Commit Graph

7641 Commits

Author SHA1 Message Date
divious1 ba2fa59b5e adding 3 rba examples 2021-06-19 22:15:49 -04:00
divious1 6c518294ed minor update 2021-06-17 21:44:20 -04:00
divious1 c1f4cae5b6 working example of risk object as well as threat object with ses annotations 2021-06-17 21:43:50 -04:00
divious1 8144275f34 making it a correct yml 2021-06-16 18:06:36 -04:00
divious1 1b076b9809 observables 2021-06-16 18:02:29 -04:00
divious1 e0446a8ebf adding risk score 2021-06-16 13:52:16 -04:00
divious1 66c4215805 first test 2021-06-16 13:46:22 -04:00
patel-bhavin 667396b4ce updated rba spec 2021-06-15 17:04:51 -07:00
P4T12ICK ec1a205bb5 Merge pull request #1442 from splunk/data_exfil
data_exfil
2021-06-15 16:23:17 +02:00
P4T12ICK 62ce70ce18 Merge branch 'develop' into data_exfil 2021-06-15 16:18:22 +02:00
tccontre 197e73cd61 de 2021-06-15 15:51:08 +02:00
mhart-splunk 6270837a4c Excessive win temp detection (#1438)
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
2021-06-15 09:43:48 -04:00
tccontre 9e009e50b7 data_exfil 2021-06-15 15:36:41 +02:00
Jose Enrique Hernandez c0b6f6bffe Merge pull request #1407 from splunk/dependabot/pip/mysql-connector-python-8.0.25
Bump mysql-connector-python from 8.0.24 to 8.0.25
2021-06-14 11:37:50 -04:00
github-actions[bot] d94668d844 Branch was auto-updated. 2021-06-14 15:33:28 +00:00
Jose Enrique Hernandez bfc4d1cd98 Merge pull request #1406 from splunk/dependabot/pip/ansible-3.4.0
Bump ansible from 3.1.0 to 3.4.0
2021-06-14 11:33:12 -04:00
github-actions[bot] 9395db67bc Branch was auto-updated. 2021-06-14 15:28:55 +00:00
github-actions[bot] d26320f350 Branch was auto-updated. 2021-06-14 15:28:54 +00:00
Jose Enrique Hernandez 48ac32535e Merge pull request #1403 from splunk/dependabot/pip/botocore-1.20.74
Bump botocore from 1.20.30 to 1.20.74
2021-06-14 11:28:35 -04:00
github-actions[bot] 33f326de2b Branch was auto-updated. 2021-06-14 15:24:18 +00:00
github-actions[bot] bc0a1f1f9a Branch was auto-updated. 2021-06-14 15:24:18 +00:00
github-actions[bot] 8d9c89ff00 Branch was auto-updated. 2021-06-14 15:24:17 +00:00
Jose Enrique Hernandez 585f87dbd8 Merge pull request #1402 from splunk/dependabot/pip/azure-mgmt-resource-17.0.0
Bump azure-mgmt-resource from 16.1.0 to 17.0.0
2021-06-14 11:23:51 -04:00
github-actions[bot] f56fd2e97d Branch was auto-updated. 2021-06-11 21:15:04 +00:00
github-actions[bot] 31c7049591 Branch was auto-updated. 2021-06-11 21:15:03 +00:00
github-actions[bot] f8be256efe Branch was auto-updated. 2021-06-11 21:15:02 +00:00
github-actions[bot] cf09dfe776 Branch was auto-updated. 2021-06-11 21:15:01 +00:00
Bhavin Patel 5b94efe450 Merge pull request #1439 from splunk/updating-SAAWS-readme
Update README.md
2021-06-11 14:14:39 -07:00
Jose Enrique Hernandez 1a0d4ef4ad Update README.md 2021-06-11 17:07:19 -04:00
Jose Enrique Hernandez 7febccc44a Update README.md 2021-06-11 16:58:03 -04:00
research bot 67de895441 updating docs and package bits [ci skip] 2021-06-10 18:46:43 +00:00
github-actions[bot] 564b202cf9 Branch was auto-updated. 2021-06-10 17:32:09 +00:00
github-actions[bot] a4a92872fd Branch was auto-updated. 2021-06-10 17:32:08 +00:00
github-actions[bot] 8c0038c34a Branch was auto-updated. 2021-06-10 17:32:07 +00:00
github-actions[bot] 65536c3fb5 Branch was auto-updated. 2021-06-10 17:32:07 +00:00
Bhavin Patel 5216a108ef Merge pull request #1434 from splunk/excessive_taskhost_process_detection
Excessive taskhost process detection
v3.23.0
2021-06-10 10:31:41 -07:00
root 56a065240b Added detection testing service results inExcessive number of taskhost processes 2021-06-09 20:58:34 +00:00
Michael Hart 990b3cd13a Fixing analytic story yaml 2021-06-09 16:10:03 -04:00
Michael Hart af4eff8cb5 Fixing file reference name 2021-06-09 14:57:17 -04:00
Michael Hart 7236281a42 Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection 2021-06-09 14:24:41 -04:00
Michael Hart 144bcaff80 Adding in test file 2021-06-09 14:20:03 -04:00
github-actions[bot] 689fcc5ad1 Branch was auto-updated. 2021-06-09 17:37:32 +00:00
github-actions[bot] 12dd691f5f Branch was auto-updated. 2021-06-09 17:37:31 +00:00
github-actions[bot] 048bbf2a53 Branch was auto-updated. 2021-06-09 17:37:30 +00:00
github-actions[bot] c19388248b Branch was auto-updated. 2021-06-09 17:37:29 +00:00
Bhavin Patel e0f0fdf5b2 Merge pull request #1432 from splunk/revil
revil
2021-06-09 10:37:12 -07:00
github-actions[bot] 5027d2994c Branch was auto-updated. 2021-06-09 17:32:54 +00:00
github-actions[bot] c7c40ef835 Branch was auto-updated. 2021-06-09 17:32:53 +00:00
github-actions[bot] f011b3408e Branch was auto-updated. 2021-06-09 17:32:53 +00:00
github-actions[bot] f791bc577a Branch was auto-updated. 2021-06-09 17:32:52 +00:00