Commit Graph

18530 Commits

Author SHA1 Message Date
mhaag-spl bc7d16d5ac Fixed markers 2021-03-25 07:02:11 -06:00
divious1 fe435417cc udpated landing page 2021-03-24 21:55:41 -04:00
divious1 8592f7aae9 fixed date generation 2021-03-24 21:54:08 -04:00
mhaag-spl c6664bcb7e Update ingress_tool_transfer.yml 2021-03-24 15:44:22 -06:00
mhaag-spl 5b7aa4ada2 fix 2021-03-24 15:36:19 -06:00
mhaag-spl 52015bd2b5 certutil 2021-03-24 15:32:46 -06:00
mhaag-spl 2e8c38f926 Update attempt_to_add_untrusted_certificate_to_certificate_store.yml 2021-03-24 15:28:17 -06:00
mhaag-spl f413d9e0d4 Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-24 15:23:36 -06:00
mhaag-spl 5c5bdde9fd Merge branch 'develop' into mhaag 2021-03-24 15:23:15 -06:00
Michael Haag 0f230c54f1 Merge branch 'develop' into mhaag 2021-03-24 15:19:46 -06:00
mhaag-spl fb662881d4 Update attempt_to_add_untrusted_certificate_to_certificate_store.yml 2021-03-24 15:19:36 -06:00
mhaag-spl 249fd0a549 Update Certutil
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
2021-03-24 15:15:47 -06:00
divious1 070ae88f36 update to remove pathing 2021-03-24 17:11:17 -04:00
github-actions[bot] 73aafd52bf Branch was auto-updated. 2021-03-24 15:38:07 +00:00
github-actions[bot] db75dd4275 Branch was auto-updated. 2021-03-24 15:38:06 +00:00
Jose Enrique Hernandez 8c2dc82bf9 Merge pull request #1291 from splunk/ssa_pillow_pip_upgrade
Ssa pillow pip upgrade
2021-03-24 11:37:45 -04:00
Ignacio Bermudez Corrales 3d5eebe2a7 adding jpeg-dev 2021-03-23 21:06:53 -07:00
Ignacio Bermudez Corrales 00a135ff10 adding zlib-dev 2021-03-23 21:04:32 -07:00
Ignacio Bermudez Corrales f717f9ac9c a different way 2021-03-23 21:02:10 -07:00
Ignacio Bermudez Corrales c995213d54 forcing upgrading pip in ci 2021-03-23 20:52:58 -07:00
Ignacio Bermudez Corrales bf0d6631af forcing upgrading pip in ci 2021-03-23 20:51:02 -07:00
divious1 97d2c8bccc cleaned up landing page 2021-03-23 22:44:58 -04:00
divious1 90710793f6 adding icons again 2021-03-23 18:05:01 -04:00
bpatel 8d12500905 adding risk and product tags 2021-03-23 15:03:02 -07:00
bpatel 7df6e65645 Merge branch 'aws_priv_escalation' of github.com:splunk/security_content into aws_priv_escalation 2021-03-23 13:12:56 -07:00
bpatel 4e0776d751 updates 2021-03-23 13:12:47 -07:00
github-actions[bot] ae1e335322 Branch was auto-updated. 2021-03-23 16:31:16 +00:00
github-actions[bot] 53f2f58a0a Branch was auto-updated. 2021-03-23 16:31:13 +00:00
Jose Enrique Hernandez c3f5aca235 Merge pull request #1287 from splunk/update_docgen
TR-489 Update docgen
2021-03-23 12:30:49 -04:00
github-actions[bot] 25a1febeb0 Branch was auto-updated. 2021-03-23 16:20:50 +00:00
github-actions[bot] 3a99bf8df2 Branch was auto-updated. 2021-03-23 16:20:49 +00:00
github-actions[bot] 71c628ac17 Branch was auto-updated. 2021-03-23 16:20:46 +00:00
tccontre b15a71d6cd Merge pull request #1286 from splunk/clop_ransomware
Clop ransomware
2021-03-23 17:20:25 +01:00
tcontreras 48120285ba clop_lookup_entry 2021-03-23 17:00:55 +01:00
tcontreras 9e240c9530 false_positive_field_mod 2021-03-23 16:44:40 +01:00
P4T12ICK 19d96dac72 ssa detection testing 2021-03-23 15:03:18 +01:00
P4T12ICK 617ec011d6 ssa detection testing 2021-03-23 14:52:10 +01:00
tcontreras 191e42f58a clop_detection_mod 2021-03-23 14:13:33 +01:00
P4T12ICK b396890b0b testing ssa detections 2021-03-23 13:50:45 +01:00
root 526a5c7893 Added detection testing service results inHigh Process Termination Frequency 2021-03-23 12:41:38 +00:00
root 57e4a62a01 Added detection testing service results inHigh File Deletion Frequency 2021-03-23 12:18:35 +00:00
P4T12ICK e08b1ab9a9 testing ssa detections 2021-03-23 13:09:50 +01:00
root f95182fca6 Added detection testing service results inProcess Deleting Its Process File Path 2021-03-23 11:59:50 +00:00
tcontreras 3fd704cdcd Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 2021-03-23 12:29:08 +01:00
tcontreras 1696edba41 clop_detection_processid_mod 2021-03-23 12:28:54 +01:00
root 6da776bb4a Added detection testing service results inClop Ransomware Known Service Name 2021-03-23 11:04:30 +00:00
P4T12ICK 275c5a4dfb bug fix 2021-03-23 11:55:56 +01:00
tcontreras f5bfe97b81 clop_mod_detections_add_processid_comments 2021-03-23 11:33:10 +01:00
P4T12ICK fc1d74b624 bug fixes test files 2021-03-23 11:29:05 +01:00
P4T12ICK e3e4e2b512 bug fixes test files 2021-03-23 11:06:15 +01:00