admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,214 Commits 697 Branches 195 Tags
508fbc4a2b1f48c253fa2c63ea112964dc85f310
Commit Graph

303 Commits

Author SHA1 Message Date
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
srv-rr-gh-researchbt e57d7b297c Branch was auto-updated. 2023-06-01 11:27:24 -07:00
patel-bhavin 95cc544ca1 audit 2023-06-01 10:25:12 -07:00
pyth0n1c 4bfd0c1277 content for June2023. 2023-06-01 08:18:50 -07:00
P4T12ICK c46979855b add source macro 2023-05-22 15:17:26 +02:00
Michael Haag f5e121b1eb The Haag Mile: A Journey of Redemption 2023-05-15 13:22:04 -06:00
mvelazco 21dd670a14 changes for sec 4.0 2023-04-24 17:58:57 -04:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Michael Haag 59c4718b7e inventory 2023-04-14 12:02:42 -06:00
mvelazco 406a046c40 renaming and adding new detection 2023-03-29 16:12:53 -04:00
srv-rr-gh-researchbt eb09ffd951 Branch was auto-updated. 2023-02-21 11:07:01 -08:00
mvelazco 4788c12979 update macro 2023-02-10 12:55:26 -05:00
Michael Haag 3a4380c16a fixes 2023-02-09 14:32:34 -07:00
srv-rr-gh-researchbt 1d9df4cde0 Branch was auto-updated. 2023-02-06 15:57:34 -08:00
Michael Haag b4796ccc27 Driver Inventory 2023-02-03 14:51:28 -07:00
Michael Haag ebc91326ec Cert services and MOAR 2023-02-03 06:58:50 -07:00
Rod Soto e376095429 fixsourcedtypesplunkwebxmacro 2023-02-01 16:33:44 -08:00
Michael Haag 3db30e0ba1 Update windows_shells.yml 2023-01-26 15:21:15 -07:00
Michael Haag af8cd582e4 dropping some updates 2023-01-24 14:41:22 -07:00
srv-rr-gh-researchbt 776ae141a3 Branch was auto-updated. 2023-01-10 11:46:10 -08:00
srv-rr-gh-researchbt 3222c30b5b Branch was auto-updated. 2023-01-10 10:30:14 -08:00
patel-bhavin 2beb040928 add risk index macro 2022-12-21 14:12:18 -08:00
Michael Haag 22f6d4ae92 Fantastic IIS Modules and Where to Find Them 2022-12-21 08:53:03 -07:00
Michael Haag 868db6a670 its a macro life 2022-11-21 15:20:47 -07:00
Bhavin Patel 1a5accb29d remove index 2022-11-11 13:16:59 -08:00
srv-rr-gh-researchbt e9382f0963 Branch was auto-updated. 2022-11-11 12:01:02 -08:00
Sanjay Govind 1dbaa19160 Fix incorrect quotes in linux_shells.yml 2022-11-08 08:51:20 +13:00
Michael Haag 3f32bf928c openssl content 2022-11-03 10:49:32 -06:00
Bhavin Patel d8f8c21296 Merge pull request #2439 from splunk/security_updates 
Security updates
 2022-11-02 10:18:07 -07:00
Bhavin Patel aa27dd3b02 Merge pull request #2419 from splunk/qakbot_2 
qakbot_2
 2022-11-01 10:00:09 -07:00
pyth0n1c a80f89e32c Replaced index= and sourcetype= with appropriate macro. Added that macro as well. 2022-11-01 08:38:04 -07:00
pyth0n1c 689277d6ee Added a number of macros, tests, and detections in support of release of Splunk vulnerabilities and patches. 2022-11-01 08:12:14 -07:00
tccontre fba863203b qakbot_2 2022-10-27 16:07:23 +02:00
mvelazco 744bc50190 adding 4 GCP account takeover detections 2022-10-14 15:03:54 -04:00
patel-bhavin cd70fb50e7 adding gcp configs 2022-10-12 18:09:41 -07:00
pyth0n1c ecb91e050e Branch was auto-updated. 2022-09-15 09:15:44 -07:00
Michael Haag 36ffb11950 Update wineventlog_application.yml 2022-09-12 08:53:24 -06:00
Michael Haag f0324892d5 hunt Windows Event Triggered Image File Execution Options Injection 2022-09-09 06:50:43 -06:00
pyth0n1c 58d617267b Branch was auto-updated. 2022-08-23 12:49:53 -07:00
mvelazco 0a10ef85d6 fixing detection. adding azure_audit macro 2022-08-22 15:36:25 -04:00
Jose Enrique Hernandez 1c178eac79 TR-2349 adding fillnull_value 2022-08-11 15:00:21 -04:00
mvelazco 45ee82ff9e fixing macro 2022-07-12 10:26:48 -04:00
mvelazco ba163055eb adding 2 detections 2022-07-11 17:29:18 -04:00
mvelazco ca443d7b6a adding analytic story and new macro 2022-07-07 18:06:58 -04:00
pyth0n1c cc03d129c3 Branch was auto-updated. 2022-06-21 16:07:17 -07:00
pyth0n1c 25e4a180b1 Branch was auto-updated. 2022-06-21 14:46:28 -07:00
patel-bhavin a92a6f2546 map filter 2022-06-21 12:24:04 -07:00
mhaag-spl 9a25da4387 T1218.007 - MSIExec 2022-06-17 09:36:34 -06:00
pyth0n1c fea6debab2 Branch was auto-updated. 2022-06-09 11:50:11 -07:00
pyth0n1c 3fb342d4c4 Fixed improperly named macro. 
Renamed the macro in the tests
that use that macro. Added the
optional field, "custom_index"
to the test files which MUST
upload data into the _audit
index.  This branch doesn't
support custom_index yet,
but those changes will be merged
soon from another branch.
 2022-06-08 10:31:53 -07:00