Commit Graph

138 Commits

Author SHA1 Message Date
Michael Haag 1e47db984d Update exchange_powershell_module_usage.yml
Resolving #2396
2022-10-02 06:55:20 -06:00
pyth0n1c 5c0cf5ab00 Branch was auto-updated. 2022-09-26 17:15:12 -07:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Lou Stella 986716a55f IceID -> IcedID 2022-09-22 09:20:02 -05:00
Michael Haag 2fa429127b CISA AA22-257A tag 2022-09-15 10:07:38 -06:00
Michael Haag 4d84254970 Analytic Stories + Tagging 2022-07-27 10:29:47 -06:00
pyth0n1c 4a8c5d9a39 Branch was auto-updated. 2022-06-29 12:59:25 -07:00
pyth0n1c c16ccc1eec Branch was auto-updated. 2022-05-19 21:21:59 -04:00
pyth0n1c e045068eba Branch was auto-updated. 2022-05-19 21:21:58 -04:00
d1vious 441ddacfb3 adding insider threat, fixing minor display bug 2022-05-19 21:19:35 -04:00
pyth0n1c 38d32c3341 Branch was auto-updated. 2022-05-16 13:06:58 -04:00
pyth0n1c 1b881ee6a5 Branch was auto-updated. 2022-05-03 17:15:21 -07:00
pyth0n1c 900bd9e7e2 Updated a large number of the links in other detections. Also, adjusted the number of threads that run and tweaked the timeout time. 2022-05-03 10:34:10 -07:00
Rod Soto 92a782df3c fixedtagcb 2022-05-03 09:45:47 -07:00
pyth0n1c 578e6bb088 Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links. 2022-05-02 17:12:50 -07:00
pyth0n1c cde6d216e3 Branch was auto-updated. 2022-05-02 13:07:05 -07:00
patel-bhavin 489829b2a6 Merge branch 'develop' into cyclopsblink_fix 2022-05-02 11:06:38 -07:00
mhaag-spl d342b02b71 Update exchange_powershell_module_usage.yml 2022-05-02 06:32:55 -06:00
mhaag-spl 63b83bfc7a Update exchange_powershell_module_usage.yml 2022-05-02 06:32:06 -06:00
tccontre 1106c798a3 cyclopsblink_fix 2022-04-29 17:47:59 +02:00
pyth0n1c ec2c1bff73 Branch was auto-updated. 2022-04-05 13:12:38 -07:00
Rod Soto 901a73aa5f secondbatchwinprivesctaghermeticwiper 2022-04-05 08:02:47 -07:00
mvelazco f58ae1f243 Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2 2022-03-22 12:48:11 -04:00
mvelazco 4e5d5926b3 minor changes 2022-03-22 12:48:09 -04:00
patel-bhavin 99829330c1 all the changes again 2022-03-16 13:35:48 -07:00
P4T12ICK e6c8254ede Added automaticc generation of finding report 2022-03-14 12:12:48 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 886da3c92e merged with develop 2022-03-04 14:35:50 +01:00
P4T12ICK f76df6b741 fixed validate issues 2022-03-04 14:15:47 +01:00
patel-bhavin a67a8a4da6 Merge branch 'develop' into refactored_security_content 2022-03-03 12:51:11 -08:00
research bot 67ecd29d53 updating docs and package bits [ci skip] 2022-03-03 18:22:29 +00:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
Lou Stella d3322283c3 Added risk_severity 2022-02-25 13:49:21 -06:00
Lou Stella 9f65b5d0d4 Updated required fields 2022-02-25 13:48:04 -06:00
Lou Stella 760747cea2 Small update to body 2022-02-25 10:46:46 -06:00
Lou Stella ca2163ae8c Moved to Experimental 2022-02-25 10:40:46 -06:00
patel-bhavin e7eab5af71 push 2022-02-07 14:45:37 -08:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
research bot e52d00b53d updating docs and package bits [ci skip] 2022-01-31 20:04:12 +00:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
pyth0n1c dd538478f4 Branch was auto-updated. 2022-01-24 10:40:44 -08:00
research bot 23a0acc37d updating docs and package bits [ci skip] 2022-01-21 21:02:48 +00:00
Lou Stella 3ad47776fb Moving to experimental 2022-01-21 14:16:51 -06:00
d1vious 72d33b23ac moving to match what prod should have 2022-01-21 12:29:13 -05:00
mvelazco 852df4c6e7 Merge pull request #1943 from splunk/Fixing-Wrong-Data-Models
Fixing Wrong Data Models
2022-01-18 16:28:55 -05:00
mvelazco 3105bda778 fixing wrong data models
Lateral Movement analytic story
2022-01-18 15:48:01 -05:00
mvelazco 774317fc97 adding missing '|'
Fixing issue reported on https://github.com/splunk/security_content/issues/1904
2022-01-18 11:08:19 -05:00
P4T12ICK 96ba6f8e73 fixed more detections 2022-01-18 13:51:37 +01:00