admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,736 Commits 697 Branches 195 Tags
xml_cleanup
Commit Graph

425 Commits

Author SHA1 Message Date
ljstella d6f03a2d24 Bumped versions 2025-09-09 08:49:59 -04:00
ljstella 8d0935f037 Update attack_data links 2025-09-09 08:35:57 -04:00
Teoderick Contreras 897986eaa5 objectivity_stealer 2025-08-25 18:46:15 +02:00
Teoderick Contreras e99692b3e6 objectivity_stealer 2025-08-22 09:54:09 +02:00
Bhavin Patel 227bb64ccc remove drilldown 2025-08-21 14:04:16 -07:00
Bhavin Patel 6a561d6119 updating macro 2025-08-21 13:10:38 -07:00
Bhavin Patel 23944ac544 adding detection from pcap 2025-08-21 12:59:30 -07:00
Bhavin Patel 5efc96202d updating spl 2025-08-21 12:21:54 -07:00
Michael Haag c58213d18e Create cisco_configuration_archive_logging_analysis.yml 2025-08-21 13:18:04 -06:00
Michael Haag 900803f962 Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018 2025-08-21 13:16:33 -06:00
Michael Haag aea4629c0a Create cisco_configuration_file_exfiltration_attempts.yml 2025-08-21 13:16:32 -06:00
Bhavin Patel 62f32549c9 fixing dd 2025-08-21 11:17:12 -07:00
Bhavin Patel d895fa6034 yaml fixes 2025-08-21 11:12:52 -07:00
Michael Haag 9bc27c2b0d Create cisco_tftp_server_configuration_for_data_exfiltration.yml 2025-08-21 11:43:59 -06:00
Michael Haag ec698f88ec Create cisco_network_interface_modifications.yml 2025-08-21 11:43:03 -06:00
Michael Haag 91c9a99d62 Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018 2025-08-21 11:27:07 -06:00
Michael Haag 1781f034ba Create cisco_snmp_community_string_configuration_changes.yml 2025-08-21 11:26:58 -06:00
Bhavin Patel 7ec158832d adding a new detections for snort with static tundra sigs 2025-08-21 10:17:54 -07:00
Bhavin Patel 94a7f291e8 updating dataset link 2025-08-21 10:17:54 -07:00
Michael Haag b24cb334a3 Create cisco_ios_suspicious_privileged_account_creation.yml 2025-08-21 11:06:59 -06:00
Bhavin Patel c31013241b updatings with snort detection and lookup also contentctl 2025-08-21 09:43:02 -07:00
Michael Haag 125486536c DS + new 2025-08-21 10:08:59 -06:00
Raven Tait 5e948ce3fc Updates for 3886 2025-08-18 15:17:37 -04:00
Teoderick Contreras ed31e4367e rdp_artifacts_and_evasion 2025-08-07 14:29:17 +02:00
Br3akp0int ce1bfce684 Merge branch 'develop' into rdp_artifacts_and_evasion 2025-08-06 11:49:38 +02:00
Michael Haag 7883693801 Merge branch 'develop' into scatteringspider 2025-08-01 10:21:00 -06:00
Teoderick Contreras 8c265f4881 rdp_artifacts_and_evasion 2025-08-01 10:13:08 +02:00
Michael Haag ea0121c2f1 Scattered Spider Tags 2025-07-31 10:54:21 -06:00
Teoderick Contreras 96786372a3 interlock_ransomware 2025-07-28 11:58:45 +02:00
Nasreddine Bencherchali 1075307e29 Update detections/network/windows_gather_victim_network_info_through_ip_check_web_services.yml 2025-07-21 21:01:20 +02:00
Bhavin Patel f3505b9a33 Merge branch 'develop' into quasar_and_loader 2025-07-18 12:17:52 -07:00
Nasreddine Bencherchali 77de82e744 Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-18 01:08:25 +02:00
Nasreddine Bencherchali 669eb8b4ba Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-17 20:58:55 +02:00
Nasreddine Bencherchali 799faa2a1e Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-17 20:46:33 +02:00
Nasreddine Bencherchali 523e5f4b94 add ftd equivalent analytic 2025-07-17 20:43:29 +02:00
Teoderick Contreras d5402b4dcc quasar_and_loader 2025-07-17 14:51:43 +02:00
Teoderick Contreras 98a7e95306 quasar_and_loader 2025-07-16 10:23:20 +02:00
Nasreddine Bencherchali ad398c0707 small tweaks 2025-07-10 16:43:54 +02:00
Nasreddine Bencherchali 909693a201 update action value to alight with new ta ver 2025-07-10 16:41:49 +02:00
Nasreddine Bencherchali 8ffb683440 Merge branch 'develop' into nvm-batch1 2025-07-07 01:23:13 +02:00
Bhavin Patel e6e3145dc0 updating description 2025-07-03 14:26:07 -07:00
Nasreddine Bencherchali 6527190e18 up version for ci overlords 2025-07-01 23:18:54 +02:00
Nasreddine Bencherchali 75ec47e99a add new detections, story and other cool things 2025-07-01 23:04:48 +02:00
pyth0n1c 60656154e7 Merge branch 'develop' into updates-june 2025-06-17 11:54:36 -07:00
Nasreddine Bencherchali cb45d9d030 quick fixes and updates 2025-06-17 20:32:55 +02:00
Nasreddine Bencherchali c46c948ae4 more fixes 2025-06-17 02:20:37 +02:00
Nasreddine Bencherchali 6c5aa91dbf more updates 2025-06-16 23:38:10 +02:00
Nasreddine Bencherchali 8efe3b11d2 add manual_test tag 2025-06-10 21:25:21 +02:00
Nasreddine Bencherchali 05df61c626 Update detect_outbound_smb_traffic.yml 2025-06-10 20:32:31 +02:00
Nasreddine Bencherchali a62ddcc7b5 add drilldowns to production analytics 2025-06-10 16:26:40 +02:00