 root
|
4c40ac8961
|
Added detection testing service results inLinux Setuid Using Chmod Utility
|
2022-01-04 11:36:47 +00:00 |
|
|
tccontre
|
ff3172c7c0
|
linux_persist_priv_batch_2
|
2022-01-04 12:15:50 +01:00 |
|
|
tccontre
|
74dcbf5bbe
|
linux_persist_priv_batch_2
|
2022-01-04 11:47:11 +01:00 |
|
|
root
|
472519cac0
|
Added detection testing service results inLinux File Creation In Init Boot Directory
|
2022-01-04 10:32:49 +00:00 |
|
|
tccontre
|
f96aa5fbe3
|
Update linux_file_creation_in_init_boot_directory.yml
|
2022-01-04 11:11:14 +01:00 |
|
|
tccontre
|
74b0691d7a
|
Update linux_setuid_using_chmod_utility.yml
|
2022-01-03 15:52:31 +01:00 |
|
|
tccontre
|
b20d3fed32
|
Update linux_file_creation_in_init_boot_directory.test.yml
|
2022-01-03 15:43:18 +01:00 |
|
|
Detection Testing Service
|
cfe4b7148e
|
Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2
|
2022-01-03 13:06:52 +00:00 |
|
|
root
|
943802aec6
|
Added detection testing service results inLinux File Creation In Profile Directory
|
2022-01-03 13:06:51 +00:00 |
|
|
tccontre
|
7c2874bb1e
|
linux_persist_priv_batch_2
|
2022-01-03 13:57:17 +01:00 |
|
|
root
|
5ea972280c
|
Added detection testing service results inLinux Service File Created In Systemd Directory
|
2022-01-03 12:38:40 +00:00 |
|
|
tccontre
|
0140a5a99b
|
Update linux_setuid_using_chmod_utility.yml
|
2022-01-03 12:54:55 +01:00 |
|
|
tccontre
|
f85658f1a0
|
linux_persist_priv_batch_2
|
2022-01-03 12:25:08 +01:00 |
|
|
root
|
72f7bb0676
|
Added detection testing service results inLinux Service Started Or Enabled
|
2022-01-03 10:35:34 +00:00 |
|
|
root
|
00521f06a5
|
Added detection testing service results inLinux Setuid Using Setcap Utility
|
2022-01-03 10:04:59 +00:00 |
|
|
tccontre
|
780aa81877
|
Update linux_setuid_using_setcap_utility.yml
|
2022-01-03 10:40:56 +01:00 |
|
|
tccontre
|
e21247f2d2
|
linux_persist_priv_batch_2
|
2021-12-23 12:31:05 +01:00 |
|
|
Jose Enrique Hernandez
|
930a6db140
|
Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278
|
2021-12-21 14:21:54 -05:00 |
|
|
root
|
9243038c09
|
Added detection testing service results inSuspicious Ticket Granting Ticket Request
|
2021-12-21 19:06:04 +00:00 |
|
|
mvelazco
|
bb8ae58f84
|
adding new detection
|
2021-12-21 13:44:17 -05:00 |
|
|
root
|
da634d5c25
|
Added detection testing service results inSuspicious Kerberos Service Ticket Request
|
2021-12-21 03:57:17 +00:00 |
|
|
mvelazco
|
4631c84a60
|
updating logic
|
2021-12-20 22:38:27 -05:00 |
|
|
root
|
122d403d6c
|
Added detection testing service results inSuspicious Kerberos Service Ticket Request
|
2021-12-21 03:34:17 +00:00 |
|
|
mvelazco
|
d5d7e0ce1a
|
Update suspicious_computer_account_name_change.yml
|
2021-12-20 22:11:09 -05:00 |
|
|
mvelazco
|
6fa0f9b30b
|
adding new detection
|
2021-12-20 22:08:19 -05:00 |
|
|
root
|
653a7755e8
|
Added detection testing service results inSuspicious Computer Account Name Change
|
2021-12-20 22:50:20 +00:00 |
|
|
mvelazco
|
af31bdb3ec
|
updating observable
|
2021-12-20 17:20:58 -05:00 |
|
|
mvelazco
|
243e60a3cc
|
minor fix
|
2021-12-20 17:04:58 -05:00 |
|
|
mvelazco
|
82a4a63093
|
creating analytic story and first detection
|
2021-12-20 16:58:34 -05:00 |
|
|
mvelazco
|
59b9068998
|
Merge pull request #1894 from splunk/Fix_Log4j_detection
Update Log4J Detection to use data models
|
2021-12-20 15:42:26 -05:00 |
|
|
Bhavin Patel
|
3eb630b220
|
Branch was auto-updated.
|
2021-12-16 12:55:22 -08:00 |
|
|
peter
|
eff3306f89
|
Merge pull request #1897 from splunk/ssa_descriptive_branch_name
SSA descriptive branch name
|
2021-12-16 14:55:05 -06:00 |
|
|
peter-cg
|
55fd63fe2f
|
Caps fix
|
2021-12-16 14:53:54 -06:00 |
|
|
peter-cg
|
3aa223a948
|
Adding sourcetype to sysproc_unexpected_location test
|
2021-12-16 10:44:05 -06:00 |
|
|
peter-cg
|
ba83011191
|
Adding addl humvee runner and fixing macro def
|
2021-12-16 10:42:01 -06:00 |
|
|
Bhavin Patel
|
ab3eb94c83
|
Branch was auto-updated.
|
2021-12-15 15:52:04 -08:00 |
|
|
pyth0n1c
|
7431dabd65
|
Merge pull request #1896 from splunk/doc_updates
Docs Update for playbook changes
|
2021-12-15 15:51:51 -08:00 |
|
|
Lou Stella
|
2f8de77b7c
|
Docs Update for playbook changes
|
2021-12-15 17:42:47 -06:00 |
|
|
Bhavin Patel
|
ae3484780a
|
Branch was auto-updated.
|
2021-12-15 15:20:36 -08:00 |
|
|
Lou Stella
|
9c21e7f869
|
Merge pull request #1895 from splunk/The_Day_After_The_Day_After_log4shell
The Day After The Day After log4shell
|
2021-12-15 17:20:18 -06:00 |
|
|
Lou Stella
|
01bc5757b6
|
removed married parent playbook
|
2021-12-15 17:06:02 -06:00 |
|
|
Lou Stella
|
fbf15c3424
|
Final copy from phantomcyber/playbooks
|
2021-12-15 16:58:31 -06:00 |
|
|
Lou Stella
|
872ea4b55c
|
Standardized type
|
2021-12-15 15:52:40 -06:00 |
|
|
root
|
496f97a0ee
|
Added detection testing service results inOutbound Network Connection from Java Using Default Ports
|
2021-12-15 21:19:25 +00:00 |
|
|
Lou Stella
|
ca0aaa46c5
|
divorced parent playbook
|
2021-12-15 15:03:21 -06:00 |
|
|
mvelazco
|
3bb9712286
|
updating detection to use data models
|
2021-12-15 15:53:06 -05:00 |
|
|
Lou Stella
|
337e077224
|
Merge pull request #1892 from splunk/bug_with_playbook_detection
bug with playbooks detection page
|
2021-12-15 14:16:09 -06:00 |
|
|
d1vious
|
0df62338c9
|
bug with playbooks detection page
|
2021-12-15 15:01:27 -05:00 |
|
|
Jose Enrique Hernandez
|
8566c56a0e
|
Merge pull request #1889 from splunk/minor_api_gen_bug
fixes a logic bug with the api that caused ci to fail
|
2021-12-15 14:56:09 -05:00 |
|
|
Bhavin Patel
|
974d1bfc40
|
Branch was auto-updated.
|
2021-12-15 11:47:08 -08:00 |
|