admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,761 Commits 697 Branches 195 Tags
200794cef3c8fa94cf92f8aaf7ff3cb12cdebe93
Commit Graph

19761 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
srv-rr-gh-researchbt 200794cef3 Branch was auto-updated. 2023-04-25 16:58:54 -07:00
Bhavin Patel a002b14bbb Merge pull request #2641 from splunk/do_not_step_on_the_redline 
do_not_step_on_the_redline
 2023-04-25 16:58:32 -07:00
tccontre 8fefd6a3f0 do_not_step_on_the_redline 2023-04-25 16:47:38 +02:00
mvelazco 9bfddfa0a7 updating story narrative 2023-04-24 19:02:18 -04:00
mvelazco df3c967f02 fixing test metadata 2023-04-24 18:36:35 -04:00
mvelazco 21dd670a14 changes for sec 4.0 2023-04-24 17:58:57 -04:00
mvelazco 4cc7f9edce fixing test file 2023-04-24 15:25:05 -04:00
mvelazco 79558b4fad removing semgrep 2023-04-24 13:46:03 -04:00
mvelazco 74938e42a5 adding new detection. updating message on others 2023-04-24 13:45:28 -04:00
mvelazco 737d03ef76 Update windows_powerview_ad_access_control_list_enumeration.yml 2023-04-24 11:07:39 -04:00
mvelazco e3139a9c90 updated descriptions and metadata 2023-04-21 18:42:36 -04:00
mvelazco e085d36118 adding new detection 2023-04-21 12:46:08 -04:00
mvelazco 71e3a9905f tagging existing detections 2023-04-20 16:56:25 -04:00
mvelazco aa48a5d5e5 tagging existing detections 2023-04-20 16:30:36 -04:00
research bot 16526a4b02 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-20 20:09:06 +00:00
Lou Stella 9231773766 Merge pull request #2638 from splunk/TR-3094 
[TR-3094] Removed sfc.exe, which has frequent collisions with AMP for Endpoints
v4.0.1 		2023-04-20 14:17:15 -05:00
Lou Stella 838118f3ca version bump 2023-04-20 13:32:18 -05:00
Lou Stella e875bbafce Updated description for grammar 2023-04-20 12:54:02 -05:00
Lou Stella bc212909ec Removed sfc.exe, which has frequent collisions with AMP for Endpoints 2023-04-20 12:48:51 -05:00
research bot 7b6c1c5e0e Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-18 21:55:52 +00:00
Bhavin Patel e2c6c24bc9 Merge pull request #2633 from splunk/manual_test_flag 
manual test
v4.0.0 		2023-04-18 14:27:17 -07:00
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
Bhavin Patel 2d98d82cf5 Merge pull request #2620 from splunk/blacklotus 
BlackLotus Campaign
 2023-04-18 12:41:48 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 39a3446248 Branch was auto-updated. 2023-04-18 11:46:39 -07:00
Bhavin Patel 7ec528b892 Merge pull request #2632 from splunk/TR-3110 
adding risk=other to all configs
 2023-04-18 11:46:22 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin dc44d23e81 issue 2568 fix 2023-04-17 17:19:34 -07:00
srv-rr-gh-researchbt 664fafdd1c Branch was auto-updated. 2023-04-17 17:03:37 -07:00
srv-rr-gh-researchbt 1a73d58514 Branch was auto-updated. 2023-04-17 17:03:24 -07:00
Bhavin Patel 4261e70954 Merge pull request #2613 from splunk/sandworm_data_destruction 
sandworm_data_destruction
 2023-04-17 17:03:05 -07:00
srv-rr-gh-researchbt 14d5e4f739 Branch was auto-updated. 2023-04-17 16:57:26 -07:00
srv-rr-gh-researchbt 0f03e6211c Branch was auto-updated. 2023-04-17 16:57:24 -07:00
srv-rr-gh-researchbt d55b3753f9 Branch was auto-updated. 2023-04-17 16:57:10 -07:00
Bhavin Patel 9924a35dd0 Merge pull request #2584 from splunk/virustotal_v3_dynamic_analysis_playbooks 
virustotal_v3_dynamic_analysis_playbooks
 2023-04-17 16:56:49 -07:00
srv-rr-gh-researchbt 6a2f587aeb Branch was auto-updated. 2023-04-17 16:53:24 -07:00
srv-rr-gh-researchbt 939e1d4ae6 Branch was auto-updated. 2023-04-17 16:53:23 -07:00
srv-rr-gh-researchbt 72ab2d082e Branch was auto-updated. 2023-04-17 16:53:10 -07:00
srv-rr-gh-researchbt 5f5f0aa76b Branch was auto-updated. 2023-04-17 16:53:09 -07:00
Bhavin Patel 2b5558c553 Merge pull request #2619 from splunk/data_destruction_wiper_story 
data_destruction_wiper_story
 2023-04-17 16:52:51 -07:00
Bhavin Patel 69296ac7d1 Update okta_threatinsight_suspected_passwordspray_attack.yml 2023-04-17 16:46:08 -07:00
Bhavin Patel 2aafdb6cfe Merge branch 'develop' into sandworm_data_destruction 2023-04-17 16:44:20 -07:00
srv-rr-gh-researchbt ec104c0d19 Branch was auto-updated. 2023-04-17 16:26:23 -07:00
srv-rr-gh-researchbt 2a717b761a Branch was auto-updated. 2023-04-17 16:26:22 -07:00