Commit Graph

2360 Commits

Author SHA1 Message Date
tccontre e21247f2d2 linux_persist_priv_batch_2 2021-12-23 12:31:05 +01:00
tccontre 9b3ecff018 Update linux_possible_append_command_to_at_allow_config_file.test.yml 2021-12-22 11:51:16 +01:00
tccontre 3a68d044ef Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml 2021-12-22 10:46:27 +01:00
Bhavin Patel 94130345ab Branch was auto-updated. 2021-12-21 11:22:20 -08:00
Bhavin Patel 0ff1e78f11 Branch was auto-updated. 2021-12-21 11:22:19 -08:00
Bhavin Patel 5b820c2af9 Branch was auto-updated. 2021-12-21 11:22:17 -08:00
Jose Enrique Hernandez 930a6db140 Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278 2021-12-21 14:21:54 -05:00
mvelazco bb8ae58f84 adding new detection 2021-12-21 13:44:17 -05:00
tccontre fb087ea8b3 linux_persist_priv_batch_1 2021-12-21 11:02:15 +01:00
mvelazco 6fa0f9b30b adding new detection 2021-12-20 22:08:19 -05:00
mvelazco 243e60a3cc minor fix 2021-12-20 17:04:58 -05:00
mvelazco 82a4a63093 creating analytic story and first detection 2021-12-20 16:58:34 -05:00
Bhavin Patel 2a15f8b170 Branch was auto-updated. 2021-12-20 12:42:51 -08:00
Bhavin Patel d60bcec3a4 Branch was auto-updated. 2021-12-20 12:42:50 -08:00
tccontre f144fc5df3 new_ssa_info_sabotage 2021-12-20 12:37:12 +01:00
tccontre c53510c42a new_ssa_info_sabotage 2021-12-20 12:31:21 +01:00
tccontre 9cf834a5f1 new_ssa_info_sabotage 2021-12-20 12:25:34 +01:00
tccontre cdab1e8c74 new_ssa_ifo_sabotage 2021-12-20 12:17:04 +01:00
Bhavin Patel 6e12b4f2ad Branch was auto-updated. 2021-12-16 12:55:23 -08:00
Bhavin Patel 3eb630b220 Branch was auto-updated. 2021-12-16 12:55:22 -08:00
peter-cg 55fd63fe2f Caps fix 2021-12-16 14:53:54 -06:00
peter-cg 3aa223a948 Adding sourcetype to sysproc_unexpected_location test 2021-12-16 10:44:05 -06:00
mvelazco 3bb9712286 updating detection to use data models 2021-12-15 15:53:06 -05:00
mhaag-spl 9eea4ded41 It's Raining Haags 2021-12-15 13:01:04 -07:00
Bhavin Patel e432fe6630 Branch was auto-updated. 2021-12-14 18:47:09 -08:00
Bhavin Patel 605951a96e Branch was auto-updated. 2021-12-14 18:47:08 -08:00
Bhavin Patel 61d583e45e Branch was auto-updated. 2021-12-14 18:47:02 -08:00
mhaag-spl cea91f725e Create hunting_for_log4shell.test.yml 2021-12-14 19:00:04 -07:00
patel-bhavin 05b189232d ldap outbound 2021-12-14 10:10:23 -08:00
P4T12ICK 3f59f79b93 log4j 2021-12-14 18:21:58 +01:00
P4T12ICK f84b61357c Improved Proxy detection 2021-12-14 16:35:31 +01:00
d1vious 7e6cb9381b Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-14 00:54:44 -05:00
d1vious 946503dc76 added two new detections, ymls are not finished 2021-12-14 00:54:37 -05:00
mvelazco cb4d003f4e updating dataset tag 2021-12-13 16:24:39 -05:00
mvelazco 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 15:51:45 -05:00
mvelazco 2c62039a03 adding detection 2021-12-13 15:51:43 -05:00
mhaag-spl 050bc8d886 2021-12-13 13:32:27 -07:00
mhaag-spl f4de314e4e wget curl 2021-12-13 07:11:07 -07:00
Bhavin Patel f46386f617 Branch was auto-updated. 2021-12-10 10:59:36 -08:00
Bhavin Patel 0fa75cd52b Branch was auto-updated. 2021-12-10 10:59:35 -08:00
Bhavin Patel c725abead9 Branch was auto-updated. 2021-12-10 10:59:31 -08:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
Bhavin Patel 52f16666e5 Branch was auto-updated. 2021-12-10 10:49:24 -08:00
Bhavin Patel 738828073b Branch was auto-updated. 2021-12-10 10:49:20 -08:00
Bhavin Patel 4adade3417 Branch was auto-updated. 2021-12-10 10:49:19 -08:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
Bhavin Patel 3cf21357c3 Branch was auto-updated. 2021-12-09 12:59:17 -08:00
Bhavin Patel 6c99bb2cff Branch was auto-updated. 2021-12-09 12:59:16 -08:00
Bhavin Patel 6f9decf038 Branch was auto-updated. 2021-12-09 12:59:15 -08:00
Bhavin Patel 46083ae36f Branch was auto-updated. 2021-12-09 09:06:16 -08:00