Commit Graph

16959 Commits

Author SHA1 Message Date
Bhavin Patel 149c19a617 Merge pull request #2318 from splunk/TR_2329_AWS_Credential_Access
Add AWS Credential Access detections
2022-08-12 13:00:43 -07:00
patel-bhavin 1e4b0353f8 search update 2022-08-12 12:46:25 -07:00
patel-bhavin 6969671bf9 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-12 12:41:19 -07:00
patel-bhavin 24cd1afcb8 updatesusing datamodel 2022-08-12 12:34:02 -07:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
Bhavin Patel d54565cbaa Merge pull request #2315 from splunk/TR_2301_lotl_awk_docker_node
Add detections for Awk, Node, Docker Lotl
2022-08-11 12:15:51 -07:00
Bhavin Patel 1952b9773b Update aws_credential_access_getpassworddata.yml 2022-08-11 12:10:47 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 0136017be3 Branch was auto-updated. 2022-08-11 11:30:09 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots
Haag it!
2022-08-11 11:29:48 -07:00
Bhavin Patel dcd8cf43aa Merge pull request #2308 from splunk/dcrat-analytics3
dcrat-analytics3
2022-08-11 11:16:37 -07:00
Bhavin Patel a192bac909 Update windows_gather_victim_host_information_camera.yml 2022-08-11 11:13:41 -07:00
Bhavin Patel 45ae7df595 Merge branch 'develop' into dcrat-analytics3 2022-08-11 11:03:14 -07:00
Bhavin Patel 0a4a86475f Merge pull request #2317 from splunk/TR-2314
TR-2314 adding research site links to BA
2022-08-10 16:15:42 -07:00
patel-bhavin c4848f5431 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-10 16:03:28 -07:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
pyth0n1c baf591f0d2 Branch was auto-updated. 2022-08-10 11:17:07 -07:00
pyth0n1c 61d5002e35 Branch was auto-updated. 2022-08-10 11:17:02 -07:00
pyth0n1c 5979a6d615 Branch was auto-updated. 2022-08-10 11:17:01 -07:00
pyth0n1c 12f0471a71 Branch was auto-updated. 2022-08-10 11:16:59 -07:00
Bhavin Patel 7f084a04f8 Merge pull request #2313 from splunk/fix_mispelling_ad_pass_spray_story
Update active_directory_password_spraying.yml
2022-08-10 11:16:57 -07:00
Bhavin Patel 2187489cd3 Merge pull request #2307 from splunk/cleaning_dnstwist
fixing base on feedback from users
2022-08-10 11:16:36 -07:00
pyth0n1c 22c0dbfc78 Branch was auto-updated. 2022-08-09 16:57:25 -07:00
pyth0n1c 3f0c5537c7 Branch was auto-updated. 2022-08-09 16:57:24 -07:00
pyth0n1c 7e4516ea4c Branch was auto-updated. 2022-08-09 16:57:23 -07:00
pyth0n1c 022711d876 Branch was auto-updated. 2022-08-09 16:57:22 -07:00
pyth0n1c 2d62c07b81 Branch was auto-updated. 2022-08-09 16:57:18 -07:00
pyth0n1c 99cc720057 Branch was auto-updated. 2022-08-09 16:57:17 -07:00
Bhavin Patel a47086080b Merge pull request #2314 from splunk/faking_appcert
doing a fix to pass appcert
2022-08-09 16:57:00 -07:00
pyth0n1c a7f76dca31 Branch was auto-updated. 2022-08-09 16:46:24 -07:00
pyth0n1c 013d3f3e79 Branch was auto-updated. 2022-08-09 16:46:21 -07:00
pyth0n1c 697c14b151 Branch was auto-updated. 2022-08-09 16:46:20 -07:00
pyth0n1c d928024447 Branch was auto-updated. 2022-08-09 16:46:19 -07:00
pyth0n1c 941a1dac8b Branch was auto-updated. 2022-08-09 16:46:16 -07:00
pyth0n1c e7cd30fa04 Branch was auto-updated. 2022-08-09 16:46:15 -07:00
pyth0n1c fd519e3fac Branch was auto-updated. 2022-08-09 16:46:14 -07:00
Bhavin Patel a656928371 Merge pull request #2320 from splunk/fix-clean-obj-name
fix-clean-obj-name
2022-08-09 16:45:55 -07:00
patel-bhavin 8b6df0a600 tagged other detections 2022-08-09 16:25:16 -07:00
patel-bhavin d1c0d94fd2 story file 2022-08-09 16:02:19 -07:00
tccontre fe394aa85c fix-clean-obj-name 2022-08-09 13:03:53 +02:00
gowthamarajr 758f91deea Edit file for aws rds password detection 2022-08-08 02:30:59 -04:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
P4T12ICK 97bc95f773 bug fix 2022-08-04 14:55:21 +02:00
tccontre 7422fb3eda dcrat-analytics3 2022-08-04 09:44:22 +02:00
pyth0n1c c1b74d4675 Branch was auto-updated. 2022-08-04 00:42:15 -07:00
pyth0n1c 8d32deae1e Branch was auto-updated. 2022-08-04 00:42:14 -07:00
pyth0n1c 7e57901376 Branch was auto-updated. 2022-08-04 00:42:12 -07:00
pyth0n1c 59c80dae8d Branch was auto-updated. 2022-08-04 00:42:08 -07:00
pyth0n1c 1ee1b76968 Branch was auto-updated. 2022-08-04 00:42:05 -07:00
pyth0n1c 6343ecb5ea Branch was auto-updated. 2022-08-04 00:42:03 -07:00