Commit Graph

15256 Commits

Author SHA1 Message Date
Bhavin Patel 9eb9e7a88b Merge pull request #2154 from splunk/TR-1735
Tr 1735:nes fields
2022-04-18 14:42:05 -07:00
research bot 1df940a5e9 updating docs and package bits [ci skip] 2022-04-14 22:03:48 +00:00
pyth0n1c a99614452e Branch was auto-updated. 2022-04-14 13:55:48 -07:00
Jose Enrique Hernandez e00c2eddc4 Merge pull request #2172 from splunk/moving_tcp_command_and_scripting_interpreter_outbound_ldap_traffic
moving to experimental
v3.38.1
2022-04-14 16:55:25 -04:00
d1vious fdcd471d5d moving to experimental 2022-04-14 16:37:54 -04:00
pyth0n1c 1e9129f44d Branch was auto-updated. 2022-04-14 13:34:33 -07:00
Lou Stella 652920f18f Merge pull request #2170 from splunk/fishsticks
Update ssa___windows_lolbin_binary_in_non_standard_path.yml
2022-04-14 15:34:11 -05:00
mhaag-spl 327042ede5 Merge branch 'fishsticks' of https://github.com/splunk/security_content into fishsticks 2022-04-14 14:13:26 -06:00
mhaag-spl b356157dc0 Update ssa___windows_rundll32_comsvcs_memory_dump.yml 2022-04-14 14:13:22 -06:00
pyth0n1c 00e3c44d64 Branch was auto-updated. 2022-04-14 13:09:54 -07:00
pyth0n1c 9ff0da4725 Branch was auto-updated. 2022-04-14 13:09:51 -07:00
Michael Haag ccffa29e3f Merge pull request #2171 from splunk/ssa_mshta_fix
Unicode + Regex = There be demons
2022-04-14 14:09:32 -06:00
mhaag-spl 79ee477a19 comsvcs 2022-04-14 14:04:13 -06:00
Lou Stella 71ad17def8 Modified 'required fields' 2022-04-14 14:43:30 -05:00
Lou Stella b75f8ed6aa Modifying field name 2022-04-14 14:40:38 -05:00
mhaag-spl c3e7e4c850 Update ssa___windows_lolbin_binary_in_non_standard_path.yml 2022-04-14 13:40:01 -06:00
Lou Stella 81e57c3591 Modified Regex 2022-04-14 14:37:01 -05:00
P4T12ICK 876071e45d fixed some small issues 2022-04-14 12:24:13 +02:00
Lou Stella 3ad0e714fc push for Jud 2022-04-13 19:46:49 -05:00
pyth0n1c 36d3bef8f8 Branch was auto-updated. 2022-04-13 05:29:54 -07:00
tccontre cb363eb47a Merge pull request #2162 from splunk/acidrain
acidrain
2022-04-13 14:29:32 +02:00
tccontre ce0f0852dd acidrain 2022-04-13 10:07:22 +02:00
tccontre a7bf512c15 acidrain 2022-04-13 09:34:11 +02:00
patel-bhavin 5b01b8510b Merge branch 'TR-1735' of github.com:splunk/security_content into TR-1735 2022-04-12 17:40:23 -07:00
patel-bhavin e171e3c6ea test updates 2022-04-12 17:40:11 -07:00
pyth0n1c e6ec07a3ef Branch was auto-updated. 2022-04-12 15:44:06 -07:00
pyth0n1c 05e763398f Branch was auto-updated. 2022-04-12 15:44:05 -07:00
Jose Enrique Hernandez e5a5b99f39 Merge pull request #2165 from splunk/bug_with_borked_links
fixing minor linking bug
2022-04-12 18:43:42 -04:00
d1vious 242449d59d Merge branch 'develop' into bug_with_borked_links 2022-04-12 18:43:20 -04:00
d1vious 90ca4186ed fixing minor linking bug 2022-04-12 17:12:25 -04:00
pyth0n1c 03e2cf0b91 Branch was auto-updated. 2022-04-12 11:29:14 -07:00
pyth0n1c ec3aefad5c Branch was auto-updated. 2022-04-12 11:29:10 -07:00
Jose Enrique Hernandez 1cc6ed2697 Merge pull request #2163 from splunk/ssa_mshta_fix
MSHTA Child Process fix
2022-04-12 14:28:48 -04:00
Lou Stella ec66e01b78 Fixed formatting 2022-04-12 13:11:57 -05:00
patel-bhavin 8d8998d243 adding nes to detection object 2022-04-12 11:03:52 -07:00
Lou Stella da5eb1be3a Updated logic & fixed pathing 2022-04-12 12:01:48 -05:00
Lou Stella 63968601d2 parentheses to separate logic 2022-04-12 11:40:08 -05:00
tccontre 7c95560d2d Update linux_high_frequency_of_file_deletion_in_etc_folder.yml 2022-04-12 14:36:01 +02:00
tccontre 5c248ae716 Merge branch 'acidrain' of github.com:splunk/security_content into acidrain 2022-04-12 14:34:52 +02:00
tccontre 28d98d1af4 acidrain 2022-04-12 14:34:36 +02:00
pyth0n1c 2c63b204cd Branch was auto-updated. 2022-04-12 04:13:42 -07:00
pyth0n1c aada5bf4f9 Branch was auto-updated. 2022-04-12 04:13:38 -07:00
tccontre 095210542a Merge pull request #2157 from splunk/cyclopsblink
cyclopsblink
2022-04-12 13:13:15 +02:00
tccontre f8eb31e796 Update acidrain.yml 2022-04-12 12:22:58 +02:00
tccontre 558953524e Update linux_deletion_of_services.yml 2022-04-12 12:22:42 +02:00
tccontre 2f3cc3d6f5 Update linux_deletion_of_init_daemon_script.yml 2022-04-12 12:22:29 +02:00
tccontre fbbe658060 Update linux_deletion_of_cron_jobs.yml 2022-04-12 12:22:19 +02:00
tccontre ba3dd9f2a6 Update cyclops_blink.yml 2022-04-12 12:21:30 +02:00
tccontre 143b243003 Update linux_stdout_redirection_to_dev_null_file.yml 2022-04-12 12:21:20 +02:00
tccontre 43c89619b2 Update linux_kworker_process_commandline.yml 2022-04-12 12:21:10 +02:00