admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK f59961186a log4j 2021-12-14 18:43:55 +01:00
P4T12ICK b278b43978 log4j 2021-12-14 18:43:02 +01:00
root f03ab2f721 Added detection testing service results inLog4Shell JNDI Payload Injection Attempt 2021-12-14 17:42:22 +00:00
P4T12ICK 3f59f79b93 log4j 2021-12-14 18:21:58 +01:00
Lou Stella 3bf46de4c7 removed files causing generate to break 2021-12-14 11:20:13 -06:00
P4T12ICK a9edbc20bd log4j 2021-12-14 17:49:26 +01:00
P4T12ICK 45cd729295 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-14 17:44:19 +01:00
P4T12ICK 3dc854e68e log4j 2021-12-14 17:43:19 +01:00
Lou Stella 50ef5d4193 Renamed splunk investigation playbook 2021-12-14 09:58:17 -06:00
Lou Stella b33a05700c initial commit of playbook yamls 2021-12-14 09:55:34 -06:00
P4T12ICK f84b61357c Improved Proxy detection 2021-12-14 16:35:31 +01:00
Detection Testing Service bb06f84f61 test:added enriched detections and script for the same 2021-12-14 14:21:31 +05:30
tlangalia 343ceae12f Updated detection files with supported TA list. 2021-12-14 13:27:55 +05:50
d1vious 7e6cb9381b Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-14 00:54:44 -05:00
d1vious 946503dc76 added two new detections, ymls are not finished 2021-12-14 00:54:37 -05:00
mvelazco 10418d295a Update outbound_network_connection_from_java_using_default_ports.yml 2021-12-13 20:22:14 -05:00
root c1dac05e2b Added detection testing service results inOutbound Network Connection from Java Using Default Ports 2021-12-13 23:19:25 +00:00
mvelazco 72005d4806 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 18:00:30 -05:00
mvelazco 19bd2fd736 updating sysmon macro 2021-12-13 18:00:14 -05:00
root 8f1408ba42 Added detection testing service results inJava Class File download by Java User Agent 2021-12-13 22:45:11 +00:00
mvelazco 1c26e4738e Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 17:07:03 -05:00
mvelazco 52692732cd fixing minor issue 2021-12-13 17:07:02 -05:00
Michael Haag 2565ad2bbf Update windows_shells.yml 2021-12-13 14:37:40 -07:00
mvelazco cb4d003f4e updating dataset tag 2021-12-13 16:24:39 -05:00
mvelazco 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 15:51:45 -05:00
mvelazco 2c62039a03 adding detection 2021-12-13 15:51:43 -05:00
mhaag-spl 28633f099a Update java_class_file_download_by_java_user_agent.yml 2021-12-13 13:35:20 -07:00
mhaag-spl 050bc8d886 ☕ 2021-12-13 13:32:27 -07:00
mhaag-spl 71295432e3 Windows shells 2021-12-13 13:01:45 -07:00
mhaag-spl f3b31c113b java Shells 2021-12-13 11:54:59 -07:00
mhaag-spl 2f2e16b8a6 Update malicious_powershell_process___connect_to_internet_with_hidden_window.yml 2021-12-13 11:37:49 -07:00
mhaag-spl d64ce21b48 bagged and tagged 2021-12-13 07:20:33 -07:00
mhaag-spl f4de314e4e wget curl 2021-12-13 07:11:07 -07:00
P4T12ICK b0e6cb084e WIP 2021-12-13 14:42:14 +01:00
d1vious 5d1a8826b1 added story 2021-12-11 12:02:37 -05:00
Bhavin Patel f46386f617 Branch was auto-updated. 2021-12-10 10:59:36 -08:00
Bhavin Patel 0fa75cd52b Branch was auto-updated. 2021-12-10 10:59:35 -08:00
Bhavin Patel c725abead9 Branch was auto-updated. 2021-12-10 10:59:31 -08:00
Bhavin Patel 248f6b554a Branch was auto-updated. 2021-12-10 10:59:30 -08:00
Bhavin Patel 34b3f8df58 Merge pull request #1884 from splunk/rclone_4688 
curleddd
 2021-12-10 10:59:16 -08:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
Bhavin Patel 52f16666e5 Branch was auto-updated. 2021-12-10 10:49:24 -08:00
Bhavin Patel fe01102a9c Branch was auto-updated. 2021-12-10 10:49:24 -08:00
Bhavin Patel 738828073b Branch was auto-updated. 2021-12-10 10:49:20 -08:00
Bhavin Patel 4adade3417 Branch was auto-updated. 2021-12-10 10:49:19 -08:00
Bhavin Patel 53f19075c6 Merge pull request #1883 from splunk/rclone_4688 
rcloned 4688 logs
 2021-12-10 10:49:01 -08:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
Bhavin Patel 1a3b906181 Branch was auto-updated. 2021-12-09 20:53:48 -08:00
Bhavin Patel 17df56d115 Branch was auto-updated. 2021-12-09 20:53:47 -08:00
Bhavin Patel df2a070858 Branch was auto-updated. 2021-12-09 20:53:43 -08:00