Commit Graph

6556 Commits

Author SHA1 Message Date
P4T12ICK 03cb2bcf30 Merge branch 'security_content_4' of github.com:splunk/security_content into security_content_4 2022-10-20 16:28:18 +02:00
Rod Soto 537c13d063 addedwords 2022-08-30 11:56:41 -07:00
pyth0n1c bd2d1515cb Branch was auto-updated. 2022-08-26 10:01:42 -07:00
Michael Haag f9e770eaa5 Update log4shell_cve_2021_44228_exploitation.yml 2022-08-26 11:01:25 -06:00
Michael Haag b2941ca736 Update linux_persistence_and_privilege_escalation_risk_behavior.yml 2022-08-26 10:58:35 -06:00
Michael Haag c912c7c939 Update linux_persistence_and_privilege_escalation_risk_behavior.yml 2022-08-26 10:58:17 -06:00
pyth0n1c 2bfc066411 Branch was auto-updated. 2022-08-26 09:35:15 -07:00
pyth0n1c 5d8cbb81ca Branch was auto-updated. 2022-08-26 09:35:15 -07:00
patel-bhavin e0f0d48784 minonr text updates 2022-08-26 10:46:51 -05:00
Michael Haag c560685650 Update windows_possible_credential_dumping.yml 2022-08-26 09:18:56 -06:00
tccontre 346e7000e2 fix-desc 2022-08-26 15:39:48 +02:00
Michael Haag 5ddf3c9cf7 Merge branch 'hijack' of https://github.com/splunk/security_content into hijack 2022-08-26 06:01:16 -06:00
Michael Haag c7aba6738e Update windows_remote_access_software_hunt.yml 2022-08-26 06:01:15 -06:00
pyth0n1c 63c3744821 Branch was auto-updated. 2022-08-25 16:25:59 -07:00
pyth0n1c a1d1297de9 Branch was auto-updated. 2022-08-25 16:25:56 -07:00
pyth0n1c 474ea41291 Finishing updates authors, versions,
and dates on searches.
2022-08-25 15:09:13 -07:00
pyth0n1c 8b47ea7b36 Updating the author(s), versions, and
dates for searches in PR.
2022-08-25 15:08:46 -07:00
Michael Haag 11eb0feac6 T1003.001 Update 2022-08-25 08:04:20 -06:00
pyth0n1c 0ae64ea317 Branch was auto-updated. 2022-08-23 13:05:57 -07:00
pyth0n1c a2f1972d54 Branch was auto-updated. 2022-08-23 13:05:56 -07:00
pyth0n1c 4788d6c4e3 Branch was auto-updated. 2022-08-23 13:05:54 -07:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
Michael Haag 13d400611a LSA 🐍 SS 2022-08-22 21:16:12 -06:00
pyth0n1c cfa60f73c5 Branch was auto-updated. 2022-08-22 14:51:16 -07:00
Michael Haag af639ac066 Update windows_dll_search_order_hijacking_hunt_with_sysmon.yml 2022-08-22 14:46:29 -06:00
Michael Haag ed2bc99c46 sysmon fix 2022-08-22 10:14:10 -06:00
Michael Haag fd88c88762 Hijack Libraries 2022-08-19 14:37:29 -06:00
gowthamarajr 75b2daa449 Update msg and ref 2022-08-18 14:09:25 -04:00
gowthamarajr d8f41b1c5d update risk sccore 2022-08-18 11:41:29 -04:00
pyth0n1c 544a496b62 Branch was auto-updated. 2022-08-16 12:39:45 -07:00
pyth0n1c 131da29741 Branch was auto-updated. 2022-08-16 12:39:44 -07:00
d1vious b6e2ff6278 adding updated url 2022-08-16 15:01:17 -04:00
mvelazco 393e7775f1 fixing typo 2022-08-16 12:19:07 -04:00
mvelazco b2332df9a0 Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover 2022-08-16 12:13:02 -04:00
mvelazco d00a4b2ae6 updating detection yaml 2022-08-16 12:13:00 -04:00
pyth0n1c 8a72b522ac Branch was auto-updated. 2022-08-16 08:40:57 -07:00
pyth0n1c 7d441871cb Branch was auto-updated. 2022-08-16 08:40:56 -07:00
d1vious b7e1a5fe94 adding new detections 2022-08-16 11:30:24 -04:00
gowthamarajr 6759feccd4 Add Azure AD Multi-Factor Authentication Disabled 2022-08-15 17:22:54 -04:00
pyth0n1c 31be7c1b3e Branch was auto-updated. 2022-08-12 13:01:04 -07:00
patel-bhavin 1e4b0353f8 search update 2022-08-12 12:46:25 -07:00
patel-bhavin 6969671bf9 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-12 12:41:19 -07:00
patel-bhavin 24cd1afcb8 updatesusing datamodel 2022-08-12 12:34:02 -07:00
gowthamarajr 9b4b2a2d23 Update SPL octave 2022-08-12 08:31:07 -04:00
gowthamarajr ddf0db898d Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301 2022-08-12 07:27:19 -04:00
gowthamarajr bed8043fe8 Add 12 More detections (T1548) 2022-08-12 07:27:16 -04:00
pyth0n1c 084d711188 Branch was auto-updated. 2022-08-11 12:16:22 -07:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
Bhavin Patel 1952b9773b Update aws_credential_access_getpassworddata.yml 2022-08-11 12:10:47 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00