Commit Graph

12549 Commits

Author SHA1 Message Date
mvelazco 19bd2fd736 updating sysmon macro 2021-12-13 18:00:14 -05:00
mvelazco 1c26e4738e Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 17:07:03 -05:00
mvelazco 52692732cd fixing minor issue 2021-12-13 17:07:02 -05:00
Michael Haag 2565ad2bbf Update windows_shells.yml 2021-12-13 14:37:40 -07:00
mvelazco cb4d003f4e updating dataset tag 2021-12-13 16:24:39 -05:00
mvelazco 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 15:51:45 -05:00
mvelazco 2c62039a03 adding detection 2021-12-13 15:51:43 -05:00
mhaag-spl 28633f099a Update java_class_file_download_by_java_user_agent.yml 2021-12-13 13:35:20 -07:00
mhaag-spl 050bc8d886 2021-12-13 13:32:27 -07:00
mhaag-spl 71295432e3 Windows shells 2021-12-13 13:01:45 -07:00
mhaag-spl f3b31c113b java Shells 2021-12-13 11:54:59 -07:00
mhaag-spl 2f2e16b8a6 Update malicious_powershell_process___connect_to_internet_with_hidden_window.yml 2021-12-13 11:37:49 -07:00
mhaag-spl d64ce21b48 bagged and tagged 2021-12-13 07:20:33 -07:00
mhaag-spl f4de314e4e wget curl 2021-12-13 07:11:07 -07:00
d1vious 5d1a8826b1 added story 2021-12-11 12:02:37 -05:00
Bhavin Patel 34b3f8df58 Merge pull request #1884 from splunk/rclone_4688
curleddd
2021-12-10 10:59:16 -08:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
Bhavin Patel 53f19075c6 Merge pull request #1883 from splunk/rclone_4688
rcloned 4688 logs
2021-12-10 10:49:01 -08:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
d1vious e9eb1bbe36 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-12-09 23:53:21 -05:00
d1vious 306aab90e3 improved docs css for rendering code 2021-12-09 23:53:16 -05:00
Jose Enrique Hernandez c7a586cb11 Merge pull request #1874 from splunk/ssa_high_fie_deletion_frequency
BA detections
2021-12-09 15:58:58 -05:00
Bhavin Patel 59af0e3967 Branch was auto-updated. 2021-12-09 12:07:32 -08:00
Lou Stella 9731badc12 Merge pull request #1882 from splunk/doc_update
YADU : Yet Another Doc Update
2021-12-09 14:07:08 -06:00
Lou Stella 72013efa71 Update active_directory_reset_password.md 2021-12-09 14:01:58 -06:00
Bhavin Patel 65ceeb7ad4 Branch was auto-updated. 2021-12-09 11:49:56 -08:00
Lou Stella 4d65fbb6a7 Merge pull request #1881 from splunk/doc_update
Doc Update
2021-12-09 13:49:37 -06:00
Lou Stella 6f99df0022 Update doc_playbooks.j2 2021-12-09 13:37:55 -06:00
Lou Stella 795177479b Tweaked template for playbooks 2021-12-09 13:35:30 -06:00
Bhavin Patel 1bffbf61fb Branch was auto-updated. 2021-12-09 11:19:14 -08:00
Lou Stella 9dba6809d0 Merge pull request #1880 from splunk/doc_update
Another Docs update
2021-12-09 13:18:52 -06:00
Lou Stella c2b5376c4f Another Docs update 2021-12-09 13:12:33 -06:00
Bhavin Patel 3f8e931eb6 Branch was auto-updated. 2021-12-09 11:03:09 -08:00
mvelazco d5c99b1907 Merge pull request #1876 from splunk/lateralmovement_playbooks
Adding custom functions & playbooks
2021-12-09 14:02:48 -05:00
Bhavin Patel 3ca6a06ac7 Branch was auto-updated. 2021-12-09 10:57:09 -08:00
Bhavin Patel 7d839589e3 Branch was auto-updated. 2021-12-09 10:57:01 -08:00
Jose Enrique Hernandez ca539e8fa1 Merge pull request #1879 from splunk/updating_docs
Updating Docs for LM Release
2021-12-09 13:56:43 -05:00
mvelazco 6b14185dfb updating docs 2021-12-09 13:51:31 -05:00
Lou Stella dac6651154 Modified app names 2021-12-09 12:46:24 -06:00
Bhavin Patel 0c547c794f Branch was auto-updated. 2021-12-09 09:06:18 -08:00
Bhavin Patel 5e42f3b78c Branch was auto-updated. 2021-12-09 09:06:08 -08:00
mvelazco 3cc9e9e111 Merge pull request #1851 from splunk/TR-1085_LateralMovement_4
Lateral Movement Content Update #4
2021-12-09 12:05:43 -05:00
mvelazco dc26fb0312 Update active_directory_lateral_movement.yml 2021-12-09 12:00:49 -05:00
mvelazco 8941653ef4 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-09 11:58:24 -05:00
mvelazco 37732ba1dd Update active_directory_lateral_movement.yml 2021-12-09 11:58:22 -05:00
Bhavin Patel e62e8c9d4f Branch was auto-updated. 2021-12-08 14:34:12 -08:00
Bhavin Patel 1f48c2bdae Branch was auto-updated. 2021-12-08 14:34:06 -08:00
Bhavin Patel a827841f26 Branch was auto-updated. 2021-12-08 14:34:03 -08:00
pyth0n1c 70a9640500 Merge pull request #1877 from splunk/dependabot/pip/distlib-0.3.4
Bump distlib from 0.3.3 to 0.3.4
2021-12-08 14:33:44 -08:00
Lou Stella 18d63fd252 Merge branch 'lateralmovement_playbooks' of github.com:splunk/security_content into lateralmovement_playbooks 2021-12-08 16:27:51 -06:00