admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

65 Commits

Author SHA1 Message Date
tccontre 197e73cd61 de 2021-06-15 15:51:08 +02:00
tccontre 9e009e50b7 data_exfil 2021-06-15 15:36:41 +02:00
research bot 2d61b8e675 updating docs and package bits [ci skip] 2021-05-24 17:47:29 +00:00
tccontre 0249f2ce27 fix_validate 2021-05-18 10:47:53 +02:00
research bot 1aeb0a9f6a updating docs and package bits [ci skip] 2021-04-29 21:32:44 +00:00
Michael Haag 80904c3093 Update plain_http_post_exfiltrated_data.yml 2021-04-23 11:48:49 -06:00
Michael Haag 84e775e972 Update multiple_archive_files_http_post_traffic.yml 2021-04-23 11:44:45 -06:00
root bd66b44311 Added detection testing service results inMultiple Archive Files Http Post Traffic 2021-04-23 15:06:39 +00:00
root 7e31007e97 Added detection testing service results inPlain HTTP POST Exfiltrated Data 2021-04-23 14:49:36 +00:00
tcontreras 6ed8a29e4e fix_error 2021-04-22 15:48:54 +02:00
tcontreras 162b9f0cc3 net_exfil 2021-04-22 15:37:09 +02:00
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
P4T12ICK 6e826b4e68 add required fields and check 2021-03-11 09:11:48 +01:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
mhaag-spl a6265b60df Moving Tor Traffic to Experimental 2021-03-10 11:47:34 -07:00
P4T12ICK df31ce2246 WIP 2021-03-10 15:22:35 +01:00
P4T12ICK c1c1d1733e WIP 2021-03-10 15:22:14 +01:00
mhaag-spl 51823d81d3 Sunburst malware renamed NOBELIUM Group 
Renaming Sunburst Malware to NOBELIUM Group
 2021-03-05 10:30:34 -07:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
github-actions[bot] c88cc88d1b Branch was auto-updated. 2021-01-25 19:02:14 +00:00
David Dorsey 88c9469541 More language clean up 2021-01-22 09:37:51 -06:00
David Dorsey fd76342c94 Changed the language in some of the descriptions 2021-01-21 23:53:47 -06:00
P4T12ICK 0d75faf323 new test file 2021-01-19 13:55:33 +01:00
P4T12ICK 98175156b7 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-18 15:47:15 +01:00
P4T12ICK 477221da99 detection testing 2021-01-18 15:46:53 +01:00
root a88d8291fe Added detection testing service results inDNS Query Length With High Standard Deviation 2021-01-18 14:41:53 +00:00
P4T12ICK 44bf41a678 new test file 2021-01-18 15:22:05 +01:00
P4T12ICK 27b27a5b59 detection testing branch 2021-01-18 14:10:47 +01:00
root b751d5ddb8 Added detection testing service results inDetect hosts connecting to dynamic domain providers 2021-01-14 15:15:59 +00:00
P4T12ICK c871d6804a improved detections and tests 2021-01-14 15:01:16 +01:00
github-actions[bot] 162d729fff Branch was auto-updated. 2021-01-06 20:21:46 +00:00
divious1 1e64964226 adding changes from suggestions on issue#1053 2021-01-05 14:45:35 -05:00
divious1 f5aeb32827 should be dest_mac as reported 2021-01-05 11:12:58 -05:00
Jose Enrique Hernandez 56d4471b78 Merge branch 'develop' into sunburst_detections 2020-12-17 13:01:38 -05:00
P4T12ICK 07aa33af22 Merge branch 'develop' into detection_testing_part_two 2020-12-16 15:59:31 +01:00
bpatel 7fa41599d5 adding sunburst as tags for relavant detections 2020-12-14 20:29:04 -08:00
bpatel 25c7f33866 app inspect failures fixes 2020-12-08 14:56:39 -08:00
P4T12ICK 268ba8ad21 new test file 2020-12-08 14:00:25 +01:00
P4T12ICK c277a26f14 merge conflict 2020-11-19 11:35:42 +01:00
Jose Enrique Hernandez 3c1cfbf4de Merge branch 'develop' into develop 2020-11-18 13:30:38 -05:00
P4T12ICK 9b2c2bcf28 Merge branch 'develop' into detection_testing_part_one 2020-11-16 15:38:40 +01:00
Jose Enrique Hernandez a874999185 Merge branch 'develop' into detection_testing_part_one 2020-11-12 10:16:47 -05:00
P4T12ICK 3e1b445765 Update detect_traffic_mirroring.yml 2020-11-12 11:58:04 +01:00
P4T12ICK 077de7769a Update detect_ipv6_network_infrastructure_threats.yml 2020-11-12 11:50:34 +01:00
Jose Enrique Hernandez 3e9513f4b8 Merge branch 'develop' into develop 2020-11-11 22:04:16 -05:00
Jose Enrique Hernandez 4acc8c3efb Merge branch 'develop' into mbjerkeland-develop 2020-11-11 22:03:44 -05:00