admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,701 Commits 697 Branches 195 Tags
bbad412f7779470e4cc2296cac61dfee35ceeb95
Commit Graph

17701 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
srv-rr-gh-researchbt bbad412f77 Branch was auto-updated. 2022-10-18 11:23:38 -07:00
Bhavin Patel 996a830c0b Merge pull request #2409 from splunk/mshta_reg 
mshta_reg
 2022-10-18 11:22:54 -07:00
srv-rr-gh-researchbt 7a022070f8 Branch was auto-updated. 2022-10-18 11:19:44 -07:00
srv-rr-gh-researchbt 60dcad02c6 Branch was auto-updated. 2022-10-18 11:19:33 -07:00
Bhavin Patel b72ecf09d1 Merge pull request #2413 from splunk/change_dga_detection_wiki_link 
changing the wiki link in the dga detection
 2022-10-18 11:19:11 -07:00
Namratha Sreekanta 2100ef6fd1 changing the wiki link in the dga detection 2022-10-14 14:18:11 -07:00
srv-rr-gh-researchbt 3683b1d9d0 Branch was auto-updated. 2022-10-14 12:33:33 -07:00
srv-rr-gh-researchbt 2b8f8f071b Branch was auto-updated. 2022-10-14 12:33:29 -07:00
research bot be4daa969c Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2022-10-14 19:33:11 +00:00
Bhavin Patel b1bb130cd9 Merge pull request #2407 from splunk/fix_api_update_error 
Fix generate API
v3.50.0 		2022-10-14 11:50:47 -07:00
tccontre 0867949d4d Update windows_mshta_execution_in_registry.yml 2022-10-14 17:51:37 +02:00
tccontre 6da0d7913a Update windows_mshta_execution_in_registry.test.yml 2022-10-14 17:50:56 +02:00
tccontre b886ffa10f Update windows_mshta_execution_in_registry.yml 2022-10-14 11:47:18 +02:00
tccontre 0295a489d4 Update windows_mshta_execution_in_registry.test.yml 2022-10-14 11:14:07 +02:00
tccontre b5cf28dff5 Update windows_mshta_execution_in_registry.yml 2022-10-14 11:13:52 +02:00
tccontre b67c3bf8ce Update windows_mshta_execution_in_registry.test.yml 2022-10-14 10:45:52 +02:00
tccontre 93cc5d602c Update windows_mshta_execution_in_registry.yml 2022-10-14 10:45:39 +02:00
tccontre 135e12500f mshta_reg 2022-10-14 10:28:30 +02:00
pyth0n1c 08fa572d42 Bump all of the actions versions, 
if required
 2022-10-13 13:19:08 -07:00
pyth0n1c 6b8d2ac69c Fixed missing creation of api archive 2022-10-13 12:49:16 -07:00
pyth0n1c 9a9b290f83 Ensure that all the folders in dist 
are updated on tag. Upload the
API_Content artifact as well as
part of a test and as part of
a release
 2022-10-13 12:39:45 -07:00
pyth0n1c 7056578d21 Fix generate API. Also, return nonzero error 
code when contentctl action raises an
uncaught error
 2022-10-13 10:08:12 -07:00
David Dorsey c83fc61042 Updated comments on finding report 2022-10-13 10:21:47 -05:00
Mike Radka (Splunk) f02432bacd Pretty up the README links 2022-10-07 14:26:10 -04:00
Mike Radka (Splunk) dd10927a50 Pretty up the README links 2022-10-07 14:25:47 -04:00
Michael Radka 8af13e340c event_id -> event_uid 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 14:17:19 -04:00
Michael Radka b3d1f44ec4 event_id -> event_uid 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 14:16:58 -04:00
Michael Radka 6e18005830 process -> process.cmd_line 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 14:14:02 -04:00
Michael Radka 2da9b22df8 parent_process_name -> actor_process.file.name 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 14:07:36 -04:00
Michael Radka ff545bac1b process_name -> process.file.name 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 14:05:09 -04:00
Michael Radka 0d4312e4fb Update activity_id 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 14:00:23 -04:00
Michael Radka 79068289f5 Update category_uid and class_uid 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 13:58:31 -04:00
Michael Radka d8d79fa3d1 Update OCSF 4688 samples 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 13:55:46 -04:00
Michael Radka 48772734ee Add links to old/new schemas 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 13:51:51 -04:00
Michael Radka 2a525afb1e Add ocsf old and new samples for findings report exercise 
Signed-off-by: Michael Radka <mradka@splunk.com>
 2022-10-07 13:47:17 -04:00
David Dorsey 1f29dd4bc4 Annotated finding report for meeting later 2022-10-07 08:33:12 -05:00
srv-rr-gh-researchbt bd33952e56 Branch was auto-updated. 2022-10-04 11:48:49 -07:00
Bhavin Patel 7a6cada737 Merge pull request #2391 from splunk/MovingOkta 
Oktahaagapus
 2022-10-04 11:48:18 -07:00
srv-rr-gh-researchbt 5c6af6f9c6 Branch was auto-updated. 2022-10-03 17:04:11 -07:00
srv-rr-gh-researchbt 84992f0134 Branch was auto-updated. 2022-10-03 17:04:09 -07:00
Bhavin Patel 811ac220d3 Merge pull request #2369 from splunk/aws_account_takeover_rename 
AWS Identity and Access Management Account Takeover
 2022-10-03 17:03:51 -07:00
Bhavin Patel 6855e7aea0 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2022-10-03 13:37:28 -07:00
srv-rr-gh-researchbt 95263c62ea Branch was auto-updated. 2022-10-03 13:18:12 -07:00
srv-rr-gh-researchbt 0826928ee3 Branch was auto-updated. 2022-10-03 13:18:08 -07:00
srv-rr-gh-researchbt c38c37a71f Branch was auto-updated. 2022-10-03 13:18:03 -07:00
Bhavin Patel 2c04958e45 Merge pull request #2387 from splunk/OktaHaag 
Haagatron
 2022-10-03 13:17:45 -07:00
Bhavin Patel 8a6bc4e348 Merge branch 'develop' into OktaHaag 2022-10-03 13:15:37 -07:00
patel-bhavin 8f118680c8 Merge branch 'aws_account_takeover_rename' of github.com:splunk/security_content into aws_account_takeover_rename 2022-10-03 12:23:37 -07:00
patel-bhavin cf08498d1b update to spl 2022-10-03 12:23:27 -07:00
dependabot[bot] 4ba8bcfa3f Merge pull request #2401 from splunk/dependabot/pip/splunk-appinspect-2.26.0 2022-10-03 18:53:25 +00:00