admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,484 Commits 697 Branches 195 Tags
aa1c8fab2d3f6699fc7d274fd342f2b0a3c2bf83
Commit Graph

362 Commits

Author SHA1 Message Date
Nasreddine Bencherchali 8cf6cfecf6 rba changes 2025-01-22 20:18:12 +01:00
Nasreddine Bencherchali 3452135c58 update more office analytics and others 2025-01-20 18:29:42 +01:00
Nasreddine Bencherchali 0d976cfffe additional updates and fixes 2025-01-20 16:42:07 +01:00
Nasreddine Bencherchali 082368e86d update reg analytics 2025-01-15 15:55:16 +01:00
Nasreddine Bencherchali 4f16cb3115 update office macro 2025-01-14 20:02:52 +01:00
Nasreddine Bencherchali efa8b09ad3 update powershell analytics 2025-01-14 19:34:31 +01:00
Bhavin Patel 7e2a3877ae Branch was auto-updated. 2025-01-14 10:02:37 -08:00
Bhavin Patel fa2ba7c031 Branch was auto-updated. 2025-01-14 09:04:48 -08:00
Bhavin Patel 6709e590a0 Branch was auto-updated. 2025-01-14 09:04:46 -08:00
Nasreddine Bencherchali 1f060bbddf update to analytics using net 2025-01-13 22:20:46 +01:00
Patrick Bareiss 186061fa94 new detection 2025-01-08 13:53:03 +01:00
dluxtron 3d8919f1c6 reverting macro change 2025-01-08 15:11:19 +10:00
research-bot e66bb09cf4 updating macro 2025-01-07 12:15:23 -08:00
dluxtron 0a1c14df72 fixing syntax & updating macro 2025-01-07 16:51:06 +10:00
dluxtron 0454541c41 Uploading new detections 2025-01-06 16:19:32 +10:00
Nasreddine Bencherchali d8434fbe3a Merge branch 'develop' into issue_3245 2024-12-19 20:36:35 +01:00
research-bot 360a91ebbb remove index 2024-12-18 13:32:03 -08:00
research-bot 99d78af47e udpating ransomware detection 2024-12-12 16:57:42 -08:00
Bhavin Patel 197997fe7c Branch was auto-updated. 2024-12-02 14:18:41 -08:00
Nasreddine Bencherchali d4aed3d50c fix env typo in macros 2024-11-26 23:43:48 +01:00
Nasreddine Bencherchali 038c0af073 enhance coverage - first batch 2024-11-26 14:06:12 +01:00
Michael Haag 8f8a6bd3b4 Raiders of the Lost RDP: The Haag Crusade 2024-11-25 11:44:23 -07:00
Bhavin Patel ad93e8b719 Branch was auto-updated. 2024-11-06 16:01:23 -08:00
research-bot 606354ad63 fixes with new dataset links and spl, macro name update, filter name addtion 2024-11-04 16:45:20 -08:00
Bryan Pluta 1861e6a709 atp detection and macros 2024-10-30 15:50:54 -05:00
dluxtron b17c2d1e17 fixing SPL 2024-10-17 15:41:19 +10:00
Bhavin Patel b2c176c938 Branch was auto-updated. 2024-08-22 22:16:22 +05:30
Michael Haag 39f4e3dadc Guardians of the Haaglaxy 
## Story
- Ivanti Virtual Traffic Manager CVE-2024-7593

## Analytic
- Ivanti VTM New Account Creation
 2024-08-20 10:53:01 -06:00
Bhavin Patel c6ac1365e4 Branch was auto-updated. 2024-08-13 11:36:01 -07:00
Michael Haag 78fb540ca0 Update linux_hosts.yml 2024-08-13 09:34:53 -06:00
tccontre c6d3eac542 linux_auditd_detection 2024-08-09 10:46:52 +02:00
Bhavin Patel 6e2d8fc0b5 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-08-05 17:48:59 -07:00
tccontre f28b995ce3 crowdstrike_analytics 2024-07-31 11:10:41 +02:00
Lou Stella 462ab1971a Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-29 10:10:26 -05:00
ljstella a980709e4b Modified macro name for clarity, updated how to implements with details 2024-07-26 14:11:24 -05:00
Lou Stella 09eb52ec50 Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 10:32:02 -05:00
Bhavin Patel d99d5e5222 Branch was auto-updated. 2024-07-25 16:36:10 -05:00
ljstella 8b3c53f1a0 formatting on macro 2024-07-25 07:33:12 -05:00
pyth0n1c 9bb3600558 Needed to change the name of the osquery macro due to a conflict with the newly introduced osquery data_source. Additionally, fixed a serious error in mapNamesToSecurityContentObjects wherein a Security Content Object of the wrong type could be returned. 2024-07-24 16:15:54 -07:00
Lou Stella 135557163e Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-24 15:41:57 -05:00
Lou Stella a2cbf6bb3d Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-24 15:39:18 -05:00
Michael Haag b5041011c1 The Haag Returns 2024-07-24 12:16:25 -06:00
Bhavin Patel 2413b6c078 remove yamls 2024-07-17 10:18:03 -07:00
Bhavin Patel 91b313f446 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-10 13:58:39 -07:00
Steven Dick 2dd0a49745 Add files via upload 2024-07-09 08:49:37 -04:00
Lou Stella 7fbd13a3dc Release v4.35.0 2024-07-01 17:26:50 +00:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 7539e88c4c Release Branch v4.33.0 2024-06-05 21:05:06 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00