admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,959 Commits 697 Branches 195 Tags
149c19a6171c136155c1d72a2fcad2e681b60e21
Commit Graph

6496 Commits

Author SHA1 Message Date
patel-bhavin 1e4b0353f8 search update 2022-08-12 12:46:25 -07:00
patel-bhavin 6969671bf9 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-12 12:41:19 -07:00
patel-bhavin 24cd1afcb8 updatesusing datamodel 2022-08-12 12:34:02 -07:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
Bhavin Patel 1952b9773b Update aws_credential_access_getpassworddata.yml 2022-08-11 12:10:47 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 0136017be3 Branch was auto-updated. 2022-08-11 11:30:09 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots 
Haag it!
 2022-08-11 11:29:48 -07:00
Bhavin Patel a192bac909 Update windows_gather_victim_host_information_camera.yml 2022-08-11 11:13:41 -07:00
Bhavin Patel 45ae7df595 Merge branch 'develop' into dcrat-analytics3 2022-08-11 11:03:14 -07:00
patel-bhavin c4848f5431 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-10 16:03:28 -07:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
pyth0n1c baf591f0d2 Branch was auto-updated. 2022-08-10 11:17:07 -07:00
pyth0n1c 5979a6d615 Branch was auto-updated. 2022-08-10 11:17:01 -07:00
pyth0n1c 12f0471a71 Branch was auto-updated. 2022-08-10 11:16:59 -07:00
pyth0n1c 22c0dbfc78 Branch was auto-updated. 2022-08-09 16:57:25 -07:00
pyth0n1c 3f0c5537c7 Branch was auto-updated. 2022-08-09 16:57:24 -07:00
pyth0n1c 2d62c07b81 Branch was auto-updated. 2022-08-09 16:57:18 -07:00
pyth0n1c 99cc720057 Branch was auto-updated. 2022-08-09 16:57:17 -07:00
pyth0n1c a7f76dca31 Branch was auto-updated. 2022-08-09 16:46:24 -07:00
pyth0n1c 697c14b151 Branch was auto-updated. 2022-08-09 16:46:20 -07:00
pyth0n1c d928024447 Branch was auto-updated. 2022-08-09 16:46:19 -07:00
pyth0n1c e7cd30fa04 Branch was auto-updated. 2022-08-09 16:46:15 -07:00
pyth0n1c fd519e3fac Branch was auto-updated. 2022-08-09 16:46:14 -07:00
patel-bhavin 8b6df0a600 tagged other detections 2022-08-09 16:25:16 -07:00
tccontre fe394aa85c fix-clean-obj-name 2022-08-09 13:03:53 +02:00
gowthamarajr 758f91deea Edit file for aws rds password detection 2022-08-08 02:30:59 -04:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
tccontre 7422fb3eda dcrat-analytics3 2022-08-04 09:44:22 +02:00
tccontre ca11a32aeb dcrat-analytics3 2022-08-03 17:53:06 +02:00
pyth0n1c ce9980bcfb Branch was auto-updated. 2022-08-03 08:28:31 -07:00
pyth0n1c 3d16da7d47 Branch was auto-updated. 2022-08-03 08:28:25 -07:00
pyth0n1c 439779d28e Branch was auto-updated. 2022-08-03 08:28:23 -07:00
pyth0n1c eb30f6c6fd Branch was auto-updated. 2022-08-03 08:28:23 -07:00
gowthamarajr 544afe862c edit risk score 2022-08-02 16:34:22 -04:00
gowthamarajr 29a61f8cb6 Add detections for Awk, Node, Docker Lotl 2022-08-02 16:23:31 -04:00
d1vious 66a679471c Merge branch 'develop' into faking_appcert 2022-08-02 11:36:23 -04:00
d1vious c9099e8a41 doing a fix to pass appcert 2022-08-02 11:28:58 -04:00
Michael Haag 83e57921ad iscsi fix 2022-08-02 08:35:54 -06:00
tccontre 9cfa2151e7 Update windows_ingress_tool_transfer_using_explorer.yml 2022-08-02 14:01:38 +02:00
tccontre da230f6ed6 dcrat-analytics3 2022-08-02 13:31:49 +02:00
tccontre e189299cf2 dcrat-analytics3 2022-08-02 12:00:40 +02:00
root c71b04a866 Updated detection files with recommended TA list. 2022-08-01 18:43:39 +00:00
tccontre 4fb7bb3306 Merge branch 'dcrat-analytics3' of github.com:splunk/security_content into dcrat-analytics3 2022-08-01 17:34:40 +02:00
tccontre 0fc18fcbdb dcrat-analytics3 2022-08-01 17:34:21 +02:00
tccontre 2df3a64798 Rename windows_ingress_tool_transfer_using_explorer_exe.yml to windows_ingress_tool_transfer_using_explorer.yml 2022-08-01 14:23:01 +02:00
tccontre f3f40edf9e Update windows_gather_victim_host_information_camera.yml 2022-08-01 14:22:03 +02:00
tccontre d8690a4386 Update windows_ingress_tool_transfer_using_explorer_exe.yml 2022-08-01 14:18:20 +02:00
tccontre b67f2c69a1 dcrat-analytics3 2022-08-01 14:15:02 +02:00
Michael Haag bbd4b67e9d fixed query 
modified query to use NOT instead of !=
 2022-07-30 06:02:04 -06:00