admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

23231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c c4f53b7ae4 Branch was auto-updated. 2022-09-13 10:12:26 -07:00
pyth0n1c b80ed32428 Branch was auto-updated. 2022-09-13 10:12:25 -07:00
pyth0n1c 12599b6566 Branch was auto-updated. 2022-09-13 10:12:24 -07:00
pyth0n1c 934844a293 Branch was auto-updated. 2022-09-13 10:12:23 -07:00
pyth0n1c 7664fe8dc4 Branch was auto-updated. 2022-09-13 10:12:22 -07:00
pyth0n1c 931d198f23 Branch was auto-updated. 2022-09-13 10:12:21 -07:00
pyth0n1c 981c9c990f Branch was auto-updated. 2022-09-13 10:12:20 -07:00
pyth0n1c 750e250fbb Branch was auto-updated. 2022-09-13 10:12:18 -07:00
pyth0n1c d792fcf09d Branch was auto-updated. 2022-09-13 10:12:17 -07:00
pyth0n1c 502fa10484 Branch was auto-updated. 2022-09-13 10:12:14 -07:00
pyth0n1c 87167f92a5 Branch was auto-updated. 2022-09-13 10:12:13 -07:00
pyth0n1c 439e903c3f Branch was auto-updated. 2022-09-13 10:12:12 -07:00
d1vious 64908593d4 adds RBA to correlation rule titles 2022-09-13 13:11:51 -04:00
Michael Haag fb15ba799a Update windows_identify_protocol_handlers.yml 2022-09-13 10:48:22 -06:00
Michael Haag a2b8a48b86 Merge branch 'develop' into TR-2408_rba_search_improvements 2022-09-13 10:42:16 -06:00
patel-bhavin 56917d780e 2352 2022-09-12 18:21:33 -05:00
Lou Stella 6d1fe61568 Adding _time 2022-09-12 12:29:37 -05:00
patel-bhavin c3dbdfa3cc updated search from 2343 2022-09-12 10:29:00 -05:00
mvelazco 238718f23d updating dataset fields 2022-09-12 11:16:39 -04:00
Michael Haag 36ffb11950 Update wineventlog_application.yml 2022-09-12 08:53:24 -06:00
Michael Haag 7507b45e78 Update windows_event_triggered_image_file_execution_options_injection.yml 2022-09-12 08:44:58 -06:00
Michael Haag 00a2a95961 space or tab, we'll never know 2022-09-12 08:18:30 -06:00
Michael Haag c3653c1404 test 2022-09-12 07:57:53 -06:00
dluxtron f96267405b Adding Privileged User SID History Detection 2022-09-12 21:36:03 +10:00
dluxtron 65e996fffe Adding Privileged User SID History Detection 2022-09-12 21:31:24 +10:00
dluxtron c314119341 Adding Privileged User SID History Detection 2022-09-12 21:05:45 +10:00
dluxtron d472fbd0d2 Adding Privileged User SID History Detection 2022-09-12 20:53:56 +10:00
dluxtron 6a1236f059 Adding Privileged User SID History Detection 2022-09-12 20:31:11 +10:00
dluxtron eaa4ab9265 Adding Privileged User SID History Detection 2022-09-12 18:27:57 +10:00
dluxtron c46d7e494e Adding Detection for Disabling LSA defences via Reg 2022-09-10 15:16:37 +10:00
Michael Haag 3a41a3f057 Update log4shell_cve_2021_44228_exploitation.yml 2022-09-09 13:34:24 -06:00
Michael Haag 53c3d4de45 Updates 2022-09-09 13:27:37 -06:00
Michael Haag e1a522e4ab Update living_off_the_land.yml 2022-09-09 13:21:57 -06:00
Michael Haag f0324892d5 hunt Windows Event Triggered Image File Execution Options Injection 2022-09-09 06:50:43 -06:00
dluxtron d5f9b56552 CICD Magic do your thing 2022-09-09 11:44:59 +10:00
dluxtron 9486fd8419 CICD Magic do your thing 2022-09-09 10:43:29 +10:00
dluxtron 81f64410c7 Adding SID History Abuse Detection 2022-09-09 10:08:35 +10:00
d1vious e43855c570 lolbas 2022-09-08 19:15:03 -04:00
d1vious e9e68ba82d tagging ba detection for insider threat 2022-09-08 19:00:01 -04:00
d1vious b3aa8b4bb4 working scripts 2022-09-08 18:01:46 -04:00
d1vious 6174db54d9 working detection generation 2022-09-08 13:59:46 -04:00
Michael Haag 442955c826 chm fixes 2022-09-08 10:48:20 -06:00
Michael Haag 6531d4350e Update ssa___windows_system_binary_proxy_execution_compiled_html_file_url_in_command_line.test.yml 2022-09-08 10:34:08 -06:00
Michael Haag 1c928ebffe fixord 2022-09-08 10:27:54 -06:00
Michael Haag 6ea7428011 test test 2022-09-08 10:23:08 -06:00
dluxtron 3399bc4288 Adding DSRM Account Changes 2022-09-08 20:45:45 +10:00
dluxtron 3d2301f161 Adding DSRM Passwod Reset 2022-09-08 20:13:10 +10:00
dluxtron 8ccec66c07 Adding Rogue DC Detection 2022-09-08 19:43:23 +10:00
dluxtron 66990b409d Adding Rogue DC Detection 2022-09-08 19:39:52 +10:00
dluxtron 1441cca790 Adding Rogue DC Detection 2022-09-08 18:44:09 +10:00