Commit Graph

147 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 26c5bba4f7 Branch was auto-updated. 2022-11-11 14:09:09 -08:00
patel-bhavin 601d8c3f32 SPL update 2022-11-10 12:45:28 -08:00
srv-rr-gh-researchbt 38231ef7be Branch was auto-updated. 2022-10-18 11:42:43 -07:00
Michael Haag 8f9257f883 rename 2022-10-09 06:58:13 -06:00
Michael Haag 343a8d3698 Updates + new 2022-10-05 10:20:07 -06:00
pyth0n1c 3941a240b2 Added missing nist and cis20 fields to 3 experimental detections. 2022-10-04 16:54:34 -07:00
Michael Haag 517048e2b8 Merge branch 'develop' into exchange2shell 2022-10-04 04:43:34 -06:00
Michael Haag 1e47db984d Update exchange_powershell_module_usage.yml
Resolving #2396
2022-10-02 06:55:20 -06:00
Michael Haag 061e486514 Update exchange_powershell_abuse_via_ssrf.yml
Resolving #2397
2022-10-02 06:52:53 -06:00
Michael Haag 29ab52ac0b ProxyNotShell - A Tale of CVE-2022-41040 and CVE-2022-41082 2022-09-30 05:26:16 -06:00
pyth0n1c 5c0cf5ab00 Branch was auto-updated. 2022-09-26 17:15:12 -07:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Lou Stella 986716a55f IceID -> IcedID 2022-09-22 09:20:02 -05:00
Michael Haag 2fa429127b CISA AA22-257A tag 2022-09-15 10:07:38 -06:00
Michael Haag 4d84254970 Analytic Stories + Tagging 2022-07-27 10:29:47 -06:00
pyth0n1c 4a8c5d9a39 Branch was auto-updated. 2022-06-29 12:59:25 -07:00
pyth0n1c c16ccc1eec Branch was auto-updated. 2022-05-19 21:21:59 -04:00
pyth0n1c e045068eba Branch was auto-updated. 2022-05-19 21:21:58 -04:00
d1vious 441ddacfb3 adding insider threat, fixing minor display bug 2022-05-19 21:19:35 -04:00
pyth0n1c 38d32c3341 Branch was auto-updated. 2022-05-16 13:06:58 -04:00
pyth0n1c 1b881ee6a5 Branch was auto-updated. 2022-05-03 17:15:21 -07:00
pyth0n1c 900bd9e7e2 Updated a large number of the links in other detections. Also, adjusted the number of threads that run and tweaked the timeout time. 2022-05-03 10:34:10 -07:00
Rod Soto 92a782df3c fixedtagcb 2022-05-03 09:45:47 -07:00
pyth0n1c 578e6bb088 Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links. 2022-05-02 17:12:50 -07:00
pyth0n1c cde6d216e3 Branch was auto-updated. 2022-05-02 13:07:05 -07:00
patel-bhavin 489829b2a6 Merge branch 'develop' into cyclopsblink_fix 2022-05-02 11:06:38 -07:00
mhaag-spl d342b02b71 Update exchange_powershell_module_usage.yml 2022-05-02 06:32:55 -06:00
mhaag-spl 63b83bfc7a Update exchange_powershell_module_usage.yml 2022-05-02 06:32:06 -06:00
tccontre 1106c798a3 cyclopsblink_fix 2022-04-29 17:47:59 +02:00
pyth0n1c ec2c1bff73 Branch was auto-updated. 2022-04-05 13:12:38 -07:00
Rod Soto 901a73aa5f secondbatchwinprivesctaghermeticwiper 2022-04-05 08:02:47 -07:00
mvelazco f58ae1f243 Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2 2022-03-22 12:48:11 -04:00
mvelazco 4e5d5926b3 minor changes 2022-03-22 12:48:09 -04:00
patel-bhavin 99829330c1 all the changes again 2022-03-16 13:35:48 -07:00
P4T12ICK e6c8254ede Added automaticc generation of finding report 2022-03-14 12:12:48 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 886da3c92e merged with develop 2022-03-04 14:35:50 +01:00
P4T12ICK f76df6b741 fixed validate issues 2022-03-04 14:15:47 +01:00
patel-bhavin a67a8a4da6 Merge branch 'develop' into refactored_security_content 2022-03-03 12:51:11 -08:00
research bot 67ecd29d53 updating docs and package bits [ci skip] 2022-03-03 18:22:29 +00:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
Lou Stella d3322283c3 Added risk_severity 2022-02-25 13:49:21 -06:00
Lou Stella 9f65b5d0d4 Updated required fields 2022-02-25 13:48:04 -06:00
Lou Stella 760747cea2 Small update to body 2022-02-25 10:46:46 -06:00
Lou Stella ca2163ae8c Moved to Experimental 2022-02-25 10:40:46 -06:00
patel-bhavin e7eab5af71 push 2022-02-07 14:45:37 -08:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
research bot e52d00b53d updating docs and package bits [ci skip] 2022-01-31 20:04:12 +00:00