Commit Graph

9164 Commits

Author SHA1 Message Date
Bhavin Patel 49b3f7c750 Merge branch 'windows-admin-permissionfix' into 'release_v4.15.0'
Update windows_admin_permission_discovery.yml

See merge request threat-research/security_content!1241
2023-10-26 18:36:37 +00:00
Bhavin Patel ad79a44681 Merge branch 'conflu-update-1' into 'release_v4.15.0'
Confluence Updates

See merge request threat-research/security_content!1246
2023-10-26 18:35:30 +00:00
Michael Haag 4d530bf68e Confluence Updates 2023-10-26 18:35:30 +00:00
Michael Haag 93d7a12e33 Citrix Bleed 2023-10-26 18:06:47 +00:00
Bhavin Patel a1e441c54e Getting develop branch ready in gitlab 2023-10-23 22:55:52 +00:00
Eric McGinnis c86a0bfea8 Fixed a handful of issues with observables and messages and spacing in content. 2023-10-23 19:49:17 +00:00
Michael Haag 1875a043ec Update windows_admin_permission_discovery.yml 2023-10-19 09:27:12 -06:00
Bhavin Patel 585e1256ad minor 2023-10-17 16:58:32 -07:00
Bhavin Patel 57aa264e85 fixing indentation 2023-10-17 15:21:29 -07:00
Bhavin Patel a2b453f4a4 Merge pull request #2888 from splunk/cve202320198
Cisco IOS XE Vulnerability CVE-2023-20198
2023-10-17 10:56:56 -07:00
Michael Haag d8641bf881 Merge branch 'cve202320198' of https://github.com/splunk/security_content into cve202320198 2023-10-17 11:24:15 -06:00
Michael Haag 64775a0bf6 Update cisco_ios_xe_implant_access.yml 2023-10-17 11:24:13 -06:00
Michael Haag 4855e9d357 fix 2023-10-17 11:23:14 -06:00
Michael Haag 52b666b7c9 Cisco IOS XE Vulnerability CVE-2023-20198 2023-10-17 11:10:25 -06:00
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel fdd1067803 updated descriptions 2023-10-13 13:26:36 -07:00
Bhavin Patel ac7d89f119 Merge pull request #2885 from splunk/1more1
Create confluence_cve_2023_22515_trigger_vulnerability.yml
2023-10-13 12:38:42 -07:00
Michael Haag f3e2739ec5 Update confluence_cve_2023_22515_trigger_vulnerability.yml 2023-10-13 13:00:33 -06:00
Bhavin Patel 07f2c0ea2d macros error 2023-10-13 11:55:25 -07:00
srv-rr-gh-researchbt 33c8026de5 Branch was auto-updated. 2023-10-13 11:48:44 -07:00
Bhavin Patel 4106413eef update story name 2023-10-13 11:36:19 -07:00
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
Bhavin Patel ab59162008 new PR with correct yamls 2023-10-13 11:26:26 -07:00
Michael Haag 69be7e2da9 Create confluence_cve_2023_22515_trigger_vulnerability.yml 2023-10-13 12:23:52 -06:00
srv-rr-gh-researchbt 2dd1d58495 Branch was auto-updated. 2023-10-13 10:39:07 -07:00
srv-rr-gh-researchbt 5e537ec0a5 Branch was auto-updated. 2023-10-13 10:38:42 -07:00
srv-rr-gh-researchbt d8831386a2 Branch was auto-updated. 2023-10-13 10:38:40 -07:00
Michael Haag 74b95a1400 Update citrix_adc_exploitation_cve_2023_3519.yml 2023-10-13 07:06:16 -06:00
srv-rr-gh-researchbt f06d7fcff3 Branch was auto-updated. 2023-10-12 11:47:01 -07:00
Bhavin Patel e324b3d0cf Merge pull request #2879 from splunk/Diamond_Ticket
Diamond Ticket
2023-10-12 11:46:42 -07:00
Bhavin Patel fb66f993c9 update source 2023-10-12 11:15:44 -07:00
Michael Haag 9817a13daf Update confluence_data_center_and_server_privilege_escalation.yml 2023-10-12 09:10:58 -06:00
Michael Haag fd93bb5711 Update citrix_adc_exploitation_cve_2023_3519.yml 2023-10-12 09:09:03 -06:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
Gowthamaraj rajendran 724221f82b Manually update the .yml 2023-10-10 19:29:33 -07:00
Michael Haag 981ef0caf9 Trust this 2023-10-10 16:26:22 -06:00
Michael Haag a1315040ee Create windows_registry_sip_provider_modification.yml 2023-10-10 14:27:49 -06:00
Michael Haag 63c370e748 Sip Happens: Stirring Up the Crypto with a New Module 2023-10-10 14:13:09 -06:00
mvelazco 3e07515de2 adding analytic story 2023-10-09 15:14:35 -04:00
mvelazco 02859139c6 update detection 2023-10-09 14:21:01 -04:00
mvelazco 92b6c09fc5 updating detection 2023-10-09 13:52:36 -04:00
mvelazco f6786d9dcd fixing detection 2023-10-09 11:45:21 -04:00
Bhavin Patel 1612821676 update for data 2023-10-06 13:10:30 -07:00
mvelazco a20f6b726b adding new detection - diamond ticket 2023-10-06 15:46:36 -04:00
Bhavin Patel 49d175146f updating files and metadata 2023-10-06 10:15:47 -07:00
srv-rr-gh-researchbt 48f85987cf Branch was auto-updated. 2023-10-04 13:51:35 -07:00
Michael Haag 6a652765f4 CVE-2023-22515 2023-10-04 14:43:26 -06:00
Bhavin Patel fe821f3328 Merge pull request #2872 from splunk/add_process_path_to_detection
add process_path to tstats output
2023-10-03 15:21:46 -07:00
pyth0n1c ca2a81b55d add process_path to tstats output 2023-10-03 14:02:04 -07:00
pyth0n1c d57b3f1fcf properly format times in risky command search 2023-10-02 12:56:00 -07:00