 pyth0n1c
|
9638205131
|
Fixed paths to attack data sets
and updated required_fields
format to matrch the rest of the
detections in the repo.
|
2022-04-05 13:36:36 -07:00 |
|
|
patel-bhavin
|
ac3bed4a4b
|
str for nes fields
|
2022-04-05 13:32:31 -07:00 |
|
|
pyth0n1c
|
7bbfbcfbde
|
Branch was auto-updated.
|
2022-04-05 13:12:42 -07:00 |
|
|
pyth0n1c
|
25306fef98
|
Branch was auto-updated.
|
2022-04-05 13:12:40 -07:00 |
|
|
pyth0n1c
|
6c56d193ee
|
Branch was auto-updated.
|
2022-04-05 13:12:39 -07:00 |
|
|
pyth0n1c
|
ec2c1bff73
|
Branch was auto-updated.
|
2022-04-05 13:12:38 -07:00 |
|
|
pyth0n1c
|
0fe4d397f4
|
Branch was auto-updated.
|
2022-04-05 13:12:36 -07:00 |
|
|
pyth0n1c
|
4503340635
|
Branch was auto-updated.
|
2022-04-05 13:12:33 -07:00 |
|
|
Bhavin Patel
|
0f0bac3789
|
Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo
Fix Detection Testing YML
|
2022-04-05 13:12:05 -07:00 |
|
|
mhaag-spl
|
0da666fc10
|
nix write jsp
|
2022-04-05 12:38:53 -06:00 |
|
|
mhaag-spl
|
6ebca18614
|
Spring4Shell
|
2022-04-05 11:53:23 -06:00 |
|
|
pyth0n1c
|
c7e1a04873
|
Update windows_indirect_command_execution_via_forfiles.yml
Updated dataset. Need to update again after dataset is merged from branch into main of attack_data
|
2022-04-05 10:21:42 -07:00 |
|
|
pyth0n1c
|
30ff35bcd8
|
Update windows_indirect_command_execution_via_pcalua.yml
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
|
2022-04-05 10:20:58 -07:00 |
|
|
pyth0n1c
|
b385ef2ead
|
Update windows_indirect_command_execution_via_pcalua.yml
Adding second reference for pcalua.exe
|
2022-04-05 10:15:26 -07:00 |
|
|
pyth0n1c
|
0cde033ac1
|
Update windows_indirect_command_execution_via_pcalua.yml
Added UUID
|
2022-04-05 10:13:20 -07:00 |
|
|
pyth0n1c
|
71fe3edea7
|
Update windows_indirect_command_execution_via_forfiles.yml
Added UUID
|
2022-04-05 10:12:45 -07:00 |
|
|
pyth0n1c
|
90424b7e0c
|
Update windows_indirect_command_execution_via_forfiles.yml
Updated description info on forfiles detection yaml
|
2022-04-05 10:08:49 -07:00 |
|
|
pyth0n1c
|
2d2fdb6be0
|
Update windows_indirect_command_execution_via_pcalua.yml
Updated description in YML
|
2022-04-05 10:05:21 -07:00 |
|
|
P4T12ICK
|
9ba9575db7
|
improved MacOS detection
|
2022-04-05 19:00:05 +02:00 |
|
|
pyth0n1c
|
90abd35b92
|
Previously had uses and run keys in the
same step. That caused all jobs
to fail at parsing the workflow yml.
|
2022-04-05 09:40:41 -07:00 |
|
|
Rod Soto
|
901a73aa5f
|
secondbatchwinprivesctaghermeticwiper
|
2022-04-05 08:02:47 -07:00 |
|
|
Rod Soto
|
b3cd632c29
|
hermeticwipertagswindowsprivesc
|
2022-04-05 07:55:03 -07:00 |
|
|
pyth0n1c
|
783c6393f3
|
Branch was auto-updated.
|
2022-04-05 06:38:14 -07:00 |
|
|
pyth0n1c
|
dccca40d27
|
Branch was auto-updated.
|
2022-04-05 06:38:13 -07:00 |
|
|
pyth0n1c
|
2af1d0f09e
|
Branch was auto-updated.
|
2022-04-05 06:38:10 -07:00 |
|
|
P4T12ICK
|
9e79d31e66
|
Merge pull request #2131 from splunk/mac_os_detections
plutil mac os detection
|
2022-04-05 15:37:48 +02:00 |
|
|
pyth0n1c
|
e0f94e950a
|
Branch was auto-updated.
|
2022-04-04 16:57:18 -07:00 |
|
|
pyth0n1c
|
2305967b87
|
Branch was auto-updated.
|
2022-04-04 16:57:16 -07:00 |
|
|
pyth0n1c
|
6c21aefecc
|
Branch was auto-updated.
|
2022-04-04 16:57:15 -07:00 |
|
|
pyth0n1c
|
eb0cbac38e
|
Branch was auto-updated.
|
2022-04-04 16:57:13 -07:00 |
|
|
Jose Enrique Hernandez
|
16175e510f
|
Merge pull request #2149 from splunk/NightlyDetectionTestingS3Artifacts
Nightly detection testing s3 artifacts
|
2022-04-04 19:56:56 -04:00 |
|
|
pyth0n1c
|
eafc7f7867
|
Branch was auto-updated.
|
2022-04-04 16:39:04 -07:00 |
|
|
pyth0n1c
|
90f9e196b7
|
Branch was auto-updated.
|
2022-04-04 16:39:02 -07:00 |
|
|
pyth0n1c
|
7f9bb542af
|
Branch was auto-updated.
|
2022-04-04 16:39:01 -07:00 |
|
|
pyth0n1c
|
dfbc3e4d46
|
Branch was auto-updated.
|
2022-04-04 16:38:59 -07:00 |
|
|
pyth0n1c
|
3e2136f784
|
Branch was auto-updated.
|
2022-04-04 16:38:59 -07:00 |
|
|
Jose Enrique Hernandez
|
273367a2e0
|
Merge pull request #2148 from splunk/IncreasePostWidth
Increased the width of research.splunk.com posts
|
2022-04-04 19:38:41 -04:00 |
|
|
pyth0n1c
|
93176ca83b
|
Updated S3 upload code to proper bucket path
|
2022-04-04 15:52:49 -07:00 |
|
|
pyth0n1c
|
8abf0592fc
|
Converting string to fstring
|
2022-04-04 15:32:09 -07:00 |
|
|
pyth0n1c
|
0209621f81
|
Code to generate and upload
pass rate badge after completion
of a scheduled run. Also uploads
the summary_test_results.json file
for use on research.splunk.com
|
2022-04-04 15:29:28 -07:00 |
|
|
Danny Leung
|
76832755d0
|
PEX-63: generate version.json
|
2022-04-04 13:51:39 -07:00 |
|
|
pyth0n1c
|
a01e3c8734
|
Increased the width of the posts
for all of the content. This reduces
the extremely large whitespace
columns on the sides of all the
content and is a more efficient
use of space.
|
2022-04-04 13:38:50 -07:00 |
|
|
mhaag-spl
|
4c7bd7a66c
|
driver load by sig
|
2022-04-04 14:02:02 -06:00 |
|
|
mhaag-spl
|
fbf82651e0
|
Merge branch 'inthewild' of https://github.com/splunk/security_content into inthewild
|
2022-04-04 13:47:36 -06:00 |
|
|
pyth0n1c
|
8fe10f4ee5
|
Branch was auto-updated.
|
2022-04-04 12:41:44 -07:00 |
|
|
pyth0n1c
|
24de944e9a
|
Branch was auto-updated.
|
2022-04-04 12:41:42 -07:00 |
|
|
pyth0n1c
|
166c6b2483
|
Branch was auto-updated.
|
2022-04-04 12:41:40 -07:00 |
|
|
pyth0n1c
|
2287e6597f
|
Branch was auto-updated.
|
2022-04-04 12:41:37 -07:00 |
|
|
Bhavin Patel
|
2a054936cc
|
Merge pull request #2074 from splunk/TR_1550_Kerberos_Coverage_2
Active Directory Kerberos Attacks - Part 2
|
2022-04-04 12:41:17 -07:00 |
|
|
Bhavin Patel
|
665c25a728
|
Update kerberos_tgt_request_using_rc4_encryption.yml
|
2022-04-04 12:04:55 -07:00 |
|