admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,037 Commits 697 Branches 195 Tags
metadata_fixing_script
Commit Graph

11193 Commits

Author SHA1 Message Date
Bhavin Patel 3f8a13a1f5 Merge branch 'develop' into linux_syscall_auditd_update 2025-05-05 11:53:55 -07:00
Bhavin Patel 6daa23f6ff Merge branch 'develop' into amos-stealer 2025-05-05 11:10:21 -07:00
Br3akp0int 69aace2a2f Merge branch 'develop' into linux_syscall_auditd_update 2025-05-05 19:37:41 +02:00
Nasreddine Bencherchali 1c4a531594 Apply suggestions from code review 2025-05-05 19:07:48 +02:00
Bhavin Patel 0ed0d17b10 Merge branch 'develop' into duplicate_status_in_stats 2025-05-05 10:07:19 -07:00
Nasreddine Bencherchali 7a7f6a1623 Merge branch 'develop' into amos-stealer 2025-05-05 18:53:01 +02:00
ljstella d973e001a0 Removing duplicate group-by field 2025-05-05 09:14:39 -05:00
Nasreddine Bencherchali cc57496610 add analytic story 2025-05-05 15:05:24 +02:00
Eric d9960562b8 Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different. 2025-05-02 14:10:46 -07:00
Bhavin Patel c8d4039488 Merge branch 'develop' into amos-stealer 2025-05-02 14:08:26 -07:00
ljstella 2af5bb3aab Sysmon service stop, not the generic one 2025-05-02 12:03:44 -05:00
pyth0n1c 2c9573e2b9 Merge branch 'develop' into fix_bad_attack_data_paths 2025-05-01 15:57:53 -07:00
Bhavin Patel 281f8d2f48 Merge branch 'develop' into eventlog-stuff 2025-05-01 13:09:27 -07:00
Bhavin Patel 78e3f8a06e update name 2025-05-01 12:50:51 -07:00
Bhavin Patel 86d9e1f615 Merge branch 'develop' into amos-stealer 2025-05-01 12:50:02 -07:00
Bhavin Patel 7742f511b3 Merge branch 'develop' into deprecate_rmm_hunt 2025-05-01 11:53:34 -07:00
Bhavin Patel 4d1ff91ee3 updated messaging 2025-04-30 12:24:55 -07:00
Bhavin Patel 26e2f59462 add back manual_Test 2025-04-30 12:20:03 -07:00
Bhavin Patel 6b2f2e9636 remove manual test for a CI run 2025-04-30 12:15:14 -07:00
Bhavin Patel 884eede4ce updating search 2025-04-30 12:14:30 -07:00
Eric 422a769c0d final fixes 2025-04-29 17:04:03 -07:00
Eric 170ed93d9d Merge branch 'develop' into fix_bad_attack_data_paths 2025-04-29 16:54:17 -07:00
Bhavin Patel 55461779c5 Merge branch 'develop' into small-tuning 2025-04-28 12:09:36 -07:00
Michael Haag 0c67bd001c Delete java_spawning_command_shells.yml 2025-04-28 12:01:09 -06:00
Michael Haag 074c90ceb4 ver and date 2025-04-28 10:37:57 -06:00
Michael Haag 074d13f001 BasketNetWeaving with Haag: No Shell Left Behind! 2025-04-28 10:33:17 -06:00
Bhavin Patel 9ac544fb8e Merge branch 'develop' into linux_syscall_auditd_update 2025-04-25 08:54:50 -07:00
ljstella 511221ba1e version bump 2025-04-25 08:58:58 -05:00
ljstella 31e2c03b8d Add where clause back 2025-04-25 08:44:50 -05:00
Nasreddine Bencherchali 677c3b0df4 Update macos_amos_stealer___virtual_machine_check_activity.yml 2025-04-25 13:24:48 +02:00
Nasreddine Bencherchali 4cb367256c add amos stealer analytic 2025-04-25 12:06:42 +02:00
Nasreddine Bencherchali 1dc4f1c45a bump versions 2025-04-24 19:53:19 +02:00
Nasreddine Bencherchali 44b110d9e6 update date and deprecation replacement 2025-04-24 19:43:37 +02:00
Nasreddine Bencherchali 88d9ef48b8 Merge branch 'develop' into eventlog-stuff 2025-04-24 18:55:40 +02:00
Nasreddine Bencherchali 4c1a7cc1b4 Update windows_eventlog_recon_activity_using_log_query_utilities.yml 2025-04-24 18:27:47 +02:00
Nasreddine Bencherchali 629bc01aae update output and nirsoft tools 2025-04-24 18:23:55 +02:00
ljstella ba0577038e bump version 2025-04-24 10:41:10 -05:00
ljstella 8240ed3c6e Remove duplicate filter macro 2025-04-24 10:34:30 -05:00
Nasreddine Bencherchali 4aa6e92c3b Update check_elevated_cmd_using_whoami.yml 2025-04-24 15:15:26 +02:00
Nasreddine Bencherchali 60164de4e7 updates and tunings 2025-04-24 15:15:09 +02:00
Nasreddine Bencherchali a549469e35 Merge branch 'develop' into eventlog-stuff 2025-04-24 15:00:22 +02:00
Nasreddine Bencherchali 5032cb1c21 add new analytics for event log query 2025-04-24 14:57:16 +02:00
pyth0n1c 08dac066e8 Merge branch 'develop' into revert_prestats_optimization 2025-04-22 13:52:23 -07:00
Lou Stella 3b73f92315 Merge branch 'develop' into revert_prestats_optimization 2025-04-22 15:42:09 -05:00
Lou Stella 91e97c147c Merge branch 'develop' into shadow_single 2025-04-22 15:37:34 -05:00
Bhavin Patel 5158549d8b updating dataset 2025-04-22 13:32:12 -07:00
Lou Stella f0e662bd6f Merge branch 'develop' into version_adjustments 2025-04-22 15:04:40 -05:00
ljstella 6fc106b995 Version adjustments for new detection metadata validation check 2025-04-22 15:03:23 -05:00
Bhavin Patel 34d33627b3 Merge branch 'develop' into revert_prestats_optimization 2025-04-22 12:12:45 -07:00
Bhavin Patel 3fb1a7ad96 Merge branch 'develop' into revert_prestats_optimization 2025-04-22 12:11:41 -07:00