 Lou Stella
|
986716a55f
|
IceID -> IcedID
|
2022-09-22 09:20:02 -05:00 |
|
|
Michael Haag
|
2fa429127b
|
CISA AA22-257A tag
|
2022-09-15 10:07:38 -06:00 |
|
|
d1vious
|
b7e1a5fe94
|
adding new detections
|
2022-08-16 11:30:24 -04:00 |
|
|
Michael Haag
|
4d84254970
|
Analytic Stories + Tagging
|
2022-07-27 10:29:47 -06:00 |
|
|
Bhavin Patel
|
3f64bc5bf0
|
Merge pull request #2294 from splunk/issue_2254_remove_cloud_datamodel_detections
fixing issue 2254 removing deprecated datamodel detections
|
2022-07-19 10:03:40 -07:00 |
|
|
d1vious
|
3c62e835df
|
removing
|
2022-07-19 12:59:03 -04:00 |
|
|
pyth0n1c
|
4a8c5d9a39
|
Branch was auto-updated.
|
2022-06-29 12:59:25 -07:00 |
|
|
pyth0n1c
|
dcfebdea91
|
Merging latest develop into 4104allday branch in prep for opening PR.
|
2022-06-27 17:07:31 -07:00 |
|
|
pyth0n1c
|
d40ca09d61
|
Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface.
|
2022-06-23 14:19:17 -07:00 |
|
|
Lou Stella
|
863259df93
|
Updated per #2235
|
2022-06-15 13:49:56 -05:00 |
|
|
pyth0n1c
|
c16ccc1eec
|
Branch was auto-updated.
|
2022-05-19 21:21:59 -04:00 |
|
|
pyth0n1c
|
e045068eba
|
Branch was auto-updated.
|
2022-05-19 21:21:58 -04:00 |
|
|
d1vious
|
441ddacfb3
|
adding insider threat, fixing minor display bug
|
2022-05-19 21:19:35 -04:00 |
|
|
pyth0n1c
|
38d32c3341
|
Branch was auto-updated.
|
2022-05-16 13:06:58 -04:00 |
|
|
pyth0n1c
|
1b881ee6a5
|
Branch was auto-updated.
|
2022-05-03 17:15:21 -07:00 |
|
|
pyth0n1c
|
900bd9e7e2
|
Updated a large number of the links in other detections. Also, adjusted the number of threads that run and tweaked the timeout time.
|
2022-05-03 10:34:10 -07:00 |
|
|
Rod Soto
|
92a782df3c
|
fixedtagcb
|
2022-05-03 09:45:47 -07:00 |
|
|
pyth0n1c
|
578e6bb088
|
Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.
|
2022-05-02 17:12:50 -07:00 |
|
|
pyth0n1c
|
cde6d216e3
|
Branch was auto-updated.
|
2022-05-02 13:07:05 -07:00 |
|
|
patel-bhavin
|
489829b2a6
|
Merge branch 'develop' into cyclopsblink_fix
|
2022-05-02 11:06:38 -07:00 |
|
|
mhaag-spl
|
d342b02b71
|
Update exchange_powershell_module_usage.yml
|
2022-05-02 06:32:55 -06:00 |
|
|
mhaag-spl
|
63b83bfc7a
|
Update exchange_powershell_module_usage.yml
|
2022-05-02 06:32:06 -06:00 |
|
|
tccontre
|
1106c798a3
|
cyclopsblink_fix
|
2022-04-29 17:47:59 +02:00 |
|
|
d1vious
|
fdcd471d5d
|
moving to experimental
|
2022-04-14 16:37:54 -04:00 |
|
|
pyth0n1c
|
ec2c1bff73
|
Branch was auto-updated.
|
2022-04-05 13:12:38 -07:00 |
|
|
Rod Soto
|
901a73aa5f
|
secondbatchwinprivesctaghermeticwiper
|
2022-04-05 08:02:47 -07:00 |
|
|
Rod Soto
|
8298acf18e
|
powershelldetectionstaghermetic
|
2022-03-31 15:29:51 -07:00 |
|
|
pyth0n1c
|
779fc5ff47
|
Branch was auto-updated.
|
2022-03-28 17:02:28 -07:00 |
|
|
patel-bhavin
|
16017f3304
|
bug fix
|
2022-03-28 16:11:04 -07:00 |
|
|
mvelazco
|
f58ae1f243
|
Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2
|
2022-03-22 12:48:11 -04:00 |
|
|
mvelazco
|
4e5d5926b3
|
minor changes
|
2022-03-22 12:48:09 -04:00 |
|
|
patel-bhavin
|
99829330c1
|
all the changes again
|
2022-03-16 13:35:48 -07:00 |
|
|
P4T12ICK
|
5dd13ea167
|
fix broken detections
|
2022-03-14 15:51:05 +01:00 |
|
|
P4T12ICK
|
e6c8254ede
|
Added automaticc generation of finding report
|
2022-03-14 12:12:48 +01:00 |
|
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
|
P4T12ICK
|
886da3c92e
|
merged with develop
|
2022-03-04 14:35:50 +01:00 |
|
|
P4T12ICK
|
f76df6b741
|
fixed validate issues
|
2022-03-04 14:15:47 +01:00 |
|
|
patel-bhavin
|
a67a8a4da6
|
Merge branch 'develop' into refactored_security_content
|
2022-03-03 12:51:11 -08:00 |
|
|
research bot
|
67ecd29d53
|
updating docs and package bits [ci skip]
|
2022-03-03 18:22:29 +00:00 |
|
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
|
pyth0n1c
|
0e779f6491
|
Branch was auto-updated.
|
2022-02-25 12:29:59 -08:00 |
|
|
Lou Stella
|
d3322283c3
|
Added risk_severity
|
2022-02-25 13:49:21 -06:00 |
|
|
Lou Stella
|
9f65b5d0d4
|
Updated required fields
|
2022-02-25 13:48:04 -06:00 |
|
|
Xiao Lin
|
7b8f6b22e2
|
update search
|
2022-02-25 10:03:01 -08:00 |
|
|
Lou Stella
|
760747cea2
|
Small update to body
|
2022-02-25 10:46:46 -06:00 |
|
|
Lou Stella
|
ca2163ae8c
|
Moved to Experimental
|
2022-02-25 10:40:46 -06:00 |
|
|
research bot
|
5c8268f137
|
updating docs and package bits [ci skip]
|
2022-02-15 23:10:10 +00:00 |
|
|
Bhavin Patel
|
baab603657
|
Update ssa___unusual_volume_download_from_internal_server.yml
|
2022-02-09 16:45:28 -08:00 |
|
|
Xiao Lin
|
a1e6d3e225
|
update search string
|
2022-02-09 16:36:10 -08:00 |
|