admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Detection Testing Service ee1ef1ecd6 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:52:59 +00:00
root 13a917ea62 Added detection testing service results inCreate or delete windows shares using net exe 2021-09-16 16:52:59 +00:00
mhaag-spl 9e32a32bdd Update credential_dumping_via_symlink_to_shadow_copy.yml 2021-09-16 10:52:50 -06:00
Detection Testing Service ec15b54f16 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:51:08 +00:00
root 7acb54087f Added detection testing service results inCreate local admin accounts using net exe 2021-09-16 16:51:07 +00:00
mhaag-spl 261bdc4270 Update credential_dumping_via_copy_command_from_shadow_copy.yml 2021-09-16 10:50:21 -06:00
Detection Testing Service 7bf85e6245 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:45:19 +00:00
root ddae4670bb Added detection testing service results inBITSAdmin Download File 2021-09-16 16:45:19 +00:00
Detection Testing Service 85594da255 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:41:30 +00:00
root 6059b4e135 Added detection testing service results inBITS Job Persistence 2021-09-16 16:41:29 +00:00
mhaag-spl f43bffd899 Update creation_of_shadow_copy_with_wmic_and_powershell.yml 2021-09-16 10:37:34 -06:00
mhaag-spl 5fe3b8ad85 fixes 2021-09-16 10:33:18 -06:00
mhaag-spl c5cdccf1b4 Update create_local_admin_accounts_using_net_exe.yml 2021-09-16 10:32:08 -06:00
mhaag-spl 53806fe5f0 Update office_product_spawning_wmic.yml 2021-09-16 10:28:52 -06:00
mhaag-spl 4171a3cd63 Update bitsadmin_download_file.yml 2021-09-16 10:23:55 -06:00
mhaag-spl e8ddb9aadc Update bits_job_persistence.yml 2021-09-16 10:23:11 -06:00
mhaag-spl 3844ad4bcb Update batch_file_write_to_system32.yml 2021-09-16 10:22:24 -06:00
Detection Testing Service 3dc11fae91 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:18:21 +00:00
root 2e2f4546df Added detection testing service results inBatch File Write to System32 2021-09-16 16:18:21 +00:00
Detection Testing Service 8f17362947 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:07:37 +00:00
root abc6aa1eb7 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe 2021-09-16 16:07:36 +00:00
Detection Testing Service 6fd71dfec2 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:03:34 +00:00
root 48f5786538 Added detection testing service results inAttempt To Add Certificate To Untrusted Store 2021-09-16 16:03:33 +00:00
Detection Testing Service 89265b45e7 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:02:24 +00:00
root f68371cc3f Added detection testing service results inAccount Discovery With Net App 2021-09-16 16:02:23 +00:00
mhaag-spl 9111b9a0a5 Update batch_file_write_to_system32.yml 2021-09-16 09:58:07 -06:00
mhaag-spl 46c20ccb77 Update attempted_credential_dump_from_registry_via_reg_exe.yml 2021-09-16 09:47:25 -06:00
root dc90473679 Added detection testing service results inCmdline Tool Not Executed In CMD Shell 2021-09-16 15:43:53 +00:00
mhaag-spl 217d7fd23e updates 2021-09-16 09:42:56 -06:00
Lou Stella 9c31c30fde Added png for GSuite_DevSecops 2021-09-16 10:29:47 -05:00
Lou Stella c7c7583ec8 Added demo playbook for development 2021-09-16 10:21:27 -05:00
root 1daee13b11 Added detection testing service results inCheck Elevated CMD using whoami 2021-09-16 15:17:07 +00:00
tccontre 13062c170a Merge branch 'fin7' of github.com:splunk/security_content into fin7 2021-09-16 16:57:15 +02:00
tccontre d03f534e68 fin7 2021-09-16 16:56:51 +02:00
Detection Testing Service 907cce2415 Merge branch 'fin7' of https://github.com/splunk/security_content into fin7 2021-09-16 14:48:11 +00:00
root cbb2198d65 Added detection testing service results inOffice Application Drop Executable 2021-09-16 14:48:10 +00:00
tccontre 2480f3c4b7 fin7 2021-09-16 16:45:49 +02:00
tccontre f764f730ec fin7 2021-09-16 16:04:40 +02:00
tccontre ad6761f6b9 Merge branch 'fin7' of github.com:splunk/security_content into fin7 2021-09-16 16:00:27 +02:00
tccontre b869a0de99 fin7 2021-09-16 15:54:32 +02:00
P4T12ICK 9db514182b added phase to detection 2021-09-16 15:39:29 +02:00
root a30c746aeb Added detection testing service results inNon Chrome Process Accessing Chrome Default Dir 2021-09-16 10:03:01 +00:00
Stanislav Miskovic 05820da35d Adding SLP confirmed in DSP 2021-09-15 16:11:02 -07:00
patel-bhavin 9e22174115 revert 2021-09-15 15:48:01 -07:00
Jose Enrique Hernandez aec4f7c772 adding dataset url 2021-09-15 17:34:51 -04:00
patel-bhavin a110285399 deprecate 2021-09-15 13:13:38 -07:00
Lou Stella afe7e98f06 Added DevSecOps demo playbook 2021-09-15 14:21:50 -05:00
Bhavin Patel 23f2c7d20e Branch was auto-updated. 2021-09-15 11:36:20 -07:00
pyth0n1c 3f5b996824 Merge pull request #1664 from splunk/TR-851 
removed submodule, no need for additonal detection testing run. Semgrep error is due to issue in semgrep repo
 2021-09-15 11:36:01 -07:00
Lou Stella e3a84e4840 removed submodule 2021-09-15 12:54:05 -05:00