Commit Graph

23231 Commits

Author SHA1 Message Date
Bhavin Patel 2111501a54 Merge pull request #2547 from splunk/fortinacfix
Update fortinet_fortinac_cve_2022_39952.yml
2023-02-22 11:30:51 -08:00
Michael Haag b0e0481761 Update fortinet_fortinac_cve_2022_39952.yml
fixing
2023-02-22 12:27:53 -07:00
mvelazco 8e13530a06 fixing file name 2023-02-22 14:03:20 -05:00
mvelazco 55850fe25e adding custom app 2023-02-22 13:28:41 -05:00
mvelazco 9c14295a6b Update windows_ad_same_domain_sid_history_addition.yml 2023-02-22 12:01:18 -05:00
mvelazco 6c6e63feac fixing bucket time in detections 2023-02-22 11:54:54 -05:00
pyth0n1c 8e59ac984f Fixing app number and version for Windows Fix App. 2023-02-21 17:34:15 -08:00
pyth0n1c eec8c7ff7f Fixing improperly named filter macro 2023-02-21 17:26:31 -08:00
pyth0n1c a871d51dfd Added the path TA to fix issues with the windows TA to S3. Added it to the baseline JSON and PY files. 2023-02-21 17:24:25 -08:00
pyth0n1c dc80d8ea36 Fixed up some incorrect paths in test and detection files. 2023-02-21 16:25:24 -08:00
srv-rr-gh-researchbt cb20193045 Branch was auto-updated. 2023-02-21 13:06:15 -08:00
research bot 95b05f0138 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-02-21 21:05:53 +00:00
srv-rr-gh-researchbt e9c29ff2e3 Branch was auto-updated. 2023-02-21 12:44:19 -08:00
Bhavin Patel aca80cb7ed Merge pull request #2545 from splunk/FortinetNAC
CVE-2022-39952
v3.60.0
2023-02-21 12:43:58 -08:00
srv-rr-gh-researchbt eb09ffd951 Branch was auto-updated. 2023-02-21 11:07:01 -08:00
srv-rr-gh-researchbt b8d60092c8 Branch was auto-updated. 2023-02-21 11:06:55 -08:00
Bhavin Patel 12002565f8 Merge pull request #2539 from splunk/SpiderHaag
Haageddon
2023-02-21 11:06:30 -08:00
srv-rr-gh-researchbt 79d5fac050 Branch was auto-updated. 2023-02-21 11:03:58 -08:00
srv-rr-gh-researchbt 5b5d1b09e6 Branch was auto-updated. 2023-02-21 11:03:54 -08:00
srv-rr-gh-researchbt 1943157207 Branch was auto-updated. 2023-02-21 11:03:53 -08:00
Bhavin Patel d17a859857 Merge pull request #2538 from splunk/awfulshred
awfulshred
2023-02-21 11:03:33 -08:00
srv-rr-gh-researchbt 3c8b8c2073 Branch was auto-updated. 2023-02-21 10:47:09 -08:00
srv-rr-gh-researchbt e86815967f Branch was auto-updated. 2023-02-21 10:47:08 -08:00
srv-rr-gh-researchbt 28c0250f00 Branch was auto-updated. 2023-02-21 10:47:05 -08:00
srv-rr-gh-researchbt ad8ea55ed4 Branch was auto-updated. 2023-02-21 10:47:04 -08:00
Bhavin Patel cd9a00217a Merge pull request #2540 from splunk/version_jj
Remove "observables" from ss.conf annotations
2023-02-21 10:46:47 -08:00
Bhavin Patel 2763f2df73 Update linux_unix_shell_enable_all_sysrq_functions.yml 2023-02-21 10:36:34 -08:00
Bhavin Patel ab8b96c49e Update linux_system_reboot_via_system_request_key.yml 2023-02-21 10:35:19 -08:00
Michael Haag f3c449e225 fixed 2023-02-21 11:27:07 -07:00
srv-rr-gh-researchbt 52abd74ff1 Branch was auto-updated. 2023-02-21 10:15:12 -08:00
srv-rr-gh-researchbt c84694d1a9 Branch was auto-updated. 2023-02-21 10:15:01 -08:00
srv-rr-gh-researchbt 1f0cf2806e Branch was auto-updated. 2023-02-21 10:14:59 -08:00
srv-rr-gh-researchbt 2b7f4f8d93 Branch was auto-updated. 2023-02-21 10:14:58 -08:00
srv-rr-gh-researchbt 490fff7297 Branch was auto-updated. 2023-02-21 10:14:58 -08:00
Bhavin Patel c0ce86a7b4 Merge pull request #2544 from splunk/lateral_movement_fix
Added "Lateral Movement" story back package
2023-02-21 10:14:41 -08:00
Michael Haag b65986eb71 Update fortinet_fortinac_cve_2022_39952.yml 2023-02-21 11:07:04 -07:00
Michael Haag 92dcbcec70 CVE-2022-39952 2023-02-21 10:59:54 -07:00
Lou Stella c1ab467c62 Added story back to deprecated 2023-02-21 11:11:03 -06:00
Michael Haag f73d760571 Update windows_steal_authentication_certificates_cryptoapi.yml 2023-02-21 09:07:23 -07:00
tccontre f2334bc080 Update windows_spearphishing_attachment_connect_to_none_ms_office_domain.yml 2023-02-21 09:31:42 +01:00
P4T12ICK edb111c9b9 update 2023-02-17 17:53:51 +01:00
P4T12ICK 8cc5b11302 update 2023-02-17 17:29:50 +01:00
P4T12ICK ecf25b566f updates 2023-02-17 17:21:55 +01:00
P4T12ICK 2626003b31 update 2023-02-17 12:42:15 +01:00
P4T12ICK 82f1c48ad5 Merge branch 'ba_ocsf_poc' of github.com:splunk/security_content into ba_ocsf_poc 2023-02-17 12:03:59 +01:00
P4T12ICK 5ced9e1a1e update 2023-02-17 12:03:33 +01:00
tccontre 743b0cdba3 Update linux_impair_defenses_process_kill.yml 2023-02-16 10:57:09 +01:00
tccontre e83277db2b awfulshred 2023-02-16 09:56:29 +01:00
mvelazco 2bec2c8384 tagging an extra detection 2023-02-15 15:38:28 -05:00
mvelazco 121d1e3114 update story description 2023-02-15 14:52:31 -05:00