admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,733 Commits 697 Branches 195 Tags
a6a7028bfa84701ac504fd4effc16514e5f278b2
Commit Graph

12733 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c a6a7028bfa Branch was auto-updated. 2022-01-10 13:06:18 -08:00
Bhavin Patel 43e2b40935 Merge pull request #1907 from splunk/linux_persist_priv_batch_2 
linux_persist_priv_batch_2
 2022-01-10 13:05:56 -08:00
Bhavin Patel 3362c243ae Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:59:21 -08:00
Bhavin Patel 26f945c52a Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:56:56 -08:00
Bhavin Patel fabd820804 Update linux_setuid_using_chmod_utility.yml 2022-01-10 12:55:51 -08:00
Bhavin Patel 19d907da37 Update linux_service_started_or_enabled.yml 2022-01-10 12:53:45 -08:00
Bhavin Patel a505181149 Update linux_service_restarted.yml 2022-01-10 12:52:25 -08:00
Bhavin Patel 8bd5c20eac Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:46:34 -08:00
Bhavin Patel 4a08f745b2 Update linux_service_file_created_in_systemd_directory.yml 2022-01-10 12:41:02 -08:00
Bhavin Patel 527d8103b8 Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:33:47 -08:00
Bhavin Patel 2944d1690b Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:32:10 -08:00
Bhavin Patel b60f4a2b5a Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:30:55 -08:00
d1vious 6edaa90519 updated generate to match javiers feedback 2022-01-10 15:12:30 -05:00
pyth0n1c ef018cd9cb Branch was auto-updated. 2022-01-10 12:11:45 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059 
The Haag at The Gates
 2022-01-10 12:11:15 -08:00
d1vious 871a66ebae changed to use srs and complex division 2022-01-10 14:59:29 -05:00
d1vious 067b6e5bbe cleaning up detections 2022-01-07 16:04:51 -05:00
d1vious 20c0196d7f moving things around 2022-01-07 16:04:21 -05:00
Jose Enrique Hernandez 6d206d9646 Merge pull request #1922 from splunk/doc_gen_remcos 
Update docs for upcoming blog
 2022-01-06 17:45:27 -05:00
Lou Stella a8e2af5782 Update docs for upcoming blog 2022-01-06 16:38:33 -06:00
Jose Enrique Hernandez b7597fc509 Merge pull request #1919 from splunk/playbook_mig_remcos 
Playbook migration for remcos
 2022-01-06 17:08:37 -05:00
Lou Stella 049482c74c Fixed casing per request 2022-01-06 15:16:52 -06:00
mhaag-spl 89f37444f4 Update msi_module_loaded_by_non_system_binary.yml 2022-01-06 10:06:40 -07:00
Lou Stella 334fb25cd0 Added malware hunt and contain playbook 2022-01-05 13:41:59 -06:00
Lou Stella 6819bb1be7 Added email notification for malware playbook 2022-01-05 13:28:38 -06:00
Lou Stella e396a3b9d4 Added block_indicators playbook 2022-01-05 12:17:54 -06:00
tccontre fa843067da Merge pull request #1917 from splunk/remocs_desc_update 
remcos_desc_update
 2022-01-05 09:41:08 +01:00
tccontre 78732dfe2d Update linux_file_creation_in_profile_directory.yml 2022-01-04 18:00:42 +01:00
tccontre e8cde0b1f6 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 17:59:26 +01:00
pyth0n1c e10f55348c Updated Detection Text 
Updated Text of Detection "Suspicious Process DNS Query Known Abuse Web Services"
 2022-01-04 08:47:13 -08:00
pyth0n1c 8891384376 Small Text Update 
Small Text Update to "Loading Of Dynwrapx Module"
 2022-01-04 08:42:39 -08:00
tccontre 7420f730d4 Update suspicious_process_dns_query_known_abuse_web_services.yml 2022-01-04 17:39:17 +01:00
pyth0n1c 249c784daf Small Text Updates 
Small Text Updates to "Loading Of Dynwrapx Module"
 2022-01-04 08:38:05 -08:00
pyth0n1c 5702bf9c7d Minor Text Updates 
Minor Text Updates to "System Info Gathering Using Dxdiag Application"
 2022-01-04 08:36:46 -08:00
pyth0n1c 54e6931e48 Minor Text Updates 
Minor updates to the text of  "Suspicious Process DNS Query Known Abuse Web Services"
 2022-01-04 08:31:04 -08:00
pyth0n1c cff1c5dd74 Update Text of Detection 
Minor update to text of "Possible Browser Pass View Parameter"
 2022-01-04 08:23:36 -08:00
pyth0n1c 3c6c0dc575 Minor Text Update 
Minor update to text of "Loading Of Dynwrapx Module"
 2022-01-04 08:21:15 -08:00
Detection Testing Service 79808deea1 Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2 2022-01-04 11:36:48 +00:00
root 4c40ac8961 Added detection testing service results inLinux Setuid Using Chmod Utility 2022-01-04 11:36:47 +00:00
root 1be58f55d2 Added detection testing service results inLinux Service Restarted 2022-01-04 11:35:23 +00:00
tccontre ff3172c7c0 linux_persist_priv_batch_2 2022-01-04 12:15:50 +01:00
tccontre 74dcbf5bbe linux_persist_priv_batch_2 2022-01-04 11:47:11 +01:00
root 472519cac0 Added detection testing service results inLinux File Creation In Init Boot Directory 2022-01-04 10:32:49 +00:00
tccontre f96aa5fbe3 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 11:11:14 +01:00
tccontre 9c96e69754 remcos_desc_update 2022-01-04 10:25:11 +01:00
Lou Stella 94f903d685 Merge pull request #1916 from splunk/adding_not_supported 
modify experimental detections to say not supported
 2022-01-03 13:46:45 -06:00
d1vious 8f0518b5af spelling fix 2022-01-03 14:39:48 -05:00
d1vious 7c1025425a fixed spelling 2022-01-03 14:35:49 -05:00
d1vious 50ba793358 fixing formatting 2022-01-03 12:20:42 -05:00
d1vious 1e731ee7af modify experimental detections to say not supported 2022-01-03 12:03:34 -05:00