 tccontre
|
a482779b41
|
brute-ratel-3
|
2022-09-01 16:42:25 +02:00 |
|
|
tccontre
|
25ec32f85d
|
Merge branch 'brute-ratel-3' of github.com:splunk/security_content into brute-ratel-3
|
2022-09-01 15:18:54 +02:00 |
|
|
tccontre
|
c1491e38d1
|
brute-ratel-3
|
2022-09-01 15:18:30 +02:00 |
|
|
tccontre
|
bfee7c9b0a
|
Delete windows_phishing_recent_iso_exec_registry.yml
|
2022-09-01 13:20:57 +02:00 |
|
|
tccontre
|
d06f714dbb
|
Delete windows_input_capture_using_credential_ui_dll.yml
|
2022-09-01 13:20:48 +02:00 |
|
|
tccontre
|
c1b7d97eb3
|
Delete windows_hijack_execution_flow_version_dll_side_load.yml
|
2022-09-01 13:20:39 +02:00 |
|
|
tccontre
|
5bcc2edeeb
|
Delete windows_remote_access_software_brc4_loaded_dll.yml
|
2022-09-01 13:20:25 +02:00 |
|
|
tccontre
|
a04fd01b34
|
Delete windows_gather_victim_identity_sam_info.test.yml
|
2022-09-01 13:20:14 +02:00 |
|
|
tccontre
|
42cf9d4d02
|
Delete windows_hijack_execution_flow_version_dll_side_load.test.yml
|
2022-09-01 13:20:04 +02:00 |
|
|
tccontre
|
183f1f689e
|
Delete windows_input_capture_using_credential_ui_dll.test.yml
|
2022-09-01 13:19:55 +02:00 |
|
|
tccontre
|
22721a4554
|
Delete windows_phishing_recent_iso_exec_registry.test.yml
|
2022-09-01 13:19:45 +02:00 |
|
|
tccontre
|
ce4f5e5ad3
|
Delete windows_remote_access_software_brc4_loaded_dll.test.yml
|
2022-09-01 13:19:35 +02:00 |
|
|
tccontre
|
954a9e9dd3
|
Delete windows_gather_victim_identity_sam_info.yml
|
2022-09-01 13:19:19 +02:00 |
|
|
tccontre
|
506732a62b
|
brute-ratel-3
|
2022-09-01 13:16:24 +02:00 |
|
|
tccontre
|
1557a528cf
|
brute-ratel-2
|
2022-08-31 10:12:55 +02:00 |
|
|
tccontre
|
c8f038be5d
|
Update windows_remote_access_software_brc4_loaded_dll.yml
|
2022-08-31 09:44:21 +02:00 |
|
|
Michael Haag
|
126049593e
|
Updates
|
2022-08-30 11:21:46 -06:00 |
|
|
tccontre
|
e90fa05a96
|
Update windows_remote_access_software_brc4_loaded_dll.yml
|
2022-08-30 17:49:16 +02:00 |
|
|
tccontre
|
ec1a26ed46
|
Update windows_phishing_recent_iso_exec_registry.yml
|
2022-08-30 17:46:57 +02:00 |
|
|
tccontre
|
d91a14c4d4
|
Update windows_hijack_execution_flow_version_dll_side_load.yml
|
2022-08-30 17:42:04 +02:00 |
|
|
tccontre
|
8d6d137ba1
|
Update windows_remote_access_software_brc4_loaded_dll.yml
|
2022-08-30 13:11:24 +02:00 |
|
|
tccontre
|
b401ed9d50
|
brute-ratel-2
|
2022-08-30 13:08:04 +02:00 |
|
|
research bot
|
2adb6ca2ff
|
updating docs and package bits [ci skip]
|
2022-08-29 17:48:48 +00:00 |
|
|
Bhavin Patel
|
2dbcc2aa64
|
Merge pull request #2323 from splunk/eliminate_duplicate_python_requirements_files
Eliminate duplicate python requirements files
v3.48.0
|
2022-08-26 16:04:11 -05:00 |
|
|
pyth0n1c
|
92e2d97588
|
Update detection-testing.yml
For a quotation mark
|
2022-08-26 13:52:30 -07:00 |
|
|
pyth0n1c
|
8d611bb546
|
Update detection-testing.yml
Updated to use pip cache
|
2022-08-26 13:50:57 -07:00 |
|
|
pyth0n1c
|
baeba5b319
|
Fixed pathing
Fixed pathing to venv and
requirements.txt files.
|
2022-08-26 13:34:37 -07:00 |
|
|
pyth0n1c
|
305a672f51
|
Delete contentctl_python_platforms_test.yml
Removed extra testing workflow. This logic will
be integrated into a separate repo at a later time.
|
2022-08-26 13:27:01 -07:00 |
|
|
pyth0n1c
|
e5962ef678
|
Update contentctl_python_platforms_test.yml
Reduce platforms we are testing
against for now until we can further
improve support.
|
2022-08-26 12:22:18 -07:00 |
|
|
pyth0n1c
|
c1be892bd1
|
Merge branch 'develop' into eliminate_duplicate_python_requirements_files
|
2022-08-26 12:09:54 -07:00 |
|
|
Bhavin Patel
|
9f2fa92efd
|
Merge pull request #2336 from splunk/hijack
HijackThis
|
2022-08-26 13:42:17 -05:00 |
|
|
pyth0n1c
|
bd2d1515cb
|
Branch was auto-updated.
|
2022-08-26 10:01:42 -07:00 |
|
|
Michael Haag
|
f9e770eaa5
|
Update log4shell_cve_2021_44228_exploitation.yml
|
2022-08-26 11:01:25 -06:00 |
|
|
Bhavin Patel
|
19b3efc01a
|
Merge pull request #2321 from splunk/TR_2301
Add Linux Living off the land Privilege Escalation Detections
|
2022-08-26 12:01:19 -05:00 |
|
|
Michael Haag
|
b2941ca736
|
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
|
2022-08-26 10:58:35 -06:00 |
|
|
Michael Haag
|
c912c7c939
|
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
|
2022-08-26 10:58:17 -06:00 |
|
|
pyth0n1c
|
2bfc066411
|
Branch was auto-updated.
|
2022-08-26 09:35:15 -07:00 |
|
|
pyth0n1c
|
5d8cbb81ca
|
Branch was auto-updated.
|
2022-08-26 09:35:15 -07:00 |
|
|
Bhavin Patel
|
a8097ab665
|
Merge pull request #2341 from splunk/fix-desc
fix-desc
|
2022-08-26 11:34:56 -05:00 |
|
|
patel-bhavin
|
e0f0d48784
|
minonr text updates
|
2022-08-26 10:46:51 -05:00 |
|
|
Michael Haag
|
c560685650
|
Update windows_possible_credential_dumping.yml
|
2022-08-26 09:18:56 -06:00 |
|
|
tccontre
|
346e7000e2
|
fix-desc
|
2022-08-26 15:39:48 +02:00 |
|
|
Michael Haag
|
5ddf3c9cf7
|
Merge branch 'hijack' of https://github.com/splunk/security_content into hijack
|
2022-08-26 06:01:16 -06:00 |
|
|
Michael Haag
|
c7aba6738e
|
Update windows_remote_access_software_hunt.yml
|
2022-08-26 06:01:15 -06:00 |
|
|
pyth0n1c
|
63c3744821
|
Branch was auto-updated.
|
2022-08-25 16:25:59 -07:00 |
|
|
pyth0n1c
|
a1d1297de9
|
Branch was auto-updated.
|
2022-08-25 16:25:56 -07:00 |
|
|
Bhavin Patel
|
cfaf15a916
|
Merge pull request #2337 from splunk/100_percent_pass_rate
100 percent pass rate
|
2022-08-25 18:25:35 -05:00 |
|
|
pyth0n1c
|
474ea41291
|
Finishing updates authors, versions,
and dates on searches.
|
2022-08-25 15:09:13 -07:00 |
|
|
pyth0n1c
|
8b47ea7b36
|
Updating the author(s), versions, and
dates for searches in PR.
|
2022-08-25 15:08:46 -07:00 |
|
|
Michael Haag
|
11eb0feac6
|
T1003.001 Update
|
2022-08-25 08:04:20 -06:00 |
|