admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tccontre b15a71d6cd Merge pull request #1286 from splunk/clop_ransomware 
Clop ransomware
 2021-03-23 17:20:25 +01:00
tcontreras 48120285ba clop_lookup_entry 2021-03-23 17:00:55 +01:00
tcontreras 9e240c9530 false_positive_field_mod 2021-03-23 16:44:40 +01:00
P4T12ICK 19d96dac72 ssa detection testing 2021-03-23 15:03:18 +01:00
P4T12ICK 617ec011d6 ssa detection testing 2021-03-23 14:52:10 +01:00
tcontreras 191e42f58a clop_detection_mod 2021-03-23 14:13:33 +01:00
P4T12ICK b396890b0b testing ssa detections 2021-03-23 13:50:45 +01:00
root 526a5c7893 Added detection testing service results inHigh Process Termination Frequency 2021-03-23 12:41:38 +00:00
root 57e4a62a01 Added detection testing service results inHigh File Deletion Frequency 2021-03-23 12:18:35 +00:00
P4T12ICK e08b1ab9a9 testing ssa detections 2021-03-23 13:09:50 +01:00
root f95182fca6 Added detection testing service results inProcess Deleting Its Process File Path 2021-03-23 11:59:50 +00:00
tcontreras 3fd704cdcd Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 2021-03-23 12:29:08 +01:00
tcontreras 1696edba41 clop_detection_processid_mod 2021-03-23 12:28:54 +01:00
root 6da776bb4a Added detection testing service results inClop Ransomware Known Service Name 2021-03-23 11:04:30 +00:00
P4T12ICK 275c5a4dfb bug fix 2021-03-23 11:55:56 +01:00
tcontreras f5bfe97b81 clop_mod_detections_add_processid_comments 2021-03-23 11:33:10 +01:00
P4T12ICK fc1d74b624 bug fixes test files 2021-03-23 11:29:05 +01:00
P4T12ICK e3e4e2b512 bug fixes test files 2021-03-23 11:06:15 +01:00
tcontreras 0a8ea69864 Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 2021-03-23 10:57:23 +01:00
P4T12ICK 791b6f1126 increases max timeout limit 2021-03-23 09:50:29 +01:00
P4T12ICK 195dec5c2d Merge branch 'ssa_detection_testing' of github.com:splunk/security-content into ssa_detection_testing 2021-03-23 09:01:09 +01:00
P4T12ICK f778e43bef Merge branch 'develop' into ssa_detection_testing 2021-03-23 09:00:22 +01:00
github-actions[bot] d7b4d0f818 Branch was auto-updated. 2021-03-23 07:59:39 +00:00
github-actions[bot] bf465bd253 Branch was auto-updated. 2021-03-23 07:59:38 +00:00
github-actions[bot] 0949eb9272 Branch was auto-updated. 2021-03-23 07:59:33 +00:00
github-actions[bot] 1571523c8f Branch was auto-updated. 2021-03-23 07:59:32 +00:00
P4T12ICK 36da0cb9f5 Merge pull request #1284 from splunk/ssa_deprecate_rare_parent_process 
ssa deprecate rare parent process
 2021-03-23 08:59:14 +01:00
divious1 0d17d74d44 cleaned up custom js code and configs that are empty 2021-03-22 22:16:16 -04:00
divious1 24cad18e2f fixing requirements issues 2021-03-22 19:23:17 -04:00
divious1 3a9b4b7b4b fixing conflicts 2021-03-22 19:18:30 -04:00
divious1 cce49543b0 added logic to generate docs 2021-03-22 19:12:45 -04:00
Ignacio Bermudez Corrales adc4aa9908 tear down on any sort of error (not just assertions) 2021-03-22 16:09:20 -07:00
divious1 2a5ad289a6 added npm jsonchema2md 2021-03-22 19:02:47 -04:00
divious1 f224e3865e removing unecessary import 2021-03-22 18:02:35 -04:00
Ignacio Bermudez Corrales 1b76734dd3 check before modifications 2021-03-22 14:42:16 -07:00
Ignacio Bermudez Corrales ec2ba3450a fix check source/sink 2021-03-22 14:16:21 -07:00
Ignacio Bermudez Corrales 641fa24fb3 matching api outputs 2021-03-22 12:56:35 -07:00
Ignacio Bermudez Corrales 61d2dbb0e8 api queries return tuples 2021-03-22 12:44:49 -07:00
Ignacio Bermudez Corrales d6d02eb6fc removing index fixed 2021-03-22 11:56:08 -07:00
Ignacio Bermudez Corrales 13ab17f2d1 refactor test workflow with assertions and catch. Teardown as well 2021-03-22 11:31:49 -07:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
github-actions[bot] 445224ad9e Branch was auto-updated. 2021-03-22 17:51:50 +00:00
github-actions[bot] 3fa0fbab3b Branch was auto-updated. 2021-03-22 17:51:49 +00:00
github-actions[bot] b4c5d60a8f Branch was auto-updated. 2021-03-22 17:51:48 +00:00
Michael Haag 7c25bb12e2 Merge pull request #1279 from splunk/mhaag 
Updated Detect Exchange Web Shell
 2021-03-22 11:51:29 -06:00
root 089e2c09d1 Added detection testing service results inCreate Service In Suspicious File Path 2021-03-22 17:43:09 +00:00
root 52e5b1c6c2 Added detection testing service results inResize ShadowStorage volume 2021-03-22 17:08:42 +00:00
tcontreras 4bc91b7e60 Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 
clop_detection_svc
 2021-03-22 16:28:39 +01:00
mhaag-spl 17cbdf590c Update detect_exchange_web_shell.yml 2021-03-22 09:27:09 -06:00
tcontreras f2284c0090 clop_detection_svc 2021-03-22 16:26:31 +01:00