admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,700 Commits 697 Branches 195 Tags
29f35b61ba02b83ffef07f91229a1c926c88402a
Commit Graph

17700 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
srv-rr-gh-researchbt 29f35b61ba Branch was auto-updated. 2022-10-18 11:42:36 -07:00
Bhavin Patel 002ffd6805 Merge pull request #2394 from splunk/exchange2shell 
ProxyNotShell  - A Tale of CVE-2022-41040 and CVE-2022-41082
 2022-10-18 11:42:11 -07:00
srv-rr-gh-researchbt 361bab64e9 Branch was auto-updated. 2022-10-18 11:23:59 -07:00
srv-rr-gh-researchbt c0eb29655a Branch was auto-updated. 2022-10-18 11:23:47 -07:00
Bhavin Patel 996a830c0b Merge pull request #2409 from splunk/mshta_reg 
mshta_reg
 2022-10-18 11:22:54 -07:00
srv-rr-gh-researchbt 092d6dfdd1 Branch was auto-updated. 2022-10-18 11:19:39 -07:00
srv-rr-gh-researchbt 60dcad02c6 Branch was auto-updated. 2022-10-18 11:19:33 -07:00
srv-rr-gh-researchbt 7460357d02 Branch was auto-updated. 2022-10-18 11:19:32 -07:00
Bhavin Patel b72ecf09d1 Merge pull request #2413 from splunk/change_dga_detection_wiki_link 
changing the wiki link in the dga detection
 2022-10-18 11:19:11 -07:00
Michael Haag ac0593d1a0 Update powershell_using_memory_as_backing_store.yml 2022-10-15 06:28:43 -06:00
Michael Haag 00433d62d7 Update executables_or_script_creation_in_suspicious_path.yml 2022-10-15 06:21:49 -06:00
Namratha Sreekanta 2100ef6fd1 changing the wiki link in the dga detection 2022-10-14 14:18:11 -07:00
srv-rr-gh-researchbt 945fb121a7 Branch was auto-updated. 2022-10-14 12:33:34 -07:00
srv-rr-gh-researchbt 2b8f8f071b Branch was auto-updated. 2022-10-14 12:33:29 -07:00
srv-rr-gh-researchbt 2a2ee9e576 Branch was auto-updated. 2022-10-14 12:33:29 -07:00
research bot be4daa969c Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2022-10-14 19:33:11 +00:00
Bhavin Patel b1bb130cd9 Merge pull request #2407 from splunk/fix_api_update_error 
Fix generate API
v3.50.0 		2022-10-14 11:50:47 -07:00
Michael Haag b2ddf3a6c8 updates 2022-10-14 11:38:42 -06:00
tccontre 0867949d4d Update windows_mshta_execution_in_registry.yml 2022-10-14 17:51:37 +02:00
tccontre 6da0d7913a Update windows_mshta_execution_in_registry.test.yml 2022-10-14 17:50:56 +02:00
tccontre b886ffa10f Update windows_mshta_execution_in_registry.yml 2022-10-14 11:47:18 +02:00
tccontre 0295a489d4 Update windows_mshta_execution_in_registry.test.yml 2022-10-14 11:14:07 +02:00
tccontre b5cf28dff5 Update windows_mshta_execution_in_registry.yml 2022-10-14 11:13:52 +02:00
tccontre b67c3bf8ce Update windows_mshta_execution_in_registry.test.yml 2022-10-14 10:45:52 +02:00
tccontre 93cc5d602c Update windows_mshta_execution_in_registry.yml 2022-10-14 10:45:39 +02:00
tccontre 135e12500f mshta_reg 2022-10-14 10:28:30 +02:00
pyth0n1c 08fa572d42 Bump all of the actions versions, 
if required
 2022-10-13 13:19:08 -07:00
pyth0n1c 6b8d2ac69c Fixed missing creation of api archive 2022-10-13 12:49:16 -07:00
pyth0n1c 9a9b290f83 Ensure that all the folders in dist 
are updated on tag. Upload the
API_Content artifact as well as
part of a test and as part of
a release
 2022-10-13 12:39:45 -07:00
pyth0n1c 7056578d21 Fix generate API. Also, return nonzero error 
code when contentctl action raises an
uncaught error
 2022-10-13 10:08:12 -07:00
Michael Haag 3dde416286 Update unified_messaging_service_spawning_a_process.yml 2022-10-10 14:55:26 -06:00
Michael Haag c9b12aa911 Update test_config_github_actions.json 2022-10-10 13:30:50 -06:00
Michael Haag 8f3fbdfcbf Update test_config_github_actions.json 2022-10-10 11:33:06 -06:00
Michael Haag 82387357eb Update proxyshell_proxynotshell_behavior_detected.yml 2022-10-10 10:09:11 -06:00
Michael Haag 46a125d20b Update windows_exchange_autodiscover_ssrf_abuse.yml 2022-10-10 09:48:59 -06:00
Michael Haag df804a8343 ProxyShell ProxyNotShell Behavior Detected 2022-10-09 07:31:02 -06:00
Michael Haag b726e4b685 Update detect_sharphound_file_modifications.yml 
#2380
 2022-10-09 07:09:29 -06:00
Michael Haag 8f9257f883 rename 2022-10-09 06:58:13 -06:00
Michael Haag f29367bf37 CISA and mimikatz add 2022-10-06 16:07:25 -06:00
Michael Haag 343a8d3698 Updates + new 2022-10-05 10:20:07 -06:00
srv-rr-gh-researchbt 6c41efdfcd Branch was auto-updated. 2022-10-04 11:48:48 -07:00
Bhavin Patel 7a6cada737 Merge pull request #2391 from splunk/MovingOkta 
Oktahaagapus
 2022-10-04 11:48:18 -07:00
Michael Haag 90431ca751 updates 2022-10-04 11:37:24 -06:00
Michael Haag 517048e2b8 Merge branch 'develop' into exchange2shell 2022-10-04 04:43:34 -06:00
Michael Haag 60310f355b Windows Exchange Autodiscover Abuse 2022-10-03 22:07:25 -06:00
Michael Haag 2e57a73d89 Merge branch 'exchange2shell' of https://github.com/splunk/security_content into exchange2shell 2022-10-03 20:39:22 -06:00
Michael Haag edd5db1f63 Update unified_messaging_service_spawning_a_process.yml 2022-10-03 20:39:20 -06:00
srv-rr-gh-researchbt 84992f0134 Branch was auto-updated. 2022-10-03 17:04:09 -07:00
Bhavin Patel 811ac220d3 Merge pull request #2369 from splunk/aws_account_takeover_rename 
AWS Identity and Access Management Account Takeover
 2022-10-03 17:03:51 -07:00
Bhavin Patel 6855e7aea0 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2022-10-03 13:37:28 -07:00