8349 Commits

Author	SHA1	Message	Date
srv-rr-gh-researchbt	28179fa009	Branch was auto-updated.	2023-06-22 13:13:44 -07:00
srv-rr-gh-researchbt	e31e957e4b	Branch was auto-updated.	2023-06-22 13:10:54 -07:00
srv-rr-gh-researchbt	7560ee99f4	Branch was auto-updated.	2023-06-22 13:10:52 -07:00
tccontre	9e44ed00b3	Update windows_files_and_dirs_access_rights_modification_via_icacls.yml	2023-06-22 14:55:59 +02:00
tccontre	f38daa7919	Update windows_files_and_dirs_access_rights_modification_via_icacls.yml	2023-06-22 14:55:45 +02:00
tccontre	f75acdb416	Update windows_credentials_from_password_stores_chrome_login_data_access.yml	2023-06-22 14:54:35 +02:00
tccontre	f292c7b09c	Update windows_credentials_from_password_stores_chrome_localstate_access.yml	2023-06-22 14:53:17 +02:00
tccontre	2d3e149641	Update windows_credentials_from_password_stores_chrome_extension_access.yml	2023-06-22 14:52:11 +02:00
tccontre	aba4d78285	Update suspicious_process_file_path.yml	2023-06-22 14:41:28 +02:00
tccontre	a26b5e40c9	Update suspicious_process_file_path.yml	2023-06-22 14:40:42 +02:00
tccontre	5123f93811	Update scheduled_task_deleted_or_created_via_cmd.yml	2023-06-22 14:30:01 +02:00
tccontre	f3ae3584fa	Update registry_keys_used_for_persistence.yml	2023-06-22 14:28:35 +02:00
tccontre	50dbd4be15	Update icacls_grant_command.yml	2023-06-22 14:26:43 +02:00
tccontre	e40ab340d9	Update icacls_deny_command.yml	2023-06-22 14:24:28 +02:00
tccontre	76fa90dd68	Update executables_or_script_creation_in_suspicious_path.yml	2023-06-22 14:22:01 +02:00
srv-rr-gh-researchbt	20214c3976	Branch was auto-updated.	2023-06-21 14:07:09 -07:00
srv-rr-gh-researchbt	63c7f886d2	Branch was auto-updated.	2023-06-21 14:07:04 -07:00
srv-rr-gh-researchbt	415a1298c7	Branch was auto-updated.	2023-06-21 14:07:00 -07:00
Bhavin Patel	817570d696	Update vmware_aria_operations_exploit_attempt.yml ... added \	2023-06-21 13:33:54 -07:00
Michael Haag	84c34e6d0b	description update	2023-06-21 12:39:58 -06:00
Michael Haag	d404d52075	VMware - CVE-2023-20887 ... VMware - CVE-2023-20887	2023-06-21 10:33:56 -06:00
P4T12ICK	d2defca9a4	Delete Detection Kubernetes AWS detect RBAC authorization by account	2023-06-21 16:17:31 +02:00
Michael Haag	f15ceb065d	Update powershell_4104_hunting.yml	2023-06-14 08:47:14 -06:00
srv-rr-gh-researchbt	9e2a14bede	Branch was auto-updated.	2023-06-13 11:16:02 -07:00
Bhavin Patel	dcab2f1867	update ocsf	2023-06-13 11:06:53 -07:00
srv-rr-gh-researchbt	5e8642bc9e	Branch was auto-updated.	2023-06-13 10:48:10 -07:00
tccontre	c12ad2964c	Amadey	2023-06-13 11:18:27 +02:00
Bhavin Patel	043f6aa1fa	Merge pull request #2614 from nterl0k/nterl0k-T1505.003_generic_webshell ... T1505.003 - You'll have a shell of a good time.	2023-06-12 17:39:12 -07:00
Bhavin Patel	71178f3c3a	Update detect_webshell_exploit_behavior.yml ... Updated `security_content_summariesonly` and adding filter macro	2023-06-12 17:17:39 -07:00
Bhavin Patel	9faf0af7ab	Update detect_webshell_exploit_behavior.yml ... added status key, fixing a typo and running validation scripts	2023-06-12 16:31:11 -07:00
srv-rr-gh-researchbt	0e192e2b8a	Branch was auto-updated.	2023-06-12 15:10:08 -07:00
srv-rr-gh-researchbt	910c4e7c85	Branch was auto-updated.	2023-06-12 14:54:35 -07:00
srv-rr-gh-researchbt	4aa2ed738b	Branch was auto-updated.	2023-06-12 14:54:17 -07:00
Bhavin Patel	bc1871025a	Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml	2023-06-12 14:41:43 -07:00
Bhavin Patel	21bd725eaa	yaml fix	2023-06-12 14:23:18 -07:00
Bhavin Patel	4293a508af	Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml ... Triggering CI	2023-06-12 14:16:38 -07:00
Bhavin Patel	9e31186154	Update detect_rtlo_in_file_name.yml ... double quotes	2023-06-12 14:06:53 -07:00
srv-rr-gh-researchbt	546fc04483	Branch was auto-updated.	2023-06-12 11:45:36 -07:00
srv-rr-gh-researchbt	7f3870e809	Branch was auto-updated.	2023-06-12 11:45:30 -07:00
srv-rr-gh-researchbt	853944ebd2	Branch was auto-updated.	2023-06-12 11:45:19 -07:00
srv-rr-gh-researchbt	9ae2d3de5f	Branch was auto-updated.	2023-06-12 11:29:19 -07:00
srv-rr-gh-researchbt	60a2842cab	Branch was auto-updated.	2023-06-12 11:29:08 -07:00
srv-rr-gh-researchbt	25a7456979	Branch was auto-updated.	2023-06-12 11:29:07 -07:00
srv-rr-gh-researchbt	84e308fdb2	Branch was auto-updated.	2023-06-12 11:29:03 -07:00
Bhavin Patel	4c2f54a0dc	Update detect_rtlo_in_process.yml	2023-06-12 10:58:03 -07:00
Bhavin Patel	af3fe52811	Update detect_rtlo_in_file_name.yml	2023-06-12 10:57:39 -07:00
Bhavin Patel	2a217a7c0a	Update detect_rtlo_in_file_name.yml	2023-06-12 10:55:39 -07:00
Namratha Sreekanta	b3447c98c6	Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection	2023-06-08 14:00:36 -07:00
Namratha Sreekanta	05885bc6f2	changing the search	2023-06-08 14:00:28 -07:00
srv-rr-gh-researchbt	dee7da94dd	Branch was auto-updated.	2023-06-08 13:41:33 -07:00