admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,075 Commits 697 Branches 195 Tags
sysmon_fix
Commit Graph

155 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 9bfad7fead Branch was auto-updated. 2023-09-26 14:10:25 -07:00
Bhavin Patel b2d1f4f1ad minor change for creating PR 2023-09-26 14:03:04 -07:00
srv-rr-gh-researchbt 273fdf3dfd Branch was auto-updated. 2023-09-20 12:56:43 -07:00
Bhavin Patel 82b699b444 updating tor detection 2023-09-20 11:55:18 -07:00
Bhavin Patel 566b6b54ea update baseline time and text 2023-09-08 10:13:28 -07:00
Bhavin Patel 6f37415294 Merge branch 'develop' into craftycleanup 2023-06-22 14:40:31 -07:00
Bhavin Patel bc1871025a Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml 2023-06-12 14:41:43 -07:00
Bhavin Patel 4293a508af Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml 
Triggering CI
 2023-06-12 14:16:38 -07:00
Namratha Sreekanta 05885bc6f2 changing the search 2023-06-08 14:00:28 -07:00
Namratha Sreekanta bc20c9c2c0 addressing review feedback 2023-06-08 12:43:07 -07:00
Michael Haag c541aacf10 T1133 Tags + description updates 2023-06-01 13:44:32 -06:00
patel-bhavin 2f947af695 fix up yaml for validation 2023-05-23 14:07:22 -07:00
Namratha Sreekanta d828cd5d6b adding json file 2023-05-19 13:42:07 -07:00
Namratha Sreekanta 0ef5ed01d5 Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection 2023-05-19 13:30:38 -07:00
Namratha Sreekanta e4a676f792 changing spl and notebook for feature transformations 2023-05-19 13:24:00 -07:00
srv-rr-gh-researchbt 1007eb9a16 Branch was auto-updated. 2023-05-03 09:41:02 -07:00
Namratha Sreekanta 6139b72dac initial commit for dns data exfil 2023-05-02 14:25:07 -07:00
srv-rr-gh-researchbt c79980cce1 Branch was auto-updated. 2023-05-01 15:27:31 -07:00
patel-bhavin 6a5b6acea5 carry over 2023-05-01 12:07:20 -07:00
P4T12ICK 97a1ec3bd5 bug fix validation 2023-04-28 13:53:52 +02:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin dc44d23e81 issue 2568 fix 2023-04-17 17:19:34 -07:00
pyth0n1c 67d09a1c52 Fixing some syntactic errors with a number of detections. 2023-04-12 10:09:43 -07:00
P4T12ICK 153b2d44ae merged with develop 2023-03-16 09:44:35 +01:00
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
P4T12ICK ffa1210a00 merged with develop 2023-02-02 09:15:59 +01:00
P4T12ICK a23b2470fe Converted detections v3 to v4 2023-01-20 11:12:47 +01:00
P4T12ICK fd0c8b349f updated tags 2023-01-09 09:33:30 +01:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
Michael Haag b7607dae86 fixes 2022-11-17 10:07:00 -07:00
Michael Haag 99af3c9014 ngrok updates 2022-11-16 13:02:52 -07:00
Michael Haag fcb888cb27 Reverse Network Proxy 2022-11-16 12:39:48 -07:00
pyth0n1c d40ca09d61 Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface. 2022-06-23 14:19:17 -07:00
Jose Enrique Hernandez 0288c10f70 Update splunk_identified_ssl_tls_certificates.yml 2022-06-14 08:18:53 -04:00
Lou Stella a0967fe429 Workbook how_to_implement & references 2022-06-13 16:49:49 -05:00
Michael Haag 66d7814fed Update splunk_identified_ssl_tls_certificates.yml 2022-06-13 15:43:18 -06:00
Michael Haag 46cd276adf Update splunk_identified_ssl_tls_certificates.yml 2022-06-13 15:40:49 -06:00
d1vious 97d51b71bf adding cves 2022-06-01 17:03:00 -04:00
mhaag-spl 6ddebf3a2d ssl tls ver 2022-05-26 12:28:21 -06:00
pyth0n1c 2557d21335 Branch was auto-updated. 2022-05-16 14:25:41 -04:00
mhaag-spl 77abe77035 F5 BIG-IP 2022-05-10 07:20:46 -06:00
pyth0n1c 578e6bb088 Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links. 2022-05-02 17:12:50 -07:00
d1vious fdcd471d5d moving to experimental 2022-04-14 16:37:54 -04:00
P4T12ICK 5dd13ea167 fix broken detections 2022-03-14 15:51:05 +01:00
P4T12ICK e6c8254ede Added automaticc generation of finding report 2022-03-14 12:12:48 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 886da3c92e merged with develop 2022-03-04 14:35:50 +01:00