Commit Graph

15855 Commits

Author SHA1 Message Date
pyth0n1c 7c2047e2cf Unbalanced quote - fixed 2022-06-07 13:05:05 -07:00
pyth0n1c 9191057b1b Changed to use a special host field
to denote the source of all the data
sets that we upload.  This means that
we don't need hacks to get around
waiting for all of the data to finish
indexing.
2022-06-07 12:55:54 -07:00
pyth0n1c aca19c102b Forgot to include return type from function 2022-06-06 17:15:08 -07:00
pyth0n1c 8212e22bcb Forgot to include a break on
the forced timeout
2022-06-06 17:03:59 -07:00
pyth0n1c 7a18850877 Forcing a timeout... certain indexes
may continue growing and never have
the same number of events!
2022-06-06 16:53:15 -07:00
pyth0n1c d3da287905 Added support for specifying a custom index
to delete after a test in each attack_data
dataset in the test file.  It is important to
have this level of control (per-dataset), not
just per test or per-file!
2022-06-06 16:08:06 -07:00
research bot 0fc379cbb3 updating docs and package bits [ci skip] 2022-06-06 21:13:55 +00:00
Lou Stella 15082f2c8a Merge pull request #2239 from splunk/user_enum_fix
Updated macro to not rely on field extraction
v3.42.0
2022-06-06 15:30:20 -05:00
pyth0n1c c2e2ed3f26 Branch was auto-updated. 2022-06-06 13:09:27 -07:00
Bhavin Patel 17846cfafe Merge pull request #2238 from splunk/atlas
Fluent in Confluence
2022-06-06 13:09:06 -07:00
Lou Stella 607b7a1e37 Updated macro to not rely on field extraction 2022-06-06 14:55:56 -05:00
Bhavin Patel 6b84ec3bf3 Update confluence_unauthenticated_remote_code_execution_cve_2022_26134.yml 2022-06-06 12:48:32 -07:00
mhaag-spl e28a396af4 cve fix2 2022-06-06 11:46:49 -06:00
Michael Haag 9f2943793d fixed cve number 2022-06-06 11:45:12 -06:00
mhaag-spl 6d56a43435 Update confluence_unauthenticated_remote_code_execution_cve_2022_26314.yml 2022-06-06 07:46:17 -06:00
mhaag-spl 3891cbcd0f Update confluence_unauthenticated_remote_code_execution_cve_2022_26314.yml 2022-06-04 16:56:27 -06:00
mhaag-spl 05cd8a648d Update java_writing_jsp_file.yml 2022-06-03 21:35:48 -06:00
mhaag-spl a28de38199 tags 2022-06-03 21:34:38 -06:00
mhaag-spl 5b46edc201 Fluent in Confluence 2022-06-03 21:29:00 -06:00
mvelazco 6fbbd8e1df Merge pull request #2236 from splunk/detection-fix-due-to-splunk-time
detection-fix-due-to-splunk-time
2022-06-03 11:18:35 -04:00
tccontre ad992a4d88 Update excessive_usage_of_nslookup_app.yml 2022-06-03 16:33:18 +02:00
tccontre 136a3a1b92 detection-fix-due-to-splunk-time 2022-06-03 16:30:32 +02:00
tccontre 6dddbfaee8 detection-fix-due-to-splunk-time 2022-06-03 12:55:23 +02:00
Michael Haag 5a4606c746 Merge pull request #2225 from splunk/follina_path_traversal_update
follina_path_traversal_update
2022-06-01 16:31:03 -06:00
Michael Haag f6dda32dd2 Update windows_command_and_scripting_interpreter_hunting_path_traversal.yml 2022-06-01 15:38:29 -06:00
pyth0n1c 8d061726a9 Branch was auto-updated. 2022-06-01 14:34:26 -07:00
Bhavin Patel cf78c7db84 Merge pull request #2227 from splunk/fellows
Follina Update
2022-06-01 14:34:05 -07:00
Michael Haag 58cb36ab2c Update windows_command_and_scripting_interpreter_hunting_path_traversal.yml 2022-06-01 15:21:08 -06:00
Michael Haag 11ab1d104b text 2022-06-01 15:20:15 -06:00
pyth0n1c b19550f6c0 Branch was auto-updated. 2022-06-01 13:10:06 -07:00
pyth0n1c 70d62d683f Branch was auto-updated. 2022-06-01 13:10:05 -07:00
mvelazco 5eb91f7deb Merge pull request #2229 from splunk/sysmon_unload
update dataset for Unload Sysmon Filter Driver
2022-06-01 16:09:42 -04:00
patel-bhavin 779ecc5847 typo 2022-06-01 12:37:43 -07:00
patel-bhavin f4237cac86 updating datasets after sim 2022-06-01 12:34:48 -07:00
mhaag-spl 95fd4d85d0 Update windows_execute_arbitrary_commands_with_msdt.yml 2022-06-01 11:31:30 -06:00
mhaag-spl f05d4e2df9 Update windows_execute_arbitrary_commands_with_msdt.yml 2022-06-01 08:36:13 -06:00
tccontre da7c18f234 Update windows_command_and_scripting_interpreter_hunting_path_traversal.yml 2022-06-01 16:28:03 +02:00
tccontre 223f4b73ba follina_path_traversal_update 2022-06-01 16:14:46 +02:00
tccontre e6a9d082b0 follina_path_traversal_update 2022-06-01 09:48:17 +02:00
research bot aa490411d4 updating docs and package bits [ci skip] 2022-05-31 18:14:42 +00:00
Bhavin Patel 9fe8a091d5 Merge pull request #2222 from splunk/follina
Falling for Follina
v3.41.0
2022-05-31 10:38:01 -07:00
pyth0n1c 588c301d84 Branch was auto-updated. 2022-05-31 10:32:07 -07:00
Bhavin Patel b8583ba28b Merge pull request #2223 from splunk/path_traversal
path_traversal
2022-05-31 10:31:44 -07:00
pyth0n1c f04e870bab Branch was auto-updated. 2022-05-31 10:27:35 -07:00
pyth0n1c 20fd18c46c Branch was auto-updated. 2022-05-31 10:27:34 -07:00
Jose Enrique Hernandez 22905c89c0 Merge pull request #2224 from splunk/fix_issue_2215
fix issue 2215
2022-05-31 13:27:10 -04:00
Michael Haag 376d1f2943 filter note 2022-05-31 11:12:24 -06:00
Bhavin Patel b1c1c43a01 Update windows_command_and_scripting_interpreter_path_traversal_exec.yml 2022-05-31 10:10:07 -07:00
pyth0n1c 1a320af983 Branch was auto-updated. 2022-05-31 10:07:41 -07:00
pyth0n1c 30faa736ff Branch was auto-updated. 2022-05-31 10:07:40 -07:00