admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

1492 Commits

Author SHA1 Message Date
mhaag-spl c9b8eb2985 rasautou 2022-02-15 13:08:59 -07:00
pyth0n1c f159afe268 Branch was auto-updated. 2022-02-15 10:30:19 -08:00
pyth0n1c 81a5583536 Branch was auto-updated. 2022-02-15 10:30:14 -08:00
pyth0n1c 733fa530ac Branch was auto-updated. 2022-02-15 10:30:12 -08:00
pyth0n1c a973a64d2c Branch was auto-updated. 2022-02-15 10:30:11 -08:00
pyth0n1c a687820b95 Branch was auto-updated. 2022-02-15 10:30:10 -08:00
pyth0n1c 45fb0c5afb Branch was auto-updated. 2022-02-15 10:30:09 -08:00
mhaag-spl e241241bf2 ordinal Data 2022-02-15 11:09:57 -07:00
tccontre 2009364a6b linux_lolbin_stage1 2022-02-15 10:55:01 +01:00
d1vious 3a3d0a9922 adding powershell downloadfile but not passing 2022-02-14 21:28:57 -05:00
pyth0n1c 7648c76c0b A handful of easy detection test fixes to get 
the tests to detections to work with the
newest application baseline.
 2022-02-14 16:57:33 -08:00
patel-bhavin 11ab86fdf4 remove detections aalready covered 2022-02-14 15:03:24 -08:00
patel-bhavin c521d07f7d file updates 2022-02-14 14:59:36 -08:00
pyth0n1c eec391c8d8 Branch was auto-updated. 2022-02-14 12:59:24 -08:00
pyth0n1c fdfcbcb987 Branch was auto-updated. 2022-02-14 12:59:18 -08:00
d1vious 73cb36c626 adding working detection 2022-02-14 15:54:12 -05:00
d1vious 0a2618f686 adding 1 detection 2022-02-14 13:40:24 -05:00
d1vious a1d127126a adding template detection 2022-02-14 11:11:47 -05:00
P4T12ICK f7f0b2712d Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content 2022-02-14 16:48:08 +01:00
P4T12ICK 0b5b4e2388 generate API package working 2022-02-14 16:45:27 +01:00
tccontre d96849c449 linux_lolbin_stage1 2022-02-14 10:17:46 +01:00
mhaag-spl 40b34450a0 Windows Schtasks Create Run As System 2022-02-10 09:08:52 -07:00
pyth0n1c e456278647 Branch was auto-updated. 2022-02-09 16:53:37 -08:00
pyth0n1c 17e2f3c94b Branch was auto-updated. 2022-02-09 16:53:36 -08:00
Xiao Lin ee2ee98742 remove duplicate 2022-02-09 16:44:17 -08:00
Xiao Lin 4c5f48c507 add detection for unusal volume of data download 2022-02-09 16:40:45 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
Xiao Lin b31ee54c20 Unusual Volume of Data Download from Internal Server Per Entity 2022-02-09 16:36:10 -08:00
mhaag-spl 2fdc53b85b MSRA shipment 📮 2022-02-09 12:10:58 -07:00
pyth0n1c 5d05c93531 Branch was auto-updated. 2022-02-09 10:11:45 -08:00
mhaag-spl 0fa295eee0 Ordinal 2022-02-09 08:01:49 -07:00
mvelazco c076fbc6be adding analytic story and three new detections 2022-02-07 18:52:34 -05:00
pyth0n1c c44dcfa18b Branch was auto-updated. 2022-02-07 09:39:55 -08:00
pyth0n1c 4ce00fa47f Branch was auto-updated. 2022-02-07 09:39:48 -08:00
pyth0n1c 168ce83d33 Branch was auto-updated. 2022-02-07 09:39:46 -08:00
P4T12ICK 1d880e6b0e merged with latest content and fixed bugs 2022-02-07 15:58:50 +01:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
P4T12ICK 32798f21ab old test file format 2022-02-07 10:50:32 +01:00
P4T12ICK 968d52d2f3 generate ssa package 2022-02-07 10:24:36 +01:00
tccontre e84063b9c2 Merge branch 'reg_yml_analytics_updates_4' of github.com:splunk/security_content into reg_yml_analytics_updates_4 2022-02-04 10:18:24 +01:00
tccontre 2704483cf5 reg_yml_analytics_updates_4 2022-02-04 10:18:17 +01:00
pyth0n1c 0570b32718 Branch was auto-updated. 2022-02-03 11:30:41 -08:00
pyth0n1c 53ac166e20 Branch was auto-updated. 2022-02-03 11:30:40 -08:00
P4T12ICK f9468a908a generate SSA package 2022-02-02 08:41:54 +01:00
mhaag-spl e8dd9051bc pkexec 
Deprecating two detections that identified all rundll32 executions.
Added linux pkexec pwnkit detection.
 2022-02-01 09:52:52 -07:00
pyth0n1c 4da9c3a3a5 Branch was auto-updated. 2022-01-28 13:28:24 -08:00
pyth0n1c 8225480d99 Branch was auto-updated. 2022-01-28 13:28:22 -08:00
Bhavin Patel 14c145c133 Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline 
Potentially malicious code on commandline
 2022-01-28 13:27:59 -08:00
pyth0n1c d8a88d1316 Branch was auto-updated. 2022-01-27 14:55:51 -08:00
pyth0n1c 39240b0bba Branch was auto-updated. 2022-01-27 14:55:49 -08:00