Commit Graph

10909 Commits

Author SHA1 Message Date
root 8cd4c56855 Added detection testing service results inMalicious InProcServer32 Modification 2021-10-05 21:23:41 +00:00
mhaag-spl 8181c7d15a Update malicious_inprocserver32_modification.yml 2021-10-05 15:02:46 -06:00
mhaag-spl fe02d867a9 fix 2021-10-05 14:59:00 -06:00
mhaag-spl 8daecc268c test files 2021-10-05 14:54:17 -06:00
mhaag-spl 05be27e16a fixes 2021-10-05 14:33:23 -06:00
mhaag-spl b802809a35 Tomorrow Never Haags
Malicious InProcServer32 Modification
Process Writing DynamicWrapperX
Winhlp32 Spawning a Process
2021-10-05 14:31:17 -06:00
Bhavin Patel 814ebc54e1 Merge pull request #1697 from splunk/dependabot/pip/urllib3-1.26.7
Bump urllib3 from 1.26.6 to 1.26.7
2021-10-04 16:50:20 -07:00
dependabot[bot] 9d64bc229b Bump urllib3 from 1.26.6 to 1.26.7
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.6 to 1.26.7.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.6...1.26.7)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-10-01 23:01:07 +00:00
Bhavin Patel 128e7e57ea Merge pull request #1688 from splunk/remcos_registry
Remcos registry
2021-09-30 11:11:53 -07:00
root 18c89103a9 Added detection testing service results inRemcos client registry install entry 2021-09-29 18:26:30 +00:00
patel-bhavin a3d731d5ed success on AR 2021-09-29 11:07:22 -07:00
Jose Enrique Hernandez 3f2e7007a5 Merge pull request #1689 from splunk/dependabot/bundler/docs/nokogiri-1.12.5
Bump nokogiri from 1.12.4 to 1.12.5 in /docs
2021-09-28 17:53:53 -04:00
patel-bhavin 0216feb542 trail 2021-09-28 14:31:34 -07:00
patel-bhavin d3b5b06be7 time updates 2021-09-28 11:13:40 -07:00
patel-bhavin fd2a7f0adc macro 2021-09-28 11:09:14 -07:00
patel-bhavin 1026e7430f remove macro 2021-09-28 10:49:53 -07:00
dependabot[bot] a0cd086950 Bump nokogiri from 1.12.4 to 1.12.5 in /docs
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.12.4 to 1.12.5.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.12.4...v1.12.5)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-28 06:05:29 +00:00
patel-bhavin 05702a61bf search update 2021-09-27 16:09:04 -07:00
patel-bhavin 1641e15810 yml changes 2021-09-27 15:33:28 -07:00
patel-bhavin f3e47ca555 minor 2021-09-27 14:43:28 -07:00
patel-bhavin 00cb3cd69d adding default 2021-09-27 14:04:21 -07:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
Bhavin Patel c2af0659c1 Merge pull request #1661 from splunk/fin7
FIN7
v3.29.0
2021-09-27 11:01:28 -07:00
Bhavin Patel d4f7dde390 Branch was auto-updated. 2021-09-27 10:42:01 -07:00
Bhavin Patel a1712f98a2 Merge pull request #1687 from splunk/fancy_docs
Add "fancy" jekyll docs page -> splunkresearch.com
2021-09-27 10:41:42 -07:00
divious1 f523a88557 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-27 13:36:01 -04:00
divious1 0d9c9101fc mistake 2021-09-27 13:25:52 -04:00
Bhavin Patel 9740a785b1 Branch was auto-updated. 2021-09-27 10:20:34 -07:00
Bhavin Patel ff74a1879c Branch was auto-updated. 2021-09-27 10:20:33 -07:00
Bhavin Patel a026fa9a2b Merge pull request #1672 from splunk/remcos_agent
remcos_agent
2021-09-27 10:20:14 -07:00
divious1 570829dd70 removing conflict 2021-09-27 13:16:04 -04:00
divious1 9bf6f156b4 removing conflicts 2021-09-27 13:14:01 -04:00
Bhavin Patel cb29959b97 Branch was auto-updated. 2021-09-27 10:04:27 -07:00
Bhavin Patel 170e4e1ae8 Branch was auto-updated. 2021-09-27 10:04:10 -07:00
Bhavin Patel 3f77e24974 Merge pull request #1553 from splunk/The-Haag-of-The-Storm
The Wonderful Wizard of Haag
2021-09-27 10:03:44 -07:00
d1vious 5969d9c04b Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-26 22:04:50 -04:00
d1vious 8c439d3216 point to escu package 2021-09-26 22:03:46 -04:00
Bhavin Patel 2b8d3776fe Branch was auto-updated. 2021-09-24 14:54:22 -07:00
Bhavin Patel a6bf5c2c7a Branch was auto-updated. 2021-09-24 14:54:14 -07:00
Bhavin Patel 8340e8bf00 Branch was auto-updated. 2021-09-24 14:54:13 -07:00
peter 2944cbb6fa Merge pull request #1685 from splunk/ssa_lolbas_spike
Adding some basic body info for unusual lolbas count
2021-09-24 16:53:58 -05:00
peter-cg 3512cb812c Adding some basic body info for unusual lolbas count 2021-09-24 15:23:43 -05:00
Bhavin Patel 418e7b4c4d Branch was auto-updated. 2021-09-24 11:38:41 -07:00
Bhavin Patel 68040d2072 Branch was auto-updated. 2021-09-24 11:38:40 -07:00
Bhavin Patel 159393a693 Branch was auto-updated. 2021-09-24 11:38:28 -07:00
miskoSplunk ff890647b5 Merge pull request #1637 from splunk/ssa_WIP_misko_stat_detections
Ssa wip misko stat detections
2021-09-24 11:38:08 -07:00
Stanislav Miskovic 9cc5d2a177 Fixing a problem with time being in milliseconds vs seconds - setting observation confirence interval back to 30 min 2021-09-24 11:19:38 -07:00
divious1 5c742502c4 removing detection listing 2021-09-24 13:04:17 -04:00
divious1 2021717e8a fixed bug with mitre mapping 2021-09-24 12:09:54 -04:00
Jose Enrique Hernandez 745c775ce8 Create CNAME 2021-09-24 11:49:07 -04:00