Commit Graph

1762 Commits

Author SHA1 Message Date
tccontre 37185f3e0d linux_persist_priv_batch_3 2022-01-05 11:34:57 +01:00
tccontre b20d3fed32 Update linux_file_creation_in_init_boot_directory.test.yml 2022-01-03 15:43:18 +01:00
tccontre e21247f2d2 linux_persist_priv_batch_2 2021-12-23 12:31:05 +01:00
tccontre 9b3ecff018 Update linux_possible_append_command_to_at_allow_config_file.test.yml 2021-12-22 11:51:16 +01:00
tccontre 3a68d044ef Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml 2021-12-22 10:46:27 +01:00
Bhavin Patel 94130345ab Branch was auto-updated. 2021-12-21 11:22:20 -08:00
Bhavin Patel 0ff1e78f11 Branch was auto-updated. 2021-12-21 11:22:19 -08:00
Bhavin Patel 5b820c2af9 Branch was auto-updated. 2021-12-21 11:22:17 -08:00
Jose Enrique Hernandez 930a6db140 Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278 2021-12-21 14:21:54 -05:00
mvelazco bb8ae58f84 adding new detection 2021-12-21 13:44:17 -05:00
tccontre fb087ea8b3 linux_persist_priv_batch_1 2021-12-21 11:02:15 +01:00
mvelazco 6fa0f9b30b adding new detection 2021-12-20 22:08:19 -05:00
mvelazco 243e60a3cc minor fix 2021-12-20 17:04:58 -05:00
mvelazco 82a4a63093 creating analytic story and first detection 2021-12-20 16:58:34 -05:00
Bhavin Patel 2a15f8b170 Branch was auto-updated. 2021-12-20 12:42:51 -08:00
Bhavin Patel d60bcec3a4 Branch was auto-updated. 2021-12-20 12:42:50 -08:00
tccontre f144fc5df3 new_ssa_info_sabotage 2021-12-20 12:37:12 +01:00
tccontre c53510c42a new_ssa_info_sabotage 2021-12-20 12:31:21 +01:00
tccontre 9cf834a5f1 new_ssa_info_sabotage 2021-12-20 12:25:34 +01:00
tccontre cdab1e8c74 new_ssa_ifo_sabotage 2021-12-20 12:17:04 +01:00
Bhavin Patel 6e12b4f2ad Branch was auto-updated. 2021-12-16 12:55:23 -08:00
Bhavin Patel 3eb630b220 Branch was auto-updated. 2021-12-16 12:55:22 -08:00
peter-cg 55fd63fe2f Caps fix 2021-12-16 14:53:54 -06:00
peter-cg 3aa223a948 Adding sourcetype to sysproc_unexpected_location test 2021-12-16 10:44:05 -06:00
mvelazco 3bb9712286 updating detection to use data models 2021-12-15 15:53:06 -05:00
mhaag-spl 9eea4ded41 It's Raining Haags 2021-12-15 13:01:04 -07:00
Bhavin Patel 605951a96e Branch was auto-updated. 2021-12-14 18:47:08 -08:00
Bhavin Patel 61d583e45e Branch was auto-updated. 2021-12-14 18:47:02 -08:00
mhaag-spl cea91f725e Create hunting_for_log4shell.test.yml 2021-12-14 19:00:04 -07:00
mvelazco cb4d003f4e updating dataset tag 2021-12-13 16:24:39 -05:00
mvelazco 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 15:51:45 -05:00
mvelazco 2c62039a03 adding detection 2021-12-13 15:51:43 -05:00
mhaag-spl 050bc8d886 2021-12-13 13:32:27 -07:00
mhaag-spl f4de314e4e wget curl 2021-12-13 07:11:07 -07:00
Bhavin Patel 0fa75cd52b Branch was auto-updated. 2021-12-10 10:59:35 -08:00
Bhavin Patel c725abead9 Branch was auto-updated. 2021-12-10 10:59:31 -08:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
Bhavin Patel 52f16666e5 Branch was auto-updated. 2021-12-10 10:49:24 -08:00
Bhavin Patel 738828073b Branch was auto-updated. 2021-12-10 10:49:20 -08:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
Bhavin Patel 3cf21357c3 Branch was auto-updated. 2021-12-09 12:59:17 -08:00
Bhavin Patel 6f9decf038 Branch was auto-updated. 2021-12-09 12:59:15 -08:00
Bhavin Patel 46083ae36f Branch was auto-updated. 2021-12-09 09:06:16 -08:00
Bhavin Patel a7823138df Branch was auto-updated. 2021-12-09 09:06:09 -08:00
Bhavin Patel 5e42f3b78c Branch was auto-updated. 2021-12-09 09:06:08 -08:00
mhaag-spl 219ba97d2d installerfiletakeover 2021-12-08 13:44:23 -07:00
mhaag-spl cd36c6dd6f Raccine Disable 2021-12-08 13:25:21 -07:00
mhaag-spl e3a84f8f6e Defense 2021-12-08 13:07:50 -07:00
Bhavin Patel 8cc5adc54c Branch was auto-updated. 2021-12-08 09:36:32 -08:00
Bhavin Patel 456d7483d6 Branch was auto-updated. 2021-12-08 09:36:24 -08:00