admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,540 Commits 697 Branches 195 Tags
log4shell_johan_queries
Commit Graph

4218 Commits

Author SHA1 Message Date
root e17ecfc007 Added detection testing service results inDetect Outbound LDAP Traffic 2021-12-14 02:28:50 +00:00
patel-bhavin e2ffa28957 testing using zeek 2021-12-13 18:08:18 -08:00
patel-bhavin 166cb7d3f0 minor 2021-12-13 17:59:05 -08:00
patel-bhavin df73312009 filter 2021-12-13 14:14:45 -08:00
patel-bhavin 193ea6fdfb attack datasets 2021-12-13 13:15:41 -08:00
patel-bhavin 71313ccfb4 first version of ldap 2021-12-13 12:38:38 -08:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
Bhavin Patel 5e42f3b78c Branch was auto-updated. 2021-12-09 09:06:08 -08:00
mvelazco dbaa641e13 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-08 13:41:07 -05:00
mvelazco 648bf1fc6e minor fixes 2021-12-08 13:41:04 -05:00
Bhavin Patel 8cc5adc54c Branch was auto-updated. 2021-12-08 09:36:32 -08:00
Bhavin Patel 456d7483d6 Branch was auto-updated. 2021-12-08 09:36:24 -08:00
Jose Enrique Hernandez 0934e5ea2f Merge pull request #1860 from splunk/BA 
Data Stream Haag
 2021-12-08 12:36:06 -05:00
Bhavin Patel 56278252ec Branch was auto-updated. 2021-12-08 07:37:37 -08:00
P4T12ICK 2e4bebab22 BA detections 2021-12-08 15:27:44 +01:00
P4T12ICK a7637dae83 BA detections 2021-12-08 09:46:20 +01:00
mhaag-spl 44bf73018a wbadmin 2021-12-07 13:31:19 -07:00
mhaag-spl 51a47f76df Update ssa___bcdedit_failure_recovery_modification.yml 2021-12-07 12:30:48 -07:00
mhaag-spl e2abbaffe1 fsutil and bcdedit 2021-12-07 12:19:41 -07:00
mhaag-spl 16849ba96e Update ssa___dns_exfiltration_using_nslookup_app.yml 2021-12-07 11:58:44 -07:00
mhaag-spl 77d186e946 Update ssa___dns_exfiltration_using_nslookup_app.yml 2021-12-07 11:51:15 -07:00
mhaag-spl 6b36d8c6ec DNS Exfil 2021-12-07 11:43:34 -07:00
mhaag-spl b51b7dbdf1 Update ssa___detect_rclone_command_line_usage.yml 2021-12-07 11:40:46 -07:00
mhaag-spl 11784add74 Update ssa___detect_rclone_command_line_usage.yml 2021-12-06 18:18:45 -07:00
patel-bhavin c477482c73 risk_scores 2021-12-06 14:10:11 -08:00
mvelazco fc478d80a7 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-06 17:10:00 -05:00
mvelazco efd890e2c2 updating analytic story name 2021-12-06 17:01:58 -05:00
Michael Haag 6ee79abe31 Update ssa___windows_curl_upload_to_remote_destination.yml 2021-12-06 14:52:01 -07:00
mhaag-spl f54c806b44 Merge branch 're-ssa' of https://github.com/splunk/security_content into re-ssa 2021-12-06 13:27:38 -07:00
mhaag-spl 228330b182 Update ssa___attempt_to_disable_services.yml 2021-12-06 13:27:36 -07:00
Bhavin Patel 579d070cd0 Branch was auto-updated. 2021-12-06 11:51:56 -08:00
Bhavin Patel 11f1805412 Branch was auto-updated. 2021-12-06 11:51:55 -08:00
Bhavin Patel 3fd03418db Branch was auto-updated. 2021-12-06 11:51:49 -08:00
d1vious b9b6912d97 adding eventid from customer convo 2021-12-06 14:42:14 -05:00
mhaag-spl a6895729d3 fixes 2021-12-06 12:34:59 -07:00
Jose Enrique Hernandez b7cd6b0700 Update ssa___rare_parent_process_relationship_lolbas.yml 2021-12-06 14:13:03 -05:00
Bhavin Patel 10b5d5f980 Branch was auto-updated. 2021-12-06 11:04:15 -08:00
Bhavin Patel 5aade90ec2 Branch was auto-updated. 2021-12-06 11:04:14 -08:00
Bhavin Patel e5fd9f9fe7 Branch was auto-updated. 2021-12-06 11:04:13 -08:00
mhaag-spl 25dc457c3c The Unbroken Haag 2021-12-06 11:57:20 -07:00
Bhavin Patel a39b02eec7 Branch was auto-updated. 2021-12-06 10:26:51 -08:00
mvelazco 0431d06e71 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-03 21:12:33 -05:00
mvelazco 20425018bc minor fixes 2021-12-03 21:12:31 -05:00
root 3cf105d7a6 Added detection testing service results inShort Lived Scheduled Task 2021-12-03 21:22:38 +00:00
mvelazco 71410ddb7a 3 new detections 2021-12-03 15:58:00 -05:00
mhaag-spl 575cb1dcf4 Update ssa___detect_rclone_command_line_usage.yml 2021-12-03 11:29:34 -07:00
mhaag-spl 0e53970750 First SSA 2021-12-03 11:26:27 -07:00
mhaag-spl a862fd7d4a Update net_localgroup_discovery.yml 2021-12-03 10:19:40 -07:00
mhaag-spl 370ef774ed minor fixes - passed validate 2021-12-03 06:01:32 -07:00