d1vious
|
96609e50f1
|
Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE
|
2022-02-15 17:40:57 -05:00 |
|
d1vious
|
b767a93e5b
|
fixing base on feedback
|
2022-02-15 17:40:51 -05:00 |
|
pyth0n1c
|
0ca10d6c14
|
Branch was auto-updated.
|
2022-02-15 12:57:30 -08:00 |
|
Bhavin Patel
|
990694e9e6
|
Update ssa___windows_powershell_downloadfile.yml
|
2022-02-15 12:38:12 -08:00 |
|
Bhavin Patel
|
6ef8187b2f
|
Update ssa___windows_powershell_connect_to_internet_with_hidden_window.yml
|
2022-02-15 12:37:57 -08:00 |
|
pyth0n1c
|
59292cf55e
|
Branch was auto-updated.
|
2022-02-15 12:36:33 -08:00 |
|
pyth0n1c
|
bd1c27edb1
|
Branch was auto-updated.
|
2022-02-15 12:36:27 -08:00 |
|
Lou Stella
|
7f8e5221c7
|
Updated second detection with unicode codepoints
|
2022-02-15 14:17:55 -06:00 |
|
mhaag-spl
|
c9b8eb2985
|
rasautou
|
2022-02-15 13:08:59 -07:00 |
|
Lou Stella
|
95d060e135
|
Character sets are difficult
|
2022-02-15 13:52:01 -06:00 |
|
pyth0n1c
|
818e125692
|
Branch was auto-updated.
|
2022-02-15 10:50:12 -08:00 |
|
pyth0n1c
|
1e7216b08c
|
Branch was auto-updated.
|
2022-02-15 10:40:08 -08:00 |
|
pyth0n1c
|
63a5ac071a
|
Branch was auto-updated.
|
2022-02-15 10:40:01 -08:00 |
|
pyth0n1c
|
b42ec08d85
|
Fixed spacing on detection_of_dns_tunnels.yml
Added line was too long.
|
2022-02-15 10:39:23 -08:00 |
|
pyth0n1c
|
81a5583536
|
Branch was auto-updated.
|
2022-02-15 10:30:14 -08:00 |
|
pyth0n1c
|
33ab1741f6
|
Branch was auto-updated.
|
2022-02-15 10:30:08 -08:00 |
|
pyth0n1c
|
1035b056b7
|
Branch was auto-updated.
|
2022-02-15 10:30:08 -08:00 |
|
patel-bhavin
|
e99b973973
|
note updadte
|
2022-02-15 10:27:42 -08:00 |
|
patel-bhavin
|
085cec0b0d
|
adding note
|
2022-02-15 10:26:12 -08:00 |
|
mhaag-spl
|
e241241bf2
|
ordinal Data
|
2022-02-15 11:09:57 -07:00 |
|
d1vious
|
e941098259
|
Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE
|
2022-02-14 21:29:21 -05:00 |
|
d1vious
|
3a3d0a9922
|
adding powershell downloadfile but not passing
|
2022-02-14 21:28:57 -05:00 |
|
patel-bhavin
|
1062a0bf93
|
duplicates
|
2022-02-14 14:06:37 -08:00 |
|
pyth0n1c
|
cc58cc7e8f
|
Branch was auto-updated.
|
2022-02-14 13:12:45 -08:00 |
|
pyth0n1c
|
7fa988a18a
|
Branch was auto-updated.
|
2022-02-14 13:12:38 -08:00 |
|
pyth0n1c
|
58d3d914a8
|
Branch was auto-updated.
|
2022-02-14 12:59:17 -08:00 |
|
d1vious
|
1cdd6386f3
|
updating the detection
|
2022-02-14 13:47:06 -05:00 |
|
d1vious
|
0a2618f686
|
adding 1 detection
|
2022-02-14 13:40:24 -05:00 |
|
d1vious
|
a1d127126a
|
adding template detection
|
2022-02-14 11:11:47 -05:00 |
|
mhaag-spl
|
ace7ccbb6d
|
Update windows_schtasks_create_run_as_system.yml
|
2022-02-10 11:36:02 -07:00 |
|
mhaag-spl
|
40b34450a0
|
Windows Schtasks Create Run As System
|
2022-02-10 09:08:52 -07:00 |
|
pyth0n1c
|
17e2f3c94b
|
Branch was auto-updated.
|
2022-02-09 16:53:36 -08:00 |
|
Bhavin Patel
|
baab603657
|
Update ssa___unusual_volume_download_from_internal_server.yml
|
2022-02-09 16:45:28 -08:00 |
|
Xiao Lin
|
a1e6d3e225
|
update search string
|
2022-02-09 16:36:10 -08:00 |
|
Xiao Lin
|
9a04a4e833
|
fix a typo
|
2022-02-09 16:36:10 -08:00 |
|
Xiao Lin
|
ddd492fe23
|
update data link to attack_range, move detection to experimental
|
2022-02-09 16:36:10 -08:00 |
|
Bhavin Patel
|
62ab576733
|
Update ssa___unusual_volume_download_from_internal_server.yml
|
2022-02-09 16:36:10 -08:00 |
|
Xiao Lin
|
b31ee54c20
|
Unusual Volume of Data Download from Internal Server Per Entity
|
2022-02-09 16:36:10 -08:00 |
|
mhaag-spl
|
455d70e3ed
|
Update windows_remote_assistance_spawning_process.yml
|
2022-02-09 12:14:25 -07:00 |
|
mhaag-spl
|
2fdc53b85b
|
MSRA shipment 📮
|
2022-02-09 12:10:58 -07:00 |
|
pyth0n1c
|
e01f9b37a4
|
Branch was auto-updated.
|
2022-02-09 10:11:43 -08:00 |
|
mhaag-spl
|
0fa295eee0
|
Ordinal
|
2022-02-09 08:01:49 -07:00 |
|
patel-bhavin
|
e7eab5af71
|
push
|
2022-02-07 14:45:37 -08:00 |
|
research bot
|
3212249c52
|
updating docs and package bits [ci skip]
|
2022-02-07 21:03:48 +00:00 |
|
pyth0n1c
|
2a80634164
|
Branch was auto-updated.
|
2022-02-07 12:37:57 -08:00 |
|
d1vious
|
3340cc1ade
|
removing duplicate detection
|
2022-02-07 15:32:17 -05:00 |
|
pyth0n1c
|
1db85be68d
|
Branch was auto-updated.
|
2022-02-07 09:39:57 -08:00 |
|
pyth0n1c
|
d126556191
|
Branch was auto-updated.
|
2022-02-07 09:39:47 -08:00 |
|
d1vious
|
cf2230feab
|
Merge branch 'TheIncidentsHaveEyes' of github.com:splunk/security_content into TheIncidentsHaveEyes
|
2022-02-04 16:25:46 -05:00 |
|
d1vious
|
4fbc9ccbe6
|
passed testing
|
2022-02-04 16:25:42 -05:00 |
|