admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

28 Commits

Author SHA1 Message Date
mhaag-spl af8a47c5c2 Added - Living Off The Land Story 
Added - Living Off The Land Story
 2022-03-15 14:44:54 -06:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
tccontre da17a2a938 CARS_UPDATE_MITRE_ID_B3 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:07:20 +02:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
mhaag-spl a1a670203f macro'd mshta 2021-08-17 13:38:11 -06:00
P4T12ICK 5e6e987fb7 resolved merge conflicts 2021-07-21 09:22:09 +02:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
P4T12ICK 65a92a64e1 add analytic types to detections 2021-07-19 16:49:33 +02:00
mhaag-spl 35e9227139 more fixes 2021-07-15 12:15:40 -06:00
mhaag-spl 72d6020209 RISKY FRISKY 2021-07-13 13:47:54 -06:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
mhaag-spl f3d274c0f8 ID changes 
ID changes and a test file needed moved
 2021-01-20 14:45:27 -07:00
mhaag-spl 9205419f90 Update detect_mshta_inline_hta_execution.yml 2021-01-20 13:16:33 -07:00
mhaag-spl 676a51159e Update detect_mshta_inline_hta_execution.yml 2021-01-20 12:53:19 -07:00
mhaag-spl dfc9ac84c5 Update detect_mshta_inline_hta_execution.yml 2021-01-20 12:48:28 -07:00
mhaag-spl 5b0ff63278 rename mshta inline hta execution 2021-01-20 12:44:21 -07:00