admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,886 Commits 697 Branches 195 Tags
5c8268f137f22be3fb02027ef565e818b0fd9a89
Commit Graph

1302 Commits

Author SHA1 Message Date
pyth0n1c 59292cf55e Branch was auto-updated. 2022-02-15 12:36:33 -08:00
mhaag-spl c9b8eb2985 rasautou 2022-02-15 13:08:59 -07:00
pyth0n1c 81a5583536 Branch was auto-updated. 2022-02-15 10:30:14 -08:00
mhaag-spl e241241bf2 ordinal Data 2022-02-15 11:09:57 -07:00
d1vious 3a3d0a9922 adding powershell downloadfile but not passing 2022-02-14 21:28:57 -05:00
d1vious 73cb36c626 adding working detection 2022-02-14 15:54:12 -05:00
d1vious 0a2618f686 adding 1 detection 2022-02-14 13:40:24 -05:00
d1vious a1d127126a adding template detection 2022-02-14 11:11:47 -05:00
mhaag-spl 40b34450a0 Windows Schtasks Create Run As System 2022-02-10 09:08:52 -07:00
pyth0n1c 17e2f3c94b Branch was auto-updated. 2022-02-09 16:53:36 -08:00
Xiao Lin ee2ee98742 remove duplicate 2022-02-09 16:44:17 -08:00
Xiao Lin 4c5f48c507 add detection for unusal volume of data download 2022-02-09 16:40:45 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
Xiao Lin b31ee54c20 Unusual Volume of Data Download from Internal Server Per Entity 2022-02-09 16:36:10 -08:00
mhaag-spl 2fdc53b85b MSRA shipment 📮 2022-02-09 12:10:58 -07:00
mhaag-spl 0fa295eee0 Ordinal 2022-02-09 08:01:49 -07:00
tccontre e84063b9c2 Merge branch 'reg_yml_analytics_updates_4' of github.com:splunk/security_content into reg_yml_analytics_updates_4 2022-02-04 10:18:24 +01:00
tccontre 2704483cf5 reg_yml_analytics_updates_4 2022-02-04 10:18:17 +01:00
mhaag-spl e8dd9051bc pkexec 
Deprecating two detections that identified all rundll32 executions.
Added linux pkexec pwnkit detection.
 2022-02-01 09:52:52 -07:00
Bhavin Patel 14c145c133 Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline 
Potentially malicious code on commandline
 2022-01-28 13:27:59 -08:00
Bhavin Patel 3efcb99124 Merge pull request #1875 from splunk/ssa_multilogin 
Anomalous usage of account credentials
 2022-01-27 14:55:25 -08:00
Bhavin Patel 7fd71050fe Merge pull request #1878 from splunk/ssa_1 
Disable Defender AntiVirus Registry- SSA
 2022-01-27 14:51:23 -08:00
Bhavin Patel 1975ff75a2 Merge pull request #1900 from splunk/ssa_info_sabotage 
new_ssa_ifo_sabotage
 2022-01-27 14:11:19 -08:00
patel-bhavin 45c4a7b600 remove files that are already merged 2022-01-26 13:51:51 -08:00
patel-bhavin cca42c0009 moving to expermental 2022-01-24 15:31:15 -08:00
mhaag-spl befe09f77c Nirsoft Software 2022-01-24 15:07:20 -07:00
pyth0n1c ad85b8b21b Branch was auto-updated. 2022-01-24 10:51:04 -08:00
pyth0n1c 4c125f1dd6 Branch was auto-updated. 2022-01-24 10:51:03 -08:00
pyth0n1c fc97ef9be2 Branch was auto-updated. 2022-01-24 10:51:01 -08:00
pyth0n1c 2254d203d8 Branch was auto-updated. 2022-01-24 10:50:59 -08:00
pyth0n1c e848c0a544 Branch was auto-updated. 2022-01-24 10:50:58 -08:00
pyth0n1c cbabad3107 Branch was auto-updated. 2022-01-24 10:40:47 -08:00
pyth0n1c 53ca345c06 Branch was auto-updated. 2022-01-24 10:40:46 -08:00
pyth0n1c 3f6c74cc53 Branch was auto-updated. 2022-01-24 10:40:45 -08:00
pyth0n1c dd538478f4 Branch was auto-updated. 2022-01-24 10:40:44 -08:00
pyth0n1c bbebfe7d07 Branch was auto-updated. 2022-01-24 10:40:41 -08:00
pyth0n1c ac214bafa6 Branch was auto-updated. 2022-01-24 10:40:40 -08:00
mhaag-spl c3159a29cb advanced 🏃 2022-01-24 07:25:06 -07:00
Michael Hart e962bfb4bd Merge branch 'develop' of github.com:splunk/security_content into potentially_malicious_code_on_commandline 2022-01-21 19:26:39 -05:00
tccontre 2b4f34956d WhisperGateIsOpen 2022-01-21 10:45:00 +01:00
Michael Hart 906f0ee338 Changing the test dataset to the main branch 2022-01-20 21:09:22 -05:00
mhaag-spl 5bfcf2eea3 InstallUtil and DotNet Assemblies 2022-01-20 14:34:04 -07:00
Michael Hart 2f9d410caf Updating test interval 2022-01-20 16:14:44 -05:00
pyth0n1c 96b979bce4 Branch was auto-updated. 2022-01-20 12:28:32 -08:00
pyth0n1c bbb3ea16c0 Branch was auto-updated. 2022-01-20 12:28:30 -08:00
pyth0n1c 76221cf4dd Branch was auto-updated. 2022-01-20 12:28:29 -08:00
pyth0n1c 79766f5133 Branch was auto-updated. 2022-01-20 12:28:28 -08:00
pyth0n1c f9cb7214f1 Branch was auto-updated. 2022-01-20 12:28:26 -08:00
mhaag-spl 85c1f12905 Update ssa___fsutil_zeroing_file.test.yml 2022-01-20 13:11:55 -07:00
mhaag-spl adfe9703c4 Updated BA 4688 dataset 2022-01-20 12:56:36 -07:00