admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,064 Commits 697 Branches 195 Tags
tf23
Commit Graph

220 Commits

Author SHA1 Message Date
mvelazco 19bd2fd736 updating sysmon macro 2021-12-13 18:00:14 -05:00
Michael Haag 2565ad2bbf Update windows_shells.yml 2021-12-13 14:37:40 -07:00
mhaag-spl 71295432e3 Windows shells 2021-12-13 13:01:45 -07:00
mhaag-spl f3b31c113b java Shells 2021-12-13 11:54:59 -07:00
Michael Haag b87061f794 rookie mistake 2021-11-30 05:34:29 -07:00
mhaag-spl 81e952185e Rclone Haagrid 2021-11-29 15:55:38 -07:00
tccontre ce6318c87b more_ioc_detections 2021-11-19 12:01:45 +01:00
Bhavin Patel 19eb60a778 Branch was auto-updated. 2021-11-18 12:58:40 -08:00
tccontre 9fa410ac29 ioc_detections 2021-11-17 16:09:42 +01:00
mhaag-spl 878c0c775b InstallUTIL 🍺 2021-11-12 13:05:19 -07:00
mhaag-spl babbd47d81 Update wineventlog_task_scheduler.yml 2021-11-09 13:42:23 -07:00
Bhavin Patel fc4cc81ad6 Branch was auto-updated. 2021-11-03 10:43:52 -07:00
patel-bhavin 0a9c396e08 search update 2021-11-02 18:03:21 -07:00
Bhavin Patel cd5dac3ebf Branch was auto-updated. 2021-10-28 11:18:42 -07:00
mhaag-spl 27521060d9 Update wineventlog_task_scheduler.yml 2021-10-21 12:07:26 -06:00
mhaag-spl 0772e6352b taskscheduler hunting 2021-10-21 09:56:27 -06:00
mhaag-spl f7112aca62 fixes 2021-10-20 07:08:14 -06:00
mhaag-spl f8d6ce147d Curling 2021-10-19 10:44:17 -06:00
mhaag-spl 9b8ff687ae HaagRoast 2021-10-15 12:31:33 -06:00
tccontre fb296c8508 privilege_escalation_persistence 2021-10-06 11:15:47 +02:00
tccontre 82633e151a privilege_escalation_persistence 2021-10-05 11:56:48 +02:00
tccontre 993f0adb87 privilege_escalation_persistence 2021-09-29 10:42:05 +02:00
mhaag-spl bd6a779b02 no longer need sysmon procdump - updated superior procdump 2021-09-16 12:06:20 -06:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
Bhavin Patel c560335cab Branch was auto-updated. 2021-09-08 00:52:42 -07:00
P4T12ICK a917acaf4c updated detections 2021-09-06 14:49:19 +02:00
mhaag-spl fa2b35c293 Merge branch 'develop' into The-Haag-of-The-Storm 2021-09-03 07:10:38 -06:00
github-actions[bot] 88ad9717f9 Branch was auto-updated. 2021-09-02 16:44:59 +00:00
mhaag-spl e8de140562 fixes 2021-09-01 16:58:23 -06:00
P4T12ICK 7f980b6a46 circle ci detecction 2021-09-01 17:54:38 +02:00
P4T12ICK dcbc0f95ad github detection 2021-09-01 13:56:23 +02:00
tccontre b90326f55c dev_git 2021-08-27 13:28:06 +02:00
github-actions[bot] 35398496bc Branch was auto-updated. 2021-08-27 08:59:54 +00:00
github-actions[bot] fff8689f1f Branch was auto-updated. 2021-08-27 08:21:40 +00:00
github-actions[bot] 0c1a1c79b7 Branch was auto-updated. 2021-08-27 08:21:37 +00:00
P4T12ICK fed6fc9502 k8s scanner 2021-08-25 10:49:51 +02:00
P4T12ICK 53bf235622 k8s scanner detection 2021-08-24 14:39:15 +02:00
github-actions[bot] 8ff6371446 Branch was auto-updated. 2021-08-23 15:21:50 +00:00
github-actions[bot] 6f0170b022 Branch was auto-updated. 2021-08-23 15:21:43 +00:00
P4T12ICK 749df59357 new detection 2021-08-23 10:17:40 +02:00
tccontre e5ae722014 dev_git 2021-08-20 13:59:06 +02:00
github-actions[bot] 3f90fc50cb Branch was auto-updated. 2021-08-19 15:42:43 +00:00
P4T12ICK dd419961e7 container upload aws ecr 2021-08-19 15:51:17 +02:00
mhaag-spl 0e19432a1d msbuild and microsoftworkflowcompiler 2021-08-19 06:57:11 -06:00
github-actions[bot] 59ae237866 Branch was auto-updated. 2021-08-19 11:15:58 +00:00
mhaag-spl 495a94bbbc Update process_esentutl.yml 2021-08-18 11:14:13 -06:00
mhaag-spl 1eb1f40ae0 esentutil 
Related to Conti leaks
 2021-08-18 10:47:58 -06:00
mhaag-spl 09f29ad081 macros 2021-08-18 09:50:08 -06:00
tccontre 1bde88fc3f dev_ops_uc 2021-08-18 15:58:35 +02:00
mhaag-spl d648d525b3 macro'd bitsadmin 2021-08-17 15:20:40 -06:00