admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,865 Commits 697 Branches 195 Tags
notable_macro
Commit Graph

6435 Commits

Author SHA1 Message Date
root c71b04a866 Updated detection files with recommended TA list. 2022-08-01 18:43:39 +00:00
patel-bhavin 114df09d78 meta updates 2022-07-28 14:18:45 -07:00
Bhavin Patel 1b645a499c Update azure_ad_successful_single_factor_authentication.yml 2022-07-28 14:12:18 -07:00
Bhavin Patel 95e47b7fd4 Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml 2022-07-28 14:11:40 -07:00
Bhavin Patel 07290ffeb7 Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:08:32 -07:00
Bhavin Patel 42241b1b2e Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml 2022-07-28 14:07:47 -07:00
Bhavin Patel 72d0a37a12 Update azure_ad_authentication_failed_during_mfa_challenge.yml 2022-07-28 14:05:57 -07:00
Bhavin Patel f22813da22 Update azure_active_directory_high_risk_sign_in.yml 2022-07-28 14:05:14 -07:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
Bhavin Patel f2731454b1 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 13:30:37 -07:00
Bhavin Patel 979dd80466 Update windows_system_shutdown_commandline.yml 2022-07-28 13:28:00 -07:00
Bhavin Patel d71ddb7e26 Update windows_system_reboot_commandline.yml 2022-07-28 13:26:54 -07:00
Bhavin Patel c0427508a9 Update windows_command_shell_dcrat_forkbomb_payload.yml 2022-07-28 13:25:36 -07:00
Bhavin Patel 8f78e18334 Update windows_system_logoff_commandline.yml 2022-07-28 13:24:39 -07:00
Bhavin Patel 1498d090fe Update windows_system_reboot_commandline.yml 2022-07-28 13:23:33 -07:00
Bhavin Patel b2d1bdb62e Update windows_system_shutdown_commandline.yml 2022-07-28 13:23:07 -07:00
pyth0n1c 319530efa2 Branch was auto-updated. 2022-07-28 13:11:04 -07:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
pyth0n1c e35f6dc30a Branch was auto-updated. 2022-07-28 13:10:57 -07:00
Michael Haag 508424da99 Updates 2022-07-28 12:07:05 -06:00
pyth0n1c 6c0c4f75ca Branch was auto-updated. 2022-07-28 10:37:48 -07:00
pyth0n1c 1e03d0fddf Branch was auto-updated. 2022-07-28 10:37:47 -07:00
pyth0n1c d14bb84a81 Branch was auto-updated. 2022-07-28 10:37:44 -07:00
pyth0n1c 1bad5cc933 Branch was auto-updated. 2022-07-28 10:37:43 -07:00
Michael Haag 15147d6aa7 clipboard 2022-07-28 11:27:19 -06:00
tccontre 972bd7b176 Update windows_system_logoff_commandline.yml 2022-07-28 16:12:20 +02:00
tccontre c9611980c2 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 15:31:45 +02:00
tccontre e99ab33a15 dcrat-analytics2 2022-07-28 15:29:25 +02:00
tccontre 521fedf58a dcrat-analytics2 2022-07-28 10:11:52 +02:00
Michael Haag 330f8e74e0 Update linux_persistence_and_privilege_escalation_risk_behavior.yml 2022-07-27 17:39:34 -06:00
Michael Haag 79f7fdd204 ssh and updated correlation 2022-07-27 16:25:56 -06:00
Michael Haag 6374fc8bf5 Update linux_obfuscated_files_or_information_base64_decode.yml 2022-07-27 15:38:25 -06:00
Michael Haag 55bc63720d auth key 2022-07-27 15:30:48 -06:00
Michael Haag f3ca7540f4 Update linux_decode_base64_to_shell.yml 2022-07-27 15:19:24 -06:00
Michael Haag 4c04be8f8a linux base64 decode 2022-07-27 15:08:05 -06:00
pyth0n1c 661dd7c658 Branch was auto-updated. 2022-07-27 13:16:42 -07:00
pyth0n1c edab9eae44 Branch was auto-updated. 2022-07-27 13:16:41 -07:00
pyth0n1c a36efff74b Branch was auto-updated. 2022-07-27 13:16:40 -07:00
pyth0n1c 95fa28a3e8 Branch was auto-updated. 2022-07-27 13:16:38 -07:00
pyth0n1c 0077178971 Branch was auto-updated. 2022-07-27 13:16:37 -07:00
Michael Haag eeafbe7260 Update linux_kernel_module_enumeration.yml 2022-07-27 13:58:17 -06:00
Michael Haag e2408b8c1a kmod list 2022-07-27 13:54:30 -06:00
Michael Haag 4d84254970 Analytic Stories + Tagging 2022-07-27 10:29:47 -06:00
tccontre 37ad5a8675 dcrat-analytics2 2022-07-27 15:41:43 +02:00
tccontre 2697fc4116 dcrat-analytics2 2022-07-27 15:39:18 +02:00
tccontre b33f2bdee5 Update windows_system_shutdown_commandline.yml 2022-07-27 15:27:35 +02:00
tccontre 815df629ce Update windows_system_shutdown_commandline.yml 2022-07-27 15:27:10 +02:00
tccontre 07157ba511 dcrat-analytics2 2022-07-27 15:23:34 +02:00