admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,702 Commits 697 Branches 195 Tags
fix_risky_command_csv
Commit Graph

251 Commits

Author SHA1 Message Date
pyth0n1c 7ecac6a654 bump version 2024-07-23 12:01:04 -07:00
pyth0n1c 44c2d33809 Remove unused field from lookup output 2024-07-23 12:00:50 -07:00
Bhavin Patel 40248a397a updating data source files 2024-07-16 08:11:24 -07:00
dluxtron d375c32991 Updating the distributed pwd spray detection 2024-07-12 09:33:44 +10:00
dluxtron 65cdbcbaf8 updating descriptions 2024-07-11 18:06:51 +10:00
dluxtron 3791f25b6b Adding new detections 2024-07-02 12:03:46 +10:00
dluxtron a10332f69a Adding new detections 2024-07-02 10:43:29 +10:00
dluxtron 9cb3d6cc34 Adding pwd spray detection 2024-07-02 09:50:34 +10:00
Lou Stella 7fbd13a3dc Release v4.35.0 2024-07-01 17:26:50 +00:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 66fcb8be3e v4.33.0 - BUg fixes 2024-06-06 16:34:39 +00:00
Bhavin Patel 7539e88c4c Release Branch v4.33.0 2024-06-05 21:05:06 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Bhavin Patel 72e29c764f ESCU Release Branch - v4.30.0 2024-04-17 20:44:56 +00:00
Bhavin Patel 0c134526df Release Branch : v4.28.0 2024-03-27 16:36:00 +00:00
Bhavin Patel 7283ba3723 ESCU Release Branch v4.27.0 2024-03-20 20:01:18 +00:00
Eric McGinnis 9fdf182033 Release v4.24.0 2024-02-14 23:54:00 +00:00
Bhavin Patel 0078f83d95 Release Branch ESCU 4.23.0 2024-01-30 20:52:05 +00:00
Bhavin Patel 3d280b788a Release v4.21.0 2024-01-22 22:40:14 +00:00
Bhavin Patel 7fda817c23 Release 4.19.0 2024-01-10 17:21:34 +00:00
Eric McGinnis 06a8a487ac Release v4.18.0 2023-12-20 16:18:23 +00:00
Eric McGinnis 186f27cfe0 Push new search to address SVD updates 2023-11-22 22:11:06 +00:00
Bhavin Patel f3372e03c2 Release branch v4.16.0 2023-11-16 20:33:10 +00:00
Eric McGinnis c86a0bfea8 Fixed a handful of issues with observables and messages and spacing in content. 2023-10-23 19:49:17 +00:00
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
pyth0n1c d57b3f1fcf properly format times in risky command search 2023-10-02 12:56:00 -07:00
pyth0n1c 96c931eda9 use macro instead of using index and sourcetype directly. 2023-10-02 12:45:09 -07:00
pyth0n1c b16a497093 remove source= from search 2023-10-02 11:54:06 -07:00
pyth0n1c a00fce83db Update to new search after dynamic testing and refinement. 2023-10-02 11:49:57 -07:00
pyth0n1c de281dcdb6 First version of new detection for testing 2023-10-02 11:36:50 -07:00
pyth0n1c 588ef14f0c Added fillnull to improve detection accuracy for all logs. 2023-10-02 11:03:24 -07:00
Gowthamaraj rajendran 64096b6e44 Edit parsing 2023-09-29 12:11:01 -07:00
Gowthamaraj rajendran 8cd1076f87 Update 50 detections 2023-09-29 11:57:39 -07:00
pyth0n1c f6dc49e1d3 add another filter so that we do not flag 
scripts running out of c:
 2023-09-28 16:18:50 -07:00
pyth0n1c 732aec3f95 Delete detection and migrate 
logic and documentation to risky
command lookup file. Update macro
to point to new risky command csv.
Fiox some opservables.
 2023-09-28 14:51:28 -07:00
pyth0n1c f76dfe4277 Minor updates to improve notables 
and result rendering.
 2023-09-28 13:37:36 -07:00
srv-rr-gh-researchbt f11bec3047 Branch was auto-updated. 2023-09-28 12:27:36 -07:00
pyth0n1c 46f183d8b7 Parse out fields for runshellscript search 2023-09-26 09:19:50 -07:00
pyth0n1c f37ada7cf9 fix search and notable 2023-09-25 15:02:52 -07:00
pyth0n1c f37be10450 Add timing to searches 2023-09-25 14:39:21 -07:00
pyth0n1c 2d7c9efdd5 Search improvements 2023-09-25 13:27:58 -07:00
pyth0n1c 2b7cb6bba8 Merge branch 'develop' into platform_security_20230919 2023-09-25 12:57:34 -07:00
Bhavin Patel 9332e6a24c o365_obs_fix 2023-09-22 15:01:21 -07:00
pyth0n1c 7aa6020ad9 fix search formatting 2023-09-18 13:09:11 -07:00
pyth0n1c e68a8a7145 fix dataset links 2023-09-18 08:23:40 -07:00
pyth0n1c 0d91f17892 fix search typos 2023-09-18 07:44:25 -07:00
pyth0n1c 97019576b0 Fix missing macro 2023-09-18 07:38:30 -07:00
Bhavin Patel fdb4417077 Merge branch 'release_v4.12.0' into Edit_How_To_Implement 2023-09-15 12:52:51 -07:00