admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
root 61fa09ff42 Added detection testing service results inRansomware Notes bulk creation 2021-03-22 15:01:00 +00:00
tcontreras ab216fbfe8 rebase 2021-03-22 15:39:57 +01:00
tcontreras 7c09935e1e clop_detections 2021-03-22 14:22:08 +01:00
root 3657fc8ea7 Added detection testing service results inDetect Exchange Web Shell, ProxyLogon 2021-03-22 12:54:27 +00:00
root 7412098442 Added detection testing service results inClop Common Exec Parameter 2021-03-22 12:36:11 +00:00
mhaag-spl 5f1b737ace Update detect_exchange_web_shell.yml 2021-03-22 06:27:06 -06:00
tcontreras 6fa9ea2c0b clop_detections 2021-03-22 12:05:41 +01:00
tcontreras 08a0b64eb6 clop_test_file 2021-03-22 11:57:42 +01:00
tcontreras ba33452139 clop_test_file 2021-03-22 11:53:18 +01:00
tcontreras b42ef50322 clop_test_file 2021-03-22 11:45:21 +01:00
tcontreras ba2835963d modify-detections 2021-03-22 11:07:01 +01:00
P4T12ICK 5fc3209293 SSA detection tests updated 2021-03-22 09:22:44 +01:00
Daniel Pauler 7a9f57dbfc Updated jsonschema validation 2021-03-20 17:22:42 +01:00
Daniel Pauler 70e25e225a Updated jsonschema validation 2021-03-20 17:18:43 +01:00
Daniel Pauler a48e0fcdbb Fixed error handling 2021-03-20 17:09:48 +01:00
Daniel Pauler 3029ba2dad Added vscode config folder 2021-03-20 17:07:35 +01:00
Ignacio Bermudez Corrales d47e5c395e Dealing with yaml and yml for testing 2021-03-19 16:45:05 -07:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00
Ignacio Bermudez Corrales 548f768ff3 refactoring base tests 2021-03-19 15:10:06 -07:00
Ignacio Bermudez Corrales 593ae74fdf Refactoring template replacement 2021-03-19 14:51:53 -07:00
Ignacio Bermudez Corrales 0ec2001838 Renaming test .yaml -> .yml | No events should come out of the detection 2021-03-19 13:52:34 -07:00
divious1 6bf8b82877 added write to null 2021-03-19 14:08:26 -04:00
divious1 066b81e6ef moved out of deprecated 2021-03-19 13:59:56 -04:00
divious1 63aad3ee43 deprecating detection 2021-03-19 13:58:48 -04:00
tcontreras b63e3c8177 detections and test data 2021-03-19 17:03:57 +01:00
P4T12ICK 75e9a8c2fb new detection test 2021-03-19 16:56:29 +01:00
P4T12ICK 783a144cd7 new detection test 2021-03-19 16:54:10 +01:00
tcontreras 6c9a05af36 Merge branch 'develop' of https://github.com/splunk/security_content into develop 2021-03-19 16:53:02 +01:00
P4T12ICK c23ae177ae new detection test 2021-03-19 16:22:06 +01:00
P4T12ICK 7bad2fa975 new detection tests 2021-03-19 15:10:26 +01:00
P4T12ICK a3a6f2234f small change 2021-03-19 14:38:00 +01:00
github-actions[bot] 886b876e73 Branch was auto-updated. 2021-03-19 13:24:19 +00:00
github-actions[bot] cf44d1ac60 Branch was auto-updated. 2021-03-19 13:24:18 +00:00
Michael Haag 72f8a6f88a Merge pull request #1281 from splunk/ssa_detection_testing 
Ssa detection testing
 2021-03-19 07:23:58 -06:00
P4T12ICK 805f2baea8 small bug fixes 2021-03-19 13:43:37 +01:00
mhaag-spl 00965fbd34 Delete detect_exchange_web_shell.yml 2021-03-19 06:41:51 -06:00
P4T12ICK 6355bb7f72 small bug fixes 2021-03-19 13:30:13 +01:00
mhaag-spl a912985629 Update detect_exchange_web_shell.yml 2021-03-19 06:27:24 -06:00
P4T12ICK 36f63418f0 detection testing SSA 2021-03-19 10:16:58 +01:00
P4T12ICK d13a1896ef detection testing SSA 2021-03-19 09:37:18 +01:00
Michael Haag b59430ab5d Merge branch 'develop' into mhaag 2021-03-18 21:24:34 -06:00
mhaag-spl 1a15d623cf Update detect_exchange_web_shell.yml 
UID
 2021-03-18 21:06:38 -06:00
mhaag-spl 34e69271f3 Updated Detect Exchange Web Shell 
Updated Detect Exchange Web Shell based on data
 2021-03-18 21:00:09 -06:00
divious1 978e67817f updating to remove type and also updated circleci 2021-03-18 22:39:08 -04:00
Detection Testing Service f68299b365 Merge branch 'aws_priv_escalation' of https://github.com/splunk/security_content into aws_priv_escalation 2021-03-19 00:27:16 +00:00
root 52e2b6f0ae Added detection testing service results inAWS CreateLoginProfile 2021-03-19 00:27:15 +00:00
Detection Testing Service 7ae972a31d Merge branch 'aws_priv_escalation' of https://github.com/splunk/security_content into aws_priv_escalation 2021-03-19 00:11:45 +00:00
root 8571958958 Added detection testing service results inAWS UpdateLoginProfile 2021-03-19 00:11:44 +00:00
bpatel 1342a1ddb3 updating search 2021-03-18 17:09:36 -07:00
bpatel d8a8c48755 Merge branch 'aws_priv_escalation' of github.com:splunk/security_content into aws_priv_escalation 2021-03-18 16:05:45 -07:00