admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,217 Commits 697 Branches 195 Tags
6db4dbc689a95df4bbffb096c19a475fb7dfe952
Commit Graph

31 Commits

Author SHA1 Message Date
mvelazco 145881799d fixing name 2023-03-03 17:33:42 -05:00
mvelazco b07c7cff05 updating names and moving to experimental 2023-02-13 16:10:56 -05:00
srv-rr-gh-researchbt f0e3a1dbc6 Branch was auto-updated. 2023-02-06 17:15:54 -08:00
srv-rr-gh-researchbt 4c5e157bdf Branch was auto-updated. 2023-02-06 16:12:21 -08:00
srv-rr-gh-researchbt bcf9eae237 Branch was auto-updated. 2023-02-06 16:12:19 -08:00
Michael Haag c275a89ab1 experimental 2023-02-06 11:35:04 -07:00
pyth0n1c 60ea283f53 Moving failing tests to experimental 2023-02-02 16:32:24 -08:00
dluxtron 02c5a89aef Updating DCSync and Dcshadow Detections, adding another SID History detection, renames and updates 2022-11-17 17:48:02 +10:00
srv-rr-gh-researchbt 79a06825b3 Branch was auto-updated. 2022-11-08 13:29:24 -08:00
mvelazco b8d9c4c6fd moving detection to experimental 2022-11-04 13:48:00 -04:00
srv-rr-gh-researchbt 96f05011e7 Branch was auto-updated. 2022-11-02 10:18:26 -07:00
pyth0n1c 4351d385d0 Moved detection and test files from production to experimental 2022-11-02 10:02:17 -07:00
pyth0n1c 98695e754b Changed from XmlWinEventLog 
to xmlwineventlog
 2022-09-21 11:48:11 -07:00
dluxtron dee4f1b672 Updating Analytic Story 2022-09-21 09:09:34 +10:00
dluxtron eaa4ab9265 Adding Privileged User SID History Detection 2022-09-12 18:27:57 +10:00
dluxtron 81f64410c7 Adding SID History Abuse Detection 2022-09-09 10:08:35 +10:00
pyth0n1c 6554d4a42b Moved ssa___ test file from the tests/network directory to the tests/experimental/endpoint directory because that's where the corresponding detection resides. 2022-06-21 13:59:50 -07:00
tccontre 1106c798a3 cyclopsblink_fix 2022-04-29 17:47:59 +02:00
pyth0n1c 9710f9888e Renamed two test files whose detection files are in the experimental detection folder. Since the new branch looks for an fails on these, we fix them here. 2022-03-23 13:40:31 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
P4T12ICK 5b581bc959 added validation 2022-02-28 14:16:23 +01:00
Xiao Lin ee2ee98742 remove duplicate 2022-02-09 16:44:17 -08:00
Xiao Lin 4c5f48c507 add detection for unusal volume of data download 2022-02-09 16:40:45 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
P4T12ICK 5fbff3630e merged with develop 2022-02-07 14:55:34 +01:00
P4T12ICK 32798f21ab old test file format 2022-02-07 10:50:32 +01:00
P4T12ICK 228cc28a3b after changing test file format 2022-01-27 16:12:01 +01:00
patel-bhavin cca42c0009 moving to expermental 2022-01-24 15:31:15 -08:00
pyth0n1c 97c83a1864 Created Experimental folder in tests, 
as well as cloud, endpoint, and network 
subfolders, and moved some tests into it.
This corresponds with the experimental 
folder in detections.
 2021-11-30 09:47:01 -08:00