admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,258 Commits 697 Branches 195 Tags
uba
Commit Graph

353 Commits

Author SHA1 Message Date
Bhavin Patel fa2ba7c031 Branch was auto-updated. 2025-01-14 09:04:48 -08:00
Patrick Bareiss 186061fa94 new detection 2025-01-08 13:53:03 +01:00
dluxtron 3d8919f1c6 reverting macro change 2025-01-08 15:11:19 +10:00
research-bot e66bb09cf4 updating macro 2025-01-07 12:15:23 -08:00
dluxtron 0a1c14df72 fixing syntax & updating macro 2025-01-07 16:51:06 +10:00
dluxtron 0454541c41 Uploading new detections 2025-01-06 16:19:32 +10:00
Nasreddine Bencherchali d8434fbe3a Merge branch 'develop' into issue_3245 2024-12-19 20:36:35 +01:00
research-bot 360a91ebbb remove index 2024-12-18 13:32:03 -08:00
research-bot 99d78af47e udpating ransomware detection 2024-12-12 16:57:42 -08:00
Bhavin Patel 197997fe7c Branch was auto-updated. 2024-12-02 14:18:41 -08:00
Nasreddine Bencherchali d4aed3d50c fix env typo in macros 2024-11-26 23:43:48 +01:00
Nasreddine Bencherchali 038c0af073 enhance coverage - first batch 2024-11-26 14:06:12 +01:00
Michael Haag 8f8a6bd3b4 Raiders of the Lost RDP: The Haag Crusade 2024-11-25 11:44:23 -07:00
Bhavin Patel ad93e8b719 Branch was auto-updated. 2024-11-06 16:01:23 -08:00
research-bot 606354ad63 fixes with new dataset links and spl, macro name update, filter name addtion 2024-11-04 16:45:20 -08:00
Bryan Pluta 1861e6a709 atp detection and macros 2024-10-30 15:50:54 -05:00
dluxtron b17c2d1e17 fixing SPL 2024-10-17 15:41:19 +10:00
Bhavin Patel b2c176c938 Branch was auto-updated. 2024-08-22 22:16:22 +05:30
Michael Haag 39f4e3dadc Guardians of the Haaglaxy 
## Story
- Ivanti Virtual Traffic Manager CVE-2024-7593

## Analytic
- Ivanti VTM New Account Creation
 2024-08-20 10:53:01 -06:00
Bhavin Patel c6ac1365e4 Branch was auto-updated. 2024-08-13 11:36:01 -07:00
Michael Haag 78fb540ca0 Update linux_hosts.yml 2024-08-13 09:34:53 -06:00
tccontre c6d3eac542 linux_auditd_detection 2024-08-09 10:46:52 +02:00
Bhavin Patel 6e2d8fc0b5 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-08-05 17:48:59 -07:00
tccontre f28b995ce3 crowdstrike_analytics 2024-07-31 11:10:41 +02:00
Lou Stella 462ab1971a Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-29 10:10:26 -05:00
ljstella a980709e4b Modified macro name for clarity, updated how to implements with details 2024-07-26 14:11:24 -05:00
Lou Stella 09eb52ec50 Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 10:32:02 -05:00
Bhavin Patel d99d5e5222 Branch was auto-updated. 2024-07-25 16:36:10 -05:00
ljstella 8b3c53f1a0 formatting on macro 2024-07-25 07:33:12 -05:00
pyth0n1c 9bb3600558 Needed to change the name of the osquery macro due to a conflict with the newly introduced osquery data_source. Additionally, fixed a serious error in mapNamesToSecurityContentObjects wherein a Security Content Object of the wrong type could be returned. 2024-07-24 16:15:54 -07:00
Lou Stella 135557163e Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-24 15:41:57 -05:00
Lou Stella a2cbf6bb3d Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-24 15:39:18 -05:00
Michael Haag b5041011c1 The Haag Returns 2024-07-24 12:16:25 -06:00
Bhavin Patel 2413b6c078 remove yamls 2024-07-17 10:18:03 -07:00
Bhavin Patel 91b313f446 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-10 13:58:39 -07:00
Steven Dick 2dd0a49745 Add files via upload 2024-07-09 08:49:37 -04:00
Lou Stella 7fbd13a3dc Release v4.35.0 2024-07-01 17:26:50 +00:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 7539e88c4c Release Branch v4.33.0 2024-06-05 21:05:06 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Bhavin Patel 72e29c764f ESCU Release Branch - v4.30.0 2024-04-17 20:44:56 +00:00
Steven Dick 7f7857cbd7 Add files via upload 2024-03-16 11:33:20 -04:00
Bhavin Patel 046acb8871 ESCU v4.26.0 Release branch 2024-03-06 19:30:20 +00:00
Eric McGinnis 9fdf182033 Release v4.24.0 2024-02-14 23:54:00 +00:00
Bhavin Patel 0078f83d95 Release Branch ESCU 4.23.0 2024-01-30 20:52:05 +00:00
Bhavin Patel 7fda817c23 Release 4.19.0 2024-01-10 17:21:34 +00:00
Eric McGinnis 06a8a487ac Release v4.18.0 2023-12-20 16:18:23 +00:00
Bhavin Patel 71fad8cc55 4.17.0 release branch 2023-12-06 18:40:13 +00:00
Bhavin Patel f3372e03c2 Release branch v4.16.0 2023-11-16 20:33:10 +00:00