07:00
mhaag-spl ecb82ec8ca Fixes 2021-03-01 06:52:02 -07:00
mhaag-spl d265e72e8d Silver Sparrow 2021-03-01 06:23:51 -07:00
github-actions[bot] cd9d8bc3b1 Branch was auto-updated. 2021-02-22 17:32:52 +00:00
divious1 42ff71b2a2 normalized ids 2021-02-22 12:15:33 -05:00
research bot d9b977a7a6 updating docs and package bits [ci skip] 2021-02-18 18:22:48 +00:00
divious1 7615d5ec81 fixing merge conflicts 2021-02-12 12:27:00 -05:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 6c950af9d4 Merge branch 'develop' into TR-380_reuse_type 2021-02-04 21:24:00 -05:00
divious1 71d22f6c80 Merge branch 'develop' into TR-380_reuse_type 2021-02-04 21:16:12 -05:00
divious1 c7667b5740 fixing a error which was causing API to fail 2021-02-04 18:36:10 -05:00