admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c e5c87027c1 Lots more changes building out the skeleton of the docker testing framework. Needs testing, breakup into simpler files, documentation, etc. But a good start. 2021-09-17 16:45:05 -07:00
pyth0n1c dc8b704332 Initial changes and testing for local dockerized detection testing service 2021-09-17 15:14:17 -07:00
Lou Stella 9119157f07 Update to test 2021-09-17 14:07:08 -05:00
d1vious 7d4f3aac2e touched up detections 2021-09-17 12:50:23 -04:00
d1vious 070d78fc60 adding generated _posts from detections 2021-09-17 11:19:08 -04:00
Detection Testing Service 3840ef8d20 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-17 12:32:05 +00:00
root 88a4494b69 Added detection testing service results inExtraction of Registry Hives 2021-09-17 12:32:04 +00:00
Bhavin Patel 3723e0129e Branch was auto-updated. 2021-09-17 05:24:59 -07:00
Bhavin Patel 11e0118a98 Branch was auto-updated. 2021-09-17 05:24:58 -07:00
Michael Haag b6db6f357b Merge pull request #1667 from splunk/add_dataset_url 
adding dataset url
 2021-09-17 06:24:41 -06:00
mhaag-spl 3e996076c7 updates 2021-09-17 05:56:19 -06:00
mhaag-spl 93f706926b Merge branch 'develop' into The-Haag-of-The-Storm 2021-09-17 05:52:44 -06:00
mhaag-spl d646da8e70 Revert "Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm" 
This reverts commit f7befe61e6, reversing
changes made to 5b301ca9b6.
 2021-09-17 05:48:51 -06:00
mhaag-spl 6747a30515 Update create_local_admin_accounts_using_net_exe.yml 2021-09-17 05:46:53 -06:00
tccontre 9a5907c2b0 fin7 2021-09-17 12:31:03 +02:00
tccontre 68ba204036 fin7 2021-09-17 11:06:52 +02:00
P4T12ICK 5b98c86ba9 change dataset 2021-09-17 10:19:45 +02:00
tccontre f9360d8851 fin7 2021-09-17 09:59:49 +02:00
tccontre bb3a0f2d88 fin7 2021-09-17 09:55:04 +02:00
tccontre 12d15d17e3 fin7 2021-09-17 09:49:27 +02:00
tccontre 68c31b3c31 fin7 2021-09-17 09:39:45 +02:00
Stanislav Miskovic e5a7afa9a3 Adding Pth and PtT detections at logging devices and endpoints, tested on DSP 2021-09-16 22:15:58 -07:00
Stanislav Miskovic 784d940631 Returning signature_id into the detection 2021-09-16 20:44:41 -07:00
d1vious 5c1e02f436 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-16 23:00:12 -04:00
d1vious 62a89f9acf working detection gen 2021-09-16 23:00:07 -04:00
Detection Testing Service f7befe61e6 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:42:11 +00:00
root 5b301ca9b6 Added detection testing service results inProcesses created by netsh 2021-09-16 18:42:10 +00:00
Detection Testing Service f4162778e1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:36:03 +00:00
root 9156fe65e7 Added detection testing service results inExtract SAM from Registry 2021-09-16 18:36:02 +00:00
Detection Testing Service 5ec1bb98f0 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:28:51 +00:00
root e85e81804b Added detection testing service results inExtract SAM from Registry 2021-09-16 18:28:50 +00:00
Detection Testing Service 9a7e13f858 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:25:52 +00:00
root 2056548702 Added detection testing service results inDump LSASS via procdump 2021-09-16 18:25:52 +00:00
mhaag-spl fa785a991f Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 12:24:56 -06:00
mhaag-spl fbc3185dbc Update processes_launching_netsh.yml 2021-09-16 12:24:53 -06:00
Detection Testing Service 47db5dfd79 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:19:16 +00:00
root 4178c03b52 Added detection testing service results inDetect PsExec With accepteula Flag 2021-09-16 18:19:16 +00:00
mhaag-spl 6f9c536f8e error 2021-09-16 12:15:53 -06:00
mhaag-spl 9c08c1f2f4 fixes 2021-09-16 12:14:26 -06:00
mhaag-spl bd6a779b02 no longer need sysmon procdump - updated superior procdump 2021-09-16 12:06:20 -06:00
root 04e8fd24b2 Added detection testing service results inDomain Account Discovery With Net App 2021-09-16 17:56:37 +00:00
mhaag-spl 70fb8aaf78 fixes 2021-09-16 11:36:51 -06:00
mhaag-spl 583e962d23 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 11:13:16 -06:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
Detection Testing Service 325eb8e1c7 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 17:08:16 +00:00
root eeb3af0c16 Added detection testing service results inCredential Dumping via Symlink to Shadow Copy 2021-09-16 17:08:15 +00:00
Detection Testing Service 644e571292 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 17:07:21 +00:00
root 6c467dbb80 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy 2021-09-16 17:07:21 +00:00
Detection Testing Service c22058ceb4 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:57:26 +00:00
root 8fc4ca5e90 Added detection testing service results inCreation of Shadow Copy with wmic and powershell 2021-09-16 16:57:25 +00:00