Commit Graph

1112 Commits

Author SHA1 Message Date
mhaag-spl cea91f725e Create hunting_for_log4shell.test.yml 2021-12-14 19:00:04 -07:00
patel-bhavin 05b189232d ldap outbound 2021-12-14 10:10:23 -08:00
P4T12ICK 3f59f79b93 log4j 2021-12-14 18:21:58 +01:00
P4T12ICK f84b61357c Improved Proxy detection 2021-12-14 16:35:31 +01:00
d1vious 7e6cb9381b Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-14 00:54:44 -05:00
d1vious 946503dc76 added two new detections, ymls are not finished 2021-12-14 00:54:37 -05:00
mvelazco cb4d003f4e updating dataset tag 2021-12-13 16:24:39 -05:00
mvelazco 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 15:51:45 -05:00
mvelazco 2c62039a03 adding detection 2021-12-13 15:51:43 -05:00
mhaag-spl 050bc8d886 2021-12-13 13:32:27 -07:00
mhaag-spl f4de314e4e wget curl 2021-12-13 07:11:07 -07:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
Bhavin Patel 5e42f3b78c Branch was auto-updated. 2021-12-09 09:06:08 -08:00
Bhavin Patel 8cc5adc54c Branch was auto-updated. 2021-12-08 09:36:32 -08:00
Bhavin Patel 456d7483d6 Branch was auto-updated. 2021-12-08 09:36:24 -08:00
Bhavin Patel 56278252ec Branch was auto-updated. 2021-12-08 07:37:37 -08:00
P4T12ICK 2e4bebab22 BA detections 2021-12-08 15:27:44 +01:00
P4T12ICK 7e1fbbc8ad BA detections 2021-12-08 12:50:13 +01:00
P4T12ICK 88bbb3dd64 BA detections 2021-12-08 10:43:36 +01:00
P4T12ICK a7637dae83 BA detections 2021-12-08 09:46:20 +01:00
mhaag-spl 692a565bef Update ssa___wbadmin_delete_system_backups.test.yml 2021-12-07 14:01:52 -07:00
mhaag-spl 3c2c99fb9c Update ssa___wbadmin_delete_system_backups.test.yml 2021-12-07 13:55:05 -07:00
mhaag-spl 44bf73018a wbadmin 2021-12-07 13:31:19 -07:00
mhaag-spl 890e31a9c1 Update ssa___bcdedit_failure_recovery_modification.test.yml 2021-12-07 12:38:37 -07:00
mhaag-spl e2abbaffe1 fsutil and bcdedit 2021-12-07 12:19:41 -07:00
Bhavin Patel d64b454702 Branch was auto-updated. 2021-12-07 11:01:51 -08:00
Bhavin Patel 52ce90917e Branch was auto-updated. 2021-12-07 11:01:45 -08:00
mhaag-spl 6b36d8c6ec DNS Exfil 2021-12-07 11:43:34 -07:00
Bhavin Patel b6c59997e3 Branch was auto-updated. 2021-12-06 16:23:18 -08:00
Bhavin Patel 5aade90ec2 Branch was auto-updated. 2021-12-06 11:04:14 -08:00
Bhavin Patel e5fd9f9fe7 Branch was auto-updated. 2021-12-06 11:04:13 -08:00
mhaag-spl 25dc457c3c The Unbroken Haag 2021-12-06 11:57:20 -07:00
mvelazco 71410ddb7a 3 new detections 2021-12-03 15:58:00 -05:00
mhaag-spl 0e53970750 First SSA 2021-12-03 11:26:27 -07:00
Bhavin Patel 1747744648 Branch was auto-updated. 2021-12-01 15:41:24 -08:00
Bhavin Patel 57c1ef30dd Merge pull request #1857 from splunk/RegistryDetectionFixes
Registry detection fixes
2021-12-01 15:41:01 -08:00
Bhavin Patel 4c9fc158cd Branch was auto-updated. 2021-12-01 11:42:55 -08:00
Bhavin Patel 78c5f10942 Branch was auto-updated. 2021-11-30 12:02:04 -08:00
pyth0n1c 97c83a1864 Created Experimental folder in tests,
as well as cloud, endpoint, and network 
subfolders, and moved some tests into it.
This corresponds with the experimental 
folder in detections.
2021-11-30 09:47:01 -08:00
pyth0n1c 84e54e26d6 Changing to the correct baseline paths after restructuring repo 2021-11-29 16:44:40 -08:00
mvelazco 0254c60a28 adding detection 2021-11-29 16:50:39 -05:00
Bhavin Patel 024a0be7ff Branch was auto-updated. 2021-11-25 05:31:55 -08:00
Bhavin Patel c778a2e35c Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel b25f7b80c3 Branch was auto-updated. 2021-11-25 05:07:23 -08:00
tccontre dfd210cf29 remcos_evasion 2021-11-25 12:27:39 +01:00
Bhavin Patel 49e82e39ff Branch was auto-updated. 2021-11-25 01:25:30 -08:00
Bhavin Patel 6d291d2600 Branch was auto-updated. 2021-11-25 01:25:29 -08:00
tccontre 295acf12f0 Update ssa___delete_a_net_user.test.yml 2021-11-25 09:30:44 +01:00
P4T12ICK 40a80473a2 Merge branch 'develop' into ssa_anomalous_usage_of_7zip 2021-11-25 08:36:33 +01:00