admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

23231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
patel-bhavin 0ae7ff4b85 adding missing file 2023-03-03 11:41:45 -08:00
patel-bhavin fb81b0af9d merge with develop 2023-03-03 11:17:15 -08:00
pyth0n1c 2c87b92e01 Updated a few more paths for apps 2023-03-03 11:04:43 -08:00
pyth0n1c 12315feb53 Update the baseline in validate_args and test_config_github_actions to use the latest versions of all apps. Also include replay fix for windows ta data ingest via hec and upload 2023-03-03 10:23:03 -08:00
Michael Haag f239a658b3 Sliver 2023-03-03 05:59:36 -07:00
srv-rr-gh-researchbt 7116ba7509 Branch was auto-updated. 2023-03-03 04:34:24 -08:00
P4T12ICK 0b0f22b550 fixed requirements 2023-03-03 13:34:04 +01:00
srv-rr-gh-researchbt 33f8071c5c Branch was auto-updated. 2023-03-03 04:28:37 -08:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
srv-rr-gh-researchbt 32569d2931 Branch was auto-updated. 2023-03-03 03:40:52 -08:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK bbabdeb3d8 fixed small bug 2023-03-03 12:19:41 +01:00
patel-bhavin f891a64533 update spl errror 2023-03-02 16:55:23 -08:00
patel-bhavin 0dffcb450f checking 2023-03-02 15:52:15 -08:00
Michael Haag c08564d2d7 Update suspicious_reg_exe_process.yml 2023-03-02 08:24:32 -07:00
Michael Haag cdd7de9ad4 Update suspicious_rundll32_dllregisterserver.yml 2023-03-02 08:21:07 -07:00
Michael Haag 38fc323b98 Update suspicious_rundll32_dllregisterserver.yml 2023-03-02 08:19:01 -07:00
Michael Haag 1099e16cf8 Update suspicious_regsvr32_register_suspicious_path.yml 2023-03-02 07:13:02 -07:00
Michael Haag cef780f011 Update suspicious_regsvr32_register_suspicious_path.yml 2023-03-02 07:08:40 -07:00
P4T12ICK 43c92975d5 Converted SSA detection to OCSF 2023-03-02 08:31:22 +01:00
dependabot[bot] 29fbc35d8b Bump splunk-appinspect from 2.32.0 to 2.33.0 
Bumps [splunk-appinspect](https://splunk.com) from 2.32.0 to 2.33.0.

---
updated-dependencies:
- dependency-name: splunk-appinspect
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-02 00:08:11 +00:00
dependabot[bot] c8339b2e52 Merge pull request #2555 from splunk/dependabot/pip/splunk-sdk-1.7.3 2023-03-02 00:05:50 +00:00
dependabot[bot] a79e4b8f88 Bump gitpython from 3.1.30 to 3.1.31 
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.30 to 3.1.31.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.30...3.1.31)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-01 23:56:48 +00:00
dependabot[bot] 18017128bf Bump pydantic from 1.10.4 to 1.10.5 
Bumps [pydantic](https://github.com/pydantic/pydantic) from 1.10.4 to 1.10.5.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v1.10.5/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v1.10.4...v1.10.5)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-01 23:56:41 +00:00
dependabot[bot] 4c250f6a53 Bump splunk-sdk from 1.7.2 to 1.7.3 
Bumps [splunk-sdk](https://github.com/splunk/splunk-sdk-python) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/splunk/splunk-sdk-python/releases)
- [Changelog](https://github.com/splunk/splunk-sdk-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/splunk/splunk-sdk-python/compare/1.7.2...1.7.3)

---
updated-dependencies:
- dependency-name: splunk-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-01 23:56:35 +00:00
srv-rr-gh-researchbt 4fde829b48 Branch was auto-updated. 2023-03-01 14:16:07 -08:00
srv-rr-gh-researchbt 4ae151f2dd Branch was auto-updated. 2023-03-01 14:16:05 -08:00
srv-rr-gh-researchbt fc5424b876 Branch was auto-updated. 2023-03-01 14:16:05 -08:00
srv-rr-gh-researchbt 29fbbecb79 Branch was auto-updated. 2023-03-01 14:16:02 -08:00
Bhavin Patel 377af6503a Merge pull request #2551 from splunk/minor-fix 
Update suspicious_process_file_path.yml
 2023-03-01 14:15:43 -08:00
patel-bhavin c99fe588ea remove it from 3.61.0 2023-03-01 14:11:36 -08:00
Bhavin Patel ae3ef32e0a Update suspicious_process_file_path.yml 2023-03-01 12:38:01 -08:00
Bhavin Patel e904ff4e1e Update suspicious_process_file_path.yml 2023-03-01 11:08:40 -08:00
Bhavin Patel 4aaa2424c3 Update suspicious_process_file_path.yml 2023-03-01 11:04:11 -08:00
Bhavin Patel bbb9b5a421 Update suspicious_process_file_path.yml 2023-03-01 10:53:03 -08:00
Michael Haag 631c9d4cf0 XML driver load 
Updated to XML logs
 2023-03-01 09:16:22 -07:00
tccontre 0de5be9030 Update suspicious_process_file_path.yml 2023-03-01 14:05:56 +01:00
tccontre a21deeb7a0 Update suspicious_process_file_path.yml 2023-03-01 14:05:31 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
tccontre 41fb7257cd Update suspicious_process_file_path.yml 
minor fix for wrong name in observable fields.
 2023-02-28 10:49:16 +01:00
Lou Stella 8d1a416b74 Adding ymls for playbooks 2023-02-27 16:54:13 -06:00
Lou Stella c54342e6b9 Copy content from phantomcyber/playbooks 2023-02-27 16:40:38 -06:00
Michael Haag 15150886c9 fixes 2023-02-24 12:24:55 -07:00
P4T12ICK 801f3b570c testing 2023-02-24 15:52:15 +01:00
P4T12ICK 768258a237 updates 2023-02-24 14:51:15 +01:00
P4T12ICK a5ec4f97ce updates 2023-02-24 14:06:43 +01:00
P4T12ICK f3841eb846 updates for testing 2023-02-24 13:54:13 +01:00
mvelazco cecc610ea6 Merge branch 'TR_2410_Domain_Controller_Attacks' of github.com:splunk/security_content into TR_2410_Domain_Controller_Attacks 2023-02-22 14:35:51 -05:00
mvelazco 70790ac1c8 fixing test file path 2023-02-22 14:34:10 -05:00
srv-rr-gh-researchbt 152c647dc2 Branch was auto-updated. 2023-02-22 11:31:12 -08:00