admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,214 Commits 697 Branches 195 Tags
508fbc4a2b1f48c253fa2c63ea112964dc85f310
Commit Graph

9150 Commits

Author SHA1 Message Date
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel fdd1067803 updated descriptions 2023-10-13 13:26:36 -07:00
Bhavin Patel ac7d89f119 Merge pull request #2885 from splunk/1more1 
Create confluence_cve_2023_22515_trigger_vulnerability.yml
 2023-10-13 12:38:42 -07:00
Michael Haag f3e2739ec5 Update confluence_cve_2023_22515_trigger_vulnerability.yml 2023-10-13 13:00:33 -06:00
Bhavin Patel 07f2c0ea2d macros error 2023-10-13 11:55:25 -07:00
srv-rr-gh-researchbt 33c8026de5 Branch was auto-updated. 2023-10-13 11:48:44 -07:00
Bhavin Patel 4106413eef update story name 2023-10-13 11:36:19 -07:00
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
Bhavin Patel ab59162008 new PR with correct yamls 2023-10-13 11:26:26 -07:00
Michael Haag 69be7e2da9 Create confluence_cve_2023_22515_trigger_vulnerability.yml 2023-10-13 12:23:52 -06:00
srv-rr-gh-researchbt 2dd1d58495 Branch was auto-updated. 2023-10-13 10:39:07 -07:00
srv-rr-gh-researchbt 5e537ec0a5 Branch was auto-updated. 2023-10-13 10:38:42 -07:00
srv-rr-gh-researchbt d8831386a2 Branch was auto-updated. 2023-10-13 10:38:40 -07:00
Michael Haag 74b95a1400 Update citrix_adc_exploitation_cve_2023_3519.yml 2023-10-13 07:06:16 -06:00
srv-rr-gh-researchbt f06d7fcff3 Branch was auto-updated. 2023-10-12 11:47:01 -07:00
Bhavin Patel e324b3d0cf Merge pull request #2879 from splunk/Diamond_Ticket 
Diamond Ticket
 2023-10-12 11:46:42 -07:00
Bhavin Patel fb66f993c9 update source 2023-10-12 11:15:44 -07:00
Michael Haag 9817a13daf Update confluence_data_center_and_server_privilege_escalation.yml 2023-10-12 09:10:58 -06:00
Michael Haag fd93bb5711 Update citrix_adc_exploitation_cve_2023_3519.yml 2023-10-12 09:09:03 -06:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
Gowthamaraj rajendran 724221f82b Manually update the .yml 2023-10-10 19:29:33 -07:00
Michael Haag 981ef0caf9 Trust this 2023-10-10 16:26:22 -06:00
Michael Haag a1315040ee Create windows_registry_sip_provider_modification.yml 2023-10-10 14:27:49 -06:00
Michael Haag 63c370e748 Sip Happens: Stirring Up the Crypto with a New Module 2023-10-10 14:13:09 -06:00
mvelazco 3e07515de2 adding analytic story 2023-10-09 15:14:35 -04:00
mvelazco 02859139c6 update detection 2023-10-09 14:21:01 -04:00
mvelazco 92b6c09fc5 updating detection 2023-10-09 13:52:36 -04:00
mvelazco f6786d9dcd fixing detection 2023-10-09 11:45:21 -04:00
Bhavin Patel 1612821676 update for data 2023-10-06 13:10:30 -07:00
mvelazco a20f6b726b adding new detection - diamond ticket 2023-10-06 15:46:36 -04:00
Bhavin Patel 49d175146f updating files and metadata 2023-10-06 10:15:47 -07:00
srv-rr-gh-researchbt 48f85987cf Branch was auto-updated. 2023-10-04 13:51:35 -07:00
Michael Haag 6a652765f4 CVE-2023-22515 2023-10-04 14:43:26 -06:00
Bhavin Patel fe821f3328 Merge pull request #2872 from splunk/add_process_path_to_detection 
add process_path to tstats output
 2023-10-03 15:21:46 -07:00
pyth0n1c ca2a81b55d add process_path to tstats output 2023-10-03 14:02:04 -07:00
pyth0n1c d57b3f1fcf properly format times in risky command search 2023-10-02 12:56:00 -07:00
pyth0n1c 96c931eda9 use macro instead of using index and sourcetype directly. 2023-10-02 12:45:09 -07:00
pyth0n1c b16a497093 remove source= from search 2023-10-02 11:54:06 -07:00
pyth0n1c a00fce83db Update to new search after dynamic testing and refinement. 2023-10-02 11:49:57 -07:00
pyth0n1c aa366491e5 Merge branch 'platform_security_20230919' of https://github.com/splunk/security_content into platform_security_20230919 2023-10-02 11:37:32 -07:00
pyth0n1c de281dcdb6 First version of new detection for testing 2023-10-02 11:36:50 -07:00
srv-rr-gh-researchbt a51faed2c5 Branch was auto-updated. 2023-10-02 11:19:54 -07:00
pyth0n1c 588ef14f0c Added fillnull to improve detection accuracy for all logs. 2023-10-02 11:03:24 -07:00
srv-rr-gh-researchbt bc66334e86 Branch was auto-updated. 2023-10-02 09:12:48 -07:00
srv-rr-gh-researchbt ab5e3e2cf6 Branch was auto-updated. 2023-10-02 09:12:47 -07:00
Bhavin Patel 6af27bff01 Merge pull request #2865 from splunk/teamcity 
JetBrains TeamCity RCE
 2023-10-02 09:12:25 -07:00
Bhavin Patel f3540a2da7 Update message 2023-10-02 08:57:56 -07:00
Bhavin Patel ca1758dee7 adding Attacker obs 2023-10-02 08:55:43 -07:00
Bhavin Patel 34252303f2 Adding POST 2023-10-02 08:52:40 -07:00
Michael Haag 36c15130f6 JetBrains TeamCity RCE 2023-10-01 10:59:09 -06:00