admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
root 285a6f9860 Added detection testing service results inDetect processes used for System Network Configuration Discovery 2020-11-10 14:26:41 +00:00
P4T12ICK 2da2082b6a new test file 2020-11-10 15:13:15 +01:00
dependabot[bot] f243ce0dc9 Bump boto3 from 1.16.13 to 1.16.14 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.13 to 1.16.14.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.13...1.16.14)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-10 14:05:09 +00:00
Stanislav Miskovic 4aa2af44d4 Fix adding a missing guid 2020-11-10 01:26:16 -08:00
Stanislav Miskovic 4dc12ac4da Fix a typo in name field 2020-11-10 01:21:39 -08:00
Stanislav Miskovic 1969d4a9ab Illegal control of compromised resources via Mimikatz, PowerSploit and DSInternals modules 2020-11-10 00:58:27 -08:00
Mikael Bjerkeland 3675fa80ad Rename 2020-11-10 09:37:33 +01:00
root 3bf9acae8c Added detection testing service results inDetect Prohibited Applications Spawning cmd exe 2020-11-10 08:35:10 +00:00
Mikael Bjerkeland 4a29a71009 Dashes in references 2020-11-10 09:30:50 +01:00
P4T12ICK 1f3f1ae408 Merge branch 'develop' into mbjerkeland-develop 2020-11-10 09:24:55 +01:00
P4T12ICK 4059b769a2 new detection test 2020-11-10 09:20:22 +01:00
P4T12ICK 70466c9301 new detection test 2020-11-10 09:02:24 +01:00
David Dorsey 941bbf9de7 Added enableSched = 1 to baseline searches 2020-11-09 22:23:43 -06:00
Ignacio Bermudez Corrales 6e14af85c6 changed image to one maintained by Splunk 2020-11-09 15:06:03 -08:00
research bot d0aa011c20 updating docs and package bits [ci skip] 2020-11-09 23:01:54 +00:00
Jose Enrique Hernandez 33561b084c Merge pull request #906 from splunk/jzsplunk-patch-1 
Update README.md
 2020-11-09 17:51:44 -05:00
Jose Enrique Hernandez 49954af581 Merge branch 'develop' into jzsplunk-patch-1 2020-11-09 17:51:36 -05:00
Jose Enrique Hernandez 2c9c0252c6 Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-09 17:51:15 -05:00
Jose Enrique Hernandez 41c3669d30 Merge branch 'develop' into dependabot/pip/certifi-2020.11.8 2020-11-09 17:50:47 -05:00
Jose Enrique Hernandez c67d2e5944 Merge pull request #899 from splunk/ryuk-story 
Ryuk story and detections
v3.0.9 		2020-11-09 17:45:04 -05:00
divious1 d73c630bb0 removed samsam notes 2020-11-09 17:38:09 -05:00
divious1 30c6fa6606 fixing minor mistakes 2020-11-09 17:32:13 -05:00
divious1 6b8b2b61ec Revert "Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story" 
This reverts commit b1db736eb2, reversing
changes made to 026bb228a0.
 2020-11-09 14:55:16 -05:00
Jose Enrique Hernandez 54eddbd393 Merge branch 'develop' into ryuktestsfiles 2020-11-09 14:12:10 -05:00
Xiao Lin d71196915e Merge branch 'TR162' of github.com:splunk/security-content into TR162 2020-11-09 19:12:07 +00:00
Xiao Lin 09c43eff66 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-09 18:10:02 +00:00
jzsplunk c1d01b4a46 Update README.md 
Fix link to community-slack channel
 2020-11-09 09:32:55 -08:00
divious1 79a9a16809 updating with upstream 2020-11-09 11:23:11 -05:00
Jose Enrique Hernandez 37dd447777 Merge pull request #884 from splunk/detection_testing_part_one 
Automated Detection Testing PR detection_testing_part_one
 2020-11-09 11:21:16 -05:00
P4T12ICK f51a8f5b10 Merge branch 'develop' into detection_testing_part_one 2020-11-09 17:16:01 +01:00
divious1 f8fc4fa95d fixing warning on comparisons 2020-11-09 11:10:10 -05:00
root 31ec8a4bc3 Added detection testing service results inDetect mshta exe running scripts in command-line arguments 2020-11-09 15:59:06 +00:00
Jose Enrique Hernandez 8c12dd3eee Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-09 10:56:44 -05:00
divious1 b1db736eb2 Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story 2020-11-09 10:55:45 -05:00
dependabot[bot] b0a9af9bdb Bump certifi from 2020.6.20 to 2020.11.8 
Bumps [certifi](https://github.com/certifi/python-certifi) from 2020.6.20 to 2020.11.8.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](https://github.com/certifi/python-certifi/compare/2020.06.20...2020.11.08)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:42:28 +00:00
dependabot[bot] 46d503405b Merge pull request #886 from splunk/dependabot/pip/ansible-2.10.3 2020-11-09 15:41:35 +00:00
P4T12ICK ca7c9c878e detection test 2020-11-09 16:41:09 +01:00
dependabot[bot] 919b7236d8 Bump ansible from 2.10.2 to 2.10.3 
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.10.2...v2.10.3)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:31:19 +00:00
Jose Enrique Hernandez 1819339f4d Merge branch 'develop' into mbjerkeland-develop 2020-11-09 10:14:28 -05:00
P4T12ICK 5a34ae63ae Merge branch 'develop' into detection_testing_part_one 2020-11-09 15:56:23 +01:00
dependabot[bot] f053664217 Merge pull request #903 from splunk/dependabot/pip/boto3-1.16.13 2020-11-09 14:38:33 +00:00
dependabot[bot] fc25eb7cb9 Bump boto3 from 1.16.11 to 1.16.13 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.11 to 1.16.13.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.11...1.16.13)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 14:05:25 +00:00
P4T12ICK 97181a2276 detection review 2020-11-09 14:36:48 +01:00
P4T12ICK cfcaa4c0e8 Merge branch 'develop' into detection_testing_part_one 2020-11-09 14:36:14 +01:00
Detection Testing Service 60dec9ea55 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 12:43:38 +00:00
root 89ede1f1f8 Added detection testing service results inDetect Excessive Account Lockouts From Endpoint 2020-11-09 12:43:35 +00:00
root a99d31c43a Added detection testing service results inDetect Excessive User Account Lockouts 2020-11-09 12:43:26 +00:00
P4T12ICK 53bc5414f9 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 13:25:41 +01:00
P4T12ICK 87a7d64d66 new tests 2020-11-09 13:25:27 +01:00
root 1e5bbadd2b Added detection testing service results inDeleting Shadow Copies 2020-11-09 09:56:18 +00:00