admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,653 Commits 697 Branches 195 Tags
fix_api_update_error
Commit Graph

17653 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jose Enrique Hernandez b3ab14e9fe Merge pull request #2382 from splunk/story_name_fix 
Throw Some D's
 2022-09-22 17:01:23 -04:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Lou Stella 986716a55f IceID -> IcedID 2022-09-22 09:20:02 -05:00
Namratha Sreekanta 6678a4ee55 fixing build failure 2022-09-21 13:35:47 -07:00
Namratha Sreekanta 055f0a175a adding review comments 2022-09-21 13:20:47 -07:00
tccontre 30c770fcf5 Update windows_mail_protocol_in_non_common_process_path.yml 2022-09-21 13:20:01 +02:00
tccontre 1b74f72760 Update windows_file_transfer_protocol_in_non_common_process_path.yml 2022-09-21 13:18:09 +02:00
tccontre 45e7fb8e40 Update office_application_spawn_rundll32_process.yml 2022-09-21 12:52:00 +02:00
tccontre 859a79ccf5 Update executables_or_script_creation_in_suspicious_path.yml 2022-09-21 12:48:16 +02:00
tccontre 66cb904a18 Update office_application_drop_executable.yml 2022-09-21 12:46:26 +02:00
tccontre 2b0a406ed8 Update non_firefox_process_access_firefox_profile_dir.yml 2022-09-21 12:44:36 +02:00
tccontre 6d84252308 Update executables_or_script_creation_in_suspicious_path.yml 2022-09-21 12:42:41 +02:00
tccontre 28d6d6a529 Update non_chrome_process_accessing_chrome_default_dir.yml 2022-09-21 12:41:59 +02:00
tccontre be6c16084a agent-with-tesla-2 2022-09-21 11:24:35 +02:00
tccontre 16d4d226c3 agent-with-tesla-2 2022-09-21 10:27:23 +02:00
Namratha Sreekanta f5fb35ec4c changing README and few fields regarding the search 2022-09-20 16:00:12 -07:00
Namratha Sreekanta 56aea9de22 Adding in Sharad's inputs on descriptioj 2022-09-20 12:28:53 -07:00
Namratha Sreekanta 8fa7fffa2a changing the desc to match the detection 2022-09-20 11:33:06 -07:00
Namratha Sreekanta 43c213a74c modifying the search and adding a README file 2022-09-20 11:20:13 -07:00
research bot 3041fd1e9e updating docs and package bits [ci skip] 2022-09-20 15:17:35 +00:00
tccontre 85895e14a2 agent-with-tesla-2 2022-09-19 18:04:55 +02:00
tccontre 8c40b9c5fc agent-with-tesla-1 2022-09-19 11:35:19 +02:00
tccontre 888a148bbb agent-with-tesla-1 2022-09-19 11:28:07 +02:00
Namratha Sreekanta 24cbcc1af2 changing notebook code and adding json file for the model, moved all contents under dga_dltk folder 2022-09-16 17:32:18 -07:00
Namratha Sreekanta c417a9a4af changing the search in the yml 2022-09-16 15:13:58 -07:00
pyth0n1c 3bbfee8ad4 Branch was auto-updated. 2022-09-16 12:53:55 -07:00
pyth0n1c eb9c712888 Branch was auto-updated. 2022-09-16 12:53:50 -07:00
pyth0n1c c7c9b69dfd Branch was auto-updated. 2022-09-16 12:53:48 -07:00
pyth0n1c b87ff44a36 Branch was auto-updated. 2022-09-16 12:53:46 -07:00
Bhavin Patel e09003db64 Merge pull request #2358 from splunk/komodo 
Komodo
v3.49.0 		2022-09-16 14:53:31 -05:00
patel-bhavin 713c605097 adding files into dist 2022-09-16 14:37:13 -05:00
Michael Haag 206e826492 Update ssa___windows_execute_arbitrary_commands_with_msdt.yml 2022-09-16 13:29:25 -06:00
Michael Haag 0e9f00f19f Update ssa___windows_execute_arbitrary_commands_with_msdt.yml 2022-09-16 13:10:09 -06:00
Michael Haag 593c433ae8 fixes 
fixes
 2022-09-16 12:47:19 -06:00
Namratha Sreekanta d1788686d5 initial commit for dga 2022-09-15 17:50:36 -07:00
pyth0n1c 23b140e8e6 A few more changes in the story builder to get references working properly. 2022-09-15 17:18:50 -07:00
pyth0n1c bb84ef752b One more change to substitution string 2022-09-15 16:30:32 -07:00
pyth0n1c c8a7c61b74 Changes to apss the name of the app to the story builder, since it is required for generate. 2022-09-15 16:26:34 -07:00
pyth0n1c d84aba8af0 Fixed another issue with the filename. 2022-09-15 13:28:36 -07:00
pyth0n1c af16d25ca2 Fixed file name find and replace issue 2022-09-15 13:27:48 -07:00
pyth0n1c 6fe804f8ed changed one more location where the path to escu is hardcoded. 2022-09-15 13:18:00 -07:00
pyth0n1c a4d143d4f1 better app name valdiation message 2022-09-15 12:58:52 -07:00
pyth0n1c b5bfc29fb5 Basic validation on the app_name 2022-09-15 12:57:12 -07:00
pyth0n1c 444026f32b Another small modification to replace 
static ESCU name with the name of
your app
 2022-09-15 12:53:29 -07:00
Michael Haag 6d1734b902 msdt 2022-09-15 13:43:28 -06:00
Michael Haag 0597208d3d cant type 2022-09-15 13:06:37 -06:00
Michael Haag 81dcbae81c Update ssa___windows_odbcconf_load_response_file.yml 2022-09-15 13:02:54 -06:00
Michael Haag 7a95a27a2c ODBC 2022-09-15 12:42:34 -06:00
pyth0n1c 49f0d7ac0c Branch was auto-updated. 2022-09-15 11:33:13 -07:00
pyth0n1c 2ab2821d0d Branch was auto-updated. 2022-09-15 11:33:09 -07:00