admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 5527f242d4 Merge pull request #2328 from splunk/updating_url 
Updating url
 2022-08-23 14:49:31 -05:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
Michael Haag 13d400611a LSA 🐍 SS 2022-08-22 21:16:12 -06:00
pyth0n1c 95c8b3f07d Branch was auto-updated. 2022-08-22 14:51:22 -07:00
pyth0n1c 01b47416e2 Branch was auto-updated. 2022-08-22 14:51:21 -07:00
pyth0n1c 4ac73c8614 Branch was auto-updated. 2022-08-22 14:51:20 -07:00
pyth0n1c 6d6dd8718d Branch was auto-updated. 2022-08-22 14:51:19 -07:00
pyth0n1c ffdc6b72e2 Branch was auto-updated. 2022-08-22 14:51:18 -07:00
pyth0n1c a9cdfe3050 Branch was auto-updated. 2022-08-22 14:51:17 -07:00
pyth0n1c cfa60f73c5 Branch was auto-updated. 2022-08-22 14:51:16 -07:00
pyth0n1c 296d64dce2 Branch was auto-updated. 2022-08-22 14:51:13 -07:00
pyth0n1c 82f771dc08 Branch was auto-updated. 2022-08-22 14:51:12 -07:00
pyth0n1c 84cd964c0b Branch was auto-updated. 2022-08-22 14:51:11 -07:00
pyth0n1c 6332b1c435 Branch was auto-updated. 2022-08-22 14:51:10 -07:00
mvelazco 1f82c4c215 Merge pull request #2338 from splunk/add_microsoft_cloud_services_ta 
Adding Microsoft Cloud Services TA
 2022-08-22 17:50:54 -04:00
mvelazco b0c3232991 adding microsoft cloud services ta 2022-08-22 17:38:49 -04:00
Michael Haag af639ac066 Update windows_dll_search_order_hijacking_hunt_with_sysmon.yml 2022-08-22 14:46:29 -06:00
mvelazco 0a10ef85d6 fixing detection. adding azure_audit macro 2022-08-22 15:36:25 -04:00
pyth0n1c f0b053152e Update hijacklibs.csv 
Forgot to include one of the dlls,
amsi.dll.  This caused the detection
testing to fail.
 2022-08-22 12:29:21 -07:00
Michael Haag ed2bc99c46 sysmon fix 2022-08-22 10:14:10 -06:00
pyth0n1c e7102508d9 Removed with: develop from the detection- 
testing workflows since we need to test
a new version of the detection testing code.
 2022-08-19 15:05:40 -07:00
Michael Haag 17ba3c3e51 fix 2022-08-19 15:21:15 -06:00
Michael Haag 416ddb5fa8 lookup 1 2022-08-19 14:40:01 -06:00
Michael Haag fd88c88762 Hijack Libraries 2022-08-19 14:37:29 -06:00
gowthamarajr 136cbb1ea8 Add detection for "Azure AD External Guest User Invited" 2022-08-19 10:39:07 -04:00
mvelazco fae2c64476 adding new detection. other minor changes 2022-08-19 00:16:18 -04:00
mvelazco b81b41e137 small fixes 2022-08-18 17:46:34 -04:00
mvelazco 38ee247989 Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-08-18 14:50:18 -04:00
mvelazco 7b137ad6b9 adding new detection and fixing a few others 2022-08-18 14:50:16 -04:00
gowthamarajr 75b2daa449 Update msg and ref 2022-08-18 14:09:25 -04:00
gowthamarajr d8f41b1c5d update risk sccore 2022-08-18 11:41:29 -04:00
James Hodgkinson 729574b236 grammar correction in template 2022-08-18 13:32:34 +10:00
gowthamarajr 55c18d0c40 Update "Azure AD Service Principal Created" 2022-08-17 18:54:10 -04:00
gowthamarajr da48c720c6 Update "Azure AD Service Principal Created" 2022-08-17 18:53:22 -04:00
gowthamarajr 41a7f4380e Add 2 detections 2022-08-17 18:43:40 -04:00
mvelazco 7174360cee creating analytic story yaml 2022-08-17 12:22:16 -04:00
d1vious 799bdbae5b we do not use it 2022-08-16 15:45:06 -04:00
pyth0n1c a2c0c6f415 Branch was auto-updated. 2022-08-16 12:39:50 -07:00
pyth0n1c 7648b16649 Branch was auto-updated. 2022-08-16 12:39:49 -07:00
pyth0n1c 18a582b786 Branch was auto-updated. 2022-08-16 12:39:47 -07:00
pyth0n1c 544a496b62 Branch was auto-updated. 2022-08-16 12:39:45 -07:00
pyth0n1c 131da29741 Branch was auto-updated. 2022-08-16 12:39:44 -07:00
pyth0n1c 5e76db583b Branch was auto-updated. 2022-08-16 12:39:43 -07:00
d1vious bd8ffeeb52 removing playbooks 2022-08-16 15:29:43 -04:00
d1vious 1a84238959 updating to develop 2022-08-16 15:28:59 -04:00
d1vious 9173c0fdfe Merge branch 'develop' of github.com:splunk/security_content into develop 2022-08-16 15:27:33 -04:00
d1vious 7f08b301ab cleaning up CI 2022-08-16 15:24:07 -04:00
d1vious 8de4a55800 removing docs 2022-08-16 15:22:32 -04:00
d1vious 19f3a3b982 fixing on all places 2022-08-16 15:01:56 -04:00
d1vious b6e2ff6278 adding updated url 2022-08-16 15:01:17 -04:00