 pyth0n1c
|
49695ed2c5
|
Preparing fixes for properly allowing testing to include or exclude folders. For example, by default we will not include and test detections or tests in experimental.
|
2021-12-14 12:59:17 -08:00 |
|
|
mhaag-spl
|
303d082e43
|
Create hunting_for_log4shell.yml
|
2021-12-14 13:20:22 -07:00 |
|
|
Bhavin Patel
|
a4aaf03206
|
Update outbound_network_connection_from_java_using_default_ports.yml
|
2021-12-14 12:18:58 -08:00 |
|
|
Bhavin Patel
|
9ba2c45a24
|
Update cmd_carry_out_string_command_parameter.yml
|
2021-12-14 12:17:08 -08:00 |
|
|
patel-bhavin
|
05b189232d
|
ldap outbound
|
2021-12-14 10:10:23 -08:00 |
|
|
root
|
66a72dff7a
|
Added detection testing service results inLog4Shell JNDI Payload Injection with Outbound Connection
|
2021-12-14 18:05:07 +00:00 |
|
|
P4T12ICK
|
f59961186a
|
log4j
|
2021-12-14 18:43:55 +01:00 |
|
|
P4T12ICK
|
b278b43978
|
log4j
|
2021-12-14 18:43:02 +01:00 |
|
|
root
|
f03ab2f721
|
Added detection testing service results inLog4Shell JNDI Payload Injection Attempt
|
2021-12-14 17:42:22 +00:00 |
|
|
P4T12ICK
|
3f59f79b93
|
log4j
|
2021-12-14 18:21:58 +01:00 |
|
|
Lou Stella
|
3bf46de4c7
|
removed files causing generate to break
|
2021-12-14 11:20:13 -06:00 |
|
|
P4T12ICK
|
a9edbc20bd
|
log4j
|
2021-12-14 17:49:26 +01:00 |
|
|
P4T12ICK
|
45cd729295
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 17:44:19 +01:00 |
|
|
P4T12ICK
|
3dc854e68e
|
log4j
|
2021-12-14 17:43:19 +01:00 |
|
|
Lou Stella
|
50ef5d4193
|
Renamed splunk investigation playbook
|
2021-12-14 09:58:17 -06:00 |
|
|
Lou Stella
|
b33a05700c
|
initial commit of playbook yamls
|
2021-12-14 09:55:34 -06:00 |
|
|
P4T12ICK
|
f84b61357c
|
Improved Proxy detection
|
2021-12-14 16:35:31 +01:00 |
|
|
Detection Testing Service
|
bb06f84f61
|
test:added enriched detections and script for the same
|
2021-12-14 14:21:31 +05:30 |
|
|
tlangalia
|
343ceae12f
|
Updated detection files with supported TA list.
|
2021-12-14 13:27:55 +05:50 |
|
|
d1vious
|
7e6cb9381b
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 00:54:44 -05:00 |
|
|
d1vious
|
946503dc76
|
added two new detections, ymls are not finished
|
2021-12-14 00:54:37 -05:00 |
|
|
mvelazco
|
10418d295a
|
Update outbound_network_connection_from_java_using_default_ports.yml
|
2021-12-13 20:22:14 -05:00 |
|
|
root
|
c1dac05e2b
|
Added detection testing service results inOutbound Network Connection from Java Using Default Ports
|
2021-12-13 23:19:25 +00:00 |
|
|
mvelazco
|
72005d4806
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-13 18:00:30 -05:00 |
|
|
mvelazco
|
19bd2fd736
|
updating sysmon macro
|
2021-12-13 18:00:14 -05:00 |
|
|
root
|
8f1408ba42
|
Added detection testing service results inJava Class File download by Java User Agent
|
2021-12-13 22:45:11 +00:00 |
|
|
mvelazco
|
1c26e4738e
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-13 17:07:03 -05:00 |
|
|
mvelazco
|
52692732cd
|
fixing minor issue
|
2021-12-13 17:07:02 -05:00 |
|
|
Michael Haag
|
2565ad2bbf
|
Update windows_shells.yml
|
2021-12-13 14:37:40 -07:00 |
|
|
mvelazco
|
cb4d003f4e
|
updating dataset tag
|
2021-12-13 16:24:39 -05:00 |
|
|
mvelazco
|
1671728147
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-13 15:51:45 -05:00 |
|
|
mvelazco
|
2c62039a03
|
adding detection
|
2021-12-13 15:51:43 -05:00 |
|
|
mhaag-spl
|
28633f099a
|
Update java_class_file_download_by_java_user_agent.yml
|
2021-12-13 13:35:20 -07:00 |
|
|
mhaag-spl
|
050bc8d886
|
☕
|
2021-12-13 13:32:27 -07:00 |
|
|
mhaag-spl
|
71295432e3
|
Windows shells
|
2021-12-13 13:01:45 -07:00 |
|
|
mhaag-spl
|
f3b31c113b
|
java Shells
|
2021-12-13 11:54:59 -07:00 |
|
|
mhaag-spl
|
2f2e16b8a6
|
Update malicious_powershell_process___connect_to_internet_with_hidden_window.yml
|
2021-12-13 11:37:49 -07:00 |
|
|
mhaag-spl
|
d64ce21b48
|
bagged and tagged
|
2021-12-13 07:20:33 -07:00 |
|
|
mhaag-spl
|
f4de314e4e
|
wget curl
|
2021-12-13 07:11:07 -07:00 |
|
|
P4T12ICK
|
b0e6cb084e
|
WIP
|
2021-12-13 14:42:14 +01:00 |
|
|
d1vious
|
5d1a8826b1
|
added story
|
2021-12-11 12:02:37 -05:00 |
|
|
Bhavin Patel
|
f46386f617
|
Branch was auto-updated.
|
2021-12-10 10:59:36 -08:00 |
|
|
Bhavin Patel
|
0fa75cd52b
|
Branch was auto-updated.
|
2021-12-10 10:59:35 -08:00 |
|
|
Bhavin Patel
|
c725abead9
|
Branch was auto-updated.
|
2021-12-10 10:59:31 -08:00 |
|
|
Bhavin Patel
|
248f6b554a
|
Branch was auto-updated.
|
2021-12-10 10:59:30 -08:00 |
|
|
Bhavin Patel
|
34b3f8df58
|
Merge pull request #1884 from splunk/rclone_4688
curleddd
|
2021-12-10 10:59:16 -08:00 |
|
|
mhaag-spl
|
5e36ce1cf3
|
curleddd
|
2021-12-10 11:49:41 -07:00 |
|
|
Bhavin Patel
|
52f16666e5
|
Branch was auto-updated.
|
2021-12-10 10:49:24 -08:00 |
|
|
Bhavin Patel
|
fe01102a9c
|
Branch was auto-updated.
|
2021-12-10 10:49:24 -08:00 |
|
|
Bhavin Patel
|
738828073b
|
Branch was auto-updated.
|
2021-12-10 10:49:20 -08:00 |
|