admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel a721feb95d Branch was auto-updated. 2021-09-21 08:57:47 -07:00
Bhavin Patel 8333f9e099 Branch was auto-updated. 2021-09-21 08:57:46 -07:00
pyth0n1c 4ab6bc7f88 Disabling Generate_Sarif 
Disabled generate_Sarif in an attempt to troubleshoot semgrep action.
 2021-09-21 08:57:28 -07:00
Detection Testing Service 944654ee07 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 15:48:34 +00:00
root a2b8f72602 Added detection testing service results inRunDLL Loading DLL By Ordinal 2021-09-21 15:48:33 +00:00
Detection Testing Service 8710631ff8 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 15:45:22 +00:00
root 02728836fe Added detection testing service results inSuspicious Rundll32 PluginInit 2021-09-21 15:45:21 +00:00
Detection Testing Service e1608bf560 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 15:45:11 +00:00
root 1831d9252f Added detection testing service results inDetect regsvr32 Registering DLLs from non-standard paths 2021-09-21 15:45:08 +00:00
Detection Testing Service defbaea91d Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 15:44:57 +00:00
root 36922060d9 Added detection testing service results inSuspicious Rundll32 dllregisterserver 2021-09-21 15:44:56 +00:00
divious1 fd36faf718 fixing path bug 2021-09-21 11:42:41 -04:00
Detection Testing Service 0df824726f Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 15:40:28 +00:00
root 4d48b65a29 Added detection testing service results inDetect Renamed rundll32.exe Rename 2021-09-21 15:40:28 +00:00
Jose Enrique Hernandez 8b653259b0 Update ssa___detect_dump_lsass_memory_using_comsvcs.yml 2021-09-21 11:35:19 -04:00
mhaag-spl 8b33a65bae Update schtasks_used_for_forcing_a_reboot.yml 2021-09-21 09:24:42 -06:00
mhaag-spl 71a9bed8f4 Revert "Update windows_event_log_cleared.yml" 
This reverts commit 8761bf0f85.
 2021-09-21 09:15:56 -06:00
mhaag-spl c9b15f05c8 Revert "Update wermgr_process_create_executable_file.yml" 
This reverts commit 4fafdf721d.
 2021-09-21 09:13:07 -06:00
mvelazco 3ce8c88ded minor metdata fixes 2021-09-21 11:08:13 -04:00
Detection Testing Service a99cc1d237 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:52:48 +00:00
root 3a276a5de5 Added detection testing service results inW3WP Spawning Shell 2021-09-21 14:52:47 +00:00
Detection Testing Service 93106eb720 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:43:46 +00:00
root fd83d611f2 Added detection testing service results inWermgr Process Spawned CMD Or Powershell Process 2021-09-21 14:43:46 +00:00
Detection Testing Service ceedcdd040 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:35:05 +00:00
root 5423a13fff Added detection testing service results inWinword Spawning PowerShell 2021-09-21 14:35:04 +00:00
Detection Testing Service e852db0c5b Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 14:32:55 +00:00
root 020f8f8ebc Added detection testing service results inWinword Spawning Cmd 2021-09-21 14:32:55 +00:00
mhaag-spl 4fafdf721d Update wermgr_process_create_executable_file.yml 
Updated to tstat
 2021-09-21 08:25:16 -06:00
mhaag-spl 8761bf0f85 Update windows_event_log_cleared.yml 2021-09-21 08:19:22 -06:00
divious1 8035090837 adding narrative to story 2021-09-20 21:23:13 -04:00
divious1 a9b6443859 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-20 21:21:12 -04:00
divious1 ab81b944a5 fixed error with source display 2021-09-20 21:15:42 -04:00
Jose Enrique Hernandez f198805ee7 Update CNAME 2021-09-20 20:57:34 -04:00
Jose Enrique Hernandez 4fe7345162 Update CNAME 2021-09-20 20:57:10 -04:00
Jose Enrique Hernandez ffd2ff4035 Create CNAME 2021-09-20 20:56:41 -04:00
divious1 b8a6b1e0db added source field to link to yml 2021-09-20 20:45:22 -04:00
pyth0n1c e0961ad0d3 Still some issues when running more than one container in parallel. Might be a management port issue, but needs debugging. 2021-09-20 17:21:46 -07:00
divious1 493ad40df5 minor issue with playbooks linking 2021-09-20 19:09:09 -04:00
divious1 3f5b30a8b2 working stories 2021-09-20 18:35:03 -04:00
Detection Testing Service a22ca80392 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 18:59:09 +00:00
root c904226897 Added detection testing service results inDetect Renamed RClone 2021-09-20 18:59:08 +00:00
Detection Testing Service 3c072fa9bb Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 18:57:35 +00:00
root e82ed3d21d Added detection testing service results inDetect Renamed 7-Zip 2021-09-20 18:57:34 +00:00
root 2694a29473 Added detection testing service results inDetect Renamed PSExec 2021-09-20 18:57:27 +00:00
mhaag-spl 628fe8f257 removing originalfilename artifacts 2021-09-20 12:37:32 -06:00
divious1 7384541200 working navigation, updated detection listing and index pages 2021-09-20 14:30:43 -04:00
root cd70758c21 Added detection testing service results inOffice Document Spawned Child Process To Download 2021-09-20 18:21:07 +00:00
mhaag-spl ea9cfddf1c Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 12:05:19 -06:00
pyth0n1c f30a4c6997 Re-added rebuild code for full test. 2021-09-20 11:05:17 -07:00
Detection Testing Service 8a2401bedf Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-20 18:05:06 +00:00