admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
26,825 Commits 697 Branches 195 Tags
7fdcb4e7e034caf779aceef03a15380c65f0bc0f
Commit Graph

4 Commits

Author SHA1 Message Date
Bhavin Patel e6db474205 two new Mike detection fixes 2025-04-01 14:51:22 -07:00
Michael Haag 452378b283 fixor 2025-04-01 14:37:35 -06:00
Michael Haag 5b072d20cd Jesse Hunter Added 
Added Jesse Hunter
 2025-03-24 12:46:57 -06:00
Michael Haag 4ae8de7c58 Clear and Present Haag-er 
Adds new detections and story for ZDI-CAN-25373 Windows shortcut zero-day vulnerability:
- Windows SSH ProxyCommand abuse detection
- Windows Explorer LNK exploit with padding detection
- Windows Explorer spawning PowerShell/CMD detection
- Analytic story covering APT campaigns exploiting this vulnerability

Thank you to AJ and Hunter (Community) for the assist!
 2025-03-24 12:31:32 -06:00