 research bot
|
ff3319329e
|
updating docs and package bits [ci skip]
|
2021-12-15 02:58:27 +00:00 |
|
|
root
|
97a20df8ae
|
Added detection testing service results inHunting for Log4Shell
|
2021-12-15 02:19:55 +00:00 |
|
|
Bhavin Patel
|
f453a537b1
|
Update java_class_file_download_by_java_user_agent.yml
|
2021-12-14 17:28:16 -08:00 |
|
|
d1vious
|
16b771eae2
|
adding tags to detections
|
2021-12-14 19:38:51 -05:00 |
|
|
patel-bhavin
|
6eb4eab2bb
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 13:51:14 -08:00 |
|
|
mhaag-spl
|
918e73d414
|
Update hunting_for_log4shell.yml
|
2021-12-14 14:35:25 -07:00 |
|
|
patel-bhavin
|
55ccb09927
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 13:09:12 -08:00 |
|
|
mhaag-spl
|
303d082e43
|
Create hunting_for_log4shell.yml
|
2021-12-14 13:20:22 -07:00 |
|
|
Bhavin Patel
|
a4aaf03206
|
Update outbound_network_connection_from_java_using_default_ports.yml
|
2021-12-14 12:18:58 -08:00 |
|
|
Bhavin Patel
|
9ba2c45a24
|
Update cmd_carry_out_string_command_parameter.yml
|
2021-12-14 12:17:08 -08:00 |
|
|
patel-bhavin
|
05b189232d
|
ldap outbound
|
2021-12-14 10:10:23 -08:00 |
|
|
root
|
66a72dff7a
|
Added detection testing service results inLog4Shell JNDI Payload Injection with Outbound Connection
|
2021-12-14 18:05:07 +00:00 |
|
|
P4T12ICK
|
f59961186a
|
log4j
|
2021-12-14 18:43:55 +01:00 |
|
|
P4T12ICK
|
b278b43978
|
log4j
|
2021-12-14 18:43:02 +01:00 |
|
|
root
|
f03ab2f721
|
Added detection testing service results inLog4Shell JNDI Payload Injection Attempt
|
2021-12-14 17:42:22 +00:00 |
|
|
P4T12ICK
|
3f59f79b93
|
log4j
|
2021-12-14 18:21:58 +01:00 |
|
|
P4T12ICK
|
a9edbc20bd
|
log4j
|
2021-12-14 17:49:26 +01:00 |
|
|
P4T12ICK
|
3dc854e68e
|
log4j
|
2021-12-14 17:43:19 +01:00 |
|
|
P4T12ICK
|
f84b61357c
|
Improved Proxy detection
|
2021-12-14 16:35:31 +01:00 |
|
|
d1vious
|
7e6cb9381b
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 00:54:44 -05:00 |
|
|
d1vious
|
946503dc76
|
added two new detections, ymls are not finished
|
2021-12-14 00:54:37 -05:00 |
|
|
mvelazco
|
10418d295a
|
Update outbound_network_connection_from_java_using_default_ports.yml
|
2021-12-13 20:22:14 -05:00 |
|
|
root
|
c1dac05e2b
|
Added detection testing service results inOutbound Network Connection from Java Using Default Ports
|
2021-12-13 23:19:25 +00:00 |
|
|
root
|
8f1408ba42
|
Added detection testing service results inJava Class File download by Java User Agent
|
2021-12-13 22:45:11 +00:00 |
|
|
mvelazco
|
52692732cd
|
fixing minor issue
|
2021-12-13 17:07:02 -05:00 |
|
|
mvelazco
|
cb4d003f4e
|
updating dataset tag
|
2021-12-13 16:24:39 -05:00 |
|
|
mvelazco
|
1671728147
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-13 15:51:45 -05:00 |
|
|
mvelazco
|
2c62039a03
|
adding detection
|
2021-12-13 15:51:43 -05:00 |
|
|
mhaag-spl
|
28633f099a
|
Update java_class_file_download_by_java_user_agent.yml
|
2021-12-13 13:35:20 -07:00 |
|
|
mhaag-spl
|
050bc8d886
|
☕
|
2021-12-13 13:32:27 -07:00 |
|
|
mhaag-spl
|
71295432e3
|
Windows shells
|
2021-12-13 13:01:45 -07:00 |
|
|
mhaag-spl
|
f3b31c113b
|
java Shells
|
2021-12-13 11:54:59 -07:00 |
|
|
mhaag-spl
|
2f2e16b8a6
|
Update malicious_powershell_process___connect_to_internet_with_hidden_window.yml
|
2021-12-13 11:37:49 -07:00 |
|
|
mhaag-spl
|
d64ce21b48
|
bagged and tagged
|
2021-12-13 07:20:33 -07:00 |
|
|
mhaag-spl
|
f4de314e4e
|
wget curl
|
2021-12-13 07:11:07 -07:00 |
|
|
mhaag-spl
|
5e36ce1cf3
|
curleddd
|
2021-12-10 11:49:41 -07:00 |
|
|
mhaag-spl
|
53dc410071
|
rcloned 4688 logs
|
2021-12-10 11:39:45 -07:00 |
|
|
Bhavin Patel
|
5e42f3b78c
|
Branch was auto-updated.
|
2021-12-09 09:06:08 -08:00 |
|
|
mvelazco
|
dbaa641e13
|
Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4
|
2021-12-08 13:41:07 -05:00 |
|
|
mvelazco
|
648bf1fc6e
|
minor fixes
|
2021-12-08 13:41:04 -05:00 |
|
|
Bhavin Patel
|
8cc5adc54c
|
Branch was auto-updated.
|
2021-12-08 09:36:32 -08:00 |
|
|
Bhavin Patel
|
456d7483d6
|
Branch was auto-updated.
|
2021-12-08 09:36:24 -08:00 |
|
|
Jose Enrique Hernandez
|
0934e5ea2f
|
Merge pull request #1860 from splunk/BA
Data Stream Haag
|
2021-12-08 12:36:06 -05:00 |
|
|
Bhavin Patel
|
56278252ec
|
Branch was auto-updated.
|
2021-12-08 07:37:37 -08:00 |
|
|
P4T12ICK
|
2e4bebab22
|
BA detections
|
2021-12-08 15:27:44 +01:00 |
|
|
P4T12ICK
|
a7637dae83
|
BA detections
|
2021-12-08 09:46:20 +01:00 |
|
|
mhaag-spl
|
44bf73018a
|
wbadmin
|
2021-12-07 13:31:19 -07:00 |
|
|
mhaag-spl
|
51a47f76df
|
Update ssa___bcdedit_failure_recovery_modification.yml
|
2021-12-07 12:30:48 -07:00 |
|
|
mhaag-spl
|
e2abbaffe1
|
fsutil and bcdedit
|
2021-12-07 12:19:41 -07:00 |
|
|
mhaag-spl
|
16849ba96e
|
Update ssa___dns_exfiltration_using_nslookup_app.yml
|
2021-12-07 11:58:44 -07:00 |
|