admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,257 Commits 697 Branches 195 Tags
update_mapping_code
Commit Graph

2257 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 505eb2d70f Merge branch 'develop' into patch-5 2020-03-03 15:17:04 -08:00
bpatel d5f5dd2801 removing KC 2020-03-03 15:09:57 -08:00
Bhavin Patel 69f6ca6187 Merge pull request #395 from muralith-xilinx/patch-4 
Changing .dll to .pst
 2020-03-03 10:00:14 -08:00
Bhavin Patel db4ba8150f Merge pull request #394 from muralith-xilinx/patch-3 
Create or delete windows shares using net.exe
 2020-03-03 09:51:29 -08:00
dependabot-preview[bot] 9be413dbb6 Merge pull request #378 from splunk/dependabot/pip/virtualenv-20.0.7 2020-03-03 11:21:06 +00:00
dependabot-preview[bot] e05fff4f6b Bump virtualenv from 20.0.5 to 20.0.7 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.5 to 20.0.7.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.5...20.0.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-03-03 11:16:43 +00:00
dependabot-preview[bot] 067f8d3941 Merge pull request #397 from splunk/dependabot/pip/zipp-3.1.0 2020-03-03 11:15:25 +00:00
dependabot-preview[bot] df5659d733 Bump zipp from 3.0.0 to 3.1.0 
Bumps [zipp](https://github.com/jaraco/zipp) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v3.0.0...v3.1.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-03-03 11:11:00 +00:00
muralith-xilinx 9b7d933b1a updating the file path for newer version of Windows 
Filesystem.file_path!="C:\\Users\\*\\AppData\\Local\\Microsoft\\Outlook*"
 2020-03-03 15:24:56 +05:30
muralith-xilinx 55981463e4 Changing .dll to .pst 
Changing .dll to .pst
 2020-03-03 15:02:08 +05:30
muralith-xilinx ec2bca0265 Create or delete windows shares using net.exe 
We are proposing to use AND intead of OR, we have tested this in our environment.
 2020-03-03 14:28:01 +05:30
bpatel 225af8df7a search updated: 2020-03-02 17:39:56 -08:00
bpatel b74e540486 spec update for security domain 2020-03-02 15:45:55 -08:00
dependabot-preview[bot] 29e8935d74 Merge pull request #390 from splunk/dependabot/pip/importlib-resources-1.2.0 2020-03-02 23:38:34 +00:00
dependabot-preview[bot] c2ffddb625 Bump importlib-resources from 1.1.0 to 1.2.0 
Bumps [importlib-resources](http://importlib-resources.readthedocs.io/) from 1.1.0 to 1.2.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-03-02 23:33:55 +00:00
bpatel c40a88ad66 spl update to use parent_process_name 2020-03-02 14:10:10 -08:00
bpatel f3a0b8c982 removing status field from spl 2020-03-02 14:05:04 -08:00
bpatel af223584d9 adding escape chars 2020-03-02 13:52:06 -08:00
bpatel 8c39a521c2 updating spl with escape and better output 2020-03-02 13:44:53 -08:00
bpatel 5199a94b31 updating instructions for better clarification 2020-03-02 13:18:54 -08:00
bpatel 30ff1dcca8 removing status from spl 2020-03-02 13:01:26 -08:00
bpatel f70edf9183 adding dest to the search syntax 2020-03-02 12:42:26 -08:00
research bot 7c4258999a updating docs and package bits [ci skip] 2020-03-02 18:43:38 +00:00
Bhavin Patel b1fbcc0fbb Merge pull request #381 from splunk/container_bug 
updated manifests for container implantation
v1.0.51 		2020-03-02 10:31:19 -08:00
bpatel 7c53ce10bc updated manifests 2020-03-02 10:25:28 -08:00
dependabot-preview[bot] 9ae38891df Merge pull request #380 from splunk/dependabot/pip/importlib-resources-1.1.0 2020-03-01 00:21:37 +00:00
dependabot-preview[bot] bea977f2c5 Bump importlib-resources from 1.0.2 to 1.1.0 
Bumps [importlib-resources](http://importlib-resources.readthedocs.io/) from 1.0.2 to 1.1.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-03-01 00:16:46 +00:00
Bhavin Patel d6bc8f3660 Merge pull request #379 from splunk/develop 
Release v1.0.51
 2020-02-28 20:56:33 +01:00
rvaldez617 826e8c1f1c Update credential_dumping.yml 
Bumped story version due to new search added by Patrick
 2020-02-28 11:41:11 -07:00
rvaldez617 240e15d67e Update access_lsass_memory_for_dump_creation.yml 
bumped version due to update to search
 2020-02-28 11:40:27 -07:00
research bot 751a3e4e8e updating docs and package bits [ci skip] 2020-02-27 23:38:48 +00:00
Jose Enrique Hernandez 637fdf3c11 Merge pull request #372 from splunk/container_implantation 
Container implantation
 2020-02-27 15:31:47 -08:00
divious1 cfec1a0dad fixing story error 2020-02-27 15:24:26 -08:00
divious1 b2c0c6593f fixing references fix 2020-02-27 15:23:08 -08:00
Patrick Bareiss 42103847a8 bug fix 2020-02-27 15:20:46 -08:00
Patrick Bareiss 8e0a955a02 bug fix 2020-02-27 15:17:48 -08:00
Patrick Bareiss b7bb8f2159 Merge branch 'container_implantation' of https://github.com/splunk/security-content into container_implantation 2020-02-27 15:14:38 -08:00
Patrick Bareiss 43effcde02 bug fix 2020-02-27 15:14:24 -08:00
divious1 e3d6b11ac3 updating spec version 2020-02-27 14:43:00 -08:00
Rod Soto 9d12936e2d fixedstory 2020-02-27 17:22:03 -05:00
Rod Soto 187a00cd71 addedmacros 2020-02-27 17:09:50 -05:00
Rod Soto f460b5f354 addedmacros 2020-02-27 17:00:32 -05:00
divious1 1254634518 fixing pieces missing from manifests 2020-02-26 11:46:08 -08:00
Bhavin Patel 42d5aaac20 Merge pull request #368 from splunk/CRL-1740-Dump-LSASS-via-comsvcs-DLL 
new credential dumping detection
 2020-02-26 15:01:18 +05:30
Bhavin Patel 09296c320e Merge pull request #376 from muralith-xilinx/patch-2 
Update access_lsass_memory_for_dump_creation.yml
 2020-02-26 14:49:46 +05:30
muralith-xilinx 1b43224559 Update access_lsass_memory_for_dump_creation.yml 
OR CallTrace=dbghelp.dll " added this dll to search for Windows 7 machines. reference pages https://blog.menasec.net/2019/02/threat-hunting-21-procdump-or-taskmgr.html
 2020-02-26 12:19:59 +05:30
Rod Soto 74019d05c1 fixeddatasourceerror 2020-02-25 14:08:29 -05:00
Bhavin Patel 79ee7eec75 Merge pull request #364 from splunk/CRL-1699-maintainer-typo 
Fix company and email fields in maintainer list in doc-gen.py
 2020-02-25 19:12:45 +05:30
dependabot-preview[bot] c2bec11d6d Merge pull request #373 from splunk/dependabot/pip/cfgv-3.1.0 2020-02-25 00:10:07 +00:00
dependabot-preview[bot] e6032ae682 Bump cfgv from 3.0.0 to 3.1.0 
Bumps [cfgv](https://github.com/asottile/cfgv) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/asottile/cfgv/releases)
- [Commits](https://github.com/asottile/cfgv/compare/v3.0.0...v3.1.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-25 00:05:15 +00:00