admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mhaag-spl ecb82ec8ca Fixes 2021-03-01 06:52:02 -07:00
mhaag-spl d265e72e8d Silver Sparrow 2021-03-01 06:23:51 -07:00
P4T12ICK dfab3ba794 small change 2021-03-01 13:13:37 +01:00
P4T12ICK 5e9bbaab75 attack data 2021-03-01 13:11:38 +01:00
P4T12ICK f7f9db55d3 test branch 2021-03-01 10:36:45 +01:00
P4T12ICK 87e36c489e test branch 2021-03-01 10:36:14 +01:00
P4T12ICK 30116dd3e8 add GitHub Service 2021-03-01 10:35:06 +01:00
P4T12ICK e3b2e44776 add GitHub Service 2021-03-01 10:32:21 +01:00
miskoSplunk 7088a5ca43 Delete ssa___credential_extraction_getaddbaccount_from_dump.test.yml 2021-02-26 14:11:11 -08:00
miskoSplunk 9331a7899e Delete ssa___credential_extraction_ms_debuggers_z_option.test.yml 2021-02-26 14:10:40 -08:00
miskoSplunk 023b1d6a47 Delete ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml 2021-02-26 14:10:15 -08:00
miskoSplunk 54d1c00df3 Delete ssa___credential_extraction_mimikatz_modules.test.yml 2021-02-26 14:09:56 -08:00
miskoSplunk 496e00240e Delete ssa___illegal_account_creation_via_powersploit_modules.test.yml 2021-02-26 14:09:26 -08:00
miskoSplunk 26c314a6c7 Delete ssa___illegal_access_user_content_via_powersploit_modules.test.yml 2021-02-26 14:09:11 -08:00
miskoSplunk f6fa021edc Delete ssa___illegal_log_deletion_via_mimikatz_modules.test.yml 2021-02-26 14:08:49 -08:00
miskoSplunk ceddaf134d Delete ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.test.yml 2021-02-26 14:08:05 -08:00
miskoSplunk 53842f55b0 Delete ssa___illegal_account_enable_disable_via_dsinternals_modules.test.yml 2021-02-26 14:07:43 -08:00
miskoSplunk cd84b7a659 Delete ssa___illegal_privilege_elevation_via_mimikatz_modules.test.yml 2021-02-26 14:07:14 -08:00
miskoSplunk 1295e2a8f9 Delete ssa___illegal_service_and_process_control_via_mimikatz_modules.test.yml 2021-02-26 14:06:57 -08:00
miskoSplunk d346de0dad Delete ssa___illegal_service_and_process_control_via_powersploit_modules.test.yml 2021-02-26 14:06:31 -08:00
miskoSplunk 6c7f50a875 Delete ssa___setting_credentials_via_dsinternals_modules.test.yml 2021-02-26 14:06:12 -08:00
miskoSplunk 8a3030b356 Delete ssa___setting_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:05:47 -08:00
miskoSplunk 0b40494235 Delete ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.test.yml 2021-02-26 14:05:25 -08:00
miskoSplunk b6343d93be Delete ssa___setting_credentials_via_powersploit_modules.test.yml 2021-02-26 14:04:47 -08:00
miskoSplunk 8319b76803 Delete ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.test.yml 2021-02-26 14:04:35 -08:00
miskoSplunk 1a75a35fdd Delete ssa___credential_extraction_powersploit_modules.test.yml 2021-02-26 14:04:23 -08:00
miskoSplunk 57a760619a Delete ssa___credential_extraction_lazagne_command_options.test.yml 2021-02-26 14:04:12 -08:00
miskoSplunk daf441733b Delete ssa___credential_extraction_fgdump_cachedump_v_option.test.yml 2021-02-26 14:04:02 -08:00
miskoSplunk 6e9483929f Delete ssa___credential_extraction_dsinternals_modules.test.yml 2021-02-26 14:03:49 -08:00
miskoSplunk 01cee15948 Delete ssa___credential_extraction_fgdump_cachedump_s_option.test.yml 2021-02-26 14:03:28 -08:00
miskoSplunk a156b9b4f1 Delete ssa___credential_extraction_dsinternals_conversion_modules.test.yml 2021-02-26 14:03:16 -08:00
miskoSplunk 0fc70f4957 Delete ssa___applying_stolen_credentials_via_powersploit_modules.test.yml 2021-02-26 14:01:56 -08:00
miskoSplunk 8f84e76b4e Delete ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:01:41 -08:00
Jose Enrique Hernandez 574b3c6aca Merge branch 'develop' into ssa_misko_raw_event_datasets 2021-02-26 16:06:11 -05:00
P4T12ICK c01c4f32c8 Merge pull request #1214 from splunk/ssa_etet_ig 
Variable source data file
 2021-02-26 12:45:10 +01:00
Ignacio Bermudez Corrales efd8467269 timers that account for ssa delays 2021-02-25 20:15:22 -08:00
Ignacio Bermudez Corrales 135456391b remove unused code from ssa_utils.py 2021-02-25 16:03:06 -08:00
Ignacio Bermudez Corrales 1e6ea714e0 fixed job and service accounts to match vault 2021-02-25 15:53:56 -08:00
divious1 10c6f54604 fixed up a few items with markdown 2021-02-25 18:53:26 -05:00
mhaag-spl 2c996886e3 Update cobalt_strike.yml 2021-02-25 15:13:32 -07:00
mhaag-spl 4cae9952d5 Update cobalt_strike.yml 2021-02-25 15:06:29 -07:00
mhaag-spl 762bed4384 fix 2021-02-25 14:24:44 -07:00
mhaag-spl 65a9f81411 Update suspicious_curl_network_connection.yml 2021-02-25 14:19:00 -07:00
mhaag-spl 5ec99d2c76 Update suspicious_curl_network_connection.yml 2021-02-25 14:16:05 -07:00
Jose Enrique Hernandez 1f8d6f95b4 Merge branch 'develop' into dependabot/pip/python-daemon-2.3.0 2021-02-25 16:12:42 -05:00
mhaag-spl 0e1de2f89f Update suspicious_curl_network_connection.yml 2021-02-25 14:11:35 -07:00
mhaag-spl 7748c9dc65 update 2021-02-25 14:07:36 -07:00
mhaag-spl 54cc612093 fix 2021-02-25 14:02:38 -07:00
mhaag-spl 691139a8cc Update suspicious_sqlite3_lsquarantine_behavior.yml 2021-02-25 13:58:41 -07:00
mhaag-spl 5332f24256 silver sparrow test 2021-02-25 13:57:08 -07:00