Commit Graph

23231 Commits

Author SHA1 Message Date
dependabot[bot] 59c0bc4686 Bump splunk-appinspect from 2.28.0 to 2.29.0
Bumps [splunk-appinspect](https://splunk.com) from 2.28.0 to 2.29.0.

---
updated-dependencies:
- dependency-name: splunk-appinspect
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-01 23:00:40 +00:00
dependabot[bot] dc1d844b99 Bump psutil from 5.9.3 to 5.9.4
Bumps [psutil](https://github.com/giampaolo/psutil) from 5.9.3 to 5.9.4.
- [Release notes](https://github.com/giampaolo/psutil/releases)
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](https://github.com/giampaolo/psutil/compare/release-5.9.3...release-5.9.4)

---
updated-dependencies:
- dependency-name: psutil
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-01 23:00:34 +00:00
P4T12ICK b0543d4749 updated 2022-12-01 14:49:32 +01:00
P4T12ICK 0b97fd423e fixed bug TR-2687 2022-12-01 14:34:23 +01:00
tccontre 548dcc63e3 Update windows_service_stop_via_net__and_sc_application.yml 2022-11-30 11:15:03 +01:00
tccontre 8ebf5c5d5c prestige_ransomware 2022-11-30 11:07:20 +01:00
srv-rr-gh-researchbt 5f61a91972 Branch was auto-updated. 2022-11-29 16:05:22 -08:00
research bot 5a6d8b39fb Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2022-11-30 00:05:04 +00:00
srv-rr-gh-researchbt f1ec4e0298 Branch was auto-updated. 2022-11-29 15:44:29 -08:00
Bhavin Patel 83fc0e3322 Merge pull request #2467 from splunk/ssa_remove_detection
rm -rf
v3.54.0
2022-11-29 17:44:10 -06:00
patel-bhavin 1fc87c9f61 removing wroonog detections 2022-11-29 17:42:50 -06:00
srv-rr-gh-researchbt 1a5c432776 Branch was auto-updated. 2022-11-29 14:53:32 -08:00
research bot eb124fbf8d Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2022-11-29 22:53:15 +00:00
srv-rr-gh-researchbt a97782007f Branch was auto-updated. 2022-11-29 14:37:31 -08:00
Bhavin Patel f7f794662d Merge pull request #2466 from splunk/appinspect_meta
metasploit
2022-11-29 16:37:09 -06:00
patel-bhavin 8860a8d274 metasploit 2022-11-29 16:22:40 -06:00
srv-rr-gh-researchbt db0f6232ca Branch was auto-updated. 2022-11-29 11:40:59 -08:00
Bhavin Patel 8da7d3a5ab Merge pull request #2462 from splunk/thegreathaagration
The Great Haagration
2022-11-29 13:40:41 -06:00
Bhavin Patel ee8fbb42ac Merge branch 'develop' into thegreathaagration 2022-11-29 11:58:02 -06:00
srv-rr-gh-researchbt f182f7e906 Branch was auto-updated. 2022-11-29 09:32:03 -08:00
Bhavin Patel 325633d998 Merge pull request #2465 from splunk/blackbolt_bits
Blackbolt patch :BITS admin
2022-11-29 11:31:42 -06:00
srv-rr-gh-researchbt 353c7c7fd1 Branch was auto-updated. 2022-11-29 09:00:41 -08:00
srv-rr-gh-researchbt 1f60b50b30 Branch was auto-updated. 2022-11-29 09:00:39 -08:00
Bhavin Patel dbeb9fbe1a Merge pull request #2457 from splunk/cisa_coverage2
cisa_coverage2
2022-11-29 11:00:19 -06:00
Michael Haag e5d2fd932f update 2022-11-29 09:22:30 -07:00
patel-bhavin 10a4b6730d add author 2022-11-29 10:18:38 -06:00
patel-bhavin bac655e2a9 duplicate SPL 2022-11-29 10:17:50 -06:00
Michael Haag 6319b102c9 Update common_ransomware_extensions.yml 2022-11-28 06:31:02 -07:00
Michael Haag e97b4e5015 Update common_ransomware_extensions.yml 2022-11-28 06:27:13 -07:00
Michael Haag e86ef673ef removed 2022-11-22 15:10:32 -07:00
Michael Haag d132dee977 Update exchange_powershell_module_usage.yml 2022-11-22 11:12:01 -07:00
Michael Haag 128e428864 load kiwi meterpreter 2022-11-22 11:10:30 -07:00
Michael Haag 868db6a670 its a macro life 2022-11-21 15:20:47 -07:00
Michael Haag ec2f75c36f Exchange this for Shellz 2022-11-21 15:10:24 -07:00
Michael Haag baf4b1f858 Update windows_apache_benchmark_binary.yml 2022-11-21 09:31:14 -07:00
Michael Haag ae73f09a86 Update windows_apache_benchmark_binary.yml 2022-11-21 09:27:26 -07:00
Michael Haag 021af44a95 ApacheBench 2022-11-21 09:24:42 -07:00
dluxtron 49960143bd renames, updated descriptions and SPL 2022-11-19 09:47:31 +10:00
mvelazco 00b818a97b adding descriptions 2022-11-18 14:13:46 -05:00
mvelazco c315071aa6 adding new detection 2022-11-18 13:30:17 -05:00
dluxtron 78d084bd53 Adding Domain Repl ACL detection & detection renaming 2022-11-18 17:59:27 +10:00
dluxtron d3a1ad7283 Adding Domain Repl ACL detection & detection renaming 2022-11-18 17:39:03 +10:00
mvelazco 651426899d improving detection 2022-11-17 18:35:11 -05:00
mvelazco 6875fad053 adding new detection 2022-11-17 17:18:54 -05:00
mvelazco 302583bf62 adding proper dataset url 2022-11-17 15:27:25 -05:00
mvelazco c146e574df Merge branch 'TR_2410_Domain_Controller_Attacks' of github.com:splunk/security_content into TR_2410_Domain_Controller_Attacks 2022-11-17 15:24:34 -05:00
mvelazco 4b15c5705c renaming detections 2022-11-17 15:24:32 -05:00
mvelazco 957a4644de Delete test_config_github_actions.json.bak 2022-11-17 14:15:54 -05:00
mvelazco 56b8b99b28 adding new sid history detection 2022-11-17 13:47:43 -05:00
tccontre 26198e8f3c Update suspicious_process_file_path.yml 2022-11-17 18:09:52 +01:00