admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Haag 36ffb11950 Update wineventlog_application.yml 2022-09-12 08:53:24 -06:00
Michael Haag 7507b45e78 Update windows_event_triggered_image_file_execution_options_injection.yml 2022-09-12 08:44:58 -06:00
Michael Haag 00a2a95961 space or tab, we'll never know 2022-09-12 08:18:30 -06:00
Michael Haag c3653c1404 test 2022-09-12 07:57:53 -06:00
Michael Haag 3a41a3f057 Update log4shell_cve_2021_44228_exploitation.yml 2022-09-09 13:34:24 -06:00
Michael Haag 53c3d4de45 Updates 2022-09-09 13:27:37 -06:00
Michael Haag e1a522e4ab Update living_off_the_land.yml 2022-09-09 13:21:57 -06:00
Michael Haag f0324892d5 hunt Windows Event Triggered Image File Execution Options Injection 2022-09-09 06:50:43 -06:00
d1vious e43855c570 lolbas 2022-09-08 19:15:03 -04:00
d1vious e9e68ba82d tagging ba detection for insider threat 2022-09-08 19:00:01 -04:00
d1vious b3aa8b4bb4 working scripts 2022-09-08 18:01:46 -04:00
d1vious 6174db54d9 working detection generation 2022-09-08 13:59:46 -04:00
Michael Haag 442955c826 chm fixes 2022-09-08 10:48:20 -06:00
Michael Haag 6531d4350e Update ssa___windows_system_binary_proxy_execution_compiled_html_file_url_in_command_line.test.yml 2022-09-08 10:34:08 -06:00
Michael Haag 1c928ebffe fixord 2022-09-08 10:27:54 -06:00
Michael Haag 6ea7428011 test test 2022-09-08 10:23:08 -06:00
d1vious 83e9bad107 working on feedback 2022-09-07 18:49:22 -04:00
d1vious 46dbe66fff removing duplicate 2022-09-07 11:29:01 -04:00
mvelazco 4810926509 enhancing descriptions 2022-09-06 18:08:16 -04:00
mvelazco 4cd8633876 Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-09-06 17:26:08 -04:00
mvelazco d81df080b6 updating descriptions 2022-09-06 17:26:06 -04:00
pyth0n1c e8006472c2 Branch was auto-updated. 2022-09-06 14:07:53 -07:00
pyth0n1c 7208f63c96 Branch was auto-updated. 2022-09-06 14:07:51 -07:00
pyth0n1c e807d51570 Branch was auto-updated. 2022-09-06 14:07:50 -07:00
pyth0n1c 0ecef3ae3d Branch was auto-updated. 2022-09-06 14:07:49 -07:00
pyth0n1c 1be4026031 Branch was auto-updated. 2022-09-06 14:07:47 -07:00
pyth0n1c d83cb15609 Branch was auto-updated. 2022-09-06 14:07:46 -07:00
pyth0n1c 698474a101 Branch was auto-updated. 2022-09-06 14:07:45 -07:00
pyth0n1c 958ede2a2b Branch was auto-updated. 2022-09-06 14:07:43 -07:00
pyth0n1c 97bfacffc2 Branch was auto-updated. 2022-09-06 14:07:42 -07:00
Rod Soto ae92b16c0a Merge pull request #2351 from splunk/fixdescriptionpt 
addedwords
 2022-09-06 14:07:21 -07:00
Rod Soto 73e84a326d fixedpathlog 2022-09-06 13:40:08 -07:00
mvelazco 6b333e5c9a Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-09-06 16:08:37 -04:00
mvelazco d8cce69644 adding new detection 2022-09-06 16:08:35 -04:00
tccontre 385bc45c5d Update windows_phishing_recent_iso_exec_registry.yml 2022-09-05 10:56:24 +02:00
tccontre 2dc78584a0 Update windows_phishing_recent_iso_exec_registry.yml 2022-09-05 10:56:01 +02:00
tccontre 4e393e9509 Update windows_defacement_modify_transcodedwallpaper_file.yml 2022-09-05 10:29:49 +02:00
tccontre 85fc55b281 brute-rate-3 2022-09-05 10:26:55 +02:00
pyth0n1c cca076f667 Branch was auto-updated. 2022-09-02 19:15:41 -04:00
pyth0n1c 7ec4b9e936 Branch was auto-updated. 2022-09-02 19:15:41 -04:00
pyth0n1c 3880a4f1cf Branch was auto-updated. 2022-09-02 19:15:38 -04:00
pyth0n1c 6d6c132937 Branch was auto-updated. 2022-09-02 19:15:36 -04:00
pyth0n1c e701306956 Branch was auto-updated. 2022-09-02 19:15:35 -04:00
pyth0n1c 9894bf1583 Branch was auto-updated. 2022-09-02 19:15:34 -04:00
pyth0n1c 7879f6b016 Branch was auto-updated. 2022-09-02 19:15:33 -04:00
pyth0n1c 57028a0345 Branch was auto-updated. 2022-09-02 19:15:32 -04:00
pyth0n1c 5946b4adfa Branch was auto-updated. 2022-09-02 19:15:30 -04:00
pyth0n1c ca65ddd817 Branch was auto-updated. 2022-09-02 19:15:29 -04:00
pyth0n1c 95e4eb048c Merge pull request #2359 from splunk/fix_sourcetype_for_linux_kernel_module_detection 
Update linux_kernel_module_enumeration.test.yml

Since this is such a small and simple fix, I have merged it myself without review.
Note that this was just an update to a test file, not a modification to the detection itself.
 2022-09-02 19:15:12 -04:00
pyth0n1c 5c4d054652 Update linux_kernel_module_enumeration.test.yml 
Changing sourcetype from linux_sysmon --> sysmon_linux
 2022-09-02 18:50:48 -04:00