Commit Graph

18530 Commits

Author SHA1 Message Date
pyth0n1c 197834b2b7 another fix to tag checking v0.0.000000 2022-09-27 10:32:27 -07:00
pyth0n1c 6019f90800 syntax fix for don't run on tags 2022-09-27 10:31:00 -07:00
pyth0n1c 84da3285a6 Don't run detection testing on TAGs 2022-09-27 10:29:23 -07:00
Michael Haag a1880f5770 data fix 2022-09-27 09:55:53 -06:00
Michael Haag 63f679f2fc Office Product Spawning Windows Script Host 2022-09-27 08:00:34 -06:00
research bot 5ad56eb838 updating docs and package bits [ci skip] 2022-09-27 13:35:18 +00:00
d1vious b2617ccb5d fixing make all detection ba specific 2022-09-26 20:16:22 -04:00
pyth0n1c c640bd2b53 Branch was auto-updated. 2022-09-26 17:15:20 -07:00
pyth0n1c 8976111349 Branch was auto-updated. 2022-09-26 17:15:19 -07:00
pyth0n1c a21eb4dc05 Branch was auto-updated. 2022-09-26 17:15:17 -07:00
pyth0n1c c80d6f6a6c Branch was auto-updated. 2022-09-26 17:15:16 -07:00
pyth0n1c 033aaf8fcf Branch was auto-updated. 2022-09-26 17:15:15 -07:00
pyth0n1c b162b32d5b Branch was auto-updated. 2022-09-26 17:15:14 -07:00
pyth0n1c b0963aca74 Branch was auto-updated. 2022-09-26 17:15:13 -07:00
pyth0n1c 5c0cf5ab00 Branch was auto-updated. 2022-09-26 17:15:12 -07:00
pyth0n1c 67a53f12fe Branch was auto-updated. 2022-09-26 17:15:11 -07:00
pyth0n1c 7c545cbce4 Branch was auto-updated. 2022-09-26 17:15:10 -07:00
Jose Enrique Hernandez 081bf9fd77 Merge pull request #2386 from splunk/fixing-winxml-log
fix ssa___windows_system_binary_proxy_execution_compiled_html_file test file
v3.49.1
2022-09-26 20:14:53 -04:00
patel-bhavin f1d93ba5af format updates 2022-09-26 17:05:51 -05:00
patel-bhavin 84ad82a95f yml error 2022-09-26 16:52:35 -05:00
patel-bhavin db9068b4fb updating azure 2022-09-26 16:50:02 -05:00
Bhavin Patel 2ba2bc8e53 Update detect_dga_domains_using_pretrained_model_in_dsdl.yml
updating story names
2022-09-26 16:41:32 -05:00
patel-bhavin 86c4816f98 nnew detection and multiple searches 2022-09-26 16:25:49 -05:00
patel-bhavin 0c0603e701 password spray detection std dev 2022-09-26 15:56:29 -05:00
Michael Haag 880691a7c9 Update cisa_aa22_264a.yml 2022-09-26 14:30:26 -06:00
Namratha Sreekanta 902221712b making changes to how to implement 2022-09-26 12:26:31 -07:00
Michael Haag 94787c626f New content 2022-09-26 13:00:17 -06:00
Jose Enrique Hernandez 1557acd7ab Update ssa___windows_system_binary_proxy_execution_compiled_html_file_decompile.test.yml 2022-09-26 10:16:04 -04:00
Namratha Sreekanta 2932ebb1fa Adding more feedback 2022-09-23 16:28:58 -07:00
Namratha Sreekanta 34b6e08638 Changing README.md instructions 2022-09-22 16:32:17 -07:00
Namratha Sreekanta 83eb61820e Changing README.md instructions 2022-09-22 16:30:31 -07:00
Namratha Sreekanta 98ddedb20f Merge branch 'dga_detection_dltk' of ssh://github.com/splunk/security_content into dga_detection_dltk 2022-09-22 14:59:38 -07:00
Namratha Sreekanta d22e6db5ef minor change in the detection 2022-09-22 14:57:42 -07:00
pyth0n1c 1d6dec71f0 Branch was auto-updated. 2022-09-22 14:01:58 -07:00
pyth0n1c d7e138a451 Branch was auto-updated. 2022-09-22 14:01:57 -07:00
pyth0n1c fbb9ca156c Branch was auto-updated. 2022-09-22 14:01:56 -07:00
pyth0n1c a3d4f48bbf Branch was auto-updated. 2022-09-22 14:01:55 -07:00
pyth0n1c 9545602c9e Branch was auto-updated. 2022-09-22 14:01:54 -07:00
pyth0n1c be37003bb7 Branch was auto-updated. 2022-09-22 14:01:52 -07:00
pyth0n1c 2675c2b30e Branch was auto-updated. 2022-09-22 14:01:50 -07:00
pyth0n1c 7de3114478 Branch was auto-updated. 2022-09-22 14:01:49 -07:00
pyth0n1c 0d4489e42e Branch was auto-updated. 2022-09-22 14:01:47 -07:00
Jose Enrique Hernandez b3ab14e9fe Merge pull request #2382 from splunk/story_name_fix
Throw Some D's
2022-09-22 17:01:23 -04:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Lou Stella 986716a55f IceID -> IcedID 2022-09-22 09:20:02 -05:00
Namratha Sreekanta 6678a4ee55 fixing build failure 2022-09-21 13:35:47 -07:00
Namratha Sreekanta 055f0a175a adding review comments 2022-09-21 13:20:47 -07:00
tccontre 30c770fcf5 Update windows_mail_protocol_in_non_common_process_path.yml 2022-09-21 13:20:01 +02:00
tccontre 1b74f72760 Update windows_file_transfer_protocol_in_non_common_process_path.yml 2022-09-21 13:18:09 +02:00
tccontre 45e7fb8e40 Update office_application_spawn_rundll32_process.yml 2022-09-21 12:52:00 +02:00