admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

226 Commits

Author SHA1 Message Date
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
pyth0n1c d57b3f1fcf properly format times in risky command search 2023-10-02 12:56:00 -07:00
pyth0n1c 96c931eda9 use macro instead of using index and sourcetype directly. 2023-10-02 12:45:09 -07:00
pyth0n1c b16a497093 remove source= from search 2023-10-02 11:54:06 -07:00
pyth0n1c a00fce83db Update to new search after dynamic testing and refinement. 2023-10-02 11:49:57 -07:00
pyth0n1c de281dcdb6 First version of new detection for testing 2023-10-02 11:36:50 -07:00
pyth0n1c 588ef14f0c Added fillnull to improve detection accuracy for all logs. 2023-10-02 11:03:24 -07:00
Gowthamaraj rajendran 64096b6e44 Edit parsing 2023-09-29 12:11:01 -07:00
Gowthamaraj rajendran 8cd1076f87 Update 50 detections 2023-09-29 11:57:39 -07:00
pyth0n1c f6dc49e1d3 add another filter so that we do not flag 
scripts running out of c:
 2023-09-28 16:18:50 -07:00
pyth0n1c 732aec3f95 Delete detection and migrate 
logic and documentation to risky
command lookup file. Update macro
to point to new risky command csv.
Fiox some opservables.
 2023-09-28 14:51:28 -07:00
pyth0n1c f76dfe4277 Minor updates to improve notables 
and result rendering.
 2023-09-28 13:37:36 -07:00
srv-rr-gh-researchbt f11bec3047 Branch was auto-updated. 2023-09-28 12:27:36 -07:00
pyth0n1c 46f183d8b7 Parse out fields for runshellscript search 2023-09-26 09:19:50 -07:00
pyth0n1c f37ada7cf9 fix search and notable 2023-09-25 15:02:52 -07:00
pyth0n1c f37be10450 Add timing to searches 2023-09-25 14:39:21 -07:00
pyth0n1c 2d7c9efdd5 Search improvements 2023-09-25 13:27:58 -07:00
pyth0n1c 2b7cb6bba8 Merge branch 'develop' into platform_security_20230919 2023-09-25 12:57:34 -07:00
Bhavin Patel 9332e6a24c o365_obs_fix 2023-09-22 15:01:21 -07:00
pyth0n1c 7aa6020ad9 fix search formatting 2023-09-18 13:09:11 -07:00
pyth0n1c e68a8a7145 fix dataset links 2023-09-18 08:23:40 -07:00
pyth0n1c 0d91f17892 fix search typos 2023-09-18 07:44:25 -07:00
pyth0n1c 97019576b0 Fix missing macro 2023-09-18 07:38:30 -07:00
Bhavin Patel fdb4417077 Merge branch 'release_v4.12.0' into Edit_How_To_Implement 2023-09-15 12:52:51 -07:00
Gowthamaraj rajendran e06cfa133d Edit how_to_implement for Endpoint.Processes 2023-09-15 10:58:38 -07:00
pyth0n1c c4a7ae08a0 associated datasets with detections 2023-09-13 17:36:26 -07:00
pyth0n1c 59e0e8601e Initial commit of draft searches 
before adding datasets
 2023-09-13 13:17:58 -07:00
Bhavin Patel 8fd50e0320 adding CVE 2023-09-11 17:13:40 -07:00
pyth0n1c 4d8b5b5eb4 Final changes in prep for release. Datasets uploaded to attack range 2023-08-30 08:09:15 -07:00
pyth0n1c 9a2229329d Another detections update. Matching release dates in files with real release date. 2023-08-29 16:44:36 -07:00
pyth0n1c 9677f38895 Update to fix dos search 2023-08-23 15:11:45 -07:00
pyth0n1c d838ab5435 updates to lookups, created new lookup, refined detection 2023-08-23 14:49:33 -07:00
pyth0n1c 484ebd722c removed one test 2023-08-22 16:09:59 -07:00
pyth0n1c acc83e574d more detection and documentation updates 2023-08-22 16:07:12 -07:00
pyth0n1c 977da1ab87 minor detection updates 2023-08-21 16:11:10 -07:00
pyth0n1c 63f8b8633b more risky stuff 2023-08-21 15:46:36 -07:00
pyth0n1c 0112c918e9 updates to search 2023-08-21 15:38:03 -07:00
pyth0n1c b86e956e90 Added two 2023-08-21 11:29:21 -07:00
srv-rr-gh-researchbt 63eda913d7 Branch was auto-updated. 2023-08-02 09:43:45 -07:00
pyth0n1c 2c45dd93fe Add missing tests to detections. 2023-07-31 16:27:16 -07:00
srv-rr-gh-researchbt 2444de22fe Branch was auto-updated. 2023-07-31 09:20:00 -07:00
Bhavin Patel 8a05a0f4c2 Update splunk_unauthenticated_log_injection_web_service_log.yml 2023-07-31 09:02:03 -07:00
Bhavin Patel d3806e5a35 Update splunk_unauthenticated_log_injection_web_service_log.yml 2023-07-31 08:59:56 -07:00
Rod Soto 908e686283 morefixes 2023-07-31 08:36:43 -07:00
Rod Soto e5b9e9437b fixes2 2023-07-31 08:32:33 -07:00
Rod Soto 59e5d6da72 typos 2023-07-31 08:18:50 -07:00
Rod Soto 29bf8975eb addeddollarsign 2023-07-31 08:05:51 -07:00
Bhavin Patel 071415c0af observable fix for cloud 2023-07-28 11:46:28 -05:00
Rod Soto 387c4bd2e2 7bh 2023-07-14 18:01:32 -07:00