admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

23231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK d0dd4475a2 Update VT playbooks 2023-04-12 13:35:40 +02:00
Steven Dick 20b1db48de Add files via upload 
Upload for generic webshell detection.
 2023-04-12 07:18:22 -04:00
tccontre e9dfbaef48 Update windows_dns_gather_network_info.yml 2023-04-12 12:29:08 +02:00
tccontre e0b697ab6e sandworm_data_destruction 2023-04-12 12:17:43 +02:00
pyth0n1c 3754611943 Fix a number of experimental and 
deprecated detections so that
they do not raise error when run
out of the box.
 2023-04-11 16:27:40 -07:00
pyth0n1c c0a7d2e42b Merge branch 'security_content_4_phase_2' into smoketest_all_detections 2023-04-11 14:50:40 -07:00
patel-bhavin 1156354fe3 run generate on all new changes 2023-04-11 14:47:36 -07:00
pyth0n1c 66eb63e06c Fixing how smoketest is passed 
to detection wrapper
 2023-04-11 12:49:49 -07:00
pyth0n1c 94a7845f9c Add experimental support for smoketest. 
That means running all detections
without replaying data or checking
correctness.
 2023-04-11 12:48:49 -07:00
Bhavin Patel 26c5a30793 Merge pull request #2590 from splunk/test_4.0 
Test 4.0
 2023-04-11 12:41:37 -07:00
Michael Haag aba28cfbc3 Update active_setup_registry_autostart.yml 2023-04-11 11:28:37 -06:00
Michael Haag c55307a0e5 3 2023-04-11 11:01:31 -06:00
Michael Haag 363799e85b Update disable_amsi_through_registry.yml 2023-04-11 10:59:15 -06:00
Michael Haag 2f5cfd1556 Update auto_admin_logon_registry_entry.yml 2023-04-11 10:07:10 -06:00
Bhavin Patel 97992ce077 Update detect_activity_related_to_pass_the_hash_attacks.yml 2023-04-11 08:54:40 -07:00
Lou Stella abe03adbb8 Added tooltips to filter blocks 2023-04-11 08:29:42 -05:00
patel-bhavin 95da1c3b3f new anomaly detection 2023-04-10 19:16:09 -07:00
patel-bhavin c453ab592d new_datasync_detection 2023-04-10 16:10:09 -07:00
Lou Stella 59340ad7f0 Identifier Activity Analysis Dispatch 2023-04-10 17:09:41 -05:00
patel-bhavin 080e429c01 manual flag for 1 detection 2023-04-10 11:20:41 -07:00
patel-bhavin a1a9fb5b77 slack pth spl update 2023-04-07 13:19:49 -05:00
mvelazco 6d6e36333d new detection 2023-04-06 17:43:38 -04:00
mvelazco 4b940be07e Merge branch 'TR-2838_AD_PrivilegeEscalation' of github.com:splunk/security_content into TR-2838_AD_PrivilegeEscalation 2023-04-06 13:42:00 -04:00
mvelazco d4bb7bb397 adding new detection. 2023-04-06 13:41:42 -04:00
patel-bhavin fefd31fabc remove error 2023-04-06 11:31:07 -05:00
patel-bhavin 13a7570284 manual pass 2023-04-06 09:41:17 -05:00
srv-rr-gh-researchbt a0d72c15ad Branch was auto-updated. 2023-04-06 07:38:45 -07:00
srv-rr-gh-researchbt 301f928a04 Branch was auto-updated. 2023-04-06 07:38:10 -07:00
srv-rr-gh-researchbt 39e40d5893 Branch was auto-updated. 2023-04-06 07:38:08 -07:00
srv-rr-gh-researchbt 214d8a155a Branch was auto-updated. 2023-04-06 07:38:05 -07:00
srv-rr-gh-researchbt 0bef6e0949 Branch was auto-updated. 2023-04-06 07:38:04 -07:00
srv-rr-gh-researchbt 2b13168989 Branch was auto-updated. 2023-04-06 07:38:02 -07:00
srv-rr-gh-researchbt e7e453159d Branch was auto-updated. 2023-04-06 07:38:00 -07:00
srv-rr-gh-researchbt 321b5f1fb4 Branch was auto-updated. 2023-04-06 07:37:59 -07:00
srv-rr-gh-researchbt 3dc64f2e2e Branch was auto-updated. 2023-04-06 07:37:57 -07:00
srv-rr-gh-researchbt ccb72dee8e Branch was auto-updated. 2023-04-06 07:37:56 -07:00
srv-rr-gh-researchbt 3158f6c589 Branch was auto-updated. 2023-04-06 07:37:54 -07:00
srv-rr-gh-researchbt 7648f1e514 Branch was auto-updated. 2023-04-06 07:37:53 -07:00
P4T12ICK e98775aa99 Merge pull request #2597 from splunk/minor_update_saa_urlscan_playbook 
minor_update_saa_urlscan_playbook
 2023-04-06 16:37:32 +02:00
Lou Stella 634ce1e664 Added tooltips + adjusted output fields 2023-04-05 12:55:11 -05:00
Lou Stella e42d14a282 Added tooltips & renamed observable field values 2023-04-05 12:46:54 -05:00
Lou Stella 770e037370 Updated with new query for file hashes 2023-04-05 12:35:36 -05:00
tccontre 3ee8c81ece minor_update_saa_urlscan_playbook 2023-04-05 19:19:19 +02:00
tccontre 5d6aeffbed crowdstrike_oauth_api_playbook_v2 2023-04-05 19:16:44 +02:00
tccontre 07dbcad2a6 dispatch_dynamic_analysis 2023-04-05 19:15:13 +02:00
Bhavin Patel 942bfc88a9 Merge branch 'security_content_4_phase_2' into test_4.0 2023-04-05 09:58:20 -05:00
tccontre e71ffb6b8c winter_vivern_analytics 2023-04-05 15:56:24 +02:00
P4T12ICK 6c0b883df8 update reporting 2023-04-05 14:53:09 +02:00
P4T12ICK fcab1e7044 Merge branch 'develop' into security_content_4_phase_2 2023-04-05 14:52:58 +02:00
tccontre 3a2caa2705 Update SAA_Dynamic_Analysis.py 2023-04-05 11:31:12 +02:00