Commit Graph

9160 Commits

Author SHA1 Message Date
Michael Haag 4bb68a3984 Update citrix_adc_and_gateway_unauthorized_data_disclosure.yml 2023-10-25 07:36:23 -06:00
Michael Haag 3bd3798afa Update citrix_adc_and_gateway_unauthorized_data_disclosure.yml 2023-10-24 15:46:16 -06:00
Michael Haag 5ab0b7dfc2 Citrix CVE-2023-4966- Citrix Bleed 2023-10-24 10:27:08 -06:00
Bhavin Patel 585e1256ad minor 2023-10-17 16:58:32 -07:00
Bhavin Patel 57aa264e85 fixing indentation 2023-10-17 15:21:29 -07:00
Bhavin Patel a2b453f4a4 Merge pull request #2888 from splunk/cve202320198
Cisco IOS XE Vulnerability CVE-2023-20198
2023-10-17 10:56:56 -07:00
Michael Haag d8641bf881 Merge branch 'cve202320198' of https://github.com/splunk/security_content into cve202320198 2023-10-17 11:24:15 -06:00
Michael Haag 64775a0bf6 Update cisco_ios_xe_implant_access.yml 2023-10-17 11:24:13 -06:00
Michael Haag 4855e9d357 fix 2023-10-17 11:23:14 -06:00
Michael Haag 52b666b7c9 Cisco IOS XE Vulnerability CVE-2023-20198 2023-10-17 11:10:25 -06:00
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel fdd1067803 updated descriptions 2023-10-13 13:26:36 -07:00
Bhavin Patel ac7d89f119 Merge pull request #2885 from splunk/1more1
Create confluence_cve_2023_22515_trigger_vulnerability.yml
2023-10-13 12:38:42 -07:00
Michael Haag f3e2739ec5 Update confluence_cve_2023_22515_trigger_vulnerability.yml 2023-10-13 13:00:33 -06:00
Bhavin Patel 07f2c0ea2d macros error 2023-10-13 11:55:25 -07:00
srv-rr-gh-researchbt 33c8026de5 Branch was auto-updated. 2023-10-13 11:48:44 -07:00
Bhavin Patel 4106413eef update story name 2023-10-13 11:36:19 -07:00
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
Bhavin Patel ab59162008 new PR with correct yamls 2023-10-13 11:26:26 -07:00
Michael Haag 69be7e2da9 Create confluence_cve_2023_22515_trigger_vulnerability.yml 2023-10-13 12:23:52 -06:00
srv-rr-gh-researchbt 2dd1d58495 Branch was auto-updated. 2023-10-13 10:39:07 -07:00
srv-rr-gh-researchbt 5e537ec0a5 Branch was auto-updated. 2023-10-13 10:38:42 -07:00
srv-rr-gh-researchbt d8831386a2 Branch was auto-updated. 2023-10-13 10:38:40 -07:00
Michael Haag 74b95a1400 Update citrix_adc_exploitation_cve_2023_3519.yml 2023-10-13 07:06:16 -06:00
srv-rr-gh-researchbt f06d7fcff3 Branch was auto-updated. 2023-10-12 11:47:01 -07:00
Bhavin Patel e324b3d0cf Merge pull request #2879 from splunk/Diamond_Ticket
Diamond Ticket
2023-10-12 11:46:42 -07:00
Bhavin Patel fb66f993c9 update source 2023-10-12 11:15:44 -07:00
Michael Haag 9817a13daf Update confluence_data_center_and_server_privilege_escalation.yml 2023-10-12 09:10:58 -06:00
Michael Haag fd93bb5711 Update citrix_adc_exploitation_cve_2023_3519.yml 2023-10-12 09:09:03 -06:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
Gowthamaraj rajendran 724221f82b Manually update the .yml 2023-10-10 19:29:33 -07:00
Michael Haag 981ef0caf9 Trust this 2023-10-10 16:26:22 -06:00
Michael Haag a1315040ee Create windows_registry_sip_provider_modification.yml 2023-10-10 14:27:49 -06:00
Michael Haag 63c370e748 Sip Happens: Stirring Up the Crypto with a New Module 2023-10-10 14:13:09 -06:00
mvelazco 3e07515de2 adding analytic story 2023-10-09 15:14:35 -04:00
mvelazco 02859139c6 update detection 2023-10-09 14:21:01 -04:00
mvelazco 92b6c09fc5 updating detection 2023-10-09 13:52:36 -04:00
mvelazco f6786d9dcd fixing detection 2023-10-09 11:45:21 -04:00
Bhavin Patel 1612821676 update for data 2023-10-06 13:10:30 -07:00
mvelazco a20f6b726b adding new detection - diamond ticket 2023-10-06 15:46:36 -04:00
Bhavin Patel 49d175146f updating files and metadata 2023-10-06 10:15:47 -07:00
srv-rr-gh-researchbt 48f85987cf Branch was auto-updated. 2023-10-04 13:51:35 -07:00
Michael Haag 6a652765f4 CVE-2023-22515 2023-10-04 14:43:26 -06:00
Bhavin Patel fe821f3328 Merge pull request #2872 from splunk/add_process_path_to_detection
add process_path to tstats output
2023-10-03 15:21:46 -07:00
pyth0n1c ca2a81b55d add process_path to tstats output 2023-10-03 14:02:04 -07:00
pyth0n1c d57b3f1fcf properly format times in risky command search 2023-10-02 12:56:00 -07:00
pyth0n1c 96c931eda9 use macro instead of using index and sourcetype directly. 2023-10-02 12:45:09 -07:00
pyth0n1c b16a497093 remove source= from search 2023-10-02 11:54:06 -07:00
pyth0n1c a00fce83db Update to new search after dynamic testing and refinement. 2023-10-02 11:49:57 -07:00
pyth0n1c aa366491e5 Merge branch 'platform_security_20230919' of https://github.com/splunk/security_content into platform_security_20230919 2023-10-02 11:37:32 -07:00