admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
muralith-xilinx ec2bca0265 Create or delete windows shares using net.exe 
We are proposing to use AND intead of OR, we have tested this in our environment.
 2020-03-03 14:28:01 +05:30
bpatel 225af8df7a search updated: 2020-03-02 17:39:56 -08:00
bpatel b74e540486 spec update for security domain 2020-03-02 15:45:55 -08:00
dependabot-preview[bot] 29e8935d74 Merge pull request #390 from splunk/dependabot/pip/importlib-resources-1.2.0 2020-03-02 23:38:34 +00:00
dependabot-preview[bot] c2ffddb625 Bump importlib-resources from 1.1.0 to 1.2.0 
Bumps [importlib-resources](http://importlib-resources.readthedocs.io/) from 1.1.0 to 1.2.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-03-02 23:33:55 +00:00
bpatel c40a88ad66 spl update to use parent_process_name 2020-03-02 14:10:10 -08:00
bpatel f3a0b8c982 removing status field from spl 2020-03-02 14:05:04 -08:00
bpatel af223584d9 adding escape chars 2020-03-02 13:52:06 -08:00
bpatel 8c39a521c2 updating spl with escape and better output 2020-03-02 13:44:53 -08:00
bpatel 5199a94b31 updating instructions for better clarification 2020-03-02 13:18:54 -08:00
bpatel 30ff1dcca8 removing status from spl 2020-03-02 13:01:26 -08:00
bpatel f70edf9183 adding dest to the search syntax 2020-03-02 12:42:26 -08:00
research bot 7c4258999a updating docs and package bits [ci skip] 2020-03-02 18:43:38 +00:00
Bhavin Patel b1fbcc0fbb Merge pull request #381 from splunk/container_bug 
updated manifests for container implantation
v1.0.51 		2020-03-02 10:31:19 -08:00
bpatel 7c53ce10bc updated manifests 2020-03-02 10:25:28 -08:00
dependabot-preview[bot] 9ae38891df Merge pull request #380 from splunk/dependabot/pip/importlib-resources-1.1.0 2020-03-01 00:21:37 +00:00
dependabot-preview[bot] bea977f2c5 Bump importlib-resources from 1.0.2 to 1.1.0 
Bumps [importlib-resources](http://importlib-resources.readthedocs.io/) from 1.0.2 to 1.1.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-03-01 00:16:46 +00:00
Bhavin Patel d6bc8f3660 Merge pull request #379 from splunk/develop 
Release v1.0.51
 2020-02-28 20:56:33 +01:00
rvaldez617 826e8c1f1c Update credential_dumping.yml 
Bumped story version due to new search added by Patrick
 2020-02-28 11:41:11 -07:00
rvaldez617 240e15d67e Update access_lsass_memory_for_dump_creation.yml 
bumped version due to update to search
 2020-02-28 11:40:27 -07:00
research bot 751a3e4e8e updating docs and package bits [ci skip] 2020-02-27 23:38:48 +00:00
Jose Enrique Hernandez 637fdf3c11 Merge pull request #372 from splunk/container_implantation 
Container implantation
 2020-02-27 15:31:47 -08:00
divious1 cfec1a0dad fixing story error 2020-02-27 15:24:26 -08:00
divious1 b2c0c6593f fixing references fix 2020-02-27 15:23:08 -08:00
Patrick Bareiss 42103847a8 bug fix 2020-02-27 15:20:46 -08:00
Patrick Bareiss 8e0a955a02 bug fix 2020-02-27 15:17:48 -08:00
Patrick Bareiss b7bb8f2159 Merge branch 'container_implantation' of https://github.com/splunk/security-content into container_implantation 2020-02-27 15:14:38 -08:00
Patrick Bareiss 43effcde02 bug fix 2020-02-27 15:14:24 -08:00
divious1 e3d6b11ac3 updating spec version 2020-02-27 14:43:00 -08:00
Rod Soto 9d12936e2d fixedstory 2020-02-27 17:22:03 -05:00
Rod Soto 187a00cd71 addedmacros 2020-02-27 17:09:50 -05:00
Rod Soto f460b5f354 addedmacros 2020-02-27 17:00:32 -05:00
divious1 1254634518 fixing pieces missing from manifests 2020-02-26 11:46:08 -08:00
Bhavin Patel 42d5aaac20 Merge pull request #368 from splunk/CRL-1740-Dump-LSASS-via-comsvcs-DLL 
new credential dumping detection
 2020-02-26 15:01:18 +05:30
Bhavin Patel 09296c320e Merge pull request #376 from muralith-xilinx/patch-2 
Update access_lsass_memory_for_dump_creation.yml
 2020-02-26 14:49:46 +05:30
muralith-xilinx 1b43224559 Update access_lsass_memory_for_dump_creation.yml 
OR CallTrace=dbghelp.dll " added this dll to search for Windows 7 machines. reference pages https://blog.menasec.net/2019/02/threat-hunting-21-procdump-or-taskmgr.html
 2020-02-26 12:19:59 +05:30
Rod Soto 74019d05c1 fixeddatasourceerror 2020-02-25 14:08:29 -05:00
Bhavin Patel 79ee7eec75 Merge pull request #364 from splunk/CRL-1699-maintainer-typo 
Fix company and email fields in maintainer list in doc-gen.py
 2020-02-25 19:12:45 +05:30
dependabot-preview[bot] c2bec11d6d Merge pull request #373 from splunk/dependabot/pip/cfgv-3.1.0 2020-02-25 00:10:07 +00:00
dependabot-preview[bot] e6032ae682 Bump cfgv from 3.0.0 to 3.1.0 
Bumps [cfgv](https://github.com/asottile/cfgv) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/asottile/cfgv/releases)
- [Commits](https://github.com/asottile/cfgv/compare/v3.0.0...v3.1.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-25 00:05:15 +00:00
Rod Soto c94c334a0e fixedinvestigationcontainer 2020-02-24 13:46:34 -05:00
Rod Soto ff33a680a4 fixed detections 2020-02-24 12:49:50 -05:00
dependabot-preview[bot] 7753eae038 Merge pull request #371 from splunk/dependabot/pip/pre-commit-2.1.1 2020-02-24 17:22:58 +00:00
dependabot-preview[bot] 8da0d562ed Bump pre-commit from 2.1.0 to 2.1.1 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.1.0...v2.1.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-24 17:18:07 +00:00
Rod Soto 2e12da82b9 fixa 2020-02-21 12:14:50 -05:00
dependabot-preview[bot] 0c71b1fa76 Merge pull request #369 from splunk/dependabot/pip/virtualenv-20.0.5 2020-02-21 16:59:35 +00:00
dependabot-preview[bot] 7eef2a6392 Bump virtualenv from 20.0.4 to 20.0.5 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.4 to 20.0.5.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.4...20.0.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-21 16:53:42 +00:00
Patrick Bareiss ef1b56f9ae new credentia dumping detection 2020-02-21 09:03:15 +01:00
Rod Soto 4aa2e28e80 fixedyml 2020-02-20 20:41:26 -05:00
Rod Soto c2a2060c98 story_container 2020-02-20 18:17:54 -05:00