1124 Commits

Author	SHA1	Message	Date
tccontre	3a68d044ef	Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml	2021-12-22 10:46:27 +01:00
Bhavin Patel	0ff1e78f11	Branch was auto-updated.	2021-12-21 11:22:19 -08:00
Jose Enrique Hernandez	930a6db140	Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278	2021-12-21 14:21:54 -05:00
mvelazco	bb8ae58f84	adding new detection	2021-12-21 13:44:17 -05:00
tccontre	fb087ea8b3	linux_persist_priv_batch_1	2021-12-21 11:02:15 +01:00
mvelazco	6fa0f9b30b	adding new detection	2021-12-20 22:08:19 -05:00
mvelazco	243e60a3cc	minor fix	2021-12-20 17:04:58 -05:00
mvelazco	82a4a63093	creating analytic story and first detection	2021-12-20 16:58:34 -05:00
Bhavin Patel	3eb630b220	Branch was auto-updated.	2021-12-16 12:55:22 -08:00
peter-cg	55fd63fe2f	Caps fix	2021-12-16 14:53:54 -06:00
peter-cg	3aa223a948	Adding sourcetype to sysproc_unexpected_location test	2021-12-16 10:44:05 -06:00
mvelazco	3bb9712286	updating detection to use data models	2021-12-15 15:53:06 -05:00
mhaag-spl	cea91f725e	Create hunting_for_log4shell.test.yml	2021-12-14 19:00:04 -07:00
patel-bhavin	05b189232d	ldap outbound	2021-12-14 10:10:23 -08:00
P4T12ICK	3f59f79b93	log4j	2021-12-14 18:21:58 +01:00
P4T12ICK	f84b61357c	Improved Proxy detection	2021-12-14 16:35:31 +01:00
d1vious	7e6cb9381b	Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell	2021-12-14 00:54:44 -05:00
d1vious	946503dc76	added two new detections, ymls are not finished	2021-12-14 00:54:37 -05:00
mvelazco	cb4d003f4e	updating dataset tag	2021-12-13 16:24:39 -05:00
mvelazco	1671728147	Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell	2021-12-13 15:51:45 -05:00
mvelazco	2c62039a03	adding detection	2021-12-13 15:51:43 -05:00
mhaag-spl	050bc8d886	☕	2021-12-13 13:32:27 -07:00
mhaag-spl	f4de314e4e	wget curl	2021-12-13 07:11:07 -07:00
mhaag-spl	5e36ce1cf3	curleddd	2021-12-10 11:49:41 -07:00
mhaag-spl	53dc410071	rcloned 4688 logs	2021-12-10 11:39:45 -07:00
Bhavin Patel	5e42f3b78c	Branch was auto-updated.	2021-12-09 09:06:08 -08:00
Bhavin Patel	8cc5adc54c	Branch was auto-updated.	2021-12-08 09:36:32 -08:00
Bhavin Patel	456d7483d6	Branch was auto-updated.	2021-12-08 09:36:24 -08:00
Bhavin Patel	56278252ec	Branch was auto-updated.	2021-12-08 07:37:37 -08:00
P4T12ICK	2e4bebab22	BA detections	2021-12-08 15:27:44 +01:00
P4T12ICK	7e1fbbc8ad	BA detections	2021-12-08 12:50:13 +01:00
P4T12ICK	88bbb3dd64	BA detections	2021-12-08 10:43:36 +01:00
P4T12ICK	a7637dae83	BA detections	2021-12-08 09:46:20 +01:00
mhaag-spl	692a565bef	Update ssa___wbadmin_delete_system_backups.test.yml	2021-12-07 14:01:52 -07:00
mhaag-spl	3c2c99fb9c	Update ssa___wbadmin_delete_system_backups.test.yml	2021-12-07 13:55:05 -07:00
mhaag-spl	44bf73018a	wbadmin	2021-12-07 13:31:19 -07:00
mhaag-spl	890e31a9c1	Update ssa___bcdedit_failure_recovery_modification.test.yml	2021-12-07 12:38:37 -07:00
mhaag-spl	e2abbaffe1	fsutil and bcdedit	2021-12-07 12:19:41 -07:00
Bhavin Patel	d64b454702	Branch was auto-updated.	2021-12-07 11:01:51 -08:00
Bhavin Patel	52ce90917e	Branch was auto-updated.	2021-12-07 11:01:45 -08:00
mhaag-spl	6b36d8c6ec	DNS Exfil	2021-12-07 11:43:34 -07:00
Bhavin Patel	b6c59997e3	Branch was auto-updated.	2021-12-06 16:23:18 -08:00
Bhavin Patel	5aade90ec2	Branch was auto-updated.	2021-12-06 11:04:14 -08:00
Bhavin Patel	e5fd9f9fe7	Branch was auto-updated.	2021-12-06 11:04:13 -08:00
mhaag-spl	25dc457c3c	The Unbroken Haag	2021-12-06 11:57:20 -07:00
mvelazco	71410ddb7a	3 new detections	2021-12-03 15:58:00 -05:00
mhaag-spl	0e53970750	First SSA	2021-12-03 11:26:27 -07:00
Bhavin Patel	1747744648	Branch was auto-updated.	2021-12-01 15:41:24 -08:00
Bhavin Patel	57c1ef30dd	Merge pull request #1857 from splunk/RegistryDetectionFixes ... Registry detection fixes	2021-12-01 15:41:01 -08:00
Bhavin Patel	4c9fc158cd	Branch was auto-updated.	2021-12-01 11:42:55 -08:00