admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,445 Commits 697 Branches 195 Tags
powerwolf
Commit Graph

11 Commits

Author SHA1 Message Date
Eric McGinnis c86a0bfea8 Fixed a handful of issues with observables and messages and spacing in content. 2023-10-23 19:49:17 +00:00
pyth0n1c 96c931eda9 use macro instead of using index and sourcetype directly. 2023-10-02 12:45:09 -07:00
pyth0n1c f6dc49e1d3 add another filter so that we do not flag 
scripts running out of c:
 2023-09-28 16:18:50 -07:00
pyth0n1c 732aec3f95 Delete detection and migrate 
logic and documentation to risky
command lookup file. Update macro
to point to new risky command csv.
Fiox some opservables.
 2023-09-28 14:51:28 -07:00
pyth0n1c f76dfe4277 Minor updates to improve notables 
and result rendering.
 2023-09-28 13:37:36 -07:00
pyth0n1c 46f183d8b7 Parse out fields for runshellscript search 2023-09-26 09:19:50 -07:00
pyth0n1c f37ada7cf9 fix search and notable 2023-09-25 15:02:52 -07:00
pyth0n1c f37be10450 Add timing to searches 2023-09-25 14:39:21 -07:00
pyth0n1c 0d91f17892 fix search typos 2023-09-18 07:44:25 -07:00
pyth0n1c c4a7ae08a0 associated datasets with detections 2023-09-13 17:36:26 -07:00
pyth0n1c 59e0e8601e Initial commit of draft searches 
before adding datasets
 2023-09-13 13:17:58 -07:00