admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,160 Commits 697 Branches 195 Tags
security_content_4
Commit Graph

17160 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK 03cb2bcf30 Merge branch 'security_content_4' of github.com:splunk/security_content into security_content_4 2022-10-20 16:28:18 +02:00
P4T12ICK c9fea4121f WIP security content 4 2022-10-20 16:27:53 +02:00
d1vious 940598b6c2 pass CI testing 2022-09-13 16:52:39 -04:00
d1vious 64908593d4 adds RBA to correlation rule titles 2022-09-13 13:11:51 -04:00
Rod Soto ae92b16c0a Merge pull request #2351 from splunk/fixdescriptionpt 
addedwords
 2022-09-06 14:07:21 -07:00
Rod Soto 73e84a326d fixedpathlog 2022-09-06 13:40:08 -07:00
pyth0n1c e701306956 Branch was auto-updated. 2022-09-02 19:15:35 -04:00
pyth0n1c 95e4eb048c Merge pull request #2359 from splunk/fix_sourcetype_for_linux_kernel_module_detection 
Update linux_kernel_module_enumeration.test.yml

Since this is such a small and simple fix, I have merged it myself without review.
Note that this was just an update to a test file, not a modification to the detection itself.
 2022-09-02 19:15:12 -04:00
pyth0n1c 5c4d054652 Update linux_kernel_module_enumeration.test.yml 
Changing sourcetype from linux_sysmon --> sysmon_linux
 2022-09-02 18:50:48 -04:00
Rod Soto 537c13d063 addedwords 2022-08-30 11:56:41 -07:00
research bot 2adb6ca2ff updating docs and package bits [ci skip] 2022-08-29 17:48:48 +00:00
Bhavin Patel 2dbcc2aa64 Merge pull request #2323 from splunk/eliminate_duplicate_python_requirements_files 
Eliminate duplicate python requirements files
v3.48.0 		2022-08-26 16:04:11 -05:00
pyth0n1c 92e2d97588 Update detection-testing.yml 
For a quotation mark
 2022-08-26 13:52:30 -07:00
pyth0n1c 8d611bb546 Update detection-testing.yml 
Updated to use pip cache
 2022-08-26 13:50:57 -07:00
pyth0n1c baeba5b319 Fixed pathing 
Fixed pathing to venv and 
requirements.txt files.
 2022-08-26 13:34:37 -07:00
pyth0n1c 305a672f51 Delete contentctl_python_platforms_test.yml 
Removed extra testing workflow. This logic will
be integrated into a separate repo at a later time.
 2022-08-26 13:27:01 -07:00
pyth0n1c e5962ef678 Update contentctl_python_platforms_test.yml 
Reduce platforms we are testing
against for now until we can further
improve support.
 2022-08-26 12:22:18 -07:00
pyth0n1c c1be892bd1 Merge branch 'develop' into eliminate_duplicate_python_requirements_files 2022-08-26 12:09:54 -07:00
Bhavin Patel 9f2fa92efd Merge pull request #2336 from splunk/hijack 
HijackThis
 2022-08-26 13:42:17 -05:00
pyth0n1c bd2d1515cb Branch was auto-updated. 2022-08-26 10:01:42 -07:00
Michael Haag f9e770eaa5 Update log4shell_cve_2021_44228_exploitation.yml 2022-08-26 11:01:25 -06:00
Bhavin Patel 19b3efc01a Merge pull request #2321 from splunk/TR_2301 
Add Linux Living off the land Privilege Escalation Detections
 2022-08-26 12:01:19 -05:00
Michael Haag b2941ca736 Update linux_persistence_and_privilege_escalation_risk_behavior.yml 2022-08-26 10:58:35 -06:00
Michael Haag c912c7c939 Update linux_persistence_and_privilege_escalation_risk_behavior.yml 2022-08-26 10:58:17 -06:00
pyth0n1c 2bfc066411 Branch was auto-updated. 2022-08-26 09:35:15 -07:00
pyth0n1c 5d8cbb81ca Branch was auto-updated. 2022-08-26 09:35:15 -07:00
Bhavin Patel a8097ab665 Merge pull request #2341 from splunk/fix-desc 
fix-desc
 2022-08-26 11:34:56 -05:00
patel-bhavin e0f0d48784 minonr text updates 2022-08-26 10:46:51 -05:00
Michael Haag c560685650 Update windows_possible_credential_dumping.yml 2022-08-26 09:18:56 -06:00
tccontre 346e7000e2 fix-desc 2022-08-26 15:39:48 +02:00
Michael Haag 5ddf3c9cf7 Merge branch 'hijack' of https://github.com/splunk/security_content into hijack 2022-08-26 06:01:16 -06:00
Michael Haag c7aba6738e Update windows_remote_access_software_hunt.yml 2022-08-26 06:01:15 -06:00
pyth0n1c 63c3744821 Branch was auto-updated. 2022-08-25 16:25:59 -07:00
pyth0n1c a1d1297de9 Branch was auto-updated. 2022-08-25 16:25:56 -07:00
Bhavin Patel cfaf15a916 Merge pull request #2337 from splunk/100_percent_pass_rate 
100 percent pass rate
 2022-08-25 18:25:35 -05:00
pyth0n1c 474ea41291 Finishing updates authors, versions, 
and dates on searches.
 2022-08-25 15:09:13 -07:00
pyth0n1c 8b47ea7b36 Updating the author(s), versions, and 
dates for searches in PR.
 2022-08-25 15:08:46 -07:00
Michael Haag 11eb0feac6 T1003.001 Update 2022-08-25 08:04:20 -06:00
pyth0n1c 0ae64ea317 Branch was auto-updated. 2022-08-23 13:05:57 -07:00
pyth0n1c a2f1972d54 Branch was auto-updated. 2022-08-23 13:05:56 -07:00
pyth0n1c 4788d6c4e3 Branch was auto-updated. 2022-08-23 13:05:54 -07:00
Bhavin Patel 0c0fc259b6 Merge pull request #2325 from splunk/Update_Azure_Account_Takeover 
Update Azure AD Account Takeover Analytic Story
 2022-08-23 15:05:18 -05:00
pyth0n1c 122dee07d2 Branch was auto-updated. 2022-08-23 13:02:42 -07:00
pyth0n1c 889cdf3bc5 Branch was auto-updated. 2022-08-23 13:02:39 -07:00
pyth0n1c 748e952751 Branch was auto-updated. 2022-08-23 13:02:38 -07:00
pyth0n1c 46bd2c51d6 Branch was auto-updated. 2022-08-23 13:02:36 -07:00
Bhavin Patel 157a434a53 Merge pull request #2335 from yaleman/patch-1 
Grammar correction in documentation template
 2022-08-23 15:02:11 -05:00
pyth0n1c 528cb5ff9d Branch was auto-updated. 2022-08-23 13:01:14 -07:00
pyth0n1c ddf891514d Branch was auto-updated. 2022-08-23 13:01:13 -07:00
pyth0n1c 05c4965c2d Branch was auto-updated. 2022-08-23 13:01:12 -07:00