admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,644 Commits 697 Branches 195 Tags
80fee4b9b9be4c110f10cf8b93f4e6d30f147efd
Commit Graph

989 Commits

Author SHA1 Message Date
Bhavin Patel e2868a78b0 Merge branch 'develop' into nterl0k-t1213.002-sus-sharepoint-search 2025-02-05 15:31:38 -08:00
Bhavin Patel d46de4f487 Merge branch 'develop' into nterl0k-t1110-mfasweep-detection 2025-02-05 11:59:44 -08:00
research-bot 76a9a02c9e updating versions 2025-02-05 10:49:03 -08:00
Steven Dick d11d2df008 Update o365_sharepoint_suspicious_search_behavior.yml 2025-02-02 12:59:26 -05:00
Steven Dick 816bffa538 Merge branch 'splunk:develop' into nterl0k-t1110-mfasweep-detection 2025-02-02 12:57:39 -05:00
Steven Dick 35590471bc Merge branch 'splunk:develop' into nterl0k-t1213.002-sus-sharepoint-search 2025-02-02 12:55:32 -05:00
Steven Dick 97b27a672f Update o365_sharepoint_suspicious_search_behavior.yml 
update to v5 yaml spec / update search yaml for better readability / remove single quote in SPL issues
 2025-02-02 12:52:02 -05:00
Steven Dick fab070785c Update o365_multiple_os_vendors_authenticating_from_user.yml 
update to new yaml spec / update search yaml for better readability / remove single quote in SPL issues
 2025-02-02 12:43:45 -05:00
research-bot 6c3e7df1ad notable to finding 2 2025-01-24 17:03:47 -08:00
research-bot 217666c5d1 all but one fixes 2025-01-23 09:56:40 -08:00
ljstella ef2ac2a45f Removal of fields from new detections 2025-01-15 15:17:50 -06:00
Bhavin Patel 9ee2e1de7d Branch was auto-updated. 2025-01-15 13:05:43 -08:00
ljstella 70861d2d57 More migrations: AWS, Azure, O365 2025-01-15 15:05:18 -06:00
Lou Stella 1d086b4a2b Merge branch 'rba_migration' into strict_yml_from_rba 2025-01-15 14:16:35 -06:00
Lou Stella 9c5b3aadd0 Merge branch 'develop' into rba_migration 2025-01-15 14:12:36 -06:00
Patrick Bareiss a7d061c5a1 Add ASL AWS CloudTrail data source 2025-01-15 14:07:43 -06:00
research-bot 2b637650a8 minor udpates to yaml 2025-01-15 14:06:09 -06:00
Patrick Bareiss 633655df4c improvements 2025-01-15 14:06:09 -06:00
Patrick Bareiss 37ec540937 change 2025-01-15 14:06:09 -06:00
Patrick Bareiss 8e0b643626 new detections 2025-01-15 14:06:09 -06:00
Patrick Bareiss 22e401ab90 new detection 2025-01-15 14:06:09 -06:00
Patrick Bareiss e937232ec9 bug fix 2025-01-15 14:06:09 -06:00
Patrick Bareiss 378645172f new detection 2025-01-15 14:06:09 -06:00
Patrick Bareiss 2f0c371d9b new detection 2025-01-15 14:01:34 -06:00
Patrick Bareiss 253c463df1 bug fix 2025-01-15 14:01:34 -06:00
Patrick Bareiss bde1c9da1d new detection 2025-01-15 14:01:34 -06:00
Patrick Bareiss d7b526d175 new detection 2025-01-15 14:01:34 -06:00
Patrick Bareiss 009ca3bc7b bug fix 2025-01-15 14:01:34 -06:00
Patrick Bareiss b3a7ff347a bug fix 2025-01-15 14:01:34 -06:00
Patrick Bareiss d3b40ac4ec bug fix 2025-01-15 14:01:34 -06:00
Patrick Bareiss d3e1be0abe updates 2025-01-15 14:01:34 -06:00
Patrick Bareiss 7d061fa22b bug fix improvements 2025-01-15 14:00:58 -06:00
Patrick Bareiss 39f28ef0da bug fix 2025-01-15 14:00:58 -06:00
Patrick Bareiss a304f4134d bug fix 2025-01-15 14:00:57 -06:00
Patrick Bareiss 5ae468d627 bug fix 2025-01-15 14:00:57 -06:00
Patrick Bareiss a6390447f0 bug fix 2025-01-15 14:00:57 -06:00
Patrick Bareiss 8921fd95f1 bug fix 2025-01-15 14:00:57 -06:00
Patrick Bareiss ebca30164d new asl aws detections 2025-01-15 14:00:57 -06:00
Patrick Bareiss 22c3c2dc08 bug fixes 2025-01-15 13:57:30 -06:00
Patrick Bareiss f727062aa9 bug fixes 2025-01-15 13:56:19 -06:00
Patrick Bareiss 56074f2ea4 Improved ASL AWS detections 2025-01-15 13:55:16 -06:00
research-bot 437368d3ab updating data sources 2025-01-15 13:53:20 -06:00
Bhavin Patel e013fd8c76 Update o365_service_principal_privilege_escalation.yml 2025-01-15 13:53:20 -06:00
research-bot e06b07f793 udpating SPL 2025-01-15 13:53:20 -06:00
research-bot dc1672d901 updating risk 2025-01-15 13:53:20 -06:00
research-bot 71e6dd7c7a fixing up yamls for testing 2025-01-15 13:53:20 -06:00
dluxtron 0282aff10b fixing syntax & updating macro 2025-01-15 13:53:19 -06:00
dluxtron 5ba40b34df Adding intune detections & updating dataset links 2025-01-15 13:53:19 -06:00
dluxtron 4761a49d0c Uploading new detections 2025-01-15 13:53:19 -06:00
dluxtron a0a7dc4efd Uploading new detections 2025-01-15 13:53:19 -06:00