admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

1492 Commits

Author SHA1 Message Date
mhaag-spl 249fd0a549 Update Certutil 
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
 2021-03-24 15:15:47 -06:00
github-actions[bot] 25a1febeb0 Branch was auto-updated. 2021-03-23 16:20:50 +00:00
github-actions[bot] 71c628ac17 Branch was auto-updated. 2021-03-23 16:20:46 +00:00
P4T12ICK 617ec011d6 ssa detection testing 2021-03-23 14:52:10 +01:00
P4T12ICK e08b1ab9a9 testing ssa detections 2021-03-23 13:09:50 +01:00
P4T12ICK e3e4e2b512 bug fixes test files 2021-03-23 11:06:15 +01:00
P4T12ICK f778e43bef Merge branch 'develop' into ssa_detection_testing 2021-03-23 09:00:22 +01:00
github-actions[bot] d7b4d0f818 Branch was auto-updated. 2021-03-23 07:59:39 +00:00
github-actions[bot] 0949eb9272 Branch was auto-updated. 2021-03-23 07:59:33 +00:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
github-actions[bot] 3fa0fbab3b Branch was auto-updated. 2021-03-22 17:51:49 +00:00
github-actions[bot] b4c5d60a8f Branch was auto-updated. 2021-03-22 17:51:48 +00:00
tcontreras 08a0b64eb6 clop_test_file 2021-03-22 11:57:42 +01:00
tcontreras ba33452139 clop_test_file 2021-03-22 11:53:18 +01:00
tcontreras b42ef50322 clop_test_file 2021-03-22 11:45:21 +01:00
P4T12ICK 5fc3209293 SSA detection tests updated 2021-03-22 09:22:44 +01:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00
Ignacio Bermudez Corrales 0ec2001838 Renaming test .yaml -> .yml | No events should come out of the detection 2021-03-19 13:52:34 -07:00
tcontreras b63e3c8177 detections and test data 2021-03-19 17:03:57 +01:00
P4T12ICK 7bad2fa975 new detection tests 2021-03-19 15:10:26 +01:00
github-actions[bot] 886b876e73 Branch was auto-updated. 2021-03-19 13:24:19 +00:00
github-actions[bot] cf44d1ac60 Branch was auto-updated. 2021-03-19 13:24:18 +00:00
P4T12ICK 6355bb7f72 small bug fixes 2021-03-19 13:30:13 +01:00
P4T12ICK 36f63418f0 detection testing SSA 2021-03-19 10:16:58 +01:00
P4T12ICK d13a1896ef detection testing SSA 2021-03-19 09:37:18 +01:00
Michael Haag b59430ab5d Merge branch 'develop' into mhaag 2021-03-18 21:24:34 -06:00
mhaag-spl 34e69271f3 Updated Detect Exchange Web Shell 
Updated Detect Exchange Web Shell based on data
 2021-03-18 21:00:09 -06:00
bpatel 78903f3fe9 test files 2021-03-18 12:41:00 -07:00
github-actions[bot] 6fb099da19 Branch was auto-updated. 2021-03-18 16:54:44 +00:00
P4T12ICK 4741fc9cca updated test file 2021-03-16 12:50:06 +01:00
P4T12ICK d062c34f80 Merge branch 'develop' into patrick_test_branch 2021-03-16 11:52:11 +01:00
github-actions[bot] 511a68e991 Branch was auto-updated. 2021-03-12 17:09:00 +00:00
mhaag-spl 244284f5ae updating paths 2021-03-12 09:51:51 -07:00
github-actions[bot] 9094f63b45 Branch was auto-updated. 2021-03-12 16:39:38 +00:00
mhaag-spl 6687c01eb9 Update unified_messaging_service_spawning_a_process.test.yml 2021-03-12 08:16:15 -07:00
mhaag-spl 8be17b4404 Update unified_messaging_service_spawning_a_process.test.yml 2021-03-11 13:12:21 -07:00
mhaag-spl 2643be22ff w3wp spawning shell 2021-03-11 12:34:21 -07:00
mhaag-spl 69d73f3dc1 unified messaging service spawning a shell 2021-03-11 12:12:52 -07:00
github-actions[bot] b6b44199a8 Branch was auto-updated. 2021-03-09 00:24:29 +00:00
mhaag-spl 962925bbea Create detect_mshta_renamed.test.yml 2021-03-08 16:27:06 -07:00
github-actions[bot] 089431e5a0 Branch was auto-updated. 2021-03-08 17:41:52 +00:00
mhaag-spl e6ce96e5a1 Detect Mimikatz Using Loaded Images 2021-03-05 13:10:59 -07:00
Bhavin Patel ea9a450905 Merge branch 'develop' into aws_priv_escalation 2021-03-04 11:45:16 -08:00
mhaag-spl 0aa830c26d fixes 2021-03-03 14:54:56 -07:00
mhaag-spl ac49f9ab9e HAFNIUM and more updates 2021-03-03 14:10:11 -07:00
bpatel b49dc011b0 create access key detection 2021-03-02 16:21:35 -08:00
bpatel 82fb0d6b1c second detection 2021-03-02 15:21:52 -08:00
mhaag-spl f408036e4a Create windows_disableantispyware_reg.test.yml 2021-03-02 15:21:55 -07:00
mhaag-spl e6fd5ba6c7 Update any_powershell_downloadstring.test.yml 2021-03-02 15:02:51 -07:00
mhaag-spl faca9affeb Update suspicious_scheduled_task_from_public_directory.test.yml 2021-03-02 15:01:54 -07:00