 truptilangalia-crest
|
08f0ff6405
|
test: Removed tas with mapping from detection files
|
2022-01-31 19:46:09 +05:30 |
|
|
truptilangalia-crest
|
82e56ef4d1
|
Merge branch 'splunk:develop' into test/enrich_detections
|
2022-01-31 12:41:09 +05:30 |
|
|
Bhavin Patel
|
14c145c133
|
Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline
Potentially malicious code on commandline
|
2022-01-28 13:27:59 -08:00 |
|
|
Michael Hart
|
0911746b03
|
Adding more detail to the description on how scoring works
|
2022-01-28 16:08:25 -05:00 |
|
|
Michael Haag
|
c5db61e52d
|
Quick fix
|
2022-01-28 12:49:03 -07:00 |
|
|
Bhavin Patel
|
3efcb99124
|
Merge pull request #1875 from splunk/ssa_multilogin
Anomalous usage of account credentials
|
2022-01-27 14:55:25 -08:00 |
|
|
Bhavin Patel
|
7fd71050fe
|
Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
|
2022-01-27 14:51:23 -08:00 |
|
|
Bhavin Patel
|
1975ff75a2
|
Merge pull request #1900 from splunk/ssa_info_sabotage
new_ssa_ifo_sabotage
|
2022-01-27 14:11:19 -08:00 |
|
|
Bhavin Patel
|
e96516be57
|
Merge pull request #1965 from splunk/haagupdate
Cred Dump Update
|
2022-01-27 13:40:27 -08:00 |
|
|
mhaag-spl
|
7d9e146f76
|
Cred Dump Update
Based on feedback, updating analytic.
|
2022-01-27 13:17:30 -07:00 |
|
|
Michael Haag
|
802b96ef3a
|
Merge pull request #1960 from splunk/TR-1547
TR-1547 :Customer bug
|
2022-01-27 13:05:27 -07:00 |
|
|
Michael Hart
|
f71e3fe202
|
Adding references
|
2022-01-27 13:13:42 -05:00 |
|
|
truptilangalia-crest
|
7cc2713064
|
Delete detect_mimipenguin.yml
|
2022-01-27 11:54:33 +05:30 |
|
|
truptilangalia-crest
|
81809b4dcc
|
Delete detect_linux_exploit_suggester_execution.yml
|
2022-01-27 11:54:16 +05:30 |
|
|
truptilangalia-crest
|
93a1d46758
|
Delete detect_linpeas_execution.yml
|
2022-01-27 11:53:59 +05:30 |
|
|
truptilangalia-crest
|
aea9333e44
|
Delete detect_linenum_execution.yml
|
2022-01-27 11:53:33 +05:30 |
|
|
truptilangalia-crest
|
4e720c0415
|
Delete detect_autosuid_post_exploitation_tool.yml
|
2022-01-27 11:52:54 +05:30 |
|
|
truptilangalia-crest
|
807dd99672
|
Merge branch 'splunk:develop' into test/enrich_detections
|
2022-01-27 11:49:35 +05:30 |
|
|
Michael Hart
|
b80af6f151
|
Editing the macro to put the apply statement into the search query so that it's clear that MLTK is being used
|
2022-01-26 22:38:13 -05:00 |
|
|
patel-bhavin
|
fe5db9e78e
|
adding lookup files
|
2022-01-26 15:34:10 -08:00 |
|
|
research bot
|
55a62e8365
|
updating docs and package bits [ci skip]
|
2022-01-26 22:55:37 +00:00 |
|
|
Michael Haag
|
3058c7fa57
|
Merge pull request #1959 from splunk/remove_linux_post
Remove linux post exploitation story
v3.34.0
|
2022-01-26 15:09:43 -07:00 |
|
|
patel-bhavin
|
341385a97c
|
wrong file
|
2022-01-26 13:54:01 -08:00 |
|
|
patel-bhavin
|
45c4a7b600
|
remove files that are already merged
|
2022-01-26 13:51:51 -08:00 |
|
|
patel-bhavin
|
df46c560d6
|
Merge branch 'develop' of github.com:splunk/security_content into develop
|
2022-01-26 13:45:21 -08:00 |
|
|
Bhavin Patel
|
67ba0750ef
|
Merge pull request #1945 from splunk/whisper
WhisperTangoFoxtrot
|
2022-01-26 13:35:35 -08:00 |
|
|
mhaag-spl
|
8cb1e0abe0
|
dataset again
|
2022-01-26 13:50:32 -07:00 |
|
|
Detection Testing Service
|
5bc6118cb0
|
test:updated logic to remove unnesseary tas
|
2022-01-27 02:18:31 +05:30 |
|
|
mhaag-spl
|
bed6990986
|
datasets
|
2022-01-26 13:40:09 -07:00 |
|
|
Michael Haag
|
67e413d0e0
|
Update __mlspl_unusual_commandline_detection.yml
|
2022-01-26 11:26:25 -07:00 |
|
|
Michael Hart
|
a9c5017c63
|
Reformatting YAML and calling out MLTK 5.3 dependency
|
2022-01-25 22:30:58 -05:00 |
|
|
Michael Hart
|
d039de61ab
|
Merge branch 'potentially_malicious_code_on_commandline' of github.com:splunk/security_content into potentially_malicious_code_on_commandline
|
2022-01-25 21:43:07 -05:00 |
|
|
Michael Hart
|
39d7121dcd
|
Updating mlmodel to 5.3.x specification as well as the test apparatus
|
2022-01-25 21:42:16 -05:00 |
|
|
patel-bhavin
|
4ccae6c618
|
testing to update a tag
v3.33.1
|
2022-01-25 14:45:57 -08:00 |
|
|
patel-bhavin
|
5a4242bee7
|
testing CI
v3.30.0
|
2022-01-25 14:27:22 -08:00 |
|
|
mhaag-spl
|
60d321e7a7
|
Update windows_nirsoft_utilities.yml
|
2022-01-25 10:03:59 -07:00 |
|
|
Detection Testing Service
|
f25735d831
|
test: updated logic to remove unneccesary tas
|
2022-01-25 18:03:28 +05:30 |
|
|
research bot
|
e91c2b737d
|
updating docs and package bits [ci skip]
|
2022-01-25 02:37:48 +00:00 |
|
|
patel-bhavin
|
cca42c0009
|
moving to expermental
|
2022-01-24 15:31:15 -08:00 |
|
|
mhaag-spl
|
425125cbc4
|
references
|
2022-01-24 15:08:39 -07:00 |
|
|
mhaag-spl
|
befe09f77c
|
Nirsoft Software
|
2022-01-24 15:07:20 -07:00 |
|
|
pyth0n1c
|
ad85b8b21b
|
Branch was auto-updated.
|
2022-01-24 10:51:04 -08:00 |
|
|
pyth0n1c
|
4c125f1dd6
|
Branch was auto-updated.
|
2022-01-24 10:51:03 -08:00 |
|
|
pyth0n1c
|
fc97ef9be2
|
Branch was auto-updated.
|
2022-01-24 10:51:01 -08:00 |
|
|
pyth0n1c
|
2254d203d8
|
Branch was auto-updated.
|
2022-01-24 10:50:59 -08:00 |
|
|
pyth0n1c
|
e848c0a544
|
Branch was auto-updated.
|
2022-01-24 10:50:58 -08:00 |
|
|
pyth0n1c
|
d1dcbfd629
|
Merge pull request #1873 from splunk/nixpost
Nixpost - following test shows success:
https://github.com/splunk/security_content/runs/4888172812?check_suite_focus=true
|
2022-01-24 10:50:37 -08:00 |
|
|
pyth0n1c
|
cbabad3107
|
Branch was auto-updated.
|
2022-01-24 10:40:47 -08:00 |
|
|
pyth0n1c
|
53ca345c06
|
Branch was auto-updated.
|
2022-01-24 10:40:46 -08:00 |
|
|
pyth0n1c
|
3f6c74cc53
|
Branch was auto-updated.
|
2022-01-24 10:40:45 -08:00 |
|