admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK 6a99d4b656 Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format 2020-11-04 15:44:50 +01:00
P4T12ICK 50b0900b77 testing detections 2020-11-04 15:44:02 +01:00
Detection Testing Service 56923d6b5b Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 14:40:53 +00:00
root f672f16394 Added detection testing service results inWindows Event Log Cleared 2020-11-04 14:40:52 +00:00
Detection Testing Service f109b391bd Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 14:39:27 +00:00
root e2c5a533f3 Added detection testing service results inUnload Sysmon Filter Driver 2020-11-04 14:39:25 +00:00
Detection Testing Service a36a1fc169 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 14:38:35 +00:00
root 5b7dc4049b Added detection testing service results inSystem Information Discovery Detection 2020-11-04 14:38:34 +00:00
root 9cfde6bc75 Added detection testing service results inProcess execution via wmi 2020-11-04 14:37:23 +00:00
Detection Testing Service 7fdaddbff4 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 14:09:58 +00:00
root 2bf7919b52 Added detection testing service results inShort Lived Windows Accounts 2020-11-04 14:09:57 +00:00
Detection Testing Service 0745dba18e Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 14:09:45 +00:00
root a101c1a5b1 Added detection testing service results inSchtasks scheduling job on remote system 2020-11-04 14:09:44 +00:00
Detection Testing Service 5c5eda70b2 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 14:08:39 +00:00
root 912b990e01 Added detection testing service results inSuspicious Reg exe Process 2020-11-04 14:08:38 +00:00
dependabot[bot] bbd0a2cdf1 Bump ansible from 2.10.1 to 2.10.2 
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.1 to 2.10.2.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.10.1...v2.10.2)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-04 14:03:38 +00:00
dependabot[bot] 5243cbcd24 Bump identify from 1.5.7 to 1.5.9 
Bumps [identify](https://github.com/pre-commit/identify) from 1.5.7 to 1.5.9.
- [Release notes](https://github.com/pre-commit/identify/releases)
- [Commits](https://github.com/pre-commit/identify/compare/v1.5.7...v1.5.9)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-04 14:03:36 +00:00
root 6859627fdc Added detection testing service results inMalicious PowerShell Process - Encoded Command 2020-11-04 13:58:12 +00:00
Detection Testing Service 4f5bcacd5a Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 13:08:59 +00:00
root 5d8f3f9ed4 Added detection testing service results inDump LSASS via comsvcs DLL 2020-11-04 13:08:57 +00:00
root c1ee613a59 Added detection testing service results inDetect Path Interception By Creation Of program exe 2020-11-04 13:07:50 +00:00
root 3842a15221 Added detection testing service results inCredential Dumping via Symlink to Shadow Copy 2020-11-04 12:38:04 +00:00
Detection Testing Service a7ba6afe57 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 12:12:28 +00:00
root ee9330e03f Added detection testing service results inCreation of Shadow Copy 2020-11-04 12:12:26 +00:00
root df7b7b2230 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy 2020-11-04 12:08:51 +00:00
P4T12ICK b39e0d0967 Merge pull request #869 from splunk/dependabot/pip/pre-commit-2.8.2 
Bump pre-commit from 2.7.1 to 2.8.2
 2020-11-04 12:39:02 +01:00
root f2baa5ca54 Added detection testing service results inCreation of Shadow Copy with wmic and powershell 2020-11-04 11:10:33 +00:00
P4T12ICK cfbc3fee26 Merge branch 'develop' into dependabot/pip/pre-commit-2.8.2 2020-11-04 11:06:51 +01:00
P4T12ICK 30eca709f2 Merge pull request #874 from splunk/dependabot/pip/boto3-1.16.10 
Bump boto3 from 1.16.6 to 1.16.10
 2020-11-04 11:06:36 +01:00
root 64710a93c1 Added detection testing service results inCreate local admin accounts using net exe 2020-11-04 09:16:50 +00:00
P4T12ICK 17509bd038 Merge branch 'develop' into dependabot/pip/boto3-1.16.10 2020-11-04 10:03:13 +01:00
P4T12ICK 5cf4f70611 Merge pull request #873 from splunk/dependabot_auto_merges 
adding dependabot automerge with git workflows
 2020-11-04 10:02:53 +01:00
Stanislav Miskovic 16821b72b8 Applying and setting stolen cresentials - detections via PowerSploit, Mimikatz and DSInternals APIs 2020-11-04 01:02:47 -08:00
P4T12ICK eb21bbc377 Merge branch 'develop' into dependabot_auto_merges 2020-11-04 09:41:34 +01:00
dependabot[bot] 38b2289a57 Bump pre-commit from 2.7.1 to 2.8.2 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.7.1 to 2.8.2.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.7.1...v2.8.2)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-04 08:41:06 +00:00
dependabot[bot] 193fc587be Bump boto3 from 1.16.6 to 1.16.10 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.6 to 1.16.10.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.6...1.16.10)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-04 08:40:41 +00:00
P4T12ICK e8b5dc278b Merge pull request #875 from splunk/dependabot/pip/botocore-1.19.10 
Bump botocore from 1.19.6 to 1.19.10
 2020-11-04 09:40:09 +01:00
root 3415b9e414 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe 2020-11-04 08:34:58 +00:00
P4T12ICK 7f76d43d1b Merge branch 'develop' into dependabot_auto_merges 2020-11-04 09:24:00 +01:00
P4T12ICK e71e4b338a Merge branch 'develop' into dependabot/pip/botocore-1.19.10 2020-11-04 09:21:45 +01:00
P4T12ICK 38b65d148e Merge pull request #876 from splunk/dependabot/pip/identify-1.5.7 
Bump identify from 1.5.6 to 1.5.7
 2020-11-04 09:21:28 +01:00
Xiao Lin 7e6f92e6ed Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 00:27:33 +00:00
root 0cee900ae3 Added detection testing service results inAttempt To Add Certificate To Untrusted Store 2020-11-03 16:29:27 +00:00
P4T12ICK 15d866e2fa Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format 2020-11-03 17:05:11 +01:00
P4T12ICK 15a3dfed60 detection tests 2020-11-03 17:04:53 +01:00
dependabot[bot] 8bec983392 Bump identify from 1.5.6 to 1.5.7 
Bumps [identify](https://github.com/pre-commit/identify) from 1.5.6 to 1.5.7.
- [Release notes](https://github.com/pre-commit/identify/releases)
- [Commits](https://github.com/pre-commit/identify/compare/v1.5.6...v1.5.7)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-03 14:04:40 +00:00
root 5b70b0ce9d Added detection testing service results inCreate local admin accounts using net exe 2020-11-03 12:30:01 +00:00
P4T12ICK b58799902f Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format 2020-11-03 08:58:01 +01:00
P4T12ICK ea57d72261 removed tmp.py 2020-11-03 08:57:40 +01:00
Jose Enrique Hernandez cf690c86b0 Merge branch 'develop' into new_test_file_format 2020-11-02 21:24:50 -05:00