admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5 
CARS_UPDATE_MITRE_ID_B5
 2021-10-13 11:20:47 +02:00
tccontre 14e3597bf4 CARS_UPDATE_MITRE_ID_B4 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:13:24 +02:00
tccontre da17a2a938 CARS_UPDATE_MITRE_ID_B3 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:07:20 +02:00
tccontre 0323ec0401 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-13 09:24:30 +02:00
d1vious 583f24f559 working playbook collection 2021-10-12 21:06:53 -04:00
pyth0n1c 1a131ead59 More changes for testing. Prep for long-term test of all detection with results output to file. 2021-10-12 17:22:10 -07:00
divious1 3488a5ebac playbook skeleton 2021-10-12 19:41:23 -04:00
Bhavin Patel 5d7d741898 Branch was auto-updated. 2021-10-12 14:01:29 -07:00
Michael Haag be69d68150 Merge pull request #1718 from splunk/devsecops_bug 
errors and text updates
 2021-10-12 15:01:12 -06:00
Bhavin Patel fdeab27703 Branch was auto-updated. 2021-10-12 13:11:00 -07:00
Bhavin Patel 46b7d220cc Branch was auto-updated. 2021-10-12 13:10:59 -07:00
Bhavin Patel 08d172d13b Merge pull request #1716 from splunk/CARS_UPDATE_MITRE_ID_B1 
Cars update mitre id b1
 2021-10-12 13:10:40 -07:00
Bhavin Patel f67ee09979 revert deployments: - Send to Phantom 2021-10-12 13:08:33 -07:00
patel-bhavin 05972240f4 story name 2021-10-12 13:03:43 -07:00
patel-bhavin 7dbacd0674 errors and text updates 2021-10-12 13:02:16 -07:00
Bhavin Patel 3b2cb3f2ee Merge branch 'develop' into CARS_UPDATE_MITRE_ID_B1 2021-10-12 11:14:31 -07:00
tccontre d2719d316e Update gsuite_drive_share_in_external_email.yml 2021-10-12 11:12:12 +02:00
tccontre eb02a97423 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-12 09:29:19 +02:00
pyth0n1c 2f06facd23 Lots of testing changes.... lots of progress. Need to clean up and test entire set of detections properly with sleeps and diagnose how long sleep should be or if there is a way to block while input data is processed entirely. 2021-10-11 17:05:28 -07:00
divious1 3cc1eee594 fixing up base on feedback 2021-10-11 18:18:23 -04:00
Bhavin Patel 8c114abc1f Branch was auto-updated. 2021-10-11 12:56:24 -07:00
Michael Haag 0be2434332 Merge pull request #1717 from splunk/stay-haag 
Update suspicious_wevtutil_usage.yml
 2021-10-11 13:56:06 -06:00
mhaag-spl 95ad76f9ba Update suspicious_wevtutil_usage.yml 
Resolving #1669 . Thank you!
 2021-10-11 12:17:40 -06:00
pyth0n1c 06a9c0f15e Lots more changes to how we run. Now based off of the splunk/splunk container on docker hub as much as possible. We use ENV arguments to install required apps. Still only at 50% pass rate, so we need more troubleshooting to figure out why. 2021-10-11 10:23:42 -07:00
Bhavin Patel b6f201a846 Branch was auto-updated. 2021-10-11 03:30:23 -07:00
tccontre ff5189357c Merge pull request #1690 from splunk/privilege_escalation_persistence 
privilege_escalation_persistence
 2021-10-11 12:29:56 +02:00
tccontre e564e5a9f2 Delete screensaver_event_trigger_execution.test.yml 2021-10-11 11:05:42 +02:00
tccontre cd46d4cf61 Delete screensaver_event_trigger_execution.yml 2021-10-11 11:05:34 +02:00
tccontre 8a1bed2fb9 CARS_UPDATE_MITRE_ID_B1 2021-10-11 11:03:20 +02:00
mhaag-spl 69d72deb15 Delete powershell_reflective_load.test.yml 2021-10-08 12:37:20 -06:00
mhaag-spl f6804d708b Fixes and removed duplicate 2021-10-08 12:33:23 -06:00
tccontre b371bc5b5d Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-08 14:49:55 +02:00
tccontre 5226dbd99c privilege_escalation_persistence 2021-10-08 14:23:55 +02:00
root 393aad02aa Added detection testing service results inETW Registry Disabled 2021-10-08 07:55:48 +00:00
dependabot[bot] 3f161640cc Bump protobuf from 3.17.0 to 3.18.1 
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.17.0 to 3.18.1.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/master/generate_changelog.py)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.17.0...v3.18.1)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-07 22:33:56 +00:00
Bhavin Patel 8a09315e93 Merge pull request #1694 from splunk/dependabot/pip/jsonschema-4.0.1 
Bump jsonschema from 3.2.0 to 4.0.1
 2021-10-07 15:33:28 -07:00
Bhavin Patel 1d21924935 Merge pull request #1708 from splunk/removing_my_name_from_docs 
removing name
 2021-10-07 15:33:03 -07:00
Bhavin Patel 038206d836 Branch was auto-updated. 2021-10-07 15:26:33 -07:00
Bhavin Patel 735883dc0a Merge pull request #1703 from splunk/sec-researcher_duplicate 
Contribution: Duplicate of #1678
 2021-10-07 15:26:17 -07:00
patel-bhavin 6da13a75c5 Merge branch 'develop' into removing_my_name_from_docs 2021-10-07 15:22:55 -07:00
divious1 9478681c7f removing name 2021-10-07 14:54:45 -04:00
tccontre 87e17c3505 privilege_escalation_persistence 2021-10-07 14:53:56 +02:00
Bhavin Patel a9a2c05c9c Branch was auto-updated. 2021-10-06 16:03:18 -07:00
Bhavin Patel 24b0173f44 Branch was auto-updated. 2021-10-06 16:03:17 -07:00
Bhavin Patel 87018e6d13 Branch was auto-updated. 2021-10-06 16:03:16 -07:00
Bhavin Patel 1fc61adef1 Branch was auto-updated. 2021-10-06 16:03:16 -07:00
Bhavin Patel e32c95a93b Branch was auto-updated. 2021-10-06 16:03:15 -07:00
Bhavin Patel bd4cc12c11 Branch was auto-updated. 2021-10-06 16:03:14 -07:00
Bhavin Patel 3ee70d2ec6 Branch was auto-updated. 2021-10-06 16:03:13 -07:00
Bhavin Patel 350416a501 Branch was auto-updated. 2021-10-06 16:03:13 -07:00