Commit Graph

23231 Commits

Author SHA1 Message Date
d1vious d3fe59a15c adding data_schema tag 2022-10-12 18:50:39 -04:00
d1vious 33fcbe4c2c adding test dataset 2022-10-12 17:45:04 -04:00
Michael Haag 571efe6385 analytics 2022-10-12 14:12:34 -06:00
Michael Haag 3dde416286 Update unified_messaging_service_spawning_a_process.yml 2022-10-10 14:55:26 -06:00
Michael Haag c9b12aa911 Update test_config_github_actions.json 2022-10-10 13:30:50 -06:00
Michael Haag 8f3fbdfcbf Update test_config_github_actions.json 2022-10-10 11:33:06 -06:00
Michael Haag 82387357eb Update proxyshell_proxynotshell_behavior_detected.yml 2022-10-10 10:09:11 -06:00
Michael Haag 46a125d20b Update windows_exchange_autodiscover_ssrf_abuse.yml 2022-10-10 09:48:59 -06:00
Michael Haag df804a8343 ProxyShell ProxyNotShell Behavior Detected 2022-10-09 07:31:02 -06:00
Michael Haag b726e4b685 Update detect_sharphound_file_modifications.yml
#2380
2022-10-09 07:09:29 -06:00
Michael Haag 8f9257f883 rename 2022-10-09 06:58:13 -06:00
Michael Haag f29367bf37 CISA and mimikatz add 2022-10-06 16:07:25 -06:00
d1vious bf350d671e adding BA test file 2022-10-05 23:30:57 -04:00
Michael Haag 343a8d3698 Updates + new 2022-10-05 10:20:07 -06:00
pyth0n1c 3941a240b2 Added missing nist and cis20 fields to 3 experimental detections. 2022-10-04 16:54:34 -07:00
pyth0n1c e033d17e23 add validation for missing detection tags cis20 and nist 2022-10-04 16:51:23 -07:00
patel-bhavin 4daefa51ac update datasets 2022-10-04 15:02:43 -07:00
patel-bhavin 9c1f8bccc4 new SFA detection 2022-10-04 13:48:48 -07:00
d1vious 609cd1cea7 Merge branch 'detection_enrichment_project' of github.com:splunk/security_content into detection_enrichment_project 2022-10-04 16:17:58 -04:00
d1vious d154a2ef0d updating template 2022-10-04 16:17:53 -04:00
patel-bhavin f9a3d09f9e Merge branch 'aws_mfa' of github.com:splunk/security_content into aws_mfa 2022-10-04 11:50:13 -07:00
patel-bhavin 47b0525a18 mfa_disabled 2022-10-04 11:50:03 -07:00
srv-rr-gh-researchbt d3a3d30ae6 Branch was auto-updated. 2022-10-04 11:48:56 -07:00
srv-rr-gh-researchbt 62783d43a6 Branch was auto-updated. 2022-10-04 11:48:54 -07:00
srv-rr-gh-researchbt e300766e5c Branch was auto-updated. 2022-10-04 11:48:53 -07:00
srv-rr-gh-researchbt 43c6e7e644 Branch was auto-updated. 2022-10-04 11:48:52 -07:00
srv-rr-gh-researchbt 476fca8245 Branch was auto-updated. 2022-10-04 11:48:51 -07:00
srv-rr-gh-researchbt a415268d03 Branch was auto-updated. 2022-10-04 11:48:50 -07:00
srv-rr-gh-researchbt 6c41efdfcd Branch was auto-updated. 2022-10-04 11:48:48 -07:00
Bhavin Patel 7a6cada737 Merge pull request #2391 from splunk/MovingOkta
Oktahaagapus
2022-10-04 11:48:18 -07:00
Michael Haag 90431ca751 updates 2022-10-04 11:37:24 -06:00
Michael Haag 517048e2b8 Merge branch 'develop' into exchange2shell 2022-10-04 04:43:34 -06:00
Michael Haag 60310f355b Windows Exchange Autodiscover Abuse 2022-10-03 22:07:25 -06:00
Michael Haag 2e57a73d89 Merge branch 'exchange2shell' of https://github.com/splunk/security_content into exchange2shell 2022-10-03 20:39:22 -06:00
Michael Haag edd5db1f63 Update unified_messaging_service_spawning_a_process.yml 2022-10-03 20:39:20 -06:00
patel-bhavin 01260af9ca Merge branch 'aws_mfa' of github.com:splunk/security_content into aws_mfa 2022-10-03 17:41:52 -07:00
d1vious 3447eeae8e fixed risk message 2022-10-03 20:37:44 -04:00
d1vious f983b06345 Merge branch 'detection_enrichment_project' of github.com:splunk/security_content into detection_enrichment_project 2022-10-03 20:28:03 -04:00
d1vious f1969a7a48 adding BA template 2022-10-03 20:27:56 -04:00
patel-bhavin ad0e59da0e yaml error 2022-10-03 17:11:20 -07:00
srv-rr-gh-researchbt 575abdf1d2 Branch was auto-updated. 2022-10-03 17:04:16 -07:00
srv-rr-gh-researchbt f77bbd84fc Branch was auto-updated. 2022-10-03 17:04:15 -07:00
srv-rr-gh-researchbt 9a30a90fea Branch was auto-updated. 2022-10-03 17:04:14 -07:00
srv-rr-gh-researchbt 5d599a00a0 Branch was auto-updated. 2022-10-03 17:04:13 -07:00
srv-rr-gh-researchbt 9daccac060 Branch was auto-updated. 2022-10-03 17:04:10 -07:00
srv-rr-gh-researchbt 84992f0134 Branch was auto-updated. 2022-10-03 17:04:09 -07:00
srv-rr-gh-researchbt 5f93886f62 Branch was auto-updated. 2022-10-03 17:04:07 -07:00
Bhavin Patel 811ac220d3 Merge pull request #2369 from splunk/aws_account_takeover_rename
AWS Identity and Access Management Account Takeover
2022-10-03 17:03:51 -07:00
patel-bhavin 089360cee2 mionr 2022-10-03 16:53:35 -07:00
patel-bhavin 73d060d0af updated metadata 2022-10-03 16:53:18 -07:00