admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

6059 Commits

Author SHA1 Message Date
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel fdd1067803 updated descriptions 2023-10-13 13:26:36 -07:00
Bhavin Patel 07f2c0ea2d macros error 2023-10-13 11:55:25 -07:00
srv-rr-gh-researchbt 33c8026de5 Branch was auto-updated. 2023-10-13 11:48:44 -07:00
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
srv-rr-gh-researchbt f06d7fcff3 Branch was auto-updated. 2023-10-12 11:47:01 -07:00
Bhavin Patel e324b3d0cf Merge pull request #2879 from splunk/Diamond_Ticket 
Diamond Ticket
 2023-10-12 11:46:42 -07:00
Bhavin Patel fb66f993c9 update source 2023-10-12 11:15:44 -07:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
Gowthamaraj rajendran 724221f82b Manually update the .yml 2023-10-10 19:29:33 -07:00
Michael Haag 981ef0caf9 Trust this 2023-10-10 16:26:22 -06:00
Michael Haag a1315040ee Create windows_registry_sip_provider_modification.yml 2023-10-10 14:27:49 -06:00
Michael Haag 63c370e748 Sip Happens: Stirring Up the Crypto with a New Module 2023-10-10 14:13:09 -06:00
mvelazco 3e07515de2 adding analytic story 2023-10-09 15:14:35 -04:00
mvelazco 02859139c6 update detection 2023-10-09 14:21:01 -04:00
mvelazco 92b6c09fc5 updating detection 2023-10-09 13:52:36 -04:00
mvelazco f6786d9dcd fixing detection 2023-10-09 11:45:21 -04:00
Bhavin Patel 1612821676 update for data 2023-10-06 13:10:30 -07:00
mvelazco a20f6b726b adding new detection - diamond ticket 2023-10-06 15:46:36 -04:00
Bhavin Patel 49d175146f updating files and metadata 2023-10-06 10:15:47 -07:00
Bhavin Patel fe821f3328 Merge pull request #2872 from splunk/add_process_path_to_detection 
add process_path to tstats output
 2023-10-03 15:21:46 -07:00
pyth0n1c ca2a81b55d add process_path to tstats output 2023-10-03 14:02:04 -07:00
srv-rr-gh-researchbt ab5e3e2cf6 Branch was auto-updated. 2023-10-02 09:12:47 -07:00
Michael Haag a3d1907490 fixes 2023-10-01 09:42:31 -06:00
Michael Haag 17ca5971d3 WS_FTP 2023-10-01 09:39:59 -06:00
pyth0n1c 31bc1a0820 Minor search fixes for 
observables
 2023-09-29 14:17:05 -07:00
pyth0n1c 56abb40647 More observable fixes, including renaming fields 
in searchers.
 2023-09-29 13:19:47 -07:00
Gowthamaraj rajendran 64096b6e44 Edit parsing 2023-09-29 12:11:01 -07:00
Gowthamaraj rajendran 8cd1076f87 Update 50 detections 2023-09-29 11:57:39 -07:00
Bhavin Patel 54ce1f7f1d Merge branch 'release_v4.13.0' into obs_fix_25 2023-09-28 17:47:52 -07:00
Bhavin Patel 1813ce39ac Merge branch 'release_v4.13.0' into sysmon_fix 2023-09-28 12:38:50 -07:00
Bhavin Patel e5a814e78e remove script block from message 2023-09-28 11:12:02 -07:00
Bhavin Patel 2270cac53c Update get_aduser_with_powershell_script_block.yml 2023-09-28 11:09:47 -07:00
Bhavin Patel 5bdfd1f170 Update get_addefaultdomainpasswordpolicy_with_powershell_script_block.yml 2023-09-28 11:08:30 -07:00
Bhavin Patel 0d16ea4d80 Update adsisearcher_account_discovery.yml 2023-09-28 11:07:57 -07:00
Bhavin Patel 4ba5bcb670 Update windows_vulnerable_3cx_software.yml 2023-09-28 10:58:04 -07:00
Bhavin Patel f8988b7d80 Update cobalt_strike_named_pipes.yml 2023-09-28 10:53:01 -07:00
srv-rr-gh-researchbt 0a5302a7bb Branch was auto-updated. 2023-09-28 09:47:38 -07:00
srv-rr-gh-researchbt d57ee81d1d Branch was auto-updated. 2023-09-28 09:47:36 -07:00
Bhavin Patel 631ecd4122 updating sutffff 2023-09-27 15:51:03 -07:00
Bhavin Patel 0bde5c7afe Update windows_modify_registry_with_md5_reg_key_name.yml 2023-09-27 15:40:05 -07:00
Bhavin Patel c5e942e24a Update windows_disable_or_modify_tools_via_taskkill.yml 
how to implement
 2023-09-27 15:38:24 -07:00
Bhavin Patel d0e387f41a Update windows_delete_or_modify_system_firewall.yml 
updates to text and spl
 2023-09-27 15:37:28 -07:00
srv-rr-gh-researchbt 527a954099 Branch was auto-updated. 2023-09-27 15:21:04 -07:00
srv-rr-gh-researchbt b6b1fb16ee Branch was auto-updated. 2023-09-27 15:21:03 -07:00
srv-rr-gh-researchbt 8341c2dcc1 Branch was auto-updated. 2023-09-27 15:21:01 -07:00
Bhavin Patel fefee99f51 Merge pull request #2849 from splunk/njrat 
njrat
 2023-09-27 15:20:41 -07:00
Bhavin Patel d3e104c3f3 Update windows_disable_or_modify_tools_via_taskkill.yml 2023-09-27 14:58:14 -07:00
Bhavin Patel 67b6e4749f Update windows_delete_or_modify_system_firewall.yml 2023-09-27 14:57:04 -07:00
Bhavin Patel 2076a91d12 adding dest 2023-09-27 14:56:11 -07:00