 root
|
a79f8718eb
|
Added detection testing service results inIcedID Exfiltrated Archived File Creation
|
2021-08-05 14:25:26 +00:00 |
|
|
Detection Testing Service
|
b109f5517e
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:08:17 +00:00 |
|
|
root
|
e0b24a1984
|
Added detection testing service results inSuspicious Rundll32 PluginInit
|
2021-08-05 14:08:16 +00:00 |
|
|
Detection Testing Service
|
4990119ca4
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:00:50 +00:00 |
|
|
root
|
7ac92524f1
|
Added detection testing service results inSuspicious IcedID Rundll32 Cmdline
|
2021-08-05 14:00:49 +00:00 |
|
|
Detection Testing Service
|
6d6f066d47
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 13:45:15 +00:00 |
|
|
root
|
de016c4686
|
Added detection testing service results inRundll32 Process Creating Exe Dll Files
|
2021-08-05 13:45:14 +00:00 |
|
|
Detection Testing Service
|
890546ac8b
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 13:36:43 +00:00 |
|
|
root
|
0fde378b6f
|
Added detection testing service results inRundll32 DNSQuery
|
2021-08-05 13:36:42 +00:00 |
|
|
root
|
f9d9e07f7b
|
Added detection testing service results inRundll32 CreateRemoteThread In Browser
|
2021-08-05 13:34:25 +00:00 |
|
|
root
|
4d47c30783
|
Added detection testing service results inRundll32 Create Remote Thread To A Process
|
2021-08-05 13:10:18 +00:00 |
|
|
tccontre
|
ede0bd7675
|
icedid
|
2021-08-05 13:48:42 +02:00 |
|
|
tccontre
|
34377e6310
|
icedid
|
2021-08-05 13:42:29 +02:00 |
|
|
tccontre
|
6ccaf94f2f
|
icedid
|
2021-08-05 13:39:05 +02:00 |
|
|
tccontre
|
c7e8f72fa6
|
icedid
|
2021-08-05 13:36:35 +02:00 |
|
|
tccontre
|
8539d351da
|
icedid
|
2021-08-04 11:49:52 +02:00 |
|
|
github-actions[bot]
|
a89a087b07
|
Branch was auto-updated.
|
2021-08-03 19:55:24 +00:00 |
|
|
peter
|
62e6c006b0
|
Merge pull request #1547 from splunk/ssa_TR-778
TR-778: SSA/BA/SAC stage->gstage
|
2021-08-03 14:55:08 -05:00 |
|
|
peter-cg
|
23b22e95d4
|
Event delimiting bugfix and some event upload error checking
|
2021-08-03 14:53:11 -05:00 |
|
|
tccontre
|
51b72ea3b3
|
icedid
|
2021-08-03 14:24:34 +02:00 |
|
|
tccontre
|
3f9c187e11
|
icedid
|
2021-08-03 13:00:06 +02:00 |
|
|
tccontre
|
5de991e461
|
icedid_mod_sig
|
2021-07-30 17:46:06 +02:00 |
|
|
tccontre
|
1722daa514
|
icedid_mod_sig
|
2021-07-30 17:33:42 +02:00 |
|
|
tccontre
|
2d13569fff
|
icedid story
|
2021-07-30 12:34:15 +02:00 |
|
|
research bot
|
df85ff33ad
|
updating docs and package bits [ci skip]
|
2021-07-29 21:15:45 +00:00 |
|
|
github-actions[bot]
|
cde8a9154a
|
Branch was auto-updated.
|
2021-07-29 20:32:08 +00:00 |
|
|
github-actions[bot]
|
af7b97618b
|
Branch was auto-updated.
|
2021-07-29 20:32:05 +00:00 |
|
|
Jose Enrique Hernandez
|
a3237b801b
|
Merge pull request #1548 from splunk/risk_bugs
Multi Risk and Threat object support
|
2021-07-29 16:31:47 -04:00 |
|
|
patel-bhavin
|
9fbeb683ca
|
testing ymls
|
2021-07-29 12:43:02 -07:00 |
|
|
tccontre
|
5054148a72
|
story
|
2021-07-29 17:14:14 +02:00 |
|
|
tccontre
|
d2129cb6d2
|
icedid
|
2021-07-29 15:19:44 +02:00 |
|
|
patel-bhavin
|
483ee87950
|
minor
|
2021-07-28 16:33:55 -07:00 |
|
|
patel-bhavin
|
4864774de7
|
testing risk refactor
|
2021-07-28 16:30:28 -07:00 |
|
|
peter-cg
|
61c6d8b3d9
|
Adding SSA compile_check util
|
2021-07-28 17:22:48 -05:00 |
|
|
peter-cg
|
a38fef77ce
|
Increase execution time limit
|
2021-07-28 16:40:50 -05:00 |
|
|
research bot
|
4b3e48b6f4
|
updating docs and package bits [ci skip]
|
2021-07-28 20:27:55 +00:00 |
|
|
peter-cg
|
c15909c35d
|
Perform basic tests if no detections/tests have changed but CI code has changed
|
2021-07-28 14:47:42 -05:00 |
|
|
Jose Enrique Hernandez
|
5f0418ce2b
|
Merge pull request #1545 from splunk/blackbolt_duplicate
From @https://github.com/BlackB0lt
|
2021-07-28 15:22:03 -04:00 |
|
|
peter-cg
|
4fd8e9ec42
|
Move from stage to gstage
|
2021-07-28 14:20:08 -05:00 |
|
|
peter-cg
|
914a04abb2
|
Adding token validation
|
2021-07-28 14:20:08 -05:00 |
|
|
peter-cg
|
1a68258954
|
Uploading all data at once
|
2021-07-28 14:16:13 -05:00 |
|
|
peter-cg
|
089906ba48
|
Cleaning up some error reporting and adding activation-wait-loop
|
2021-07-28 14:16:13 -05:00 |
|
|
patel-bhavin
|
9460c02297
|
Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate
|
2021-07-28 11:45:02 -07:00 |
|
|
patel-bhavin
|
04e23cba8b
|
search update
|
2021-07-28 11:44:51 -07:00 |
|
|
Detection Testing Service
|
76335f0ea7
|
Merge branch 'blackbolt_duplicate' of https://github.com/splunk/security_content into blackbolt_duplicate
|
2021-07-28 18:20:18 +00:00 |
|
|
root
|
8c066fcd26
|
Added detection testing service results inDetect processes used for System Network Configuration Discovery
|
2021-07-28 18:20:17 +00:00 |
|
|
root
|
2fac7f3a74
|
Added detection testing service results inDetect New Open S3 Buckets over AWS CLI
|
2021-07-28 18:19:22 +00:00 |
|
|
patel-bhavin
|
ea8de7ad52
|
Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate
|
2021-07-28 10:52:39 -07:00 |
|
|
patel-bhavin
|
ecf2886c43
|
revert
|
2021-07-28 10:52:22 -07:00 |
|
|
Bhavin Patel
|
74e0266341
|
Update detect_new_open_s3_buckets_over_aws_cli.yml
|
2021-07-27 16:50:03 -07:00 |
|