18530 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
josehelps	a2b6896f10	updating	2022-10-17 14:50:20 -04:00
d1vious	e534b9dd94	adding 1 example	2022-10-17 14:35:42 -04:00
mvelazco	e95c7f6937	fixing detection	2022-10-17 12:27:58 -04:00
mvelazco	bdaf3ebcf9	updating amazon S3 url	2022-10-17 12:11:19 -04:00
mvelazco	2afe6af188	fixing yaml issues	2022-10-17 11:44:39 -04:00
Michael Haag	6ac9e6e08e	reference to MSF	2022-10-17 07:56:05 -06:00
Michael Haag	fafef8158f	reference	2022-10-17 07:51:14 -06:00
Michael Haag	744dd3c713	Data add to Forti	2022-10-15 06:43:09 -06:00
Michael Haag	ac0593d1a0	Update powershell_using_memory_as_backing_store.yml	2022-10-15 06:28:43 -06:00
Michael Haag	00433d62d7	Update executables_or_script_creation_in_suspicious_path.yml	2022-10-15 06:21:49 -06:00
patel-bhavin	5b4074dd23	hti update	2022-10-14 15:36:28 -07:00
Namratha Sreekanta	2100ef6fd1	changing the wiki link in the dga detection	2022-10-14 14:18:11 -07:00
srv-rr-gh-researchbt	1580dfc67e	Branch was auto-updated.	2022-10-14 12:33:39 -07:00
srv-rr-gh-researchbt	b04681c854	Branch was auto-updated.	2022-10-14 12:33:36 -07:00
srv-rr-gh-researchbt	40e4218968	Branch was auto-updated.	2022-10-14 12:33:35 -07:00
srv-rr-gh-researchbt	945fb121a7	Branch was auto-updated.	2022-10-14 12:33:34 -07:00
srv-rr-gh-researchbt	090b1ae9e8	Branch was auto-updated.	2022-10-14 12:33:32 -07:00
srv-rr-gh-researchbt	7ad1e041d7	Branch was auto-updated.	2022-10-14 12:33:31 -07:00
srv-rr-gh-researchbt	f6050057f1	Branch was auto-updated.	2022-10-14 12:33:30 -07:00
srv-rr-gh-researchbt	2b8f8f071b	Branch was auto-updated.	2022-10-14 12:33:29 -07:00
srv-rr-gh-researchbt	2a2ee9e576	Branch was auto-updated.	2022-10-14 12:33:29 -07:00
srv-rr-gh-researchbt	c3713043d9	Branch was auto-updated.	2022-10-14 12:33:28 -07:00
srv-rr-gh-researchbt	c23c0e4498	Branch was auto-updated.	2022-10-14 12:33:27 -07:00
research bot	be4daa969c	Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag	2022-10-14 19:33:11 +00:00
Bhavin Patel	7ab9b56f72	Update gcp_unusual_number_of_failed_authentications_from_ip.yml	2022-10-14 12:20:52 -07:00
Bhavin Patel	ec4829ad7f	Update gcp_multiple_users_failing_to_authenticate_from_ip.yml	2022-10-14 12:20:23 -07:00
Michael Haag	c8f1c87203	update	2022-10-14 13:12:10 -06:00
Michael Haag	d7f115f0c7	Update fortinet_appliance_auth_bypass.yml	2022-10-14 13:08:10 -06:00
mvelazco	ecda6231c9	gitignore fix	2022-10-14 15:06:12 -04:00
mvelazco	7bada443b3	Merge branch 'gcp_account_takeover' of github.com:splunk/security_content into gcp_account_takeover	2022-10-14 15:03:56 -04:00
mvelazco	744bc50190	adding 4 GCP account takeover detections	2022-10-14 15:03:54 -04:00
Bhavin Patel	b1bb130cd9	Merge pull request #2407 from splunk/fix_api_update_error ... Fix generate API v3.50.0	2022-10-14 11:50:47 -07:00
Michael Haag	5e6be8b499	Update fortinet_appliance_auth_bypass.yml	2022-10-14 12:49:28 -06:00
Michael Haag	363677cc71	Update cve_2022_40684_fortinet_appliance_auth_bypass.yml	2022-10-14 12:26:35 -06:00
Michael Haag	aad3a35478	Drop a Forti	2022-10-14 12:19:26 -06:00
Michael Haag	b2ddf3a6c8	updates	2022-10-14 11:38:42 -06:00
tccontre	0867949d4d	Update windows_mshta_execution_in_registry.yml	2022-10-14 17:51:37 +02:00
tccontre	6da0d7913a	Update windows_mshta_execution_in_registry.test.yml	2022-10-14 17:50:56 +02:00
tccontre	b886ffa10f	Update windows_mshta_execution_in_registry.yml	2022-10-14 11:47:18 +02:00
tccontre	0295a489d4	Update windows_mshta_execution_in_registry.test.yml	2022-10-14 11:14:07 +02:00
tccontre	b5cf28dff5	Update windows_mshta_execution_in_registry.yml	2022-10-14 11:13:52 +02:00
tccontre	b67c3bf8ce	Update windows_mshta_execution_in_registry.test.yml	2022-10-14 10:45:52 +02:00
tccontre	93cc5d602c	Update windows_mshta_execution_in_registry.yml	2022-10-14 10:45:39 +02:00
tccontre	135e12500f	mshta_reg	2022-10-14 10:28:30 +02:00
patel-bhavin	56abcaeb12	new sourcetype	2022-10-13 18:07:01 -07:00
patel-bhavin	62b75ad9a4	ignore lookups.db.db files	2022-10-13 16:52:13 -07:00
patel-bhavin	ab378d6705	addo_test	2022-10-13 16:47:29 -07:00
patel-bhavin	7ec46bd832	spl updates	2022-10-13 16:33:32 -07:00
patel-bhavin	92f0ff7f5f	gcp_stdev	2022-10-13 15:58:37 -07:00
Michael Haag	78c1d290c5	Update ssa___windows_exchange_powershell_module_usage.yml	2022-10-13 15:10:26 -06:00