admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,535 Commits 697 Branches 195 Tags
ported_errors_2516
Commit Graph

284 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 776ae141a3 Branch was auto-updated. 2023-01-10 11:46:10 -08:00
srv-rr-gh-researchbt 3222c30b5b Branch was auto-updated. 2023-01-10 10:30:14 -08:00
patel-bhavin 2beb040928 add risk index macro 2022-12-21 14:12:18 -08:00
Michael Haag 22f6d4ae92 Fantastic IIS Modules and Where to Find Them 2022-12-21 08:53:03 -07:00
Michael Haag 868db6a670 its a macro life 2022-11-21 15:20:47 -07:00
Bhavin Patel 1a5accb29d remove index 2022-11-11 13:16:59 -08:00
srv-rr-gh-researchbt e9382f0963 Branch was auto-updated. 2022-11-11 12:01:02 -08:00
Sanjay Govind 1dbaa19160 Fix incorrect quotes in linux_shells.yml 2022-11-08 08:51:20 +13:00
Michael Haag 3f32bf928c openssl content 2022-11-03 10:49:32 -06:00
Bhavin Patel d8f8c21296 Merge pull request #2439 from splunk/security_updates 
Security updates
 2022-11-02 10:18:07 -07:00
Bhavin Patel aa27dd3b02 Merge pull request #2419 from splunk/qakbot_2 
qakbot_2
 2022-11-01 10:00:09 -07:00
pyth0n1c a80f89e32c Replaced index= and sourcetype= with appropriate macro. Added that macro as well. 2022-11-01 08:38:04 -07:00
pyth0n1c 689277d6ee Added a number of macros, tests, and detections in support of release of Splunk vulnerabilities and patches. 2022-11-01 08:12:14 -07:00
tccontre fba863203b qakbot_2 2022-10-27 16:07:23 +02:00
mvelazco 744bc50190 adding 4 GCP account takeover detections 2022-10-14 15:03:54 -04:00
patel-bhavin cd70fb50e7 adding gcp configs 2022-10-12 18:09:41 -07:00
pyth0n1c ecb91e050e Branch was auto-updated. 2022-09-15 09:15:44 -07:00
Michael Haag 36ffb11950 Update wineventlog_application.yml 2022-09-12 08:53:24 -06:00
Michael Haag f0324892d5 hunt Windows Event Triggered Image File Execution Options Injection 2022-09-09 06:50:43 -06:00
pyth0n1c 58d617267b Branch was auto-updated. 2022-08-23 12:49:53 -07:00
mvelazco 0a10ef85d6 fixing detection. adding azure_audit macro 2022-08-22 15:36:25 -04:00
Jose Enrique Hernandez 1c178eac79 TR-2349 adding fillnull_value 2022-08-11 15:00:21 -04:00
mvelazco 45ee82ff9e fixing macro 2022-07-12 10:26:48 -04:00
mvelazco ba163055eb adding 2 detections 2022-07-11 17:29:18 -04:00
mvelazco ca443d7b6a adding analytic story and new macro 2022-07-07 18:06:58 -04:00
pyth0n1c cc03d129c3 Branch was auto-updated. 2022-06-21 16:07:17 -07:00
pyth0n1c 25e4a180b1 Branch was auto-updated. 2022-06-21 14:46:28 -07:00
patel-bhavin a92a6f2546 map filter 2022-06-21 12:24:04 -07:00
mhaag-spl 9a25da4387 T1218.007 - MSIExec 2022-06-17 09:36:34 -06:00
pyth0n1c fea6debab2 Branch was auto-updated. 2022-06-09 11:50:11 -07:00
pyth0n1c 3fb342d4c4 Fixed improperly named macro. 
Renamed the macro in the tests
that use that macro. Added the
optional field, "custom_index"
to the test files which MUST
upload data into the _audit
index.  This branch doesn't
support custom_index yet,
but those changes will be merged
soon from another branch.
 2022-06-08 10:31:53 -07:00
pyth0n1c 1ac4d22e6c Branch was auto-updated. 2022-06-06 13:30:42 -07:00
pyth0n1c ba59c5716e Branch was auto-updated. 2022-06-06 13:30:40 -07:00
Lou Stella 607b7a1e37 Updated macro to not rely on field extraction 2022-06-06 14:55:56 -05:00
mvelazco 9941b8009d fixing issue with printservice macro 2022-06-01 13:13:24 -04:00
Rod Soto 522e569ced splkselfsigneddetection 2022-05-26 09:58:07 -07:00
Rod Soto 3f8d20e7b8 macrofix 2022-05-26 07:54:23 -07:00
Rod Soto 89ee09b0f0 fixedmacros 2022-05-26 07:50:10 -07:00
Rod Soto f29d6f9920 renamedsearch 2022-05-26 07:44:46 -07:00
Rod Soto b9d79c5ab1 changednameofdetection 2022-05-26 07:25:17 -07:00
Rod Soto 99d314eeea initialsearchskeleton 2022-05-24 17:29:15 -07:00
Lou Stella 24486a0d8d Cleaned up macro 2022-05-02 15:08:10 -05:00
Lou Stella 6fe602533b Removed detection 2022-05-02 14:30:43 -05:00
Rod Soto a71f12b921 Merge branch 'TR-1828' of github.com:splunk/security_content into TR-1828 2022-04-29 10:18:39 -07:00
Rod Soto c43dc89bbf detectionsforlocalprivescpathtraversal 2022-04-29 10:17:14 -07:00
Lou Stella c61f8670f8 CVE-2021-33845 2022-04-29 11:31:33 -05:00
Lou Stella de6ccbbf9c CVE-2022-27183 2022-04-27 12:44:48 -05:00
Lou Stella b1cabaecb2 Added macro 2022-03-28 09:18:19 -05:00
P4T12ICK 8937a5fec7 MacOS detections 2022-03-04 16:35:30 +01:00
Lou Stella 95b7a634ac DiskShadow + Story Scaffolding 2022-02-17 10:12:50 -06:00