admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,772 Commits 697 Branches 195 Tags
170e4e1ae853de2cb5c24217423be5da163b58ab
Commit Graph

10772 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 170e4e1ae8 Branch was auto-updated. 2021-09-27 10:04:10 -07:00
Bhavin Patel 3f77e24974 Merge pull request #1553 from splunk/The-Haag-of-The-Storm 
The Wonderful Wizard of Haag
 2021-09-27 10:03:44 -07:00
Bhavin Patel 2b8d3776fe Branch was auto-updated. 2021-09-24 14:54:22 -07:00
Bhavin Patel a6bf5c2c7a Branch was auto-updated. 2021-09-24 14:54:14 -07:00
peter 2944cbb6fa Merge pull request #1685 from splunk/ssa_lolbas_spike 
Adding some basic body info for unusual lolbas count
 2021-09-24 16:53:58 -05:00
peter-cg 3512cb812c Adding some basic body info for unusual lolbas count 2021-09-24 15:23:43 -05:00
Bhavin Patel 68040d2072 Branch was auto-updated. 2021-09-24 11:38:40 -07:00
Bhavin Patel 159393a693 Branch was auto-updated. 2021-09-24 11:38:28 -07:00
miskoSplunk ff890647b5 Merge pull request #1637 from splunk/ssa_WIP_misko_stat_detections 
Ssa wip misko stat detections
 2021-09-24 11:38:08 -07:00
Stanislav Miskovic 9cc5d2a177 Fixing a problem with time being in milliseconds vs seconds - setting observation confirence interval back to 30 min 2021-09-24 11:19:38 -07:00
tccontre 74c7b3c753 remcos_agent 2021-09-24 09:20:07 +02:00
Bhavin Patel 0781e786d7 Branch was auto-updated. 2021-09-23 11:58:32 -07:00
Bhavin Patel c46c0ba15c Branch was auto-updated. 2021-09-23 11:58:30 -07:00
Bhavin Patel c12483cf92 Branch was auto-updated. 2021-09-23 11:58:29 -07:00
Bhavin Patel f2619e3a7a Merge pull request #1668 from splunk/TR-852 
TR 852
 2021-09-23 11:58:05 -07:00
Lou Stella c857f761bd fix of generate 2021-09-23 13:33:56 -05:00
Lou Stella c3ed16c6cd Revert "testing investigation alternative" 
This reverts commit d209fcdf97.
 2021-09-23 13:17:50 -05:00
Lou Stella d209fcdf97 testing investigation alternative 2021-09-23 12:22:29 -05:00
tccontre b2853d1878 remcos_agent 2021-09-23 13:46:35 +02:00
Detection Testing Service 9831efea63 Merge branch 'remcos_agent' of https://github.com/splunk/security_content into remcos_agent 2021-09-23 08:09:44 +00:00
root 6abadead7c Added detection testing service results inRemcos RAT File Creation in Remcos Folder 2021-09-23 08:09:43 +00:00
root d445133a16 Added detection testing service results inSuspicious Image Creation In Appdata Folder 2021-09-23 08:07:07 +00:00
mhaag-spl 38ee2f9319 Revert "Update searchprotocolhost_with_no_command_line_with_network.yml" 
This reverts commit 958e195593.
 2021-09-22 14:11:27 -06:00
Bhavin Patel fcd5c40b27 Branch was auto-updated. 2021-09-22 11:28:35 -07:00
Bhavin Patel b7994c9fbb Branch was auto-updated. 2021-09-22 11:28:28 -07:00
Bhavin Patel 38da75e39d Branch was auto-updated. 2021-09-22 11:28:27 -07:00
Bhavin Patel 639534c61b Branch was auto-updated. 2021-09-22 11:28:26 -07:00
Bhavin Patel fc1cff1702 Merge pull request #1653 from splunk/dependabot/pip/more-itertools-8.9.0 
Bump more-itertools from 8.8.0 to 8.9.0
 2021-09-22 11:28:07 -07:00
root b34bbb097b Added detection testing service results inSuspicious WAV file in Appdata Folder 2021-09-22 16:01:40 +00:00
Lou Stella a9c1b46eee Staging for merge 2021-09-22 10:07:02 -05:00
tccontre 821d97981e remcos_agent 2021-09-22 14:08:13 +02:00
Detection Testing Service ac575d31f2 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:59:41 +00:00
root 36476e9d69 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques 2021-09-21 19:59:40 +00:00
Detection Testing Service 50f47cc360 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:58:13 +00:00
root 71fd03b1ec Added detection testing service results inMalicious PowerShell Process - Execution Policy Bypass 2021-09-21 19:58:12 +00:00
Detection Testing Service 29164395f1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:56:37 +00:00
root 7863894512 Added detection testing service results inMalicious PowerShell Process - Encoded Command 2021-09-21 19:56:36 +00:00
Detection Testing Service 50609ee581 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:53:33 +00:00
root 863848a8d4 Added detection testing service results inMalicious PowerShell Process - Connect To Internet With Hidden Window 2021-09-21 19:53:32 +00:00
Detection Testing Service 405b5c2570 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:43:20 +00:00
root 4feb74f09a Added detection testing service results inCertUtil Download With URLCache and Split Arguments 2021-09-21 19:43:19 +00:00
Detection Testing Service 9598a3ab4d Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:41:08 +00:00
root f720679ba3 Added detection testing service results inAllow Network Discovery In Firewall 2021-09-21 19:41:07 +00:00
Detection Testing Service a4498adb91 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:31:27 +00:00
root 389002fc9d Added detection testing service results inAny Powershell DownloadFile 2021-09-21 19:31:26 +00:00
Detection Testing Service 2035cfb8c1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:29:12 +00:00
root 1e4a51b5ef Added detection testing service results inAllow File And Printing Sharing In Firewall 2021-09-21 19:29:11 +00:00
Detection Testing Service 6626da0f12 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:28:59 +00:00
root 2ea88aac2a Added detection testing service results inAny Powershell DownloadString 2021-09-21 19:28:58 +00:00
Detection Testing Service cbc0afb8b4 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:28:44 +00:00