Commit Graph

12301 Commits

Author SHA1 Message Date
Subhakar Suryadevara e2c769b5f5 Minor change 2021-12-06 09:53:42 -08:00
Subhakar Suryadevara c363a86abc Debugging failed tests 2021-12-03 16:49:24 -08:00
research bot 750c81fb5b updating docs and package bits [ci skip] 2021-12-02 18:50:01 +00:00
Bhavin Patel fa2a204672 Merge pull request #1858 from splunk/ssa_why_java_why
Extra filters for java
v3.31.0
2021-12-02 09:01:40 -08:00
David Dorsey 0df7bf2cdc Extra filters for java 2021-12-02 08:54:12 -06:00
Bhavin Patel 57c1ef30dd Merge pull request #1857 from splunk/RegistryDetectionFixes
Registry detection fixes
2021-12-01 15:41:01 -08:00
pyth0n1c 3a8dc379bd Restoring modified files because they do not work with the new sysmon. Now, all of the detections in this branch work. 2021-12-01 14:36:49 -08:00
Bhavin Patel cb053c1847 Merge pull request #1771 from splunk/ssa_why_chrome_why
Ssa why chrome why
2021-12-01 12:15:54 -08:00
David Dorsey 76858554a3 Merge branch 'develop' into ssa_why_chrome_why 2021-12-01 14:04:22 -06:00
Michael Haag a5d81f3cd5 Merge pull request #1835 from splunk/ssa_minor_update
Ssa minor update
2021-12-01 12:42:32 -07:00
Michael Haag 6999693e3b fixed 2021-12-01 12:34:20 -07:00
Michael Haag f0157408a7 Updated some words 2021-12-01 12:28:38 -07:00
David Dorsey 3872168920 Merge branch 'ssa_why_chrome_why' of github.com:splunk/security-content into ssa_why_chrome_why 2021-12-01 13:15:52 -06:00
David Dorsey 31342ab905 Fixed data model 2021-12-01 13:15:39 -06:00
Michael Haag 7300bfe836 Update ssa___resize_shadowstorage_volume.yml 2021-12-01 11:50:33 -07:00
Bhavin Patel 20317e465f Branch was auto-updated. 2021-12-01 10:31:32 -08:00
Bhavin Patel 6dd8123c0d Branch was auto-updated. 2021-12-01 10:31:28 -08:00
Bhavin Patel f8c2d3a4ba Merge pull request #1852 from splunk/rclone
Rclone Haagrid
2021-12-01 10:31:09 -08:00
David Dorsey 87f62f2177 Fixed data model 2021-11-30 22:23:31 -06:00
Bhavin Patel 78be05b638 Branch was auto-updated. 2021-11-30 16:19:11 -08:00
Bhavin Patel 46b368785a Branch was auto-updated. 2021-11-30 16:19:10 -08:00
Bhavin Patel dd2475c402 Branch was auto-updated. 2021-11-30 16:19:10 -08:00
pyth0n1c a93687e353 Merge pull request #1843 from splunk/issue_1839
Issue 1839 - tested and passed
2021-11-30 16:18:49 -08:00
Bhavin Patel 698356d345 Branch was auto-updated. 2021-11-30 12:02:08 -08:00
Bhavin Patel 991d5ab905 Branch was auto-updated. 2021-11-30 12:02:06 -08:00
Bhavin Patel 78fec6e11e Branch was auto-updated. 2021-11-30 12:02:05 -08:00
Bhavin Patel 3bdbba50e0 Branch was auto-updated. 2021-11-30 12:02:05 -08:00
Bhavin Patel c5554e4dc8 Merge pull request #1850 from splunk/double-fix
Update detect_html_help_renamed.yml
2021-11-30 12:01:40 -08:00
root e1947f155a Added detection testing service results inDetect RClone Command-Line Usage 2021-11-30 12:56:06 +00:00
Michael Haag b87061f794 rookie mistake 2021-11-30 05:34:29 -07:00
Michael Haag bae2e35b1c fix 2021-11-29 16:19:21 -07:00
mhaag-spl 81e952185e Rclone Haagrid 2021-11-29 15:55:38 -07:00
mhaag-spl fe7817f28a Update detect_html_help_renamed.yml
Fixing issue #1849
2021-11-29 13:43:41 -07:00
Bhavin Patel 024a0be7ff Branch was auto-updated. 2021-11-25 05:31:55 -08:00
Bhavin Patel bac32282a4 Branch was auto-updated. 2021-11-25 05:31:54 -08:00
Bhavin Patel 73ddbbfd27 Branch was auto-updated. 2021-11-25 05:31:53 -08:00
P4T12ICK 49170484ea Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip
Ssa anomalous usage of archive tool
2021-11-25 14:31:31 +01:00
Bhavin Patel 80ba7482e4 Branch was auto-updated. 2021-11-25 05:07:25 -08:00
Bhavin Patel 0bd09d6126 Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel c778a2e35c Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel b25f7b80c3 Branch was auto-updated. 2021-11-25 05:07:23 -08:00
tccontre 2451defe2a Merge pull request #1848 from splunk/remcos_evasion
remcos_evasion
2021-11-25 14:07:03 +01:00
Detection Testing Service 6d8151d915 Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:13:52 +00:00
root 1b28033819 Added detection testing service results inPowershell Windows Defender Exclusion Commands 2021-11-25 12:13:51 +00:00
Detection Testing Service 724101f8ed Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:00:54 +00:00
root 4ed89e21a2 Added detection testing service results inWindows Defender Exclusion Registry Entry 2021-11-25 12:00:54 +00:00
root b6bb18d20c Added detection testing service results inAdd or Set Windows Defender Exclusion 2021-11-25 11:55:39 +00:00
tccontre dfd210cf29 remcos_evasion 2021-11-25 12:27:39 +01:00
Bhavin Patel 49e82e39ff Branch was auto-updated. 2021-11-25 01:25:30 -08:00
Bhavin Patel 6d291d2600 Branch was auto-updated. 2021-11-25 01:25:29 -08:00