admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,890 Commits 697 Branches 195 Tags
update_baseline_path
Commit Graph

198 Commits

Author SHA1 Message Date
mhaag-spl bd6a779b02 no longer need sysmon procdump - updated superior procdump 2021-09-16 12:06:20 -06:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
Bhavin Patel c560335cab Branch was auto-updated. 2021-09-08 00:52:42 -07:00
P4T12ICK a917acaf4c updated detections 2021-09-06 14:49:19 +02:00
mhaag-spl fa2b35c293 Merge branch 'develop' into The-Haag-of-The-Storm 2021-09-03 07:10:38 -06:00
github-actions[bot] 88ad9717f9 Branch was auto-updated. 2021-09-02 16:44:59 +00:00
mhaag-spl e8de140562 fixes 2021-09-01 16:58:23 -06:00
P4T12ICK 7f980b6a46 circle ci detecction 2021-09-01 17:54:38 +02:00
P4T12ICK dcbc0f95ad github detection 2021-09-01 13:56:23 +02:00
tccontre b90326f55c dev_git 2021-08-27 13:28:06 +02:00
github-actions[bot] 35398496bc Branch was auto-updated. 2021-08-27 08:59:54 +00:00
github-actions[bot] fff8689f1f Branch was auto-updated. 2021-08-27 08:21:40 +00:00
github-actions[bot] 0c1a1c79b7 Branch was auto-updated. 2021-08-27 08:21:37 +00:00
P4T12ICK fed6fc9502 k8s scanner 2021-08-25 10:49:51 +02:00
P4T12ICK 53bf235622 k8s scanner detection 2021-08-24 14:39:15 +02:00
github-actions[bot] 8ff6371446 Branch was auto-updated. 2021-08-23 15:21:50 +00:00
github-actions[bot] 6f0170b022 Branch was auto-updated. 2021-08-23 15:21:43 +00:00
P4T12ICK 749df59357 new detection 2021-08-23 10:17:40 +02:00
tccontre e5ae722014 dev_git 2021-08-20 13:59:06 +02:00
github-actions[bot] 3f90fc50cb Branch was auto-updated. 2021-08-19 15:42:43 +00:00
P4T12ICK dd419961e7 container upload aws ecr 2021-08-19 15:51:17 +02:00
mhaag-spl 0e19432a1d msbuild and microsoftworkflowcompiler 2021-08-19 06:57:11 -06:00
github-actions[bot] 59ae237866 Branch was auto-updated. 2021-08-19 11:15:58 +00:00
mhaag-spl 495a94bbbc Update process_esentutl.yml 2021-08-18 11:14:13 -06:00
mhaag-spl 1eb1f40ae0 esentutil 
Related to Conti leaks
 2021-08-18 10:47:58 -06:00
mhaag-spl 09f29ad081 macros 2021-08-18 09:50:08 -06:00
tccontre 1bde88fc3f dev_ops_uc 2021-08-18 15:58:35 +02:00
mhaag-spl d648d525b3 macro'd bitsadmin 2021-08-17 15:20:40 -06:00
mhaag-spl 71481634a3 macro'd netsh 2021-08-17 15:14:35 -06:00
mhaag-spl ba6c98c292 macro'd certutil 2021-08-17 15:00:51 -06:00
mhaag-spl e1752d3440 macro'd hh 2021-08-17 14:29:16 -06:00
mhaag-spl 5dc0e8f211 macro'd net 2021-08-17 13:56:57 -06:00
mhaag-spl a1a670203f macro'd mshta 2021-08-17 13:38:11 -06:00
mhaag-spl ad88e9a0ff macro'd regsvr32 2021-08-17 13:27:48 -06:00
mhaag-spl 3251fcc1f6 macrod rundll32 2021-08-17 13:21:24 -06:00
mhaag-spl 644747d578 macro'd reg cmd 2021-08-17 12:09:31 -06:00
mhaag-spl 9958c82c3c macro'd wmic 2021-08-17 11:44:30 -06:00
Michael Haag c4a62635b1 Merge branch 'develop' into The-Haag-of-The-Storm 2021-08-17 11:19:42 -06:00
mhaag-spl 20000828f3 Macro'd powershell 2021-08-17 11:15:36 -06:00
P4T12ICK 686b0b5ca4 converted response_task to investigations 2021-07-26 13:39:17 +02:00
mhaag-spl bd69016d7e PowerShell 4104 copy of Security HIVES 
Modified macro to capture both XML rendered and non. Issue is, if you renderXML for powershell logging, it will have different fields. Something to be aware of.
 2021-07-21 13:57:10 -06:00
mhaag-spl 0c86774b15 Added a Macro 2021-07-01 12:11:49 -06:00
bpatel 4a840d4184 ericks detections from xmrig 2021-05-12 12:58:00 -07:00
Bhavin Patel 3aa6adebd6 Merge branch 'develop' into sh_test 2021-02-03 14:24:50 -08:00
P4T12ICK 7f8652b85b bug fix 2021-02-03 15:44:56 +01:00
bpatel 4fb0488ac6 duplicating files and experimental 2021-01-28 17:35:25 -08:00
bpatel ec76d28b60 rename 2021-01-26 19:28:03 -08:00
bpatel edeaa89c7d macros for all 2021-01-26 18:53:01 -08:00
David Dorsey fd76342c94 Changed the language in some of the descriptions 2021-01-21 23:53:47 -06:00
P4T12ICK 58627b44f9 changes 2020-12-15 12:27:16 +01:00