admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

23231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Haag df736d2d08 HVCI Disable and story 2023-04-14 10:32:12 -06:00
Lou Stella d50398ac3f More tooltips, descriptions, naming 2023-04-14 09:49:51 -05:00
Lou Stella c14530df92 Cleaning up outputs, filling null fields 2023-04-14 09:44:24 -05:00
tccontre f276d22e6c data_destruction_wiper_story 2023-04-14 10:50:14 +02:00
tccontre 033c45858c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:45:52 +02:00
tccontre 68e61ae4cd Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:44:14 +02:00
tccontre 5311028ec7 Update malicious_powershell_process___encoded_command.yml 2023-04-14 10:42:16 +02:00
tccontre ecf8ff90d4 Update detect_mimikatz_with_powershell_script_block_logging.yml 2023-04-14 10:40:15 +02:00
tccontre e1c4580b9c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:39:01 +02:00
tccontre bf4daef2ca Update winevent_scheduled_task_created_within_public_path.yml 2023-04-14 10:38:20 +02:00
tccontre 357de299b3 Update powershell_loading_dotnet_into_memory_via_reflection.yml 2023-04-14 10:36:29 +02:00
tccontre 60ec2a1c2c Update powershell_fileless_script_contains_base64_encoded_content.yml 2023-04-14 10:35:54 +02:00
tccontre 53b7dc49e9 Update cmd_carry_out_string_command_parameter.yml 2023-04-14 10:34:44 +02:00
tccontre d460df3354 Update any_powershell_downloadstring.yml 2023-04-14 10:33:19 +02:00
patel-bhavin 61d4414f2f fix up with 4.0 2023-04-13 11:30:14 -07:00
patel-bhavin 5ebf3d6484 remove tests 2023-04-13 11:19:19 -07:00
patel-bhavin 19c67e3d85 fixup to match 4.0 2023-04-13 11:16:43 -07:00
Michael Haag 95a776160f Update sandworm_tools.yml 2023-04-13 12:15:47 -06:00
Michael Haag eebbe77081 Update windows_dns_gather_network_info.yml 2023-04-13 12:13:39 -06:00
Michael Haag 435f535119 fixes 2023-04-13 11:40:53 -06:00
Michael Haag fa7ebebdb7 status 2023-04-13 11:29:07 -06:00
tccontre 2b51ca5ac8 Update powershell_loading_dotnet_into_memory_via_reflection.yml 2023-04-13 19:15:58 +02:00
tccontre df412ca5bb Update powershell_fileless_script_contains_base64_encoded_content.yml 2023-04-13 19:15:34 +02:00
tccontre 6533a9b79e Update cmd_carry_out_string_command_parameter.yml 2023-04-13 19:15:09 +02:00
tccontre 9dfc980e11 Update any_powershell_downloadstring.yml 2023-04-13 19:14:46 +02:00
pyth0n1c d7003dd331 potential detection fix 2023-04-13 10:10:22 -07:00
Michael Haag ec53456c95 update 2023-04-13 11:10:02 -06:00
Michael Haag 3faaaf2f0a updates 2023-04-13 11:07:18 -06:00
tccontre 52391f5615 Merge branch 'develop' into sandworm_data_destruction 2023-04-13 19:07:10 +02:00
tccontre c5bccb239b Merge branch 'develop' into winter_vivern_analytics 2023-04-13 19:02:00 +02:00
tccontre 5abe5b1618 splunk_attack_analyzer_playbook 2023-04-13 16:45:28 +02:00
tccontre 34e5a9662f crowdstrike_oauth_api_playbook_v2 2023-04-13 16:38:22 +02:00
tccontre 3b4b43ea60 crowdstrike_oauth_api_playbook_v2 2023-04-13 11:20:59 +02:00
pyth0n1c d58e3eb05a Updating typo in filter macro 2023-04-12 13:58:23 -07:00
Bhavin Patel d98f1181cb Merge branch 'develop' into joinopolis 2023-04-12 11:42:10 -07:00
srv-rr-gh-researchbt 7a0b99a4b0 Branch was auto-updated. 2023-04-12 11:21:30 -07:00
srv-rr-gh-researchbt f498d10d65 Branch was auto-updated. 2023-04-12 11:21:28 -07:00
srv-rr-gh-researchbt 9e77296715 Branch was auto-updated. 2023-04-12 11:21:23 -07:00
srv-rr-gh-researchbt fa1acf4761 Branch was auto-updated. 2023-04-12 11:21:18 -07:00
srv-rr-gh-researchbt ed43070887 Branch was auto-updated. 2023-04-12 11:21:14 -07:00
srv-rr-gh-researchbt 1d7817f8a8 Branch was auto-updated. 2023-04-12 11:21:10 -07:00
srv-rr-gh-researchbt 9316c8cc51 Branch was auto-updated. 2023-04-12 11:21:01 -07:00
srv-rr-gh-researchbt 5e12681fe4 Branch was auto-updated. 2023-04-12 11:20:58 -07:00
srv-rr-gh-researchbt 5bd844c800 Branch was auto-updated. 2023-04-12 11:20:56 -07:00
Bhavin Patel 000a7bb6a7 Merge pull request #2499 from splunk/security_content_4_phase_2 
Security content 4 phase 2
 2023-04-12 11:20:29 -07:00
Kelby Shelton b0e5d8dda5 Moved dispatch to end of playbook name 2023-04-12 12:29:59 -05:00
srv-rr-gh-researchbt 7dcf596f43 Branch was auto-updated. 2023-04-12 10:22:46 -07:00
Bhavin Patel 62d4b46f8c Merge pull request #2616 from splunk/fix_some_experimental_and_deprecated_content 
Fixing some syntactic errors with a number of detections.
 2023-04-12 10:22:28 -07:00
pyth0n1c 67d09a1c52 Fixing some syntactic errors with a number of detections. 2023-04-12 10:09:43 -07:00
Kelby Shelton 88c18bf941 Rename dynamic to dispatch 2023-04-12 09:37:33 -05:00