admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,777 Commits 697 Branches 195 Tags
4591ed21cde5ec0903d52c021a0e5e2eda8e7b69
Commit Graph

4777 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] 4591ed21cd Branch was auto-updated. 2021-02-11 20:59:38 +00:00
Bhavin Patel 276fe81ec2 Merge pull request #1152 from splunk/02rel1 
WIP - rel1 02-2020
 2021-02-11 12:59:09 -08:00
github-actions[bot] 1c132f1dff Branch was auto-updated. 2021-02-11 18:45:38 +00:00
github-actions[bot] 3d43ef0516 Branch was auto-updated. 2021-02-11 18:45:29 +00:00
Bhavin Patel 8567ac076f Merge pull request #1147 from splunk/cloudfederationcredentialabuse 
Cloud federation credential abuse
 2021-02-11 10:45:06 -08:00
root eae6908d23 Added detection testing service results inCertutil exe certificate extraction 2021-02-11 17:21:45 +00:00
bpatel 1c8dc0c0d0 change time 2021-02-11 09:02:22 -08:00
bpatel c27a46bd40 update test time 2021-02-10 14:40:13 -08:00
Michael Haag b163bc375e Merge branch 'develop' into 02rel1 2021-02-10 12:47:54 -07:00
github-actions[bot] d0b41060a4 Branch was auto-updated. 2021-02-10 02:50:03 +00:00
github-actions[bot] 58fbe933af Branch was auto-updated. 2021-02-10 02:49:54 +00:00
dependabot[bot] 7b18fde4ca Merge pull request #1184 from splunk/dependabot/pip/gitpython-3.1.13 2021-02-10 02:49:36 +00:00
github-actions[bot] d9e67d51a9 Branch was auto-updated. 2021-02-10 02:41:57 +00:00
github-actions[bot] e3446b7336 Branch was auto-updated. 2021-02-10 02:41:48 +00:00
github-actions[bot] 678e04494b Branch was auto-updated. 2021-02-10 02:41:44 +00:00
dependabot[bot] b3c9c36f32 Merge pull request #1182 from splunk/dependabot/pip/ansible-2.10.7 2021-02-10 02:41:21 +00:00
dependabot[bot] 54ceb4bfc4 Bump gitpython from 3.1.12 to 3.1.13 
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.12 to 3.1.13.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/master/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.12...3.1.13)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-10 02:34:19 +00:00
dependabot[bot] e0cb05ca26 Bump ansible from 2.10.6 to 2.10.7 
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.6 to 2.10.7.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/commits)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-10 02:33:57 +00:00
github-actions[bot] 0c8aa75117 Branch was auto-updated. 2021-02-10 02:33:14 +00:00
github-actions[bot] 85bb5bf62b Branch was auto-updated. 2021-02-10 02:33:01 +00:00
dependabot[bot] 1792ec428b Merge pull request #1181 from splunk/dependabot/pip/automated_detection_testing/cryptography-3.3.2 2021-02-10 02:32:44 +00:00
dependabot[bot] c6f3096d5d Bump cryptography from 3.3.1 to 3.3.2 in /automated_detection_testing 
Bumps [cryptography](https://github.com/pyca/cryptography) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/3.3.1...3.3.2)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-10 02:25:12 +00:00
bpatel 405ebb4dae spl update and test file 2021-02-09 16:33:53 -08:00
mhaag-spl b6840c14f8 Update suspicious_rundll32_activity.yml 2021-02-09 15:30:10 -07:00
mhaag-spl c2c8d9c320 Update suspicious_regsvr32_activity.yml 2021-02-09 15:27:37 -07:00
mhaag-spl 03a48cd47d formatting 2021-02-09 14:24:39 -07:00
mhaag-spl c99b478d72 format fixing 2021-02-09 14:18:56 -07:00
mhaag-spl 07ffc993b4 removing for now 2021-02-09 14:14:49 -07:00
mhaag-spl 9db73e43c8 Create suspicious_rundll32_activity.yml 2021-02-09 14:11:38 -07:00
mhaag-spl 2ce3a6adcb Update suspicious_regsvr32_activity.yml 2021-02-09 14:01:59 -07:00
mhaag-spl c26c9a9989 Update dump_lsass_via_comsvcs_dll.yml 2021-02-09 13:57:50 -07:00
mhaag-spl d6a219f0b5 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-02-09 13:13:07 -07:00
mhaag-spl 9c08582cfa Update suspicious_regsvr32_rename.yml 2021-02-09 13:13:05 -07:00
root d53f30cff7 Added detection testing service results inSuspicious Rundll32 dllregisterserver 2021-02-09 19:37:50 +00:00
mhaag-spl 157d8770e6 rundll32 dllregisterserver 2021-02-09 12:10:39 -07:00
root 525e1ff46c Added detection testing service results inSuspicious Rundll32 with no Command Line Arguments 2021-02-09 18:46:55 +00:00
mhaag-spl bc508128e9 misspell 2021-02-09 11:27:19 -07:00
mhaag-spl c34083adf3 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-02-09 11:25:10 -07:00
mhaag-spl 3ead4c2840 rundll32 with no cmdline arguments 2021-02-09 11:25:01 -07:00
root f9a6635e70 Added detection testing service results inSuspicious Rundll32 startw 2021-02-09 18:18:34 +00:00
mhaag-spl f89c21964d Rundll32,StartW 
Adding content to detect Rundll32 using function name Start/StartW on the commandline. Typically used with CobaltStrike.
 2021-02-09 10:54:34 -07:00
Bhavin Patel 33af6dfb13 Merge branch 'develop' into cloudfederationcredentialabuse 2021-02-08 11:29:49 -08:00
Detection Testing Service 3eca0fd3f2 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-02-05 14:50:30 +00:00
root 783bc38a1d Added detection testing service results inDetect Rundll32 Application Control Bypass - setupapi 2021-02-05 14:50:28 +00:00
root e02e30e423 Added detection testing service results inDetect Rundll32 Application Control Bypass - syssetup 2021-02-05 14:50:23 +00:00
mhaag-spl 3d37e93d99 rundll32 syssetup, setupapi 
Adding rundll32 syssetup and setupapi
 2021-02-05 07:27:02 -07:00
github-actions[bot] a74d64f874 Branch was auto-updated. 2021-02-05 00:53:42 +00:00
Jose Enrique Hernandez f22e7a85a4 Merge pull request #1175 from splunk/ci_api_cleans 
fixing API bug
 2021-02-04 19:53:21 -05:00
divious1 7fd34c3fc0 fixing API bug 2021-02-04 19:43:19 -05:00
github-actions[bot] c8fca00546 Branch was auto-updated. 2021-02-04 23:51:09 +00:00