admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,268 Commits 697 Branches 195 Tags
3ebca266e6dfd5c1908e447092a763cddd5a8d01
Commit Graph

154 Commits

Author SHA1 Message Date
pyth0n1c 0e779f6491 Branch was auto-updated. 2022-02-25 12:29:59 -08:00
Lou Stella d3322283c3 Added risk_severity 2022-02-25 13:49:21 -06:00
Lou Stella 9f65b5d0d4 Updated required fields 2022-02-25 13:48:04 -06:00
Xiao Lin 7b8f6b22e2 update search 2022-02-25 10:03:01 -08:00
Lou Stella 760747cea2 Small update to body 2022-02-25 10:46:46 -06:00
Lou Stella ca2163ae8c Moved to Experimental 2022-02-25 10:40:46 -06:00
research bot 5c8268f137 updating docs and package bits [ci skip] 2022-02-15 23:10:10 +00:00
Bhavin Patel baab603657 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:45:28 -08:00
Xiao Lin a1e6d3e225 update search string 2022-02-09 16:36:10 -08:00
Xiao Lin 9a04a4e833 fix a typo 2022-02-09 16:36:10 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
patel-bhavin e7eab5af71 push 2022-02-07 14:45:37 -08:00
research bot e52d00b53d updating docs and package bits [ci skip] 2022-01-31 20:04:12 +00:00
Bhavin Patel 3efcb99124 Merge pull request #1875 from splunk/ssa_multilogin 
Anomalous usage of account credentials
 2022-01-27 14:55:25 -08:00
Bhavin Patel 7fd71050fe Merge pull request #1878 from splunk/ssa_1 
Disable Defender AntiVirus Registry- SSA
 2022-01-27 14:51:23 -08:00
patel-bhavin fe5db9e78e adding lookup files 2022-01-26 15:34:10 -08:00
patel-bhavin cca42c0009 moving to expermental 2022-01-24 15:31:15 -08:00
pyth0n1c dd538478f4 Branch was auto-updated. 2022-01-24 10:40:44 -08:00
research bot 23a0acc37d updating docs and package bits [ci skip] 2022-01-21 21:02:48 +00:00
Lou Stella 3ad47776fb Moving to experimental 2022-01-21 14:16:51 -06:00
d1vious 72d33b23ac moving to match what prod should have 2022-01-21 12:29:13 -05:00
mvelazco 852df4c6e7 Merge pull request #1943 from splunk/Fixing-Wrong-Data-Models 
Fixing Wrong Data Models
 2022-01-18 16:28:55 -05:00
mvelazco 3105bda778 fixing wrong data models 
Lateral Movement analytic story
 2022-01-18 15:48:01 -05:00
mvelazco 774317fc97 adding missing '|' 
Fixing issue reported on https://github.com/splunk/security_content/issues/1904
 2022-01-18 11:08:19 -05:00
research bot 14b4c0eb29 updating docs and package bits [ci skip] 2022-01-14 02:07:36 +00:00
pyth0n1c bce591d6d1 Branch was auto-updated. 2022-01-13 10:04:58 -08:00
d1vious 17d7312bc6 excluding experimental detections from the package 2022-01-10 18:00:59 -05:00
pyth0n1c ff6b6c4397 Branch was auto-updated. 2022-01-10 12:11:52 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059 
The Haag at The Gates
 2022-01-10 12:11:15 -08:00
mhaag-spl 9eea4ded41 It's Raining Haags 2021-12-15 13:01:04 -07:00
research bot ff3319329e updating docs and package bits [ci skip] 2021-12-15 02:58:27 +00:00
Bhavin Patel 61d583e45e Branch was auto-updated. 2021-12-14 18:47:02 -08:00
d1vious 16b771eae2 adding tags to detections 2021-12-14 19:38:51 -05:00
mhaag-spl 71295432e3 Windows shells 2021-12-13 13:01:45 -07:00
mhaag-spl f3b31c113b java Shells 2021-12-13 11:54:59 -07:00
Bhavin Patel 46083ae36f Branch was auto-updated. 2021-12-09 09:06:16 -08:00
mvelazco 648bf1fc6e minor fixes 2021-12-08 13:41:04 -05:00
mhaag-spl 81a49be5e8 Out of the Gates 
Microsoft Exchange Mailbox Replication service writing Active Server Pages
 2021-12-07 14:46:14 -07:00
mvelazco fc478d80a7 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-06 17:10:00 -05:00
mvelazco efd890e2c2 updating analytic story name 2021-12-06 17:01:58 -05:00
Bhavin Patel e5fd9f9fe7 Branch was auto-updated. 2021-12-06 11:04:13 -08:00
mhaag-spl 25dc457c3c The Unbroken Haag 2021-12-06 11:57:20 -07:00
mvelazco 20425018bc minor fixes 2021-12-03 21:12:31 -05:00
mvelazco 71410ddb7a 3 new detections 2021-12-03 15:58:00 -05:00
mvelazco 918b680350 update experimental detection names 2021-11-30 13:20:42 -05:00
mvelazco b5783ab849 adding 2 experimental detections 2021-11-30 12:51:43 -05:00
mhaag-spl 1aa5852b19 Update exchange_powershell_module_usage.yml 2021-11-15 07:53:20 -07:00
research bot c1410c0e95 updating docs and package bits [ci skip] 2021-11-10 16:16:30 +00:00
Bhavin Patel 1329ff2998 Branch was auto-updated. 2021-11-03 10:43:48 -07:00
patel-bhavin 0dfff97830 yml errors 2021-11-02 18:11:32 -07:00