Commit Graph

1148 Commits

Author SHA1 Message Date
pyth0n1c 68af8de4fe Branch was auto-updated. 2022-01-10 17:05:26 -08:00
pyth0n1c f11db775c7 Branch was auto-updated. 2022-01-10 14:37:32 -08:00
pyth0n1c c508820126 Branch was auto-updated. 2022-01-10 14:37:31 -08:00
pyth0n1c 4bc8539d78 Branch was auto-updated. 2022-01-10 13:06:27 -08:00
pyth0n1c 4a4f99e7a9 Branch was auto-updated. 2022-01-10 13:06:26 -08:00
pyth0n1c c76e167d05 Branch was auto-updated. 2022-01-10 13:06:25 -08:00
pyth0n1c ef018cd9cb Branch was auto-updated. 2022-01-10 12:11:45 -08:00
pyth0n1c 20cfa5d7db Branch was auto-updated. 2022-01-10 12:11:37 -08:00
pyth0n1c 10e575a793 Branch was auto-updated. 2022-01-10 12:11:36 -08:00
pyth0n1c 787a5afd99 Branch was auto-updated. 2022-01-10 12:11:34 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059
The Haag at The Gates
2022-01-10 12:11:15 -08:00
tccontre 856635f601 linux_persist_priv_batch_4 2022-01-10 12:51:04 +01:00
tccontre 37185f3e0d linux_persist_priv_batch_3 2022-01-05 11:34:57 +01:00
tccontre b20d3fed32 Update linux_file_creation_in_init_boot_directory.test.yml 2022-01-03 15:43:18 +01:00
tccontre e21247f2d2 linux_persist_priv_batch_2 2021-12-23 12:31:05 +01:00
tccontre 9b3ecff018 Update linux_possible_append_command_to_at_allow_config_file.test.yml 2021-12-22 11:51:16 +01:00
tccontre 3a68d044ef Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml 2021-12-22 10:46:27 +01:00
Bhavin Patel 0ff1e78f11 Branch was auto-updated. 2021-12-21 11:22:19 -08:00
Jose Enrique Hernandez 930a6db140 Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278 2021-12-21 14:21:54 -05:00
mvelazco bb8ae58f84 adding new detection 2021-12-21 13:44:17 -05:00
tccontre fb087ea8b3 linux_persist_priv_batch_1 2021-12-21 11:02:15 +01:00
mvelazco 6fa0f9b30b adding new detection 2021-12-20 22:08:19 -05:00
mvelazco 243e60a3cc minor fix 2021-12-20 17:04:58 -05:00
mvelazco 82a4a63093 creating analytic story and first detection 2021-12-20 16:58:34 -05:00
Bhavin Patel 3eb630b220 Branch was auto-updated. 2021-12-16 12:55:22 -08:00
peter-cg 55fd63fe2f Caps fix 2021-12-16 14:53:54 -06:00
peter-cg 3aa223a948 Adding sourcetype to sysproc_unexpected_location test 2021-12-16 10:44:05 -06:00
mvelazco 3bb9712286 updating detection to use data models 2021-12-15 15:53:06 -05:00
Bhavin Patel 61d583e45e Branch was auto-updated. 2021-12-14 18:47:02 -08:00
mhaag-spl cea91f725e Create hunting_for_log4shell.test.yml 2021-12-14 19:00:04 -07:00
patel-bhavin 05b189232d ldap outbound 2021-12-14 10:10:23 -08:00
P4T12ICK 3f59f79b93 log4j 2021-12-14 18:21:58 +01:00
P4T12ICK f84b61357c Improved Proxy detection 2021-12-14 16:35:31 +01:00
d1vious 7e6cb9381b Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-14 00:54:44 -05:00
d1vious 946503dc76 added two new detections, ymls are not finished 2021-12-14 00:54:37 -05:00
mvelazco cb4d003f4e updating dataset tag 2021-12-13 16:24:39 -05:00
mvelazco 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell 2021-12-13 15:51:45 -05:00
mvelazco 2c62039a03 adding detection 2021-12-13 15:51:43 -05:00
mhaag-spl 050bc8d886 2021-12-13 13:32:27 -07:00
mhaag-spl f4de314e4e wget curl 2021-12-13 07:11:07 -07:00
Bhavin Patel c725abead9 Branch was auto-updated. 2021-12-10 10:59:31 -08:00
mhaag-spl 5e36ce1cf3 curleddd 2021-12-10 11:49:41 -07:00
Bhavin Patel 52f16666e5 Branch was auto-updated. 2021-12-10 10:49:24 -08:00
mhaag-spl 53dc410071 rcloned 4688 logs 2021-12-10 11:39:45 -07:00
Bhavin Patel 6f9decf038 Branch was auto-updated. 2021-12-09 12:59:15 -08:00
Bhavin Patel 46083ae36f Branch was auto-updated. 2021-12-09 09:06:16 -08:00
Bhavin Patel 5e42f3b78c Branch was auto-updated. 2021-12-09 09:06:08 -08:00
mhaag-spl 219ba97d2d installerfiletakeover 2021-12-08 13:44:23 -07:00
mhaag-spl cd36c6dd6f Raccine Disable 2021-12-08 13:25:21 -07:00
mhaag-spl e3a84f8f6e Defense 2021-12-08 13:07:50 -07:00