 Bhavin Patel
|
efc1ec4d91
|
Branch was auto-updated.
|
2021-11-19 03:56:27 -08:00 |
|
|
Bhavin Patel
|
0d904638f7
|
Branch was auto-updated.
|
2021-11-19 03:56:26 -08:00 |
|
|
Bhavin Patel
|
ec1c5d9d54
|
Branch was auto-updated.
|
2021-11-19 03:56:25 -08:00 |
|
|
Bhavin Patel
|
63ea949fa9
|
Branch was auto-updated.
|
2021-11-19 03:56:24 -08:00 |
|
|
Bhavin Patel
|
6404c7f7a3
|
Branch was auto-updated.
|
2021-11-19 03:56:23 -08:00 |
|
|
P4T12ICK
|
de15a819bb
|
Merge pull request #1842 from splunk/ssa_fix_datasets
fix broken dataset links
|
2021-11-19 12:56:04 +01:00 |
|
|
P4T12ICK
|
27d981717d
|
fix broken dataset links
|
2021-11-19 12:49:53 +01:00 |
|
|
root
|
126a514ab3
|
Added detection testing service results inSystem Info Gathering Using Dxdiag Application
|
2021-11-19 11:24:14 +00:00 |
|
|
tccontre
|
ce6318c87b
|
more_ioc_detections
|
2021-11-19 12:01:45 +01:00 |
|
|
P4T12ICK
|
04cbf7beaa
|
improved testing
|
2021-11-19 11:30:43 +01:00 |
|
|
P4T12ICK
|
7223d1167a
|
improved testing
|
2021-11-19 10:43:59 +01:00 |
|
|
P4T12ICK
|
697b15e41b
|
improved testing
|
2021-11-19 10:18:36 +01:00 |
|
|
P4T12ICK
|
4d32809923
|
improved testing
|
2021-11-19 09:58:55 +01:00 |
|
|
P4T12ICK
|
3d3fe05447
|
improved testing
|
2021-11-19 09:56:54 +01:00 |
|
|
Bhavin Patel
|
05657d48df
|
Branch was auto-updated.
|
2021-11-19 00:38:45 -08:00 |
|
|
Bhavin Patel
|
f9b37ff8ab
|
Branch was auto-updated.
|
2021-11-19 00:38:44 -08:00 |
|
|
Bhavin Patel
|
8493dca184
|
Branch was auto-updated.
|
2021-11-19 00:38:43 -08:00 |
|
|
Bhavin Patel
|
e1bd020e51
|
Branch was auto-updated.
|
2021-11-19 00:38:36 -08:00 |
|
|
Bhavin Patel
|
63eaf77d49
|
Branch was auto-updated.
|
2021-11-19 00:38:35 -08:00 |
|
|
Bhavin Patel
|
2f534f53d9
|
Branch was auto-updated.
|
2021-11-19 00:38:34 -08:00 |
|
|
tccontre
|
dda5f844f0
|
Merge pull request #1838 from splunk/ioc_detections
ioc_detections
|
2021-11-19 09:38:15 +01:00 |
|
|
pyth0n1c
|
1f5386b776
|
Mostly done with overhaul to arguments. Initial testing show that it looks good. Now to integrate the newly parsed arguments in with the rewritten run behavior.
|
2021-11-18 16:56:46 -08:00 |
|
|
pyth0n1c
|
aca21ef285
|
Changes to the interface used to construct the config file and perform additional validation of the file
|
2021-11-18 15:44:01 -08:00 |
|
|
mvelazco
|
a9f6b03646
|
Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2
|
2021-11-18 16:26:34 -05:00 |
|
|
mvelazco
|
399ebb4e7f
|
adding extra detection
|
2021-11-18 16:26:32 -05:00 |
|
|
Detection Testing Service
|
0b568f6169
|
Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2
|
2021-11-18 21:05:53 +00:00 |
|
|
root
|
f18afbbd8c
|
Added detection testing service results inExecutable File Written in Administrative SMB Share
|
2021-11-18 21:05:53 +00:00 |
|
|
pyth0n1c
|
cf8d5f2dff
|
Much better configuration parsing, validation, and substitution of defaults using jsonschema.
|
2021-11-18 13:01:55 -08:00 |
|
|
Bhavin Patel
|
a86c908630
|
Branch was auto-updated.
|
2021-11-18 12:58:51 -08:00 |
|
|
Bhavin Patel
|
1539fcb1cc
|
Branch was auto-updated.
|
2021-11-18 12:58:50 -08:00 |
|
|
Bhavin Patel
|
a4bcaef6db
|
Branch was auto-updated.
|
2021-11-18 12:58:43 -08:00 |
|
|
Bhavin Patel
|
266b6e1151
|
Branch was auto-updated.
|
2021-11-18 12:58:42 -08:00 |
|
|
Bhavin Patel
|
daffaeac60
|
Branch was auto-updated.
|
2021-11-18 12:58:41 -08:00 |
|
|
Bhavin Patel
|
19eb60a778
|
Branch was auto-updated.
|
2021-11-18 12:58:40 -08:00 |
|
|
Bhavin Patel
|
3ddbaae002
|
Branch was auto-updated.
|
2021-11-18 12:58:38 -08:00 |
|
|
Michael Haag
|
a449b3d5cf
|
Merge pull request #1825 from splunk/prodigal_haag
The Prodigal Haag Returns
|
2021-11-18 13:58:18 -07:00 |
|
|
mvelazco
|
e7f395d6a5
|
Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2
|
2021-11-18 15:43:58 -05:00 |
|
|
mvelazco
|
7d25f2599c
|
updating other detections
|
2021-11-18 15:43:56 -05:00 |
|
|
root
|
b78ea71386
|
Added detection testing service results inLoading Of Dynwrapx Module
|
2021-11-18 14:28:20 +00:00 |
|
|
tccontre
|
08cc78c723
|
ioc_detections
|
2021-11-18 15:10:02 +01:00 |
|
|
tccontre
|
ee2e94cd0d
|
Merge branch 'ioc_detections' of github.com:splunk/security_content into ioc_detections
|
2021-11-18 13:00:41 +01:00 |
|
|
tccontre
|
f2f3eb3231
|
ioc_detections
|
2021-11-18 13:00:20 +01:00 |
|
|
root
|
8d42e73720
|
Added detection testing service results inSuspicious Process DNS Query Known Abuse Web Services
|
2021-11-18 11:27:52 +00:00 |
|
|
tccontre
|
b20185a037
|
Update ssa___attempt_to_delete_services.yml
|
2021-11-18 12:11:02 +01:00 |
|
|
tccontre
|
d7b23700ef
|
Update information_sabotage.yml
|
2021-11-18 12:10:21 +01:00 |
|
|
tccontre
|
b566f7c72f
|
ioc_detections
|
2021-11-18 12:05:43 +01:00 |
|
|
pyth0n1c
|
82d53ccbd9
|
Moving to json based configuration files and a framework to generate that file, too
|
2021-11-17 16:23:39 -08:00 |
|
|
pyth0n1c
|
56f4223ecd
|
Added some supporting code that will make generating config files and validating arguments easier.
|
2021-11-17 14:09:28 -08:00 |
|
|
mhaag-spl
|
7ba2d8d412
|
removed
|
2021-11-17 14:47:49 -07:00 |
|
|
mhaag-spl
|
18ad17726e
|
Update windows_enable_defaultaccount.yml
|
2021-11-17 12:01:58 -07:00 |
|