admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,747 Commits 697 Branches 195 Tags
29cb276dec419eeca8dc4d37d9ced45014bf3847
Commit Graph

12747 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mhaag-spl 29cb276dec control_rundll32 update 2022-01-11 13:16:22 -07:00
mhaag-spl d4b1b48d5d Cred Dump 
Resolving #1744 .
 2022-01-11 13:14:35 -07:00
Bhavin Patel 2b00ccf154 Merge pull request #1918 from splunk/linux_persist_priv_batch_3 
linux_persist_priv_batch_3
 2022-01-10 14:37:05 -08:00
patel-bhavin a8d236c1c2 test results passed from CI 2022-01-10 13:22:24 -08:00
patel-bhavin 69c2787e51 text updates 2022-01-10 13:21:39 -08:00
pyth0n1c 4bc8539d78 Branch was auto-updated. 2022-01-10 13:06:27 -08:00
Bhavin Patel 43e2b40935 Merge pull request #1907 from splunk/linux_persist_priv_batch_2 
linux_persist_priv_batch_2
 2022-01-10 13:05:56 -08:00
Bhavin Patel 3362c243ae Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:59:21 -08:00
Bhavin Patel 26f945c52a Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:56:56 -08:00
Bhavin Patel fabd820804 Update linux_setuid_using_chmod_utility.yml 2022-01-10 12:55:51 -08:00
Bhavin Patel 19d907da37 Update linux_service_started_or_enabled.yml 2022-01-10 12:53:45 -08:00
Bhavin Patel a505181149 Update linux_service_restarted.yml 2022-01-10 12:52:25 -08:00
Bhavin Patel 8bd5c20eac Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:46:34 -08:00
Bhavin Patel 4a08f745b2 Update linux_service_file_created_in_systemd_directory.yml 2022-01-10 12:41:02 -08:00
Bhavin Patel 527d8103b8 Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:33:47 -08:00
Bhavin Patel 2944d1690b Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:32:10 -08:00
Bhavin Patel b60f4a2b5a Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:30:55 -08:00
pyth0n1c ef018cd9cb Branch was auto-updated. 2022-01-10 12:11:45 -08:00
pyth0n1c 787a5afd99 Branch was auto-updated. 2022-01-10 12:11:34 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059 
The Haag at The Gates
 2022-01-10 12:11:15 -08:00
tccontre ef99a8c8bc Update linux_sudoers_tmp_file_creation.yml 2022-01-10 12:36:33 +01:00
Jose Enrique Hernandez 6d206d9646 Merge pull request #1922 from splunk/doc_gen_remcos 
Update docs for upcoming blog
 2022-01-06 17:45:27 -05:00
Lou Stella a8e2af5782 Update docs for upcoming blog 2022-01-06 16:38:33 -06:00
Jose Enrique Hernandez b7597fc509 Merge pull request #1919 from splunk/playbook_mig_remcos 
Playbook migration for remcos
 2022-01-06 17:08:37 -05:00
Lou Stella 049482c74c Fixed casing per request 2022-01-06 15:16:52 -06:00
mhaag-spl 89f37444f4 Update msi_module_loaded_by_non_system_binary.yml 2022-01-06 10:06:40 -07:00
Lou Stella 334fb25cd0 Added malware hunt and contain playbook 2022-01-05 13:41:59 -06:00
Lou Stella 6819bb1be7 Added email notification for malware playbook 2022-01-05 13:28:38 -06:00
Lou Stella e396a3b9d4 Added block_indicators playbook 2022-01-05 12:17:54 -06:00
root 9bcad3d21b Added detection testing service results inLinux Change File Owner To Root 2022-01-05 16:34:58 +00:00
root 2e9f51cca4 Added detection testing service results inLinux File Created In Kernel Driver Directory 2022-01-05 14:34:31 +00:00
root 64dfd4a621 Added detection testing service results inLinux Install Kernel Module Using Modprobe Utility 2022-01-05 13:08:14 +00:00
root a1a6087bcd Added detection testing service results inLinux Sudoers Tmp File Creation 2022-01-05 12:38:46 +00:00
tccontre 06ffa22394 Update linux_sudoers_tmp_file_creation.yml 2022-01-05 13:20:37 +01:00
tccontre ab844e062f linux_persist_priv_batch_3 2022-01-05 13:17:08 +01:00
root fb306cb79b Added detection testing service results inLinux Visudo Utility Execution 2022-01-05 12:12:09 +00:00
tccontre 14534c2f53 Merge branch 'linux_persist_priv_batch_3' of github.com:splunk/security_content into linux_persist_priv_batch_3 2022-01-05 12:48:02 +01:00
tccontre 377a4822f7 linux_persist_priv_batch_3 2022-01-05 12:47:45 +01:00
root 78e61e8ee4 Added detection testing service results inLinux Change File Owner To Root 2022-01-05 11:42:47 +00:00
tccontre 37185f3e0d linux_persist_priv_batch_3 2022-01-05 11:34:57 +01:00
tccontre fa843067da Merge pull request #1917 from splunk/remocs_desc_update 
remcos_desc_update
 2022-01-05 09:41:08 +01:00
tccontre 78732dfe2d Update linux_file_creation_in_profile_directory.yml 2022-01-04 18:00:42 +01:00
tccontre e8cde0b1f6 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 17:59:26 +01:00
pyth0n1c e10f55348c Updated Detection Text 
Updated Text of Detection "Suspicious Process DNS Query Known Abuse Web Services"
 2022-01-04 08:47:13 -08:00
pyth0n1c 8891384376 Small Text Update 
Small Text Update to "Loading Of Dynwrapx Module"
 2022-01-04 08:42:39 -08:00
tccontre 7420f730d4 Update suspicious_process_dns_query_known_abuse_web_services.yml 2022-01-04 17:39:17 +01:00
pyth0n1c 249c784daf Small Text Updates 
Small Text Updates to "Loading Of Dynwrapx Module"
 2022-01-04 08:38:05 -08:00
pyth0n1c 5702bf9c7d Minor Text Updates 
Minor Text Updates to "System Info Gathering Using Dxdiag Application"
 2022-01-04 08:36:46 -08:00
pyth0n1c 54e6931e48 Minor Text Updates 
Minor updates to the text of  "Suspicious Process DNS Query Known Abuse Web Services"
 2022-01-04 08:31:04 -08:00
pyth0n1c cff1c5dd74 Update Text of Detection 
Minor update to text of "Possible Browser Pass View Parameter"
 2022-01-04 08:23:36 -08:00