Commit Graph

14636 Commits

Author SHA1 Message Date
mhaag-spl 1eb1f40ae0 esentutil
Related to Conti leaks
2021-08-18 10:47:58 -06:00
github-actions[bot] 628ed6b76b Branch was auto-updated. 2021-08-18 16:24:27 +00:00
github-actions[bot] 82dd3f6540 Branch was auto-updated. 2021-08-18 16:24:23 +00:00
github-actions[bot] 1919c9f073 Branch was auto-updated. 2021-08-18 16:24:23 +00:00
github-actions[bot] f2b75a2e7d Branch was auto-updated. 2021-08-18 16:24:22 +00:00
Bhavin Patel 232895de96 Merge pull request #1566 from splunk/pretty_yaml_error
fix for type
v3.27.0
2021-08-18 09:24:04 -07:00
patel-bhavin 19fad3da58 fix for type 2021-08-18 09:13:13 -07:00
mhaag-spl 09f29ad081 macros 2021-08-18 09:50:08 -06:00
Detection Testing Service 02a22a0564 Merge branch 'conti_leak' of https://github.com/splunk/security_content into conti_leak 2021-08-18 15:48:22 +00:00
root a0fa0a2610 Added detection testing service results in7zip CommandLine To SMB Share Path 2021-08-18 15:48:21 +00:00
root 65273870d1 Added detection testing service results inUAC Bypass With Colorui COM Object 2021-08-18 15:46:05 +00:00
tccontre 5f87d79e1c Merge branch 'dev_ops_uc' of github.com:splunk/security_content into dev_ops_uc 2021-08-18 15:58:55 +02:00
tccontre 1bde88fc3f dev_ops_uc 2021-08-18 15:58:35 +02:00
github-actions[bot] cc928f010d Branch was auto-updated. 2021-08-18 13:39:07 +00:00
github-actions[bot] de4254985b Branch was auto-updated. 2021-08-18 13:39:05 +00:00
github-actions[bot] 483bc07b98 Branch was auto-updated. 2021-08-18 13:39:04 +00:00
github-actions[bot] 3970a09387 Branch was auto-updated. 2021-08-18 13:39:03 +00:00
P4T12ICK ab3915f56d Merge pull request #1565 from splunk/aws_ecr_detections
AWS ECR detections
2021-08-18 15:38:43 +02:00
P4T12ICK 3270cdc014 aws ecr dataset 2021-08-18 14:53:28 +02:00
P4T12ICK 2075f8a9fd AWS ECR detections 2021-08-18 14:07:45 +02:00
P4T12ICK 1cae849652 AWS ECR detections 2021-08-18 13:04:30 +02:00
P4T12ICK 51967d9f89 AWS ECR detections 2021-08-18 13:00:09 +02:00
P4T12ICK c10d11aa94 AWS ECR detections 2021-08-18 12:57:22 +02:00
mhaag-spl d648d525b3 macro'd bitsadmin 2021-08-17 15:20:40 -06:00
mhaag-spl 71481634a3 macro'd netsh 2021-08-17 15:14:35 -06:00
mhaag-spl ba6c98c292 macro'd certutil 2021-08-17 15:00:51 -06:00
mhaag-spl e1752d3440 macro'd hh 2021-08-17 14:29:16 -06:00
mhaag-spl 9b71656519 reg + fix 2021-08-17 14:23:58 -06:00
pyth0n1c 169a192f2b Removed baselines from the pretty_yaml.py script. 2021-08-17 13:13:23 -07:00
pyth0n1c fa7ac7bfbf Removed a line from pretty_yaml that was causing an error because the format of the file changed. 2021-08-17 13:10:27 -07:00
mhaag-spl 5dc0e8f211 macro'd net 2021-08-17 13:56:57 -06:00
mhaag-spl a1a670203f macro'd mshta 2021-08-17 13:38:11 -06:00
mhaag-spl ad88e9a0ff macro'd regsvr32 2021-08-17 13:27:48 -06:00
mhaag-spl 3251fcc1f6 macrod rundll32 2021-08-17 13:21:24 -06:00
pyth0n1c 291af648bb Make sure we store report on appsinpect failure. 2021-08-17 12:11:56 -07:00
pyth0n1c 33640f3b7d Added missing autoescape to new code in generate.py 2021-08-17 11:48:32 -07:00
pyth0n1c b3f7e10005 Apparently I forgot to save the files after changing them, so that changes actually weren't committed. Let's try again... 2021-08-17 11:36:24 -07:00
pyth0n1c 0b3569d714 Massive merge from upstream. Should be good now. 2021-08-17 11:31:24 -07:00
mhaag-spl 644747d578 macro'd reg cmd 2021-08-17 12:09:31 -06:00
pyth0n1c b1a744cf88 Merge remote-tracking branch 'upstream/master' into develop 2021-08-17 11:07:20 -07:00
mhaag-spl 9958c82c3c macro'd wmic 2021-08-17 11:44:30 -06:00
pyth0n1c 9d89399e25 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-17 10:36:15 -07:00
pyth0n1c 0dd4c8ef65 Put requirement on tag validation for detection-testing. 2021-08-17 10:36:08 -07:00
research bot bae7eebbcd updating docs and package bits [ci skip] 2021-08-17 17:27:11 +00:00
Michael Haag c4a62635b1 Merge branch 'develop' into The-Haag-of-The-Storm 2021-08-17 11:19:42 -06:00
mhaag-spl 20000828f3 Macro'd powershell 2021-08-17 11:15:36 -06:00
pyth0n1c 2fde2fe090 Fixed bash if else syntax 2021-08-17 09:55:52 -07:00
pyth0n1c 08d935a15d Fixing the set-output calls 2021-08-17 09:50:02 -07:00
pyth0n1c c7cab850e9 Finally fixed getting the tag/branch name properly. 2021-08-17 09:39:59 -07:00
pyth0n1c 0141d689a6 Fixed the tag name again.: 2021-08-17 09:28:21 -07:00