divious1
|
ba2fa59b5e
|
adding 3 rba examples
|
2021-06-19 22:15:49 -04:00 |
|
divious1
|
6c518294ed
|
minor update
|
2021-06-17 21:44:20 -04:00 |
|
divious1
|
c1f4cae5b6
|
working example of risk object as well as threat object with ses annotations
|
2021-06-17 21:43:50 -04:00 |
|
divious1
|
8144275f34
|
making it a correct yml
|
2021-06-16 18:06:36 -04:00 |
|
divious1
|
1b076b9809
|
observables
|
2021-06-16 18:02:29 -04:00 |
|
divious1
|
e0446a8ebf
|
adding risk score
|
2021-06-16 13:52:16 -04:00 |
|
divious1
|
66c4215805
|
first test
|
2021-06-16 13:46:22 -04:00 |
|
patel-bhavin
|
667396b4ce
|
updated rba spec
|
2021-06-15 17:04:51 -07:00 |
|
P4T12ICK
|
ec1a205bb5
|
Merge pull request #1442 from splunk/data_exfil
data_exfil
|
2021-06-15 16:23:17 +02:00 |
|
P4T12ICK
|
62ce70ce18
|
Merge branch 'develop' into data_exfil
|
2021-06-15 16:18:22 +02:00 |
|
tccontre
|
197e73cd61
|
de
|
2021-06-15 15:51:08 +02:00 |
|
mhart-splunk
|
6270837a4c
|
Excessive win temp detection (#1438)
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
|
2021-06-15 09:43:48 -04:00 |
|
tccontre
|
9e009e50b7
|
data_exfil
|
2021-06-15 15:36:41 +02:00 |
|
Jose Enrique Hernandez
|
c0b6f6bffe
|
Merge pull request #1407 from splunk/dependabot/pip/mysql-connector-python-8.0.25
Bump mysql-connector-python from 8.0.24 to 8.0.25
|
2021-06-14 11:37:50 -04:00 |
|
github-actions[bot]
|
d94668d844
|
Branch was auto-updated.
|
2021-06-14 15:33:28 +00:00 |
|
Jose Enrique Hernandez
|
bfc4d1cd98
|
Merge pull request #1406 from splunk/dependabot/pip/ansible-3.4.0
Bump ansible from 3.1.0 to 3.4.0
|
2021-06-14 11:33:12 -04:00 |
|
github-actions[bot]
|
9395db67bc
|
Branch was auto-updated.
|
2021-06-14 15:28:55 +00:00 |
|
github-actions[bot]
|
d26320f350
|
Branch was auto-updated.
|
2021-06-14 15:28:54 +00:00 |
|
Jose Enrique Hernandez
|
48ac32535e
|
Merge pull request #1403 from splunk/dependabot/pip/botocore-1.20.74
Bump botocore from 1.20.30 to 1.20.74
|
2021-06-14 11:28:35 -04:00 |
|
github-actions[bot]
|
33f326de2b
|
Branch was auto-updated.
|
2021-06-14 15:24:18 +00:00 |
|
github-actions[bot]
|
bc0a1f1f9a
|
Branch was auto-updated.
|
2021-06-14 15:24:18 +00:00 |
|
github-actions[bot]
|
8d9c89ff00
|
Branch was auto-updated.
|
2021-06-14 15:24:17 +00:00 |
|
Jose Enrique Hernandez
|
585f87dbd8
|
Merge pull request #1402 from splunk/dependabot/pip/azure-mgmt-resource-17.0.0
Bump azure-mgmt-resource from 16.1.0 to 17.0.0
|
2021-06-14 11:23:51 -04:00 |
|
github-actions[bot]
|
f56fd2e97d
|
Branch was auto-updated.
|
2021-06-11 21:15:04 +00:00 |
|
github-actions[bot]
|
31c7049591
|
Branch was auto-updated.
|
2021-06-11 21:15:03 +00:00 |
|
github-actions[bot]
|
f8be256efe
|
Branch was auto-updated.
|
2021-06-11 21:15:02 +00:00 |
|
github-actions[bot]
|
cf09dfe776
|
Branch was auto-updated.
|
2021-06-11 21:15:01 +00:00 |
|
Bhavin Patel
|
5b94efe450
|
Merge pull request #1439 from splunk/updating-SAAWS-readme
Update README.md
|
2021-06-11 14:14:39 -07:00 |
|
Jose Enrique Hernandez
|
1a0d4ef4ad
|
Update README.md
|
2021-06-11 17:07:19 -04:00 |
|
Jose Enrique Hernandez
|
7febccc44a
|
Update README.md
|
2021-06-11 16:58:03 -04:00 |
|
research bot
|
67de895441
|
updating docs and package bits [ci skip]
|
2021-06-10 18:46:43 +00:00 |
|
github-actions[bot]
|
564b202cf9
|
Branch was auto-updated.
|
2021-06-10 17:32:09 +00:00 |
|
github-actions[bot]
|
a4a92872fd
|
Branch was auto-updated.
|
2021-06-10 17:32:08 +00:00 |
|
github-actions[bot]
|
8c0038c34a
|
Branch was auto-updated.
|
2021-06-10 17:32:07 +00:00 |
|
github-actions[bot]
|
65536c3fb5
|
Branch was auto-updated.
|
2021-06-10 17:32:07 +00:00 |
|
Bhavin Patel
|
5216a108ef
|
Merge pull request #1434 from splunk/excessive_taskhost_process_detection
Excessive taskhost process detection
v3.23.0
|
2021-06-10 10:31:41 -07:00 |
|
root
|
56a065240b
|
Added detection testing service results inExcessive number of taskhost processes
|
2021-06-09 20:58:34 +00:00 |
|
Michael Hart
|
990b3cd13a
|
Fixing analytic story yaml
|
2021-06-09 16:10:03 -04:00 |
|
Michael Hart
|
af4eff8cb5
|
Fixing file reference name
|
2021-06-09 14:57:17 -04:00 |
|
Michael Hart
|
7236281a42
|
Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection
|
2021-06-09 14:24:41 -04:00 |
|
Michael Hart
|
144bcaff80
|
Adding in test file
|
2021-06-09 14:20:03 -04:00 |
|
github-actions[bot]
|
689fcc5ad1
|
Branch was auto-updated.
|
2021-06-09 17:37:32 +00:00 |
|
github-actions[bot]
|
12dd691f5f
|
Branch was auto-updated.
|
2021-06-09 17:37:31 +00:00 |
|
github-actions[bot]
|
048bbf2a53
|
Branch was auto-updated.
|
2021-06-09 17:37:30 +00:00 |
|
github-actions[bot]
|
c19388248b
|
Branch was auto-updated.
|
2021-06-09 17:37:29 +00:00 |
|
Bhavin Patel
|
e0f0fdf5b2
|
Merge pull request #1432 from splunk/revil
revil
|
2021-06-09 10:37:12 -07:00 |
|
github-actions[bot]
|
5027d2994c
|
Branch was auto-updated.
|
2021-06-09 17:32:54 +00:00 |
|
github-actions[bot]
|
c7c40ef835
|
Branch was auto-updated.
|
2021-06-09 17:32:53 +00:00 |
|
github-actions[bot]
|
f011b3408e
|
Branch was auto-updated.
|
2021-06-09 17:32:53 +00:00 |
|
github-actions[bot]
|
f791bc577a
|
Branch was auto-updated.
|
2021-06-09 17:32:52 +00:00 |
|