admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,298 Commits 697 Branches 195 Tags
improved_ssa_testing
Commit Graph

273 Commits

Author SHA1 Message Date
bpatel ed42485954 minor 2021-04-05 13:20:45 -07:00
github-actions[bot] 553487eb5e Branch was auto-updated. 2021-04-02 16:46:05 +00:00
mhaag-spl 77d618a37b Found error - typo 2021-03-31 14:18:05 -06:00
mhaag-spl 1ab256593f Domain Trust Discovery 2021-03-31 13:24:32 -06:00
Michael Haag 602c51bae9 Merge branch 'develop' into mhaag 2021-03-30 14:58:52 -06:00
mhaag-spl da4bc60750 T1197 BITS Jobs 2021-03-30 14:49:44 -06:00
mvelazco c0b5249638 Merge remote-tracking branch 'origin/TR-532_escu_remove_ui' into TR-490_mustang_package 2021-03-29 17:17:53 -04:00
mvelazco c0b95aa075 adding package type support 
- Updates to generate.py introduce an extra parameter that defines the type of package to be created.

- Tagging analytics stories related to AWS/O365 detections.
 2021-03-29 16:27:20 -04:00
bpatel 4bff6612a9 trailing whitespace 2021-03-29 10:54:20 -07:00
github-actions[bot] e6d57ecba1 Branch was auto-updated. 2021-03-25 17:34:18 +00:00
mhaag-spl feeebf2fdd Analytic Story for certutil decode 2021-03-25 11:18:10 -06:00
mhaag-spl 106fc29c15 fix again 2021-03-25 07:08:05 -06:00
mhaag-spl c6664bcb7e Update ingress_tool_transfer.yml 2021-03-24 15:44:22 -06:00
mhaag-spl 249fd0a549 Update Certutil 
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
 2021-03-24 15:15:47 -06:00
bpatel 8d12500905 adding risk and product tags 2021-03-23 15:03:02 -07:00
github-actions[bot] 25a1febeb0 Branch was auto-updated. 2021-03-23 16:20:50 +00:00
Rod Soto 2fc6f1c4c9 fixeddateandfirstsearch 2021-03-17 10:22:40 -04:00
Rod Soto 2076087c3c clopstory 2021-03-17 09:59:23 -04:00
github-actions[bot] adc6ec0f87 Branch was auto-updated. 2021-03-10 02:55:05 +00:00
bpatel 92bd73e301 validate 2021-03-09 16:58:01 -08:00
bpatel 238672e507 story file and tags 2021-03-09 14:58:54 -08:00
github-actions[bot] 1f58996231 Branch was auto-updated. 2021-03-08 17:41:44 +00:00
mhaag-spl e6ce96e5a1 Detect Mimikatz Using Loaded Images 2021-03-05 13:10:59 -07:00
Michael Hart de81557e83 Adding in a newline 2021-03-05 13:33:16 -05:00
mhaag-spl 51823d81d3 Sunburst malware renamed NOBELIUM Group 
Renaming Sunburst Malware to NOBELIUM Group
 2021-03-05 10:30:34 -07:00
Michael Hart f4a04f55ff Adding a new story (Windows Discovery Techniques) and tagging streaming detections with that story 2021-03-04 22:02:25 -05:00
mhaag-spl 66514f0b6c formatting updates 2021-03-04 06:05:17 -07:00
mhaag-spl ac49f9ab9e HAFNIUM and more updates 2021-03-03 14:10:11 -07:00
mhaag-spl ecb82ec8ca Fixes 2021-03-01 06:52:02 -07:00
mhaag-spl 2c996886e3 Update cobalt_strike.yml 2021-02-25 15:13:32 -07:00
mhaag-spl 4cae9952d5 Update cobalt_strike.yml 2021-02-25 15:06:29 -07:00
mhaag-spl 1af1421263 Update silver_sparrow.yml 2021-02-25 12:17:10 -07:00
mhaag-spl dcc4060a87 Update silver_sparrow.yml 2021-02-25 12:09:28 -07:00
mhaag-spl 7fc33f259e Update silver_sparrow.yml 2021-02-25 12:03:56 -07:00
mhaag-spl 9d96fc34e6 silver sparrow 2021-02-25 11:59:21 -07:00
mhaag-spl 814aeaee3e Update silver_sparrow.yml 2021-02-24 05:42:43 -07:00
mhaag-spl 10e028c9fa Silver Sparrow 2021-02-24 05:38:44 -07:00
mhaag-spl bbfeb8c427 Cobalt Strike Profile adds and updates 2021-02-22 16:09:19 -07:00
mhaag-spl 7e8fe65bd2 Stories and analytics 2021-02-17 13:41:32 -07:00
mhaag-spl 7a2f135a63 Cobalt Strike Analytic Story 2021-02-16 14:06:47 -07:00
mhaag-spl 970d7e9031 accidental story 2021-02-12 12:12:37 -07:00
mhaag-spl fd3910ae5b test files 2021-02-12 12:10:53 -07:00
mhaag-spl 467d8382dc removing old story 2021-02-12 12:08:13 -07:00
github-actions[bot] 4bce20faab Branch was auto-updated. 2021-02-12 17:58:45 +00:00
divious1 7615d5ec81 fixing merge conflicts 2021-02-12 12:27:00 -05:00
divious1 b75d826a2e Merge branch 'develop' into TR-377_add_datamodel_field 2021-02-12 12:04:21 -05:00
mhaag-spl 432bd41c8b Update suspicious_regsvcs_regasm_activity.yml 2021-02-12 07:33:19 -07:00
mhaag-spl 7555d7f7ce Updated Story name for CHM 2021-02-12 07:20:02 -07:00
github-actions[bot] 3d43ef0516 Branch was auto-updated. 2021-02-11 18:45:29 +00:00
divious1 1e812855fe added stories 2021-02-11 11:52:31 -05:00