admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK 3ccfea4dcc Merge branch 'develop' into detection_testing_branch 2021-01-21 16:07:41 +01:00
bpatel 369dab3488 minor 2021-01-20 17:32:03 -08:00
bpatel 0b7f46489a adding deployment file for Mustang 2021-01-20 16:40:33 -08:00
bpatel e02498dbf2 Merge branch 'develop' into issue_1101 2021-01-20 15:39:49 -08:00
bpatel f7ae31682a adding product field in tags for mustang 2021-01-20 15:39:29 -08:00
root 6697920c84 Added detection testing service results inDetect mshta spawn 2021-01-20 22:31:06 +00:00
mhaag-spl b60d75a587 renamed testing 2021-01-20 14:46:45 -07:00
mhaag-spl f3d274c0f8 ID changes 
ID changes and a test file needed moved
 2021-01-20 14:45:27 -07:00
mhaag-spl 03ac6e1174 Suspicious mshta spawn 
Suspicious mshta spawn
 2021-01-20 14:16:29 -07:00
Michael Haag b29378ff57 Merge branch 'develop' into msbuild 2021-01-20 14:09:16 -07:00
mhaag-spl 492c70d6ba Update detect_mshta_renamed.yml 2021-01-20 13:54:17 -07:00
mhaag-spl c3197d003e mshta renamed 2021-01-20 13:50:57 -07:00
mhaag-spl 9205419f90 Update detect_mshta_inline_hta_execution.yml 2021-01-20 13:16:33 -07:00
mhaag-spl 676a51159e Update detect_mshta_inline_hta_execution.yml 2021-01-20 12:53:19 -07:00
mhaag-spl dfc9ac84c5 Update detect_mshta_inline_hta_execution.yml 2021-01-20 12:48:28 -07:00
mhaag-spl 5e516b427e Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-20 12:44:24 -07:00
mhaag-spl 5b0ff63278 rename mshta inline hta execution 2021-01-20 12:44:21 -07:00
root db1265ad84 Added detection testing service results inDetect mshta url in command line 2021-01-20 19:24:25 +00:00
mhaag-spl 1d11230510 MSHTA 
Updated story
added mshta url in cmdline analytic
 2021-01-20 12:00:25 -07:00
mhaag-spl 4299138f97 Update detect_rundll32_inline_hta_execution.yml 2021-01-20 11:43:42 -07:00
root 267b33b9b4 Added detection testing service results inDetect rundll32 executing hta with inline protocols 2021-01-20 18:13:10 +00:00
P4T12ICK 753d2dc00f add custom badge for detection coverage 2021-01-20 18:59:09 +01:00
mhaag-spl ed6e40433c rundll32 inline hta 
Rundll32 inline hta execution
 2021-01-20 10:48:25 -07:00
P4T12ICK fae32c8fd2 add custom badge for detection coverage 2021-01-20 17:47:46 +01:00
P4T12ICK cf290ce750 add custom badge for detection coverage 2021-01-20 17:45:21 +01:00
P4T12ICK 82f13f9f8d add custom badge for detection coverage 2021-01-20 17:37:19 +01:00
P4T12ICK a06538df87 add custom badge for detection coverage 2021-01-20 17:35:01 +01:00
P4T12ICK 0943ecdf0e add custom badge for detection coverage 2021-01-20 17:15:45 +01:00
P4T12ICK e2767bcae0 add custom badge for detection coverage 2021-01-20 16:09:42 +01:00
P4T12ICK 124f6bd191 add custom badge for detection coverage 2021-01-20 15:34:18 +01:00
P4T12ICK 893cb37eb8 add custom badge for detection coverage 2021-01-20 15:27:05 +01:00
github-actions[bot] fce1c9a12f Branch was auto-updated. 2021-01-20 14:17:24 +00:00
github-actions[bot] 004a532de3 Branch was auto-updated. 2021-01-20 14:17:23 +00:00
dependabot[bot] cd31cb6a23 Merge pull request #1118 from splunk/dependabot/pip/botocore-1.19.57 2021-01-20 14:17:01 +00:00
dependabot[bot] 225669b55c Bump botocore from 1.19.56 to 1.19.57 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.56 to 1.19.57.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.56...1.19.57)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-20 14:10:26 +00:00
dependabot[bot] fefa3038e2 Bump pyyaml from 5.3.1 to 5.4 
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.3.1 to 5.4.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.3.1...5.4)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-20 14:10:16 +00:00
github-actions[bot] 9f927bbd6f Branch was auto-updated. 2021-01-20 14:09:47 +00:00
dependabot[bot] afe450b577 Merge pull request #1116 from splunk/dependabot/pip/boto3-1.16.57 2021-01-20 14:09:26 +00:00
Jose Enrique Hernandez 955b7bc1af Merge branch 'develop' into dependabot/pip/importlib-resources-5.0.0 2021-01-20 09:06:34 -05:00
dependabot[bot] fb549c1859 Bump boto3 from 1.16.56 to 1.16.57 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.56 to 1.16.57.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.56...1.16.57)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-20 14:03:54 +00:00
P4T12ICK af17e44f9f test custom test coverage badge 2021-01-20 14:48:48 +01:00
Michael Haag bf919b37a5 Merge branch 'develop' into msbuild 2021-01-19 15:36:03 -07:00
Detection Testing Service 55d2921458 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-19 22:12:28 +00:00
root edd77b709f Added detection testing service results inDetect microsoft.workflow.compiler.exe usage 2021-01-19 22:12:26 +00:00
root 5a22ce57f6 Added detection testing service results inDetect microsoft.workflow.compiler.exe rename 2021-01-19 22:11:46 +00:00
mhaag-spl 9514ec2d50 Update trusted_developer_utilities_proxy_execution.yml 2021-01-19 14:48:31 -07:00
mhaag-spl 8f5f82cb56 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-19 14:45:04 -07:00
mhaag-spl d6a9bf502f Microsoft Workflow Compiler 
Adding analytics for microsoft.workflow.compiler.exe.
 2021-01-19 14:45:02 -07:00
Detection Testing Service 778c81b2d1 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-19 21:42:58 +00:00
root b355147e2b Added detection testing service results inDetect renamed msbuild execution 2021-01-19 21:42:57 +00:00