admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
24,684 Commits 697 Branches 195 Tags
sysm_source
Commit Graph

40 Commits

Author SHA1 Message Date
research-bot d1c7e1b6e5 udpating sysmon source 2024-10-30 18:42:30 -07:00
Bhavin Patel 0bb378b19b updating drilldowns 2024-10-24 14:13:05 -07:00
Bhavin Patel 8b03f3d58f updating all detections with quotes 2024-10-24 14:08:37 -07:00
Bhavin Patel 7bc11be7dc updating drilldown_formatting 2024-10-23 18:25:39 -07:00
Bhavin Patel 385ac7adc1 remove end hours 2024-10-23 17:52:24 -07:00
Bhavin Patel cf169b3de0 adding drilldowns to all 2024-09-30 22:04:57 +05:30
Patrick 9e0d8426c1 improved data source field 2024-07-16 14:06:31 +02:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel 196d618f2f Release v4.15.0 2023-11-01 19:24:56 +00:00
tccontre ace4c91d2a warzone_rat 2023-07-26 14:53:43 +02:00
P4T12ICK 8b990a6ea6 merged with develop 2023-03-23 10:35:34 +01:00
Michael Haag 6eb57e394e Haag is Back 🎆 2023-03-10 06:21:30 -07:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
Michael Haag 03e585fb7c Added MSAccess 2023-02-15 07:19:07 -07:00
Bhavin Patel ddc779103b Update office_application_drop_executable.yml 2023-02-02 16:30:42 -08:00
patel-bhavin f50008a88f adding commits 2023-02-02 13:42:18 -08:00
P4T12ICK ffa1210a00 merged with develop 2023-02-02 09:15:59 +01:00
Michael Haag 42f4eefeae more onenotes 2023-01-24 10:20:15 -07:00
Michael Haag 11ff0fa87d onenote 2023-01-24 06:38:23 -07:00
P4T12ICK fd0c8b349f updated tags 2023-01-09 09:33:30 +01:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
tccontre 66cb904a18 Update office_application_drop_executable.yml 2022-09-21 12:46:26 +02:00
tccontre 888a148bbb agent-with-tesla-1 2022-09-19 11:28:07 +02:00
pyth0n1c 578e6bb088 Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links. 2022-05-02 17:12:50 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK 6e34aa9cc8 fixed more detections 2022-01-18 13:58:57 +01:00
P4T12ICK 338f22f7e2 fixed more detections 2022-01-18 13:13:30 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
root 275c33f0e0 Added detection testing service results inOffice Application Drop Executable 2021-11-09 13:01:06 +00:00
tccontre dbce330eb0 fix_issues 2021-11-09 13:14:31 +01:00
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5 
CARS_UPDATE_MITRE_ID_B5
 2021-10-13 11:20:47 +02:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
root cbb2198d65 Added detection testing service results inOffice Application Drop Executable 2021-09-16 14:48:10 +00:00
tccontre ad6761f6b9 Merge branch 'fin7' of github.com:splunk/security_content into fin7 2021-09-16 16:00:27 +02:00
tccontre b869a0de99 fin7 2021-09-16 15:54:32 +02:00
root f42e2cd255 Added detection testing service results inOffice Application Drop Executable 2021-09-15 13:03:19 +00:00
tccontre d8d8c4e44c FIN7 2021-09-14 12:17:55 +02:00