admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,377 Commits 697 Branches 195 Tags
a9916caef1bf56ebd34ef963b596e9b2d0fa4bfb
Commit Graph

2377 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
root a9916caef1 Added detection testing service results inDump LSASS via comsvcs DLL 2020-09-17 07:03:16 +00:00
root a52623d565 Added detection testing service results inDetect Credential Dumping through LSASS access 2020-09-17 07:03:16 +00:00
root 0f04cbef27 Added detection testing service results inCreate Remote Thread into LSASS 2020-09-17 07:03:16 +00:00
root 2f78594096 Added detection testing service results inAccess LSASS Memory for Dump Creation 2020-09-17 07:03:16 +00:00
Bhavin Patel 7c8dd3519b Merge pull request #677 from splunk/copyright_readme 
add license to readme
 2020-09-16 09:07:27 -07:00
P4T12ICK 7f6b8595b8 add license to readme 2020-09-16 17:59:51 +02:00
Jose Enrique Hernandez 2fadf948da Merge pull request #630 from splunk/TR-82-risk-tagging 
[TR-82] add in logic for risk tagging after synching with ESCU requirements
 2020-09-10 12:23:59 -04:00
divious1 8daac1602b Merge branch 'TR-82-risk-tagging' of github.com:splunk/security-content into TR-82-risk-tagging 2020-09-10 12:17:26 -04:00
divious1 9bfc5f9f4e updated spec docs and also added one more example 2020-09-10 12:17:21 -04:00
Jose Enrique Hernandez c76fc34e3f Merge branch 'develop' into TR-82-risk-tagging 2020-09-09 23:33:03 -04:00
dependabot-preview[bot] f76e66d184 Merge pull request #659 from splunk/dependabot/pip/pyrsistent-0.17.2 2020-09-09 09:47:32 +00:00
dependabot-preview[bot] 8d1b7e1395 Bump pyrsistent from 0.17.1 to 0.17.2 
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.1 to 0.17.2.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.1...v0.17.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-09 09:42:22 +00:00
dependabot-preview[bot] 9cdc721ad6 Merge pull request #656 from splunk/dependabot/pip/pyrsistent-0.17.1 2020-09-09 07:36:36 +00:00
dependabot-preview[bot] 027b8ce1a1 Bump pyrsistent from 0.17.0 to 0.17.1 
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.17.0 to 0.17.1.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.17.0...v0.17.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-09 07:31:42 +00:00
dependabot-preview[bot] 83a35dcc65 Merge pull request #655 from splunk/dependabot/pip/pyrsistent-0.17.0 2020-09-08 19:42:40 +00:00
dependabot-preview[bot] c8a4d57195 Bump pyrsistent from 0.16.0 to 0.17.0 
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/compare/v0.16.0...v0.17.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-08 19:38:00 +00:00
jzsplunk 19f3778dda Merge branch 'develop' into TR-82-risk-tagging 2020-09-08 09:52:12 -07:00
P4T12ICK 66f74754f6 Merge pull request #646 from splunk/update_test_files 
updated test files
 2020-09-07 13:27:51 +02:00
P4T12ICK 3e0cfa84cb updated test files 2020-09-07 13:18:03 +02:00
dependabot-preview[bot] 8400f241ca Merge pull request #642 from splunk/dependabot/pip/identify-1.5.0 2020-09-05 19:41:11 +00:00
dependabot-preview[bot] e6d5e4eda7 Bump identify from 1.4.30 to 1.5.0 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.30 to 1.5.0.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.30...v1.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-05 19:34:10 +00:00
dependabot-preview[bot] 8361e993be Merge pull request #641 from splunk/dependabot/pip/attrs-20.2.0 2020-09-05 10:43:31 +00:00
dependabot-preview[bot] 443de49218 Bump attrs from 20.1.0 to 20.2.0 
Bumps [attrs](https://github.com/python-attrs/attrs) from 20.1.0 to 20.2.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/20.1.0...20.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-05 10:37:59 +00:00
bpatel 637ec487df risk validation 2020-09-03 11:30:09 -07:00
bpatel 20b1130737 Merge branch 'TR-82-risk-tagging' of https://github.com/splunk/security-content into TR-82-risk-tagging 2020-09-03 11:10:26 -07:00
bpatel 11db020423 risk validation 2020-09-03 11:09:52 -07:00
jzsplunk ee38b1d8cd [TR-82] reset markdown to whats in develop. 2020-09-02 12:07:14 -07:00
bpatel 367dd69bd7 generate testing 2020-09-02 11:07:08 -07:00
jzsplunk 1fac31b330 [TR-82] reset markdown to whats in develop. 2020-09-02 10:44:22 -07:00
jzsplunk 0db46f89dc [TR-82] first cut of validation logic for risk scoring. 2020-09-01 17:55:14 -07:00
jzsplunk 5efea5eb85 Merge branch 'develop' into TR-82-risk-tagging 2020-09-01 17:12:21 -07:00
dependabot-preview[bot] e3633953d9 Merge pull request #634 from splunk/dependabot/pip/identify-1.4.30 2020-09-01 07:56:09 +00:00
dependabot-preview[bot] 77e2a8e22d Bump identify from 1.4.29 to 1.4.30 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.29 to 1.4.30.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.29...v1.4.30)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-09-01 07:51:15 +00:00
dependabot-preview[bot] 6456cb2449 Merge pull request #633 from splunk/dependabot/pip/more-itertools-8.5.0 2020-08-28 18:51:17 +00:00
dependabot-preview[bot] 9d3694b18e Bump more-itertools from 8.4.0 to 8.5.0 
Bumps [more-itertools](https://github.com/more-itertools/more-itertools) from 8.4.0 to 8.5.0.
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](https://github.com/more-itertools/more-itertools/compare/v8.4.0...8.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-08-28 18:45:53 +00:00
Jose Enrique Hernandez a2688815db Merge branch 'develop' into TR-82-risk-tagging 2020-08-27 16:48:15 -04:00
research bot 346fcc2a18 updating docs and package bits [ci skip] 2020-08-27 18:42:27 +00:00
Bhavin Patel 2a13216059 Merge pull request #625 from splunk/coverage_update 
updated both maps fixed errors with coverage
v3.0.6 		2020-08-25 11:31:23 -07:00
Bhavin Patel ac69800ab4 Merge branch 'develop' into coverage_update 2020-08-25 11:26:03 -07:00
Bhavin Patel f58ded02dc Merge branch 'develop' into TR-82-risk-tagging 2020-08-25 09:44:32 -07:00
Jose Enrique Hernandez 463f218ef9 Merge pull request #619 from splunk/PR_609 
Pr 609
 2020-08-25 12:19:00 -04:00
Jose Enrique Hernandez a66740b506 Merge branch 'develop' into PR_609 2020-08-25 12:13:24 -04:00
Bhavin Patel 00653ac542 Merge pull request #623 from splunk/fixawsk8sfailuresrcuser 
newfixawsdetectpkey
 2020-08-24 12:47:10 -07:00
jzsplunk 3097f4e692 [TR-82] cleanup spec markdown for new risk params. 2020-08-24 10:34:09 -07:00
jzsplunk 86708a89e2 [TR-82] fix savedsearches annotations logic. 2020-08-24 10:24:29 -07:00
Jose Enrique Hernandez 5eb6c522c6 Merge branch 'develop' into PR_609 2020-08-24 12:50:54 -04:00
Jose Enrique Hernandez f97c0c6d83 Merge pull request #612 from inspired/mbjerkeland-develop 
Layer 2 Cisco Network detections
 2020-08-24 12:50:38 -04:00
Jose Enrique Hernandez d140413a50 Merge branch 'develop' into PR_609 2020-08-24 12:42:12 -04:00
Jose Enrique Hernandez 98e2127d89 Merge branch 'develop' into mbjerkeland-develop 2020-08-24 12:41:57 -04:00
Jose Enrique Hernandez 27cbc9136b Merge branch 'develop' into coverage_update 2020-08-24 12:41:43 -04:00