admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mhaag-spl b86ece00d8 Update winword_spawning_cmd.test.yml 2021-04-22 09:52:23 -06:00
mhaag-spl c00de66c2f winword cmd 2021-04-22 09:50:32 -06:00
root 57bfcdaf62 Added detection testing service results inExcessive Usage of NSLOOKUP App 2021-04-22 15:47:09 +00:00
root 9bb6de8ed2 Added detection testing service results inDNS Exfiltration Using Nslookup App 2021-04-22 15:29:40 +00:00
mhaag-spl 6973e30290 winword wsh 2021-04-22 09:23:46 -06:00
root 28a498daa7 Added detection testing service results inExcel Spawning Windows Script Host 2021-04-22 14:01:17 +00:00
tcontreras 6ed8a29e4e fix_error 2021-04-22 15:48:54 +02:00
mhaag-spl 5f85f5e7e9 Excel WSH 2021-04-22 07:38:08 -06:00
tcontreras 162b9f0cc3 net_exfil 2021-04-22 15:37:09 +02:00
divious1 a8a69a97a5 renaming product to new name 2021-04-21 18:23:09 -04:00
Michael Haag 62473d7fb1 Update multiple_users_failing_to_authenticate_from_host_using_kerberos.yml 2021-04-21 15:04:57 -06:00
Michael Haag e40721c648 Update multiple_disabled_users_failing_to_authenticate_from_host_using_kerberos.yml 2021-04-21 15:04:01 -06:00
mvelazco 0ae6b31e32 Merge branch 'develop' into password_spraying_TR-515 2021-04-21 13:56:43 -07:00
mvelazco 4647b51f9c Fixing yaml issues 2021-04-21 16:54:55 -04:00
mvelazco 21d2a14ece adding required fields 2021-04-21 16:17:06 -04:00
mvelazco 9782bf5029 removing detection with no dataset 2021-04-21 16:10:29 -04:00
mvelazco 6bfafdd4a5 removing unused filepath 2021-04-21 16:07:26 -04:00
mvelazco 35525253a4 file and detection name updates 2021-04-21 16:04:12 -04:00
divious1 2d5ea36b0f upgrading detection to avoid FPs and also added bodies 2021-04-21 15:54:11 -04:00
root c0835e27c4 Added detection testing service results inExcel Spawning PowerShell 2021-04-21 19:42:18 +00:00
mhaag-spl 93bde1ecea Update excel_spawning_powershell.yml 2021-04-21 13:13:37 -06:00
mhaag-spl 59b1f289d7 Excel posh 2021-04-21 13:11:40 -06:00
root 94df7ff665 Added detection testing service results inDLLHost with no Command Line Arguments with Network 2021-04-21 18:14:25 +00:00
Detection Testing Service 9bce42d494 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-21 17:56:42 +00:00
root b6ad8f0efb Added detection testing service results inWinword Spawning PowerShell 2021-04-21 17:56:41 +00:00
mhaag-spl ae87327c98 dllhost test again 2021-04-21 11:55:18 -06:00
mhaag-spl 5d51234dec Update winword_spawning_powershell.yml 2021-04-21 11:34:42 -06:00
github-actions[bot] d5b4f28efa Branch was auto-updated. 2021-04-21 17:31:38 +00:00
github-actions[bot] 203a1edb93 Branch was auto-updated. 2021-04-21 17:31:37 +00:00
github-actions[bot] 7bde465bcb Branch was auto-updated. 2021-04-21 17:31:37 +00:00
github-actions[bot] 247d91a61c Branch was auto-updated. 2021-04-21 17:31:35 +00:00
github-actions[bot] 28566a1b9c Branch was auto-updated. 2021-04-21 17:31:34 +00:00
github-actions[bot] c31021ee24 Branch was auto-updated. 2021-04-21 17:31:33 +00:00
github-actions[bot] 0ea2f2b110 Branch was auto-updated. 2021-04-21 17:31:32 +00:00
Jose Enrique Hernandez 5e2985a899 Merge pull request #1340 from splunk/TR-542_move_to_deprecated 
moved detection ssa___rare_parent_process_relationship_lolbas to depr…
 2021-04-21 13:31:15 -04:00
mhaag-spl a22e361f72 Update dllhost_with_no_command_line_arguments_with_network.test.yml 2021-04-21 11:19:30 -06:00
divious1 5c5139cf5a moved detection ssa___rare_parent_process_relationship_lolbas to deprecated 2021-04-21 13:17:07 -04:00
mhaag-spl a386c06827 Update winword_spawning_powershell.test.yml 2021-04-21 10:55:51 -06:00
mhaag-spl 86a0a2e117 Winword spawning powershell 2021-04-21 10:52:23 -06:00
mhaag-spl c2306af1c2 Update searchprotocolhost_with_no_command_line_with_network.yml 2021-04-21 10:51:30 -06:00
mhaag-spl dc319b6eda Spearphishing Attachments detections 2021-04-21 10:16:49 -06:00
mhaag-spl e040c8bc04 rename phishing payloads to spearphishing attachments 2021-04-21 10:04:40 -06:00
github-actions[bot] 76d2d207b0 Branch was auto-updated. 2021-04-21 08:48:47 +00:00
github-actions[bot] 375bea5164 Branch was auto-updated. 2021-04-21 08:48:46 +00:00
github-actions[bot] d3556b634e Branch was auto-updated. 2021-04-21 08:48:46 +00:00
github-actions[bot] b7079f3555 Branch was auto-updated. 2021-04-21 08:48:44 +00:00
github-actions[bot] e6fd51e255 Branch was auto-updated. 2021-04-21 08:48:43 +00:00
github-actions[bot] 3b00708960 Branch was auto-updated. 2021-04-21 08:48:43 +00:00
github-actions[bot] 7b5c265ff4 Branch was auto-updated. 2021-04-21 08:48:41 +00:00
P4T12ICK cd9f4413c1 Merge pull request #1331 from splunk/sphear_attach 
spear_detections
 2021-04-21 10:48:24 +02:00