 mhaag-spl
|
668fba767b
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 13:28:55 -06:00 |
|
|
mhaag-spl
|
23a2dcb7c1
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-10 12:37:25 -06:00 |
|
|
mhaag-spl
|
6a81b49ae9
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 12:37:22 -06:00 |
|
|
mhaag-spl
|
6a99bcffa8
|
Added detection testing service results inDetect Renamed rundll32.exe Rename
|
2021-08-10 12:26:39 -06:00 |
|
|
mhaag-spl
|
833001dd15
|
Update suspicious_rundll32_rename.yml
|
2021-08-09 14:19:27 -06:00 |
|
|
Jose Enrique Hernandez
|
da6a9c2d0f
|
Merge pull request #1550 from splunk/ssa_TR-770_add_event_id
TR-770 added event_id to ssa detections
|
2021-08-09 11:42:14 -07:00 |
|
|
peter-cg
|
f8fc79d4e1
|
Adding event_id extraction
|
2021-08-03 14:56:18 -05:00 |
|
|
Jose Enrique Hernandez
|
b8fea6311e
|
Delete powershell_encoded_command.yml
|
2021-08-03 14:56:17 -05:00 |
|
|
divious1
|
d7000e7608
|
added event_id to ssa detections
|
2021-08-03 14:56:17 -05:00 |
|
|
peter
|
62e6c006b0
|
Merge pull request #1547 from splunk/ssa_TR-778
TR-778: SSA/BA/SAC stage->gstage
|
2021-08-03 14:55:08 -05:00 |
|
|
peter-cg
|
23b22e95d4
|
Event delimiting bugfix and some event upload error checking
|
2021-08-03 14:53:11 -05:00 |
|
|
research bot
|
df85ff33ad
|
updating docs and package bits [ci skip]
|
2021-07-29 21:15:45 +00:00 |
|
|
github-actions[bot]
|
cde8a9154a
|
Branch was auto-updated.
|
2021-07-29 20:32:08 +00:00 |
|
|
Jose Enrique Hernandez
|
a3237b801b
|
Merge pull request #1548 from splunk/risk_bugs
Multi Risk and Threat object support
|
2021-07-29 16:31:47 -04:00 |
|
|
patel-bhavin
|
9fbeb683ca
|
testing ymls
|
2021-07-29 12:43:02 -07:00 |
|
|
patel-bhavin
|
483ee87950
|
minor
|
2021-07-28 16:33:55 -07:00 |
|
|
patel-bhavin
|
4864774de7
|
testing risk refactor
|
2021-07-28 16:30:28 -07:00 |
|
|
peter-cg
|
61c6d8b3d9
|
Adding SSA compile_check util
|
2021-07-28 17:22:48 -05:00 |
|
|
peter-cg
|
a38fef77ce
|
Increase execution time limit
|
2021-07-28 16:40:50 -05:00 |
|
|
research bot
|
4b3e48b6f4
|
updating docs and package bits [ci skip]
|
2021-07-28 20:27:55 +00:00 |
|
|
peter-cg
|
c15909c35d
|
Perform basic tests if no detections/tests have changed but CI code has changed
|
2021-07-28 14:47:42 -05:00 |
|
|
Jose Enrique Hernandez
|
5f0418ce2b
|
Merge pull request #1545 from splunk/blackbolt_duplicate
From @https://github.com/BlackB0lt
|
2021-07-28 15:22:03 -04:00 |
|
|
peter-cg
|
4fd8e9ec42
|
Move from stage to gstage
|
2021-07-28 14:20:08 -05:00 |
|
|
peter-cg
|
914a04abb2
|
Adding token validation
|
2021-07-28 14:20:08 -05:00 |
|
|
peter-cg
|
1a68258954
|
Uploading all data at once
|
2021-07-28 14:16:13 -05:00 |
|
|
peter-cg
|
089906ba48
|
Cleaning up some error reporting and adding activation-wait-loop
|
2021-07-28 14:16:13 -05:00 |
|
|
patel-bhavin
|
9460c02297
|
Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate
|
2021-07-28 11:45:02 -07:00 |
|
|
patel-bhavin
|
04e23cba8b
|
search update
|
2021-07-28 11:44:51 -07:00 |
|
|
Detection Testing Service
|
76335f0ea7
|
Merge branch 'blackbolt_duplicate' of https://github.com/splunk/security_content into blackbolt_duplicate
|
2021-07-28 18:20:18 +00:00 |
|
|
root
|
8c066fcd26
|
Added detection testing service results inDetect processes used for System Network Configuration Discovery
|
2021-07-28 18:20:17 +00:00 |
|
|
root
|
2fac7f3a74
|
Added detection testing service results inDetect New Open S3 Buckets over AWS CLI
|
2021-07-28 18:19:22 +00:00 |
|
|
patel-bhavin
|
ea8de7ad52
|
Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate
|
2021-07-28 10:52:39 -07:00 |
|
|
patel-bhavin
|
ecf2886c43
|
revert
|
2021-07-28 10:52:22 -07:00 |
|
|
Bhavin Patel
|
74e0266341
|
Update detect_new_open_s3_buckets_over_aws_cli.yml
|
2021-07-27 16:50:03 -07:00 |
|
|
Bhavin Patel
|
79af676857
|
Update detect_new_open_s3_buckets_over_aws_cli.yml
|
2021-07-27 16:45:59 -07:00 |
|
|
patel-bhavin
|
90191cd151
|
risk_update
|
2021-07-27 14:51:57 -07:00 |
|
|
patel-bhavin
|
60d499fb99
|
Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate
|
2021-07-27 14:41:15 -07:00 |
|
|
patel-bhavin
|
f24ba42985
|
aws-cli
|
2021-07-27 14:41:06 -07:00 |
|
|
Bhavin Patel
|
7431704a71
|
Merge branch 'develop' into blackbolt_duplicate
|
2021-07-27 14:01:15 -07:00 |
|
|
patel-bhavin
|
bf6804cef7
|
adding spl updates
|
2021-07-27 13:57:33 -07:00 |
|
|
Bhavin Patel
|
7f1e68eea6
|
Merge pull request #1536 from sec-researcher/optimized
Filter PTR requests to optimize deviation calculation and remove them from result.
|
2021-07-27 13:53:02 -07:00 |
|
|
Bhavin Patel
|
4d3c12cf26
|
Merge branch 'develop' into optimized
|
2021-07-27 13:02:37 -07:00 |
|
|
Jose Enrique Hernandez
|
3807152d0a
|
Merge pull request #1510 from splunk/dependabot/pip/splunk-sdk-1.6.16
Bump splunk-sdk from 1.6.15 to 1.6.16
|
2021-07-27 16:01:33 -04:00 |
|
|
root
|
2fd2af4d29
|
Added detection testing service results inDNS Query Length With High Standard Deviation
|
2021-07-27 19:59:57 +00:00 |
|
|
Jose Enrique Hernandez
|
4eb9a75f80
|
Merge branch 'develop' into optimized
|
2021-07-27 10:54:35 -04:00 |
|
|
github-actions[bot]
|
5ffddf539e
|
Branch was auto-updated.
|
2021-07-26 16:11:51 +00:00 |
|
|
Bhavin Patel
|
6fb05a1b9f
|
Merge pull request #1542 from splunk/Shadowsinthecopy
SAM I AM
|
2021-07-26 09:11:29 -07:00 |
|
|
Michael Haag
|
48165c7e35
|
Merge branch 'develop' into Shadowsinthecopy
|
2021-07-23 14:10:05 -06:00 |
|
|
mhaag-spl
|
ba92a642a8
|
SAM I AM
I AM SAM
|
2021-07-23 14:06:27 -06:00 |
|
|
github-actions[bot]
|
c6639226df
|
Branch was auto-updated.
|
2021-07-22 19:42:29 +00:00 |
|