 tccontre
|
64ef47d844
|
dev_sec2
|
2021-08-26 12:39:30 +02:00 |
|
|
tccontre
|
9a0227affd
|
dev_sec2
|
2021-08-26 12:39:30 +02:00 |
|
|
tccontre
|
476487d6d5
|
dev_sec2
|
2021-08-26 12:39:30 +02:00 |
|
|
tccontre
|
a2f338a91b
|
dev_sec2
|
2021-08-26 12:39:30 +02:00 |
|
|
tccontre
|
c4f3cf7899
|
dev_sec2
|
2021-08-26 12:39:30 +02:00 |
|
|
Jose Enrique Hernandez
|
7415e7f8eb
|
Merge pull request #1583 from splunk/yank_circleci
delete circleCI folder
|
2021-08-24 13:24:05 -04:00 |
|
|
github-actions[bot]
|
8efb3420d4
|
Branch was auto-updated.
|
2021-08-24 13:25:38 +00:00 |
|
|
Michael Haag
|
9474ca260d
|
Merge pull request #1578 from sec-researcher/optimized
Filter blocked traffic and add some recommendation to "how_to_implement" section
|
2021-08-24 07:25:16 -06:00 |
|
|
Michael Haag
|
b39fc05894
|
Merge branch 'develop' into optimized
|
2021-08-24 07:05:32 -06:00 |
|
|
Michael Haag
|
b831023bd4
|
Update protocols_passing_authentication_in_cleartext.yml
Added a few more changes to make it more clear. Thank you @sec-researcher for updating!
|
2021-08-24 07:04:52 -06:00 |
|
|
patel-bhavin
|
69348d2c7f
|
img link
|
2021-08-23 13:35:32 -07:00 |
|
|
patel-bhavin
|
ed49ff5d7d
|
badge image
|
2021-08-23 12:41:24 -07:00 |
|
|
patel-bhavin
|
4cad044871
|
delete circleCI folder
|
2021-08-23 12:36:20 -07:00 |
|
|
Bhavin Patel
|
f9501e8fd6
|
Merge pull request #1561 from pyth0n1c/develop
Transition from CircleCI to GitHub Actions for CI/CD and associated changes
|
2021-08-23 11:14:48 -07:00 |
|
|
pyth0n1c
|
5b0b552498
|
Pull and merge from upstream, mostly version number updates, timestamps, and some other detection related updates and new detections.
|
2021-08-23 10:48:42 -07:00 |
|
|
P4T12ICK
|
e8b58de3f1
|
Merge pull request #1582 from splunk/devsec_move
devsec_move
|
2021-08-23 17:29:46 +02:00 |
|
|
github-actions[bot]
|
591af47efc
|
Branch was auto-updated.
|
2021-08-23 15:21:43 +00:00 |
|
|
Jose Enrique Hernandez
|
eeb1f4ff43
|
Merge pull request #1567 from splunk/Haagust
The Sound of Haag
|
2021-08-23 11:21:22 -04:00 |
|
|
tccontre
|
e96e7c91b1
|
devsec_move
|
2021-08-23 17:16:50 +02:00 |
|
|
github-actions[bot]
|
ca0f9f4c09
|
Branch was auto-updated.
|
2021-08-23 14:27:02 +00:00 |
|
|
P4T12ICK
|
0edd6dc86b
|
Merge pull request #1581 from splunk/deleted_wrong_merged_detections
remove detections which was pushed to develop by accident
|
2021-08-23 16:26:38 +02:00 |
|
|
P4T12ICK
|
4728008ddd
|
remove detections which was pushed to develop
|
2021-08-23 16:21:10 +02:00 |
|
|
github-actions[bot]
|
9518eac404
|
Branch was auto-updated.
|
2021-08-23 14:07:28 +00:00 |
|
|
Rod Soto
|
7ab50370da
|
newcommitgsuite
|
2021-08-23 07:05:37 -07:00 |
|
|
Amir hossein Mahboubi
|
0945cc72c9
|
Update protocols_passing_authentication_in_cleartext.yml
|
2021-08-21 08:55:07 +04:30 |
|
|
Amir hossein Mahboubi
|
546e70f2d8
|
Merge branch 'splunk:develop' into optimized
|
2021-08-21 08:53:50 +04:30 |
|
|
research bot
|
2ef149f2e3
|
updating docs and package bits [ci skip]
|
2021-08-20 22:22:11 +00:00 |
|
|
mhaag-spl
|
c302325663
|
Updated URLs and fixes
|
2021-08-20 11:53:42 -06:00 |
|
|
mhaag-spl
|
b6aa47aa17
|
Update suspicious_microsoft_workflow_compiler_rename.test.yml
|
2021-08-20 11:20:34 -06:00 |
|
|
mhaag-spl
|
619aebc33b
|
Update certutil_exe_certificate_extraction.yml
Updated query.
|
2021-08-20 10:46:28 -06:00 |
|
|
github-actions[bot]
|
806daec83d
|
Branch was auto-updated.
|
2021-08-19 21:14:59 +00:00 |
|
|
Bhavin Patel
|
f8a25f6133
|
Merge pull request #1544 from splunk/dependabot/pip/distlib-0.3.2
Bump distlib from 0.3.1 to 0.3.2
|
2021-08-19 14:14:38 -07:00 |
|
|
github-actions[bot]
|
64e4f3c715
|
Branch was auto-updated.
|
2021-08-19 21:14:20 +00:00 |
|
|
github-actions[bot]
|
a42878fd5b
|
Branch was auto-updated.
|
2021-08-19 21:14:18 +00:00 |
|
|
Bhavin Patel
|
0659aaca50
|
Merge pull request #1568 from splunk/rename_icedid
rename Icedid to IcedID
|
2021-08-19 14:14:00 -07:00 |
|
|
mhaag-spl
|
9fb5d44326
|
Update powershell_4104_hunting.yml
|
2021-08-19 15:07:40 -06:00 |
|
|
Bhavin Patel
|
0115aa3b0c
|
Merge branch 'develop' into rename_icedid
|
2021-08-19 14:01:01 -07:00 |
|
|
mhaag-spl
|
1ba5fa6da2
|
Update powershell_4104_hunting.yml
|
2021-08-19 14:46:06 -06:00 |
|
|
mhaag-spl
|
e861da59c3
|
4104 Hunting
|
2021-08-19 14:09:43 -06:00 |
|
|
github-actions[bot]
|
3f90fc50cb
|
Branch was auto-updated.
|
2021-08-19 15:42:43 +00:00 |
|
|
github-actions[bot]
|
7527582cd9
|
Branch was auto-updated.
|
2021-08-19 15:42:39 +00:00 |
|
|
P4T12ICK
|
782163a201
|
Merge pull request #1572 from splunk/aws_ecr_detections_2
container upload aws ecr
|
2021-08-19 17:42:13 +02:00 |
|
|
sec-researcher
|
0bfb8ba325
|
Filter blocked traffic because it made a lot of false positive specially when something like port scan happen, also add description to "how_to_implement" section to limit result just to organization private and public IP range for more accurate result
|
2021-08-19 18:59:04 +04:30 |
|
|
P4T12ICK
|
dd419961e7
|
container upload aws ecr
|
2021-08-19 15:51:17 +02:00 |
|
|
github-actions[bot]
|
740d3a5aff
|
Branch was auto-updated.
|
2021-08-19 13:35:55 +00:00 |
|
|
github-actions[bot]
|
23c7b7dc36
|
Branch was auto-updated.
|
2021-08-19 13:35:53 +00:00 |
|
|
P4T12ICK
|
354cd08838
|
Merge pull request #1570 from splunk/aws_eks_detections
container upload aws ecr
|
2021-08-19 15:35:28 +02:00 |
|
|
P4T12ICK
|
d1933b28da
|
container upload aws ecr
|
2021-08-19 15:07:12 +02:00 |
|
|
P4T12ICK
|
4c242df80e
|
container upload aws ecr
|
2021-08-19 14:07:23 +02:00 |
|
|
github-actions[bot]
|
59ae237866
|
Branch was auto-updated.
|
2021-08-19 11:15:58 +00:00 |
|