admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tccontre 859a79ccf5 Update executables_or_script_creation_in_suspicious_path.yml 2022-09-21 12:48:16 +02:00
tccontre 66cb904a18 Update office_application_drop_executable.yml 2022-09-21 12:46:26 +02:00
tccontre 2b0a406ed8 Update non_firefox_process_access_firefox_profile_dir.yml 2022-09-21 12:44:36 +02:00
tccontre 6d84252308 Update executables_or_script_creation_in_suspicious_path.yml 2022-09-21 12:42:41 +02:00
tccontre 28d6d6a529 Update non_chrome_process_accessing_chrome_default_dir.yml 2022-09-21 12:41:59 +02:00
tccontre be6c16084a agent-with-tesla-2 2022-09-21 11:24:35 +02:00
tccontre 16d4d226c3 agent-with-tesla-2 2022-09-21 10:27:23 +02:00
Namratha Sreekanta f5fb35ec4c changing README and few fields regarding the search 2022-09-20 16:00:12 -07:00
Namratha Sreekanta 56aea9de22 Adding in Sharad's inputs on descriptioj 2022-09-20 12:28:53 -07:00
Namratha Sreekanta 8fa7fffa2a changing the desc to match the detection 2022-09-20 11:33:06 -07:00
Namratha Sreekanta 43c213a74c modifying the search and adding a README file 2022-09-20 11:20:13 -07:00
research bot 3041fd1e9e updating docs and package bits [ci skip] 2022-09-20 15:17:35 +00:00
tccontre 85895e14a2 agent-with-tesla-2 2022-09-19 18:04:55 +02:00
tccontre 8c40b9c5fc agent-with-tesla-1 2022-09-19 11:35:19 +02:00
tccontre 888a148bbb agent-with-tesla-1 2022-09-19 11:28:07 +02:00
Namratha Sreekanta 24cbcc1af2 changing notebook code and adding json file for the model, moved all contents under dga_dltk folder 2022-09-16 17:32:18 -07:00
Namratha Sreekanta c417a9a4af changing the search in the yml 2022-09-16 15:13:58 -07:00
pyth0n1c 3bbfee8ad4 Branch was auto-updated. 2022-09-16 12:53:55 -07:00
pyth0n1c 041a6099f6 Branch was auto-updated. 2022-09-16 12:53:51 -07:00
pyth0n1c eb9c712888 Branch was auto-updated. 2022-09-16 12:53:50 -07:00
pyth0n1c 5bad55c6d8 Branch was auto-updated. 2022-09-16 12:53:49 -07:00
pyth0n1c c7c9b69dfd Branch was auto-updated. 2022-09-16 12:53:48 -07:00
pyth0n1c b87ff44a36 Branch was auto-updated. 2022-09-16 12:53:46 -07:00
Bhavin Patel e09003db64 Merge pull request #2358 from splunk/komodo 
Komodo
v3.49.0 		2022-09-16 14:53:31 -05:00
patel-bhavin 713c605097 adding files into dist 2022-09-16 14:37:13 -05:00
Michael Haag 206e826492 Update ssa___windows_execute_arbitrary_commands_with_msdt.yml 2022-09-16 13:29:25 -06:00
Michael Haag 0e9f00f19f Update ssa___windows_execute_arbitrary_commands_with_msdt.yml 2022-09-16 13:10:09 -06:00
Michael Haag 593c433ae8 fixes 
fixes
 2022-09-16 12:47:19 -06:00
Namratha Sreekanta d1788686d5 initial commit for dga 2022-09-15 17:50:36 -07:00
pyth0n1c 23b140e8e6 A few more changes in the story builder to get references working properly. 2022-09-15 17:18:50 -07:00
pyth0n1c bb84ef752b One more change to substitution string 2022-09-15 16:30:32 -07:00
pyth0n1c c8a7c61b74 Changes to apss the name of the app to the story builder, since it is required for generate. 2022-09-15 16:26:34 -07:00
pyth0n1c d84aba8af0 Fixed another issue with the filename. 2022-09-15 13:28:36 -07:00
pyth0n1c af16d25ca2 Fixed file name find and replace issue 2022-09-15 13:27:48 -07:00
d1vious 017cf9a284 fixing ssa detection 2022-09-15 16:23:35 -04:00
pyth0n1c 6fe804f8ed changed one more location where the path to escu is hardcoded. 2022-09-15 13:18:00 -07:00
pyth0n1c a4d143d4f1 better app name valdiation message 2022-09-15 12:58:52 -07:00
pyth0n1c b5bfc29fb5 Basic validation on the app_name 2022-09-15 12:57:12 -07:00
pyth0n1c 444026f32b Another small modification to replace 
static ESCU name with the name of
your app
 2022-09-15 12:53:29 -07:00
Michael Haag 6d1734b902 msdt 2022-09-15 13:43:28 -06:00
Michael Haag 0597208d3d cant type 2022-09-15 13:06:37 -06:00
Michael Haag 81dcbae81c Update ssa___windows_odbcconf_load_response_file.yml 2022-09-15 13:02:54 -06:00
d1vious 782b9bed8a updating csv 2022-09-15 14:57:53 -04:00
d1vious 0ff8d76b90 fixing by adding an asterisk 2022-09-15 14:52:57 -04:00
d1vious fdb7e18510 Merge branch 'detection_enrichment_project' of github.com:splunk/security_content into detection_enrichment_project 2022-09-15 14:42:35 -04:00
Michael Haag 7a95a27a2c ODBC 2022-09-15 12:42:34 -06:00
d1vious 5385bc77cf making path generic to their location and not specific location of file 2022-09-15 14:42:30 -04:00
pyth0n1c 49f0d7ac0c Branch was auto-updated. 2022-09-15 11:33:13 -07:00
pyth0n1c 097e7dca27 Branch was auto-updated. 2022-09-15 11:33:13 -07:00
pyth0n1c dae11e3432 Branch was auto-updated. 2022-09-15 11:33:10 -07:00