admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,890 Commits 697 Branches 195 Tags
update_baseline_path
Commit Graph

3658 Commits

Author SHA1 Message Date
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
Bhavin Patel 9740a785b1 Branch was auto-updated. 2021-09-27 10:20:34 -07:00
Bhavin Patel cb29959b97 Branch was auto-updated. 2021-09-27 10:04:27 -07:00
Bhavin Patel 170e4e1ae8 Branch was auto-updated. 2021-09-27 10:04:10 -07:00
Bhavin Patel 2b8d3776fe Branch was auto-updated. 2021-09-24 14:54:22 -07:00
Bhavin Patel a6bf5c2c7a Branch was auto-updated. 2021-09-24 14:54:14 -07:00
Bhavin Patel 8340e8bf00 Branch was auto-updated. 2021-09-24 14:54:13 -07:00
peter 2944cbb6fa Merge pull request #1685 from splunk/ssa_lolbas_spike 
Adding some basic body info for unusual lolbas count
 2021-09-24 16:53:58 -05:00
peter-cg 3512cb812c Adding some basic body info for unusual lolbas count 2021-09-24 15:23:43 -05:00
Bhavin Patel 418e7b4c4d Branch was auto-updated. 2021-09-24 11:38:41 -07:00
Bhavin Patel 68040d2072 Branch was auto-updated. 2021-09-24 11:38:40 -07:00
Bhavin Patel 159393a693 Branch was auto-updated. 2021-09-24 11:38:28 -07:00
Stanislav Miskovic 9cc5d2a177 Fixing a problem with time being in milliseconds vs seconds - setting observation confirence interval back to 30 min 2021-09-24 11:19:38 -07:00
tccontre 74c7b3c753 remcos_agent 2021-09-24 09:20:07 +02:00
Detection Testing Service 9831efea63 Merge branch 'remcos_agent' of https://github.com/splunk/security_content into remcos_agent 2021-09-23 08:09:44 +00:00
root 6abadead7c Added detection testing service results inRemcos RAT File Creation in Remcos Folder 2021-09-23 08:09:43 +00:00
root d445133a16 Added detection testing service results inSuspicious Image Creation In Appdata Folder 2021-09-23 08:07:07 +00:00
mhaag-spl 38ee2f9319 Revert "Update searchprotocolhost_with_no_command_line_with_network.yml" 
This reverts commit 958e195593.
 2021-09-22 14:11:27 -06:00
root b34bbb097b Added detection testing service results inSuspicious WAV file in Appdata Folder 2021-09-22 16:01:40 +00:00
tccontre 821d97981e remcos_agent 2021-09-22 14:08:13 +02:00
Detection Testing Service ac575d31f2 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:59:41 +00:00
root 36476e9d69 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques 2021-09-21 19:59:40 +00:00
Detection Testing Service 50f47cc360 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:58:13 +00:00
root 71fd03b1ec Added detection testing service results inMalicious PowerShell Process - Execution Policy Bypass 2021-09-21 19:58:12 +00:00
Detection Testing Service 29164395f1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:56:37 +00:00
root 7863894512 Added detection testing service results inMalicious PowerShell Process - Encoded Command 2021-09-21 19:56:36 +00:00
Detection Testing Service 50609ee581 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:53:33 +00:00
root 863848a8d4 Added detection testing service results inMalicious PowerShell Process - Connect To Internet With Hidden Window 2021-09-21 19:53:32 +00:00
Detection Testing Service 405b5c2570 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:43:20 +00:00
root 4feb74f09a Added detection testing service results inCertUtil Download With URLCache and Split Arguments 2021-09-21 19:43:19 +00:00
Detection Testing Service 9598a3ab4d Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:41:08 +00:00
root f720679ba3 Added detection testing service results inAllow Network Discovery In Firewall 2021-09-21 19:41:07 +00:00
Detection Testing Service a4498adb91 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:31:27 +00:00
root 389002fc9d Added detection testing service results inAny Powershell DownloadFile 2021-09-21 19:31:26 +00:00
Detection Testing Service 2035cfb8c1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:29:12 +00:00
root 1e4a51b5ef Added detection testing service results inAllow File And Printing Sharing In Firewall 2021-09-21 19:29:11 +00:00
Detection Testing Service 6626da0f12 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:28:59 +00:00
root 2ea88aac2a Added detection testing service results inAny Powershell DownloadString 2021-09-21 19:28:58 +00:00
Detection Testing Service cbc0afb8b4 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:28:44 +00:00
root badfacb77e Added detection testing service results inCertUtil Download With VerifyCtl and Split Arguments 2021-09-21 19:28:43 +00:00
Detection Testing Service 4a652273ba Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:28:20 +00:00
root 9211481e2b Added detection testing service results inAttempt To Stop Security Service 2021-09-21 19:28:19 +00:00
Detection Testing Service 8cbb4e3c90 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:27:08 +00:00
root 7204cf8a9c Added detection testing service results inBatch File Write to System32 2021-09-21 19:27:07 +00:00
root 1c45f4dd02 Added detection testing service results inCertUtil With Decode Argument 2021-09-21 19:24:28 +00:00
Bhavin Patel 5694f0534e Branch was auto-updated. 2021-09-21 11:29:23 -07:00
Bhavin Patel 19688b52b2 Branch was auto-updated. 2021-09-21 11:29:22 -07:00
Bhavin Patel f257545630 Branch was auto-updated. 2021-09-21 11:29:21 -07:00
Detection Testing Service c4c626501e Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 18:26:00 +00:00
root 97172e446f Added detection testing service results inExcessive Service Stop Attempt 2021-09-21 18:25:59 +00:00