admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

1762 Commits

Author SHA1 Message Date
pyth0n1c a687820b95 Branch was auto-updated. 2022-02-15 10:30:10 -08:00
pyth0n1c 45fb0c5afb Branch was auto-updated. 2022-02-15 10:30:09 -08:00
mhaag-spl e241241bf2 ordinal Data 2022-02-15 11:09:57 -07:00
tccontre 2009364a6b linux_lolbin_stage1 2022-02-15 10:55:01 +01:00
d1vious 3a3d0a9922 adding powershell downloadfile but not passing 2022-02-14 21:28:57 -05:00
pyth0n1c 7648c76c0b A handful of easy detection test fixes to get 
the tests to detections to work with the
newest application baseline.
 2022-02-14 16:57:33 -08:00
patel-bhavin 11ab86fdf4 remove detections aalready covered 2022-02-14 15:03:24 -08:00
patel-bhavin c521d07f7d file updates 2022-02-14 14:59:36 -08:00
d1vious 73cb36c626 adding working detection 2022-02-14 15:54:12 -05:00
d1vious 0a2618f686 adding 1 detection 2022-02-14 13:40:24 -05:00
d1vious a1d127126a adding template detection 2022-02-14 11:11:47 -05:00
P4T12ICK f7f0b2712d Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content 2022-02-14 16:48:08 +01:00
P4T12ICK 0b5b4e2388 generate API package working 2022-02-14 16:45:27 +01:00
tccontre d96849c449 linux_lolbin_stage1 2022-02-14 10:17:46 +01:00
mhaag-spl 40b34450a0 Windows Schtasks Create Run As System 2022-02-10 09:08:52 -07:00
mhaag-spl 2fdc53b85b MSRA shipment 📮 2022-02-09 12:10:58 -07:00
pyth0n1c 5d05c93531 Branch was auto-updated. 2022-02-09 10:11:45 -08:00
mhaag-spl 0fa295eee0 Ordinal 2022-02-09 08:01:49 -07:00
mvelazco c076fbc6be adding analytic story and three new detections 2022-02-07 18:52:34 -05:00
pyth0n1c c44dcfa18b Branch was auto-updated. 2022-02-07 09:39:55 -08:00
pyth0n1c 4ce00fa47f Branch was auto-updated. 2022-02-07 09:39:48 -08:00
pyth0n1c 168ce83d33 Branch was auto-updated. 2022-02-07 09:39:46 -08:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
P4T12ICK 32798f21ab old test file format 2022-02-07 10:50:32 +01:00
P4T12ICK 968d52d2f3 generate ssa package 2022-02-07 10:24:36 +01:00
tccontre e84063b9c2 Merge branch 'reg_yml_analytics_updates_4' of github.com:splunk/security_content into reg_yml_analytics_updates_4 2022-02-04 10:18:24 +01:00
tccontre 2704483cf5 reg_yml_analytics_updates_4 2022-02-04 10:18:17 +01:00
pyth0n1c 0570b32718 Branch was auto-updated. 2022-02-03 11:30:41 -08:00
pyth0n1c 53ac166e20 Branch was auto-updated. 2022-02-03 11:30:40 -08:00
P4T12ICK f9468a908a generate SSA package 2022-02-02 08:41:54 +01:00
mhaag-spl e8dd9051bc pkexec 
Deprecating two detections that identified all rundll32 executions.
Added linux pkexec pwnkit detection.
 2022-02-01 09:52:52 -07:00
pyth0n1c 4da9c3a3a5 Branch was auto-updated. 2022-01-28 13:28:24 -08:00
pyth0n1c 8225480d99 Branch was auto-updated. 2022-01-28 13:28:22 -08:00
Bhavin Patel 14c145c133 Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline 
Potentially malicious code on commandline
 2022-01-28 13:27:59 -08:00
pyth0n1c d8a88d1316 Branch was auto-updated. 2022-01-27 14:55:51 -08:00
pyth0n1c 39240b0bba Branch was auto-updated. 2022-01-27 14:55:49 -08:00
Bhavin Patel 3efcb99124 Merge pull request #1875 from splunk/ssa_multilogin 
Anomalous usage of account credentials
 2022-01-27 14:55:25 -08:00
pyth0n1c d2cd2cb641 Branch was auto-updated. 2022-01-27 14:11:45 -08:00
pyth0n1c d72014418c Branch was auto-updated. 2022-01-27 14:11:42 -08:00
Bhavin Patel 1975ff75a2 Merge pull request #1900 from splunk/ssa_info_sabotage 
new_ssa_ifo_sabotage
 2022-01-27 14:11:19 -08:00
d1vious 38250086a5 Merge branch 'DontUpdateUp' of github.com:splunk/security_content into DontUpdateUp 2022-01-27 15:57:34 -05:00
d1vious 2a12151862 fixing path 2022-01-27 15:57:21 -05:00
pyth0n1c 6af836b39e Branch was auto-updated. 2022-01-27 12:05:53 -08:00
d1vious 8fb6b17139 adding log4shell correlation 2022-01-27 14:59:25 -05:00
P4T12ICK 228cc28a3b after changing test file format 2022-01-27 16:12:01 +01:00
patel-bhavin 328417d4fa test files 2022-01-26 14:31:04 -08:00
patel-bhavin 45c4a7b600 remove files that are already merged 2022-01-26 13:51:51 -08:00
mhaag-spl befe09f77c Nirsoft Software 2022-01-24 15:07:20 -07:00
pyth0n1c ad85b8b21b Branch was auto-updated. 2022-01-24 10:51:04 -08:00