admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
22,016 Commits 697 Branches 195 Tags
warzone_rat
Commit Graph

22016 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
srv-rr-gh-researchbt 61131d1c26 Branch was auto-updated. 2023-08-17 10:06:59 -07:00
Bhavin Patel bed0f8f4ca Merge pull request #2808 from splunk/fix_susp_copy_from_system32 
fix_susp_copy_from_system32
 2023-08-17 10:06:29 -07:00
srv-rr-gh-researchbt 47c6998351 Branch was auto-updated. 2023-08-17 10:03:22 -07:00
srv-rr-gh-researchbt 99888805ab Branch was auto-updated. 2023-08-17 10:03:17 -07:00
Bhavin Patel cf35294e69 Merge pull request #2807 from splunk/minor_fix_long_cmdline 
minor_fix_long_cmdline
 2023-08-17 10:03:02 -07:00
srv-rr-gh-researchbt eca00c66c4 Branch was auto-updated. 2023-08-17 09:18:18 -07:00
srv-rr-gh-researchbt db45ad03e3 Branch was auto-updated. 2023-08-17 09:18:17 -07:00
srv-rr-gh-researchbt 661692b81c Branch was auto-updated. 2023-08-17 09:18:13 -07:00
research bot 3d57047379 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-08-17 16:17:48 +00:00
srv-rr-gh-researchbt 7ec75ec210 Branch was auto-updated. 2023-08-17 08:54:45 -07:00
srv-rr-gh-researchbt 40a232ff10 Branch was auto-updated. 2023-08-17 08:54:40 -07:00
srv-rr-gh-researchbt f6971e44c5 Branch was auto-updated. 2023-08-17 08:54:38 -07:00
Lou Stella 5f6968715e Merge pull request #2809 from splunk/ssa_escalation_Aug16 
SSA Regex Bugfixes
v4.9.1 		2023-08-17 10:54:23 -05:00
Lou Stella 45c6fda795 Version bumps 2023-08-17 10:47:29 -05:00
Lou Stella 1832570a39 Swap back to regex with new escapes 2023-08-17 10:36:36 -05:00
Lou Stella 2410b52d7a Regenerated for testing 2023-08-17 10:12:34 -05:00
Lou Stella 74a3891f78 Running mass conversion 2023-08-17 10:12:04 -05:00
Lou Stella 779b5aea63 Switch to using like 2023-08-17 10:10:59 -05:00
Lou Stella 2b77ace7e0 code change 2023-08-17 10:10:32 -05:00
tccontre 8320e6bb55 fix_susp_copy_from_system32 2023-08-17 10:49:41 +02:00
Lou Stella e74457dfab adding generated non-functioning regex 2023-08-16 15:58:22 -05:00
Lou Stella 0052fd4a61 adding converted version 2023-08-16 15:55:34 -05:00
Lou Stella 937beacded Adding updated full regex 2023-08-16 15:55:02 -05:00
Lou Stella d4eb301111 push for troulbeshooting 2023-08-16 15:42:17 -05:00
Lou Stella 3045c568d0 Manual edit to remove extra escaping that seems to break the detection 2023-08-16 15:34:48 -05:00
Lou Stella 024be40b55 Updated regex again 2023-08-16 15:34:17 -05:00
Lou Stella 7efd991ae8 pushing to share for troubleshooting 2023-08-16 14:44:18 -05:00
Lou Stella 649304fe95 tweak regex because tool supplies case insensitivity 2023-08-16 13:49:46 -05:00
Lou Stella ffed36c532 generated detection 2023-08-16 13:38:03 -05:00
Lou Stella 868bf4984a Updated regex, removed duplicate pwsh 2023-08-16 13:13:39 -05:00
tccontre d0b0099973 minor_fix_long_cmdline 2023-08-16 16:30:01 +02:00
srv-rr-gh-researchbt 555709d325 Branch was auto-updated. 2023-08-09 08:50:01 -07:00
research bot e17ab01225 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-08-09 15:49:37 +00:00
srv-rr-gh-researchbt cea9ecef80 Branch was auto-updated. 2023-08-08 09:49:47 -07:00
Bhavin Patel b1b8f2ee69 Merge pull request #2801 from splunk/cve-2023-35082 
Ivanti CVE-2023-35082
v4.9.0 		2023-08-08 09:49:15 -07:00
Michael Haag a99eeef7d7 Ivanti CVE-2023-35082 2023-08-08 10:23:50 -06:00
srv-rr-gh-researchbt 13477d256b Branch was auto-updated. 2023-08-07 14:23:29 -07:00
Bhavin Patel e8fa5ab05d Merge pull request #2796 from splunk/fix-aws-al-desc 
Update description
 2023-08-07 14:23:07 -07:00
srv-rr-gh-researchbt 68bc3f267e Branch was auto-updated. 2023-08-07 14:22:14 -07:00
srv-rr-gh-researchbt c84c9514ff Branch was auto-updated. 2023-08-07 14:22:04 -07:00
Bhavin Patel 99ecdbc031 Merge pull request #2800 from splunk/observablefix 
Updates to Observable!
 2023-08-07 14:21:47 -07:00
Bhavin Patel a474fb4456 Update o365_added_service_principal.yml 2023-08-07 14:02:36 -07:00
Bhavin Patel 4c76d950f8 Update o365_added_service_principal.yml 2023-08-07 14:01:06 -07:00
Bhavin Patel 8b4de41253 update mode ongit add . 2023-08-07 13:52:27 -07:00
Bhavin Patel 424ce1f1c5 Update o365_new_federated_domain_added.yml 2023-08-07 13:03:40 -07:00
Bhavin Patel caf4ce8fdb updates 2023-08-07 12:58:36 -07:00
srv-rr-gh-researchbt 4a0383ed27 Branch was auto-updated. 2023-08-07 12:45:05 -07:00
srv-rr-gh-researchbt 351c2c56a6 Branch was auto-updated. 2023-08-07 12:44:53 -07:00
Bhavin Patel f9b7d09490 Merge pull request #2766 from splunk/goot_test 
G00t Duplicate for testing by Steven Dick
 2023-08-07 12:44:30 -07:00
Bhavin Patel b80946f363 Update windows_scheduled_task_service_spawned_shell.yml 2023-08-07 12:16:31 -07:00