admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

23231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 80b62c4c20 Merge pull request #2507 from splunk/lockbit-chaos-ransomware 
lockbit-chaos-ransomware
 2023-01-24 11:18:29 -08:00
Bhavin Patel 743a76c677 Update windows_phishing_pdf_file_executes_url_link.yml 2023-01-24 11:04:46 -08:00
mvelazco faedd6645a adding new detection for azure ad session hijacking 2023-01-24 14:02:06 -05:00
Michael Haag 42f4eefeae more onenotes 2023-01-24 10:20:15 -07:00
P4T12ICK 3877ea13a3 converted ssa detections to sigma 2023-01-24 15:35:23 +01:00
Michael Haag 8f4edfa557 Update windows_powershell_add_module_to_global_assembly_cache.yml 2023-01-24 06:53:00 -07:00
Michael Haag c5fb07f2f5 createdump 2023-01-24 06:49:27 -07:00
Michael Haag 11ff0fa87d onenote 2023-01-24 06:38:23 -07:00
tccontre b3d7d27b89 asyncrat-onenote-chain 2023-01-24 12:58:06 +01:00
tccontre 97cefeabcf asyncrat-onenote-chain 2023-01-24 11:00:35 +01:00
mvelazco a7f6ddbfeb adding new azure ad brute force detection 2023-01-23 20:46:00 -05:00
mvelazco 5f16506697 adding new azure ad brute force detection 2023-01-23 17:31:48 -05:00
patel-bhavin 99ba6b503f yaml updates 2023-01-23 11:59:48 -08:00
Kumar Sharad 944b7a7e82 Detect Suspicious Filename 2023-01-23 17:24:37 +01:00
P4T12ICK 3e2f231282 Added data sources 2023-01-23 16:55:32 +01:00
P4T12ICK 59b4786cc6 converter improvements 2023-01-23 09:38:17 +01:00
P4T12ICK eec8968a85 Added sigma detections into dev folder 2023-01-20 13:24:15 +01:00
P4T12ICK a23b2470fe Converted detections v3 to v4 2023-01-20 11:12:47 +01:00
P4T12ICK 49c16a3548 Merge pull request #2509 from splunk/security_content_4_phase_2_with_detection_testing 
Security content 4 phase 2 with detection testing
 2023-01-20 08:03:19 +01:00
P4T12ICK 4fc89cfa7b resolved merge conflict 2023-01-20 08:02:00 +01:00
patel-bhavin 090e5c4bee yml changes 2023-01-19 16:38:20 -08:00
Namratha Sreekanta 512f15e77d removing context of model from detection 2023-01-19 16:36:08 -08:00
patel-bhavin 4b24cc6d53 tagging aws relevant detection draft 2023-01-19 16:01:20 -08:00
patel-bhavin 05aca8a58e new aws detection 2023-01-19 15:51:14 -08:00
mvelazco d78f2a9eb7 new analytic story 2023-01-19 17:01:48 -05:00
Michael Haag d8245bebf1 pwsh gac 2023-01-18 13:13:41 -07:00
Michael Haag e136e5212b Update windows_server_software_component_gacutil_install_to_gac.yml 2023-01-18 12:54:08 -07:00
Michael Haag f864c488cc GACutil 1 2023-01-18 12:35:42 -07:00
Namratha Sreekanta c39d297e47 making minor changes to yml file 2023-01-18 11:18:02 -08:00
tccontre 178edfd4fa lockbit-chaos-ransomware 2023-01-18 14:55:46 +01:00
Namratha Sreekanta 6195517045 adding detect suspicious dns txt records using pretrained model in dsdl 2023-01-17 15:26:01 -08:00
tccontre bf8f2339b8 lockbit-chaos-ransomware 2023-01-17 15:37:37 +01:00
tccontre 5dc0520ae3 Update windows_user_execution_malicious_url_shortcut_file.yml 2023-01-16 15:55:05 +01:00
tccontre 4b2cf3aaf1 lockbit-chaos-ransomware 2023-01-16 15:50:50 +01:00
tccontre 5955920298 lockbit-chaos-ransomware 2023-01-16 10:10:28 +01:00
Michael Haag 761771524c windows ngrok update 2023-01-12 13:49:35 -07:00
Michael Haag 7ac4a7e167 Linux Ngrok 2023-01-12 13:39:06 -07:00
srv-rr-gh-researchbt 60110a0a26 Branch was auto-updated. 2023-01-11 12:58:05 -08:00
srv-rr-gh-researchbt fa88d589aa Branch was auto-updated. 2023-01-11 12:58:03 -08:00
trogdorsey f8c7874b15 Merge pull request #2505 from splunk/playbooks_reputation 
New SOAR content
 2023-01-11 14:57:45 -06:00
Lou Stella 43dfab998a Fixed reference links 2023-01-11 11:44:08 -06:00
Lou Stella 0247dd62a6 fixed name in VT 2023-01-11 11:34:08 -06:00
Lou Stella 62f62137fb new SOAR content 
Added 3 playbooks from phantomcyber/playbooks that were just added, also created yamls for them.
 2023-01-11 11:08:28 -06:00
srv-rr-gh-researchbt f3b504ffee Branch was auto-updated. 2023-01-10 14:40:39 -08:00
srv-rr-gh-researchbt 513bacc62e Branch was auto-updated. 2023-01-10 14:40:38 -08:00
research bot c3c47c9ded Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-01-10 22:40:17 +00:00
srv-rr-gh-researchbt 32a4c5e9df Branch was auto-updated. 2023-01-10 14:22:42 -08:00
srv-rr-gh-researchbt 10b002828e Branch was auto-updated. 2023-01-10 14:22:40 -08:00
Bhavin Patel dde8262ef6 Merge pull request #2504 from splunk/appinspect_iis 
formatting
v3.56.0 		2023-01-10 14:22:23 -08:00
patel-bhavin b5647facd7 minor 2023-01-10 14:20:46 -08:00