admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,218 Commits 697 Branches 195 Tags
018caf3f69ca45aca7ec96d19963dcf2bc8b33ec
Commit Graph

14218 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c 018caf3f69 Branch was auto-updated. 2022-03-01 10:53:49 -08:00
Bhavin Patel 8449a51da4 Merge pull request #2055 from splunk/AlwaysUseDevelopTestingCode 
Use Latest Testing Code/Config
 2022-03-01 10:53:28 -08:00
David Dorsey 3971941fd1 Fixed syntax error 2022-03-01 12:05:59 -06:00
David Dorsey ecb7ea0cce Updated prohibited apps 2022-03-01 12:03:51 -06:00
pyth0n1c 10ed443903 Ensuring that testing code from develop 
branch is always used for CI/CD.  This is
done by explicitly checking out the develop
branch to get the testing code.  We make
this change to avoid doing CI/CD tests 
using out-of-data Splunkbase Apps.
For one-off testing, a develop can
always modify this workflow file to 
NOT check out the develop branch
and include a custom test JSON.
 2022-03-01 09:41:19 -08:00
Lou Stella 401b5ad8cc Merge pull request #2054 from splunk/ransomware_extensions 
Updated ransomware_extensions.csv
 2022-03-01 11:33:47 -06:00
Lou Stella 49b2b9f0d4 Updated ransomware_extensions.csv 2022-03-01 11:19:55 -06:00
Jose Enrique Hernandez 3c1f3cf6cf Merge pull request #2052 from schwedenmut/patch-1 2022-03-01 09:30:52 -05:00
Marc Schwede 63dcb7f00f Update o365_excessive_authentication_failures_alert.yml 
rename syntax adjusted
later needed lastTime included
 2022-03-01 14:04:36 +01:00
Lou Stella 32b5190096 Merge pull request #2050 from splunk/function_updates 
Function updates
 2022-02-28 16:31:03 -06:00
pyth0n1c ed6f594f43 Branch was auto-updated. 2022-02-28 14:24:57 -08:00
Lou Stella 547d323dc6 Merge pull request #2045 from splunk/Playbook_types 
Added playbook_type field
 2022-02-28 16:24:25 -06:00
pyth0n1c e325eeed98 Branch was auto-updated. 2022-02-28 14:19:49 -08:00
pyth0n1c f44d149322 Branch was auto-updated. 2022-02-28 14:18:38 -08:00
Michael Haag 72a04035b3 Merge pull request #2051 from splunk/1526_Github_Issue 
Fixing Github Issue 1526
 2022-02-28 15:18:20 -07:00
mvelazco 8d72fd87fc testing new detection logic to avoid FP 2022-02-28 17:02:50 -05:00
Lou Stella 0d0076a686 Update find_related_containers 2022-02-28 16:02:33 -06:00
Lou Stella 3a0e77912f Update container_merge 2022-02-28 16:02:03 -06:00
Lou Stella b7296e551a Added playbook_type field 2022-02-25 14:44:58 -06:00
Bhavin Patel e87c2f5ae5 Merge pull request #2044 from splunk/unusual_volume 
update search
 2022-02-25 12:43:28 -08:00
pyth0n1c 0e779f6491 Branch was auto-updated. 2022-02-25 12:29:59 -08:00
Bhavin Patel 4e370ea509 Merge pull request #2041 from splunk/UAC_Bypass 
UAC Bypass conversion
 2022-02-25 12:29:40 -08:00
Lou Stella 176c339073 Updated FP 2022-02-25 14:22:53 -06:00
Lou Stella d3322283c3 Added risk_severity 2022-02-25 13:49:21 -06:00
Lou Stella 9f65b5d0d4 Updated required fields 2022-02-25 13:48:04 -06:00
Xiao Lin 7b8f6b22e2 update search 2022-02-25 10:03:01 -08:00
Lou Stella 4d05f75a0f Removed broken test 2022-02-25 10:48:30 -06:00
Lou Stella 760747cea2 Small update to body 2022-02-25 10:46:46 -06:00
Lou Stella ca2163ae8c Moved to Experimental 2022-02-25 10:40:46 -06:00
pyth0n1c 548282abc2 Branch was auto-updated. 2022-02-24 14:56:37 -08:00
Bhavin Patel 335f74f42d Merge pull request #1957 from splunk/nixpost3 
Linux Exploitation Tools
 2022-02-24 14:56:11 -08:00
Bhavin Patel 55ffc28ae7 Update linux_post_exploitation.yml 2022-02-24 14:37:20 -08:00
patel-bhavin caf0635885 typo 2022-02-24 14:16:38 -08:00
patel-bhavin 68dde34dc8 rename typo 2022-02-24 14:14:13 -08:00
Michael Haag 73752624a8 updated story words 2022-02-24 14:54:46 -07:00
pyth0n1c 95820f7596 Branch was auto-updated. 2022-02-24 12:59:09 -08:00
pyth0n1c fb6c741f85 Branch was auto-updated. 2022-02-24 12:59:00 -08:00
Bhavin Patel 480b72898a Merge pull request #2002 from splunk/TR_1550_Kerberos_Coverage_1 
Active Directory Kerberos Attacks - Part 1
 2022-02-24 12:58:36 -08:00
Bhavin Patel d075ca883b Update rubeus_command_line_parameters.yml 
minor  change to context
 2022-02-24 12:31:07 -08:00
Bhavin Patel 2c3f316756 Update suspcious_linux_discovery_commands.test.yml 2022-02-24 12:10:55 -08:00
mvelazco edce8098df Merge branch 'TR_1550_Kerberos_Coverage_1' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_1 2022-02-24 14:46:33 -05:00
mvelazco 15a77c78cc adding analytic story tag 2022-02-24 14:46:20 -05:00
pyth0n1c 215a840812 Branch was auto-updated. 2022-02-24 11:32:36 -08:00
pyth0n1c 79efe8c76e Branch was auto-updated. 2022-02-24 11:32:31 -08:00
pyth0n1c f785ec358b Branch was auto-updated. 2022-02-24 11:32:25 -08:00
Bhavin Patel 261b8e0bc2 Merge pull request #2027 from splunk/haagt1629 
added run once search registry
 2022-02-24 11:32:06 -08:00
mvelazco a3fc0779ae tagging password spraying detections 2022-02-24 12:40:36 -05:00
Lou Stella 97120e2aeb Added back other WIP detection 2022-02-23 19:30:57 -06:00
Lou Stella be19bf61b9 fixed like statement 2022-02-23 18:26:26 -06:00
Lou Stella 9cf8199444 update again 2022-02-23 18:18:40 -06:00