admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 7bb0d714c8 Bump botocore from 1.19.20 to 1.19.21 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.20 to 1.19.21.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.20...1.19.21)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-19 14:09:26 +00:00
dependabot[bot] e39779f761 Merge pull request #944 from splunk/dependabot/pip/boto3-1.16.21 2020-11-19 14:08:36 +00:00
dependabot[bot] 2d3e6ab43a Bump boto3 from 1.16.20 to 1.16.21 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.20 to 1.16.21.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.20...1.16.21)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-19 14:03:42 +00:00
Detection Testing Service 4509b3dadc Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-19 13:44:56 +00:00
root 4fbde2e53d Added detection testing service results inFirst Time Seen Child Process of Zoom 2020-11-19 13:44:55 +00:00
Detection Testing Service ecb63ccbe2 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-19 13:30:31 +00:00
root 0d974f1f5b Added detection testing service results inFile with Samsam Extension 2020-11-19 13:30:29 +00:00
P4T12ICK 36889141d3 new test file 2020-11-19 14:28:31 +01:00
P4T12ICK 3602c9f961 new test file 2020-11-19 14:11:18 +01:00
root 4ce47e6921 Added detection testing service results inExecution of File with Multiple Extensions 2020-11-19 10:55:54 +00:00
P4T12ICK c277a26f14 merge conflict 2020-11-19 11:35:42 +01:00
Bhavin Patel bb6a5d9e75 Merge pull request #942 from splunk/issue_941 
updating risk object
 2020-11-18 15:46:53 -08:00
Bhavin Patel 2772bf4559 Merge pull request #940 from wesinator/patch-1 
add additional suspicious file extensions
 2020-11-18 15:28:33 -08:00
bpatel e0c267779f updating risk object 2020-11-18 15:23:13 -08:00
bpatel 0737c2538a testing file update 2020-11-18 15:20:31 -08:00
Ԝеѕ 0f2056149f add additional suspicious file extensions 
chm, vbe, additional media double ext exe's
 2020-11-18 16:19:11 -05:00
Ignacio 688b006ed0 Merge pull request #890 from splunk/misko_credential_probing 
Probing access with stolen credentials,  assessing credential strength, recon of credential stores and use of CryptoAPI
 2020-11-18 11:36:16 -08:00
Ignacio 4e5b26e322 Merge branch 'develop' into misko_credential_probing 2020-11-18 11:30:43 -08:00
Bhavin Patel c8710c17ad Merge pull request #893 from davisshannon/develop 
Data Exfil PR (fixed up)
 2020-11-18 11:30:10 -08:00
Ignacio 9b8bc3ceaf Merge branch 'develop' into misko_credential_probing 2020-11-18 11:25:16 -08:00
Ignacio fc8ab61ac0 Merge pull request #896 from splunk/misko_recon_use_cases 
Reconnaissance use case: domains, network, devices, shares, users, services, processes ...
 2020-11-18 11:23:53 -08:00
Ignacio 79403ad142 Merge branch 'develop' into misko_recon_use_cases 2020-11-18 11:20:13 -08:00
Bhavin Patel 7cd18f2797 Merge pull request #931 from splunk/mustang_beta_drop3 
Mustang beta drop3
 2020-11-18 11:07:16 -08:00
Jose Enrique Hernandez 732664fb23 Merge branch 'develop' into mustang_beta_drop3 2020-11-18 14:02:35 -05:00
Jose Enrique Hernandez 7fa971386b Merge pull request #914 from splunk/minor_mispelling 
removed the converter since we do not use it anymore and updated reqs…
 2020-11-18 13:32:20 -05:00
Jose Enrique Hernandez 3c1cfbf4de Merge branch 'develop' into develop 2020-11-18 13:30:38 -05:00
Jose Enrique Hernandez b514c54c74 Merge pull request #929 from splunk/dependabot/pip/protobuf-3.14.0 
Bump protobuf from 3.13.0 to 3.14.0
 2020-11-18 13:30:22 -05:00
miskoSplunk d57bcfbd5e Update ssa___recon_processes_and_services_via_mimikatz_modules.yml 2020-11-18 10:25:24 -08:00
miskoSplunk 44e4920121 Update ssa___recon_process_service_hijacking_via_mimikatz_modules.yml 2020-11-18 10:24:37 -08:00
miskoSplunk 67c0c759e9 Update ssa___recon_privilege_escalation_opportunities_via_powersploit_modules.yml 2020-11-18 10:24:01 -08:00
miskoSplunk 42a66b6904 Update ssa___recon_defensive_tools_via_powersploit_modules.yml 2020-11-18 10:23:05 -08:00
miskoSplunk bea77daf5f Update ssa___recon_connectivity_via_powersploit_modules.yml 2020-11-18 10:22:24 -08:00
miskoSplunk 2ddba5f54c Update ssa___recon_and_use_shares_via_powersploit_modules.yml 2020-11-18 10:21:45 -08:00
miskoSplunk 5cd3af9fd0 Update ssa___recon_and_use_shares_via_mimikatz_modules.yml 2020-11-18 10:20:56 -08:00
miskoSplunk bd3fd3ada6 Update ssa___recon_and_use_operating_system_elements_via_powersploit_modules.yml 2020-11-18 10:19:56 -08:00
miskoSplunk ef440012b8 Update ssa___recon_and_use_computers_via_mimikatz_modules.yml 2020-11-18 10:19:17 -08:00
miskoSplunk 3812bbdb6c Update ssa___recon_and_use_computers_domains_via_powersploit_modules.yml 2020-11-18 10:18:26 -08:00
miskoSplunk 6d315d1469 Update ssa___recon_and_use_active_directory_infrastructure_via_powersploit_modules.yml 2020-11-18 10:17:35 -08:00
miskoSplunk 0cf86f14f3 Update ssa___recon_and_use_accounts_groups_via_mimikatz_modules.yml 2020-11-18 10:12:17 -08:00
miskoSplunk 66eefe026c Update ssa___recon_and_use_accounts_groups_policies_via_powersploit_modules.yml 2020-11-18 10:11:40 -08:00
miskoSplunk d4688cc394 Update ssa___recon_access_and_persistence_opportunities_via_powersploit_modules.yml 2020-11-18 10:10:57 -08:00
miskoSplunk b4f3e260c5 Update ssa___recon_credential_stores_and_services_via_mimikatz_modules.yml 2020-11-18 10:09:35 -08:00
miskoSplunk 7b2b17f497 Update ssa___probing_access_with_stolen_credentials_via_powersploit_modules.yml 2020-11-18 10:08:45 -08:00
miskoSplunk 5a28f4aeae Update ssa___assess_credential_strength_via_dsinternals_modules.yml 2020-11-18 10:07:53 -08:00
miskoSplunk 90d33ffda4 Update ssa___recon_credential_stores_and_services_via_mimikatz_modules.yml 2020-11-18 10:04:43 -08:00
miskoSplunk 42661d0f8c Update ssa___probing_access_with_stolen_credentials_via_powersploit_modules.yml 2020-11-18 10:03:28 -08:00
miskoSplunk b1716386e8 Update ssa___assess_credential_strength_via_dsinternals_modules.yml 
adding required_fields
 2020-11-18 10:01:18 -08:00
Jose Enrique Hernandez fea5096cad Merge branch 'develop' into dependabot/pip/protobuf-3.14.0 2020-11-18 12:35:53 -05:00
Jose Enrique Hernandez 7c0795beb7 Merge pull request #935 from splunk/TR-278 
start time to be window start time
 2020-11-18 12:34:54 -05:00
Jose Enrique Hernandez 7d64ec2884 Merge branch 'develop' into misko_recon_use_cases 2020-11-18 12:22:12 -05:00