admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,075 Commits 697 Branches 195 Tags
sysmon_fix
Commit Graph

762 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt aa1e29b13f Branch was auto-updated. 2023-09-26 15:47:47 -07:00
Bhavin Patel dee08b262a minor fix 2023-09-22 15:59:07 -07:00
Bhavin Patel 9332e6a24c o365_obs_fix 2023-09-22 15:01:21 -07:00
Bhavin Patel 8a8f5949e5 updating type 2023-09-19 14:35:11 -07:00
Bhavin Patel 43fead6993 Merge branch 'develop' into observable_cloud 2023-08-18 13:28:52 -07:00
pyth0n1c 949e5ed5eb Fix notable typo user_name to user_arm 2023-08-18 12:52:55 -07:00
Bhavin Patel 0eb0f1f9c6 spl fixes 2023-08-18 11:42:07 -07:00
Bhavin Patel baf93793db Merge branch 'develop' into observable_cloud 2023-08-17 17:58:05 -07:00
Gowthamaraj rajendran cca6bb2ceb Edit SPL for Observable 2023-08-17 17:02:59 -07:00
srv-rr-gh-researchbt 05d6a8af3c Branch was auto-updated. 2023-08-17 15:56:24 -07:00
Gowthamaraj rajendran bfa588e61f Merge branch 'TR-3196_AzureAD' of https://github.com/splunk/security_content into TR-3196_AzureAD 2023-08-17 14:32:13 -07:00
Gowthamaraj rajendran df182865b5 Update author 2023-08-17 14:31:47 -07:00
Bhavin Patel fd557070a9 Update azure_ad_multiple_failed_mfa_requests_for_user.yml 2023-08-17 14:18:47 -07:00
Gowthamaraj rajendran 9edfbeeb89 Update detections/cloud/azure_ad_multiple_failed_mfa_requests_for_user.yml 2023-08-17 13:46:12 -07:00
mvelazco f6047aca62 fixing issues 2023-08-17 14:54:29 -04:00
mvelazco 7ff518faa4 update query 2023-08-17 14:48:25 -04:00
mvelazco 47fbcfd21b update message 2023-08-17 14:46:46 -04:00
Bhavin Patel 3f5c79505b minor fix 2023-08-17 10:27:36 -07:00
srv-rr-gh-researchbt 78faa909fb Branch was auto-updated. 2023-08-07 14:22:06 -07:00
srv-rr-gh-researchbt 00f1d3099e Branch was auto-updated. 2023-08-07 14:22:05 -07:00
Bhavin Patel a474fb4456 Update o365_added_service_principal.yml 2023-08-07 14:02:36 -07:00
Bhavin Patel 4c76d950f8 Update o365_added_service_principal.yml 2023-08-07 14:01:06 -07:00
Bhavin Patel 8b4de41253 update mode ongit add . 2023-08-07 13:52:27 -07:00
Bhavin Patel 424ce1f1c5 Update o365_new_federated_domain_added.yml 2023-08-07 13:03:40 -07:00
Bhavin Patel caf4ce8fdb updates 2023-08-07 12:58:36 -07:00
mvelazco 95f96a241b updating descriptions 2023-08-03 16:36:36 -04:00
Gowthamaraj rajendran e89fbc49fc Update detections/cloud/azure_active_directory_high_risk_sign_in.yml 2023-08-03 09:54:39 -07:00
Bhavin Patel 2def6d5476 wrong story 2023-08-03 09:27:44 -07:00
srv-rr-gh-researchbt 5292dc65f2 Branch was auto-updated. 2023-08-02 16:49:17 -07:00
pyth0n1c 583b60d911 Fixing 'null' name field to src_ip 2023-08-02 14:33:48 -07:00
srv-rr-gh-researchbt b347c29747 Branch was auto-updated. 2023-08-02 10:29:17 -07:00
srv-rr-gh-researchbt 4c8b34be57 Branch was auto-updated. 2023-08-02 10:29:10 -07:00
Bhavin Patel 6e983e5abe Update o365_new_federated_domain_added.yml 2023-08-02 08:56:14 -07:00
Bhavin Patel ebcbbd4261 Update o365_excessive_sso_logon_errors.yml 2023-08-02 08:55:42 -07:00
Bhavin Patel 97241fca89 Update o365_added_service_principal.yml 2023-08-02 08:55:25 -07:00
Gowthamaraj rajendran 8f69530eb0 Update detections/cloud/azure_ad_user_immutableid_attribute_updated.yml 2023-08-01 11:10:55 -07:00
Gowthamaraj rajendran 4dbbfbaf7c Update detections/cloud/azure_ad_multiple_failed_mfa_requests_for_user.yml 2023-07-31 15:18:14 -07:00
Gowthamaraj rajendran 79935e6668 Update detections/cloud/azure_ad_successful_powershell_authentication.yml 2023-07-31 14:30:48 -07:00
Bhavin Patel e233b21c65 spl fix 2023-07-28 13:11:50 -05:00
Bhavin Patel 071415c0af observable fix for cloud 2023-07-28 11:46:28 -05:00
Gowthamaraj rajendran 38698912d7 Update detections/cloud/azure_ad_authentication_failed_during_mfa_challenge.yml 2023-07-27 09:32:32 -07:00
Gowthamaraj rajendran 0ae61f3865 Update detections/cloud/azure_ad_successful_single_factor_authentication.yml 2023-07-27 09:03:54 -07:00
Gowthamaraj rajendran 6cc67285b1 Update 2 detections 
1. Azure AD New Custom Domain Added
2. Azure AD New Federated Domain Added
 2023-07-26 07:03:16 -07:00
tccontre 2cbe875ade Update o365_new_federated_domain_added.yml 2023-07-25 20:14:50 +02:00
tccontre 3215e94a4d Update o365_added_service_principal.yml 2023-07-25 20:03:31 +02:00
tccontre 55b7d4633a Update o365_new_federated_domain_added.yml 2023-07-25 19:43:20 +02:00
Gowthamaraj rajendran 780e63d767 Merge branch 'TR-3196_AzureAD' of https://github.com/splunk/security_content into TR-3196_AzureAD 2023-07-24 09:56:56 -07:00
Gowthamaraj rajendran d35835cb85 update datasets/attack_techniques/T1098.001/azure_ad_service_principal_credentials/azure_ad_service_principal_credentials.yml 2023-07-24 09:56:42 -07:00
srv-rr-gh-researchbt 3cd08287d3 Branch was auto-updated. 2023-07-24 09:41:37 -07:00
srv-rr-gh-researchbt bb7fbca3b0 Branch was auto-updated. 2023-07-24 09:41:35 -07:00