admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,170 Commits 697 Branches 195 Tags
16a9e7c3af41d604cd0ea2d94a73bc25bbfe35e5
Commit Graph

16170 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tccontre 16a9e7c3af Update windows_remote_services_allow_rdp_in_firewall.yml 2022-07-05 15:36:27 +02:00
tccontre ecbf458418 Update windows_modify_registry_disable_windows_security_center_notif.yml 2022-07-01 12:07:31 +02:00
pyth0n1c 0d4dc0f212 Branch was auto-updated. 2022-06-29 12:59:28 -07:00
Bhavin Patel d060bfd5db Merge pull request #2192 from splunk/content_changer_improvements 
Content changer improvements and Stale Reference Updates
v3.44.0 		2022-06-29 12:59:06 -07:00
pyth0n1c e12aa035ef Branch was auto-updated. 2022-06-29 11:55:57 -07:00
pyth0n1c 83bbfce55a Branch was auto-updated. 2022-06-29 11:55:55 -07:00
Bhavin Patel 73ea092e8d Merge pull request #2267 from splunk/deprecate_TR-2160_deprecated_complex_test_files 
removing test files
 2022-06-29 11:55:32 -07:00
d1vious b75b56b81d removing test files 2022-06-29 14:18:47 -04:00
pyth0n1c 6cfa2014d2 Remove ambiguity from the git checkout 
command used by the detection testing code.
 2022-06-28 16:46:51 -07:00
pyth0n1c ea26b98186 Branch was auto-updated. 2022-06-28 15:14:00 -07:00
pyth0n1c b6e27e4043 Branch was auto-updated. 2022-06-28 15:13:57 -07:00
Bhavin Patel 1d036b3af5 Merge pull request #2265 from splunk/DM_updates 
Added Datamodel values
 2022-06-28 15:13:30 -07:00
Lou Stella 8a79086933 Missed one 2022-06-28 16:01:51 -05:00
Lou Stella 9290c8c03d Updated DM and fields 2022-06-28 14:59:51 -05:00
Lou Stella 12b174f7d7 Changed to Network_Traffic, joining on process_id 2022-06-28 14:53:32 -05:00
pyth0n1c 2db77f52e6 Branch was auto-updated. 2022-06-28 11:33:27 -07:00
pyth0n1c ce7b96b31c Branch was auto-updated. 2022-06-28 11:33:23 -07:00
pyth0n1c a11c62e121 Branch was auto-updated. 2022-06-28 11:33:22 -07:00
Jose Enrique Hernandez c29b61b0d7 Merge pull request #2266 from splunk/TR-2160_deprecated_complex 
moving complex pipelines to deprecated
 2022-06-28 14:33:01 -04:00
d1vious 3bd6477ec7 moving complex pipelines to deprecated 2022-06-28 14:13:38 -04:00
pyth0n1c 27417d7cb6 Suppress more output for 
performance test
 2022-06-28 11:10:46 -07:00
pyth0n1c f75b406a2f Suppress output of contentctl in CI/CD 
to test runtime constraints.
 2022-06-28 11:08:27 -07:00
Lou Stella cf86f899b6 Added Datamodel values 2022-06-28 12:03:12 -05:00
pyth0n1c f5ec4b0500 Branch was auto-updated. 2022-06-24 10:16:00 -07:00
pyth0n1c 493a87e8ec Branch was auto-updated. 2022-06-24 10:15:59 -07:00
mvelazco 73a76ac59a Merge pull request #2262 from splunk/TR-2113_New_Kerberoasting_detections 
Adding new kerberoasting detections
 2022-06-24 13:13:52 -04:00
mvelazco 0df3dc5e51 updating fields 2022-06-24 12:50:43 -04:00
mvelazco 757e6b92b8 updating field name to use ScriptBlockText 2022-06-24 11:18:28 -04:00
mvelazco 2637c12014 updating sourcetype to xmlwineventlog 2022-06-24 11:05:02 -04:00
gowthamarajr fd78ddcb6f Merge branch 'TR-2113_New_Kerberoasting_detections' of https://github.com/splunk/security_content into TR-2113_New_Kerberoasting_detections 2022-06-24 10:17:56 -04:00
gowthamarajr 0f23640526 Updating test file for PowerView SPN detection 2022-06-24 10:17:52 -04:00
pyth0n1c e818a0d1ed Fixing print statement that was 
was not obeying the verbose argument.
 2022-06-23 15:35:56 -07:00
pyth0n1c 050491a1cc Forgot to include a print statement, causing 
lines to be jumbled together.
 2022-06-23 15:28:24 -07:00
pyth0n1c 0181c9fd63 Update the docker detection testing code 
to use the latest contentctl from develop
as well as skip enrichment.
 2022-06-23 15:18:56 -07:00
pyth0n1c 4931458ff9 Updated one broken reference link. 2022-06-23 15:02:26 -07:00
pyth0n1c d40ca09d61 Merged develop into content_changer_improvements to resolve merge conflict. this was making it impossible to merge the PR in the GitHub Interface. 2022-06-23 14:19:17 -07:00
pyth0n1c a133549d6c Fixing a call to content_ctl 
generate.  This passes initial
testing using nektos act on
my own system!
 2022-06-23 13:58:13 -07:00
pyth0n1c 3f7cd8dcc3 Branch was auto-updated. 2022-06-23 13:55:29 -07:00
pyth0n1c 6f30962fd6 Branch was auto-updated. 2022-06-23 13:55:27 -07:00
Bhavin Patel 1272dc827a Merge pull request #2251 from splunk/exec-the-msi 
T1218.007 - MSIExec
 2022-06-23 13:55:03 -07:00
pyth0n1c b7955f84b9 Typo naming new variable 
in workflow.
 2022-06-23 13:51:56 -07:00
pyth0n1c 82af76d67f Added ability to add or remove 
the --skip_enrichment argument
to content_ctl based on whether
or not we are running CI/CD workflow
on a tagged release
 2022-06-23 13:50:15 -07:00
mhaag-spl 056b07a686 remove detection 2022-06-23 11:09:07 -06:00
tccontre 54a23a2a77 Update and rename windows_modify_registry_suppress_win_defender_notifs.test.yml to windows_modify_registry_suppress_win_defender_notif.test.yml 2022-06-23 15:25:17 +02:00
tccontre 5c85507b8f Update and rename windows_modify_registry_disable_windows_security_center_notifs.test.yml to windows_modify_registry_disable_windows_security_center_notif.test.yml 2022-06-23 15:24:51 +02:00
tccontre edbf2c86b3 Update and rename windows_modify_registry_suppress_win_defender_notifs.yml to windows_modify_registry_suppress_win_defender_notif.yml 2022-06-23 15:24:21 +02:00
tccontre 374fd54c26 Update and rename windows_modify_registry_disable_windows_security_center_notifs.yml to windows_modify_registry_disable_windows_security_center_notif.yml 2022-06-23 15:23:59 +02:00
tccontre 71e4bd8ebf Update windows_modify_registry_disable_toast_notifications.test.yml 2022-06-23 13:57:11 +02:00
tccontre 0478d292f4 Rename windows_modify_registry_suppress_win_defender_notifications.yml to windows_modify_registry_suppress_win_defender_notifs.yml 2022-06-23 13:36:47 +02:00
tccontre a259be3c32 azorult-bomb 2022-06-23 13:36:06 +02:00