admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,272 Commits 697 Branches 195 Tags
9fea5dc874673cabcee8fc433dd998d762e05d59
Commit Graph

25272 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nasreddine Bencherchali 9fea5dc874 rename some analytics 2025-01-16 23:04:11 +01:00
Nasreddine Bencherchali aa6a3f340a move to deprecated 2025-01-16 23:03:54 +01:00
Michael Haag 8ce3783394 Update windows_exchange_autodiscover_ssrf_abuse.yml 
- Updated detection description to better explain ProxyShell (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207) and ProxyNotShell (CVE-2022-41040, CVE-2022-41082) attack patterns
- Enhanced search query:
  - X-Rps-CAT parameter
  - Suspicious user agent strings
 2025-01-16 10:02:05 -07:00
Nasreddine Bencherchali c91f76b9ab Update windows_registry_entries_exported_via_reg.yml 2025-01-15 15:55:51 +01:00
Nasreddine Bencherchali 082368e86d update reg analytics 2025-01-15 15:55:16 +01:00
Nasreddine Bencherchali 4f16cb3115 update office macro 2025-01-14 20:02:52 +01:00
Nasreddine Bencherchali efa8b09ad3 update powershell analytics 2025-01-14 19:34:31 +01:00
Bhavin Patel 7e2a3877ae Branch was auto-updated. 2025-01-14 10:02:37 -08:00
Bhavin Patel fb66f8cba2 Merge pull request #3266 from splunk/dlux_5 
Dlux 5 - AAD detection
 2025-01-14 10:02:21 -08:00
Bhavin Patel fa2ba7c031 Branch was auto-updated. 2025-01-14 09:04:48 -08:00
Bhavin Patel 6709e590a0 Branch was auto-updated. 2025-01-14 09:04:46 -08:00
Bhavin Patel c3689f0194 Merge pull request #3237 from splunk/aws_asl_detections 
Improved ASL AWS detections
 2025-01-14 09:04:24 -08:00
Patrick Bareiss 3d1fde609b Add ASL AWS CloudTrail data source 2025-01-14 16:47:25 +01:00
Nasreddine Bencherchali 1f060bbddf update to analytics using net 2025-01-13 22:20:46 +01:00
research-bot ff5a16bd97 updating data sources 2025-01-13 12:18:08 -08:00
Bhavin Patel d64e5c9063 Update o365_service_principal_privilege_escalation.yml 2025-01-13 10:36:45 -08:00
research-bot a3be9d47b9 minor udpates to yaml 2025-01-10 11:46:43 -08:00
Bhavin Patel 6b9161bcea Branch was auto-updated. 2025-01-10 07:03:33 -08:00
Bhavin Patel b4eeee4873 Branch was auto-updated. 2025-01-10 07:03:32 -08:00
Bhavin Patel 6d724876b6 Branch was auto-updated. 2025-01-10 07:03:31 -08:00
Lou Stella c0f0f9506d Merge pull request #3274 from splunk/auto-ta-update-141 
Automated Splunk TA Update 141
 2025-01-10 09:03:16 -06:00
patel-bhavin 67de6175a9 Updated TAs 2025-01-10 06:57:41 +00:00
Bhavin Patel f890159c74 Branch was auto-updated. 2025-01-09 14:18:18 -08:00
Bhavin Patel 3937f26f84 Branch was auto-updated. 2025-01-09 14:18:17 -08:00
Bhavin Patel ef6f6805b5 Branch was auto-updated. 2025-01-09 14:18:17 -08:00
Bhavin Patel ede80f4395 Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2 
Nterl0k - T1219 - RMM Detection for Registry locations.
 2025-01-09 14:17:57 -08:00
Bhavin Patel 55d4936427 update token 2025-01-09 13:26:23 -08:00
Bhavin Patel c01f87071e Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-09 13:10:22 -08:00
Bhavin Patel 045cc1994b Branch was auto-updated. 2025-01-09 11:42:58 -08:00
Bhavin Patel ea9921d6ab Branch was auto-updated. 2025-01-09 11:42:54 -08:00
Bhavin Patel a746db1270 Branch was auto-updated. 2025-01-09 11:42:53 -08:00
Lou Stella d2592c5deb Merge pull request #3270 from splunk/auto-ta-update-139 
Automated Splunk TA Update 139
 2025-01-09 13:42:36 -06:00
ljstella 1ce4f77a4c update description 2025-01-09 12:02:56 -06:00
Patrick Bareiss 848fb18717 improvements 2025-01-09 18:19:18 +01:00
ljstella 4b28335f82 retrigger 2025-01-09 11:12:57 -06:00
ljstella 02afa4f4cb Adding PSC 2025-01-09 11:08:49 -06:00
ljstella 5b8986469e Removed parens that was killing app installs 2025-01-09 10:39:47 -06:00
Patrick Bareiss 8b30dc3e15 change 2025-01-09 14:47:11 +01:00
Patrick Bareiss 87d2ca6225 Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections 2025-01-09 14:43:06 +01:00
Patrick Bareiss 4b37788f5a new detections 2025-01-09 14:42:38 +01:00
Nasreddine Bencherchali f06f5cd618 rename rule and enhance metadata 2025-01-09 13:39:03 +01:00
ljstella c591ef5ff7 Adding back two containers 2025-01-08 12:45:30 -06:00
ljstella a9129bf5e3 Testing single container 2025-01-08 12:40:39 -06:00
Bhavin Patel 4c65798689 Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-08 10:22:03 -08:00
Bhavin Patel 557fdeca89 Add manual_test flag 2025-01-08 10:21:40 -08:00
Bhavin Patel 4ed661ab65 Branch was auto-updated. 2025-01-08 10:11:54 -08:00
Bhavin Patel 62e5a6083f Branch was auto-updated. 2025-01-08 10:11:53 -08:00
Bhavin Patel c90858719d Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel 607494bfb8 Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel be3ab3c6ed Merge pull request #3255 from nterl0k/nterl0k-T1550-netexec-usage 
Nterl0k - T1550 - NetExec Usage Detection
 2025-01-08 10:11:36 -08:00