Commit Graph

4825 Commits

Author SHA1 Message Date
d1vious 96609e50f1 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE 2022-02-15 17:40:57 -05:00
d1vious b767a93e5b fixing base on feedback 2022-02-15 17:40:51 -05:00
pyth0n1c 0ca10d6c14 Branch was auto-updated. 2022-02-15 12:57:30 -08:00
Bhavin Patel 990694e9e6 Update ssa___windows_powershell_downloadfile.yml 2022-02-15 12:38:12 -08:00
Bhavin Patel 6ef8187b2f Update ssa___windows_powershell_connect_to_internet_with_hidden_window.yml 2022-02-15 12:37:57 -08:00
pyth0n1c 59292cf55e Branch was auto-updated. 2022-02-15 12:36:33 -08:00
pyth0n1c bd1c27edb1 Branch was auto-updated. 2022-02-15 12:36:27 -08:00
Lou Stella 7f8e5221c7 Updated second detection with unicode codepoints 2022-02-15 14:17:55 -06:00
mhaag-spl c9b8eb2985 rasautou 2022-02-15 13:08:59 -07:00
Lou Stella 95d060e135 Character sets are difficult 2022-02-15 13:52:01 -06:00
pyth0n1c 818e125692 Branch was auto-updated. 2022-02-15 10:50:12 -08:00
pyth0n1c 1e7216b08c Branch was auto-updated. 2022-02-15 10:40:08 -08:00
pyth0n1c 63a5ac071a Branch was auto-updated. 2022-02-15 10:40:01 -08:00
pyth0n1c b42ec08d85 Fixed spacing on detection_of_dns_tunnels.yml
Added line was too long.
2022-02-15 10:39:23 -08:00
pyth0n1c 81a5583536 Branch was auto-updated. 2022-02-15 10:30:14 -08:00
pyth0n1c 33ab1741f6 Branch was auto-updated. 2022-02-15 10:30:08 -08:00
pyth0n1c 1035b056b7 Branch was auto-updated. 2022-02-15 10:30:08 -08:00
patel-bhavin e99b973973 note updadte 2022-02-15 10:27:42 -08:00
patel-bhavin 085cec0b0d adding note 2022-02-15 10:26:12 -08:00
mhaag-spl e241241bf2 ordinal Data 2022-02-15 11:09:57 -07:00
d1vious e941098259 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE 2022-02-14 21:29:21 -05:00
d1vious 3a3d0a9922 adding powershell downloadfile but not passing 2022-02-14 21:28:57 -05:00
patel-bhavin 1062a0bf93 duplicates 2022-02-14 14:06:37 -08:00
pyth0n1c cc58cc7e8f Branch was auto-updated. 2022-02-14 13:12:45 -08:00
pyth0n1c 7fa988a18a Branch was auto-updated. 2022-02-14 13:12:38 -08:00
pyth0n1c 58d3d914a8 Branch was auto-updated. 2022-02-14 12:59:17 -08:00
d1vious 1cdd6386f3 updating the detection 2022-02-14 13:47:06 -05:00
d1vious 0a2618f686 adding 1 detection 2022-02-14 13:40:24 -05:00
d1vious a1d127126a adding template detection 2022-02-14 11:11:47 -05:00
mhaag-spl ace7ccbb6d Update windows_schtasks_create_run_as_system.yml 2022-02-10 11:36:02 -07:00
mhaag-spl 40b34450a0 Windows Schtasks Create Run As System 2022-02-10 09:08:52 -07:00
pyth0n1c 17e2f3c94b Branch was auto-updated. 2022-02-09 16:53:36 -08:00
Bhavin Patel baab603657 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:45:28 -08:00
Xiao Lin a1e6d3e225 update search string 2022-02-09 16:36:10 -08:00
Xiao Lin 9a04a4e833 fix a typo 2022-02-09 16:36:10 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
Bhavin Patel 62ab576733 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:36:10 -08:00
Xiao Lin b31ee54c20 Unusual Volume of Data Download from Internal Server Per Entity 2022-02-09 16:36:10 -08:00
mhaag-spl 455d70e3ed Update windows_remote_assistance_spawning_process.yml 2022-02-09 12:14:25 -07:00
mhaag-spl 2fdc53b85b MSRA shipment 📮 2022-02-09 12:10:58 -07:00
pyth0n1c e01f9b37a4 Branch was auto-updated. 2022-02-09 10:11:43 -08:00
mhaag-spl 0fa295eee0 Ordinal 2022-02-09 08:01:49 -07:00
patel-bhavin e7eab5af71 push 2022-02-07 14:45:37 -08:00
research bot 3212249c52 updating docs and package bits [ci skip] 2022-02-07 21:03:48 +00:00
pyth0n1c 2a80634164 Branch was auto-updated. 2022-02-07 12:37:57 -08:00
d1vious 3340cc1ade removing duplicate detection 2022-02-07 15:32:17 -05:00
pyth0n1c 1db85be68d Branch was auto-updated. 2022-02-07 09:39:57 -08:00
pyth0n1c d126556191 Branch was auto-updated. 2022-02-07 09:39:47 -08:00
d1vious cf2230feab Merge branch 'TheIncidentsHaveEyes' of github.com:splunk/security_content into TheIncidentsHaveEyes 2022-02-04 16:25:46 -05:00
d1vious 4fbc9ccbe6 passed testing 2022-02-04 16:25:42 -05:00