 tccontre
|
3a68d044ef
|
Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml
|
2021-12-22 10:46:27 +01:00 |
|
|
root
|
d1c95a44ad
|
Added detection testing service results inLinux Possible Cronjob Modification With Editor
|
2021-12-22 09:02:46 +00:00 |
|
|
Bhavin Patel
|
0ff1e78f11
|
Branch was auto-updated.
|
2021-12-21 11:22:19 -08:00 |
|
|
Jose Enrique Hernandez
|
930a6db140
|
Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278
|
2021-12-21 14:21:54 -05:00 |
|
|
root
|
9243038c09
|
Added detection testing service results inSuspicious Ticket Granting Ticket Request
|
2021-12-21 19:06:04 +00:00 |
|
|
mvelazco
|
bb8ae58f84
|
adding new detection
|
2021-12-21 13:44:17 -05:00 |
|
|
tccontre
|
fb087ea8b3
|
linux_persist_priv_batch_1
|
2021-12-21 11:02:15 +01:00 |
|
|
root
|
da634d5c25
|
Added detection testing service results inSuspicious Kerberos Service Ticket Request
|
2021-12-21 03:57:17 +00:00 |
|
|
mvelazco
|
4631c84a60
|
updating logic
|
2021-12-20 22:38:27 -05:00 |
|
|
root
|
122d403d6c
|
Added detection testing service results inSuspicious Kerberos Service Ticket Request
|
2021-12-21 03:34:17 +00:00 |
|
|
mvelazco
|
d5d7e0ce1a
|
Update suspicious_computer_account_name_change.yml
|
2021-12-20 22:11:09 -05:00 |
|
|
mvelazco
|
6fa0f9b30b
|
adding new detection
|
2021-12-20 22:08:19 -05:00 |
|
|
root
|
653a7755e8
|
Added detection testing service results inSuspicious Computer Account Name Change
|
2021-12-20 22:50:20 +00:00 |
|
|
mvelazco
|
af31bdb3ec
|
updating observable
|
2021-12-20 17:20:58 -05:00 |
|
|
mvelazco
|
243e60a3cc
|
minor fix
|
2021-12-20 17:04:58 -05:00 |
|
|
mvelazco
|
82a4a63093
|
creating analytic story and first detection
|
2021-12-20 16:58:34 -05:00 |
|
|
mvelazco
|
59b9068998
|
Merge pull request #1894 from splunk/Fix_Log4j_detection
Update Log4J Detection to use data models
|
2021-12-20 15:42:26 -05:00 |
|
|
Bhavin Patel
|
3eb630b220
|
Branch was auto-updated.
|
2021-12-16 12:55:22 -08:00 |
|
|
peter
|
eff3306f89
|
Merge pull request #1897 from splunk/ssa_descriptive_branch_name
SSA descriptive branch name
|
2021-12-16 14:55:05 -06:00 |
|
|
peter-cg
|
55fd63fe2f
|
Caps fix
|
2021-12-16 14:53:54 -06:00 |
|
|
peter-cg
|
3aa223a948
|
Adding sourcetype to sysproc_unexpected_location test
|
2021-12-16 10:44:05 -06:00 |
|
|
peter-cg
|
ba83011191
|
Adding addl humvee runner and fixing macro def
|
2021-12-16 10:42:01 -06:00 |
|
|
Bhavin Patel
|
ab3eb94c83
|
Branch was auto-updated.
|
2021-12-15 15:52:04 -08:00 |
|
|
pyth0n1c
|
7431dabd65
|
Merge pull request #1896 from splunk/doc_updates
Docs Update for playbook changes
|
2021-12-15 15:51:51 -08:00 |
|
|
Lou Stella
|
2f8de77b7c
|
Docs Update for playbook changes
|
2021-12-15 17:42:47 -06:00 |
|
|
Bhavin Patel
|
ae3484780a
|
Branch was auto-updated.
|
2021-12-15 15:20:36 -08:00 |
|
|
Lou Stella
|
9c21e7f869
|
Merge pull request #1895 from splunk/The_Day_After_The_Day_After_log4shell
The Day After The Day After log4shell
|
2021-12-15 17:20:18 -06:00 |
|
|
Lou Stella
|
01bc5757b6
|
removed married parent playbook
|
2021-12-15 17:06:02 -06:00 |
|
|
Lou Stella
|
fbf15c3424
|
Final copy from phantomcyber/playbooks
|
2021-12-15 16:58:31 -06:00 |
|
|
Lou Stella
|
872ea4b55c
|
Standardized type
|
2021-12-15 15:52:40 -06:00 |
|
|
root
|
496f97a0ee
|
Added detection testing service results inOutbound Network Connection from Java Using Default Ports
|
2021-12-15 21:19:25 +00:00 |
|
|
Lou Stella
|
ca0aaa46c5
|
divorced parent playbook
|
2021-12-15 15:03:21 -06:00 |
|
|
mvelazco
|
3bb9712286
|
updating detection to use data models
|
2021-12-15 15:53:06 -05:00 |
|
|
Lou Stella
|
337e077224
|
Merge pull request #1892 from splunk/bug_with_playbook_detection
bug with playbooks detection page
|
2021-12-15 14:16:09 -06:00 |
|
|
d1vious
|
0df62338c9
|
bug with playbooks detection page
|
2021-12-15 15:01:27 -05:00 |
|
|
Jose Enrique Hernandez
|
8566c56a0e
|
Merge pull request #1889 from splunk/minor_api_gen_bug
fixes a logic bug with the api that caused ci to fail
|
2021-12-15 14:56:09 -05:00 |
|
|
Bhavin Patel
|
974d1bfc40
|
Branch was auto-updated.
|
2021-12-15 11:47:08 -08:00 |
|
|
Jose Enrique Hernandez
|
589aa6e233
|
Merge pull request #1891 from splunk/bug_with_playbook_detections
fixing bug with dead links
|
2021-12-15 14:46:51 -05:00 |
|
|
d1vious
|
2862f68474
|
fixing bug with dead links
|
2021-12-15 14:35:04 -05:00 |
|
|
Lou Stella
|
b341343435
|
Updated friendly name
|
2021-12-15 11:30:26 -06:00 |
|
|
d1vious
|
c8cc65bf3d
|
updated api
|
2021-12-15 11:18:17 -05:00 |
|
|
Lou Stella
|
028863eea9
|
Updated screenshot
|
2021-12-15 10:15:39 -06:00 |
|
|
d1vious
|
6f2a298788
|
fixes a logic bug with the api that caused ci to fail
|
2021-12-14 22:52:18 -05:00 |
|
|
research bot
|
ff3319329e
|
updating docs and package bits [ci skip]
|
2021-12-15 02:58:27 +00:00 |
|
|
Jose Enrique Hernandez
|
f0c1ef304f
|
Merge pull request #1887 from splunk/The_Day_After_Log4shell
The Day After Log4Shell
v3.32.0
|
2021-12-14 21:46:40 -05:00 |
|
|
d1vious
|
53b9f9033e
|
Merge branch 'develop' into The_Day_After_Log4shell
|
2021-12-14 21:41:21 -05:00 |
|
|
d1vious
|
7c72f6e192
|
updating docs
|
2021-12-14 21:40:19 -05:00 |
|
|
d1vious
|
17344644e1
|
updating docs
|
2021-12-14 21:33:54 -05:00 |
|
|
root
|
97a20df8ae
|
Added detection testing service results inHunting for Log4Shell
|
2021-12-15 02:19:55 +00:00 |
|
|
mhaag-spl
|
cea91f725e
|
Create hunting_for_log4shell.test.yml
|
2021-12-14 19:00:04 -07:00 |
|