admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
15,175 Commits 697 Branches 195 Tags
bc7d8af43706bfd9f87bfb736f7571c820eaee40
Commit Graph

15175 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK bc7d8af437 small improvements ssa generate 2022-04-06 11:43:01 +02:00
P4T12ICK be59f544d0 small improvements ssa generate 2022-04-06 11:24:34 +02:00
P4T12ICK dca6dfee2d small improvements ssa generate 2022-04-06 10:35:52 +02:00
Bhavin Patel c5528e72ea Merge pull request #2113 from splunk/InDirectToVideo 
LOLBin
 2022-04-05 14:51:59 -07:00
pyth0n1c 082d15ac3d Updating paths to dataset for testing 2022-04-05 14:14:42 -07:00
Bhavin Patel 1b5deca353 Merge pull request #2150 from splunk/hermeticwipertag 
Hermeticwipertag
 2022-04-05 13:56:21 -07:00
pyth0n1c fd5a14cae3 Reverting changes that we made to the 
macros file.
 2022-04-05 13:37:51 -07:00
pyth0n1c 9638205131 Fixed paths to attack data sets 
and updated required_fields
format to matrch the rest of the
detections in the repo.
 2022-04-05 13:36:36 -07:00
pyth0n1c ec2c1bff73 Branch was auto-updated. 2022-04-05 13:12:38 -07:00
Bhavin Patel 0f0bac3789 Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo 
Fix Detection Testing YML
 2022-04-05 13:12:05 -07:00
pyth0n1c c7e1a04873 Update windows_indirect_command_execution_via_forfiles.yml 
Updated dataset.  Need to update again after dataset is merged from branch into main of attack_data
 2022-04-05 10:21:42 -07:00
pyth0n1c 30ff35bcd8 Update windows_indirect_command_execution_via_pcalua.yml 
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
 2022-04-05 10:20:58 -07:00
pyth0n1c b385ef2ead Update windows_indirect_command_execution_via_pcalua.yml 
Adding second reference for pcalua.exe
 2022-04-05 10:15:26 -07:00
pyth0n1c 0cde033ac1 Update windows_indirect_command_execution_via_pcalua.yml 
Added UUID
 2022-04-05 10:13:20 -07:00
pyth0n1c 71fe3edea7 Update windows_indirect_command_execution_via_forfiles.yml 
Added UUID
 2022-04-05 10:12:45 -07:00
pyth0n1c 90424b7e0c Update windows_indirect_command_execution_via_forfiles.yml 
Updated description info on forfiles detection yaml
 2022-04-05 10:08:49 -07:00
pyth0n1c 2d2fdb6be0 Update windows_indirect_command_execution_via_pcalua.yml 
Updated description in YML
 2022-04-05 10:05:21 -07:00
pyth0n1c 90abd35b92 Previously had uses and run keys in the 
same step.  That caused all jobs
to fail at parsing the workflow yml.
 2022-04-05 09:40:41 -07:00
Rod Soto 901a73aa5f secondbatchwinprivesctaghermeticwiper 2022-04-05 08:02:47 -07:00
Rod Soto b3cd632c29 hermeticwipertagswindowsprivesc 2022-04-05 07:55:03 -07:00
P4T12ICK 9e79d31e66 Merge pull request #2131 from splunk/mac_os_detections 
plutil mac os detection
 2022-04-05 15:37:48 +02:00
pyth0n1c eb0cbac38e Branch was auto-updated. 2022-04-04 16:57:13 -07:00
Jose Enrique Hernandez 16175e510f Merge pull request #2149 from splunk/NightlyDetectionTestingS3Artifacts 
Nightly detection testing s3 artifacts
 2022-04-04 19:56:56 -04:00
pyth0n1c eafc7f7867 Branch was auto-updated. 2022-04-04 16:39:04 -07:00
pyth0n1c 3e2136f784 Branch was auto-updated. 2022-04-04 16:38:59 -07:00
Jose Enrique Hernandez 273367a2e0 Merge pull request #2148 from splunk/IncreasePostWidth 
Increased the width of research.splunk.com posts
 2022-04-04 19:38:41 -04:00
pyth0n1c 93176ca83b Updated S3 upload code to proper bucket path 2022-04-04 15:52:49 -07:00
pyth0n1c 8abf0592fc Converting string to fstring 2022-04-04 15:32:09 -07:00
pyth0n1c 0209621f81 Code to generate and upload 
pass rate badge after completion
of a scheduled run.  Also uploads
the summary_test_results.json file
for use on research.splunk.com
 2022-04-04 15:29:28 -07:00
pyth0n1c a01e3c8734 Increased the width of the posts 
for all of the content.  This reduces
the extremely large whitespace
columns on the sides of all the
content and is a more efficient
use of space.
 2022-04-04 13:38:50 -07:00
pyth0n1c 2287e6597f Branch was auto-updated. 2022-04-04 12:41:37 -07:00
Bhavin Patel 2a054936cc Merge pull request #2074 from splunk/TR_1550_Kerberos_Coverage_2 
Active Directory Kerberos Attacks - Part 2
 2022-04-04 12:41:17 -07:00
Bhavin Patel 665c25a728 Update kerberos_tgt_request_using_rc4_encryption.yml 2022-04-04 12:04:55 -07:00
research bot 5caec4b36b updating docs and package bits [ci skip] 2022-04-04 18:15:20 +00:00
pyth0n1c 067efc3485 Branch was auto-updated. 2022-04-04 09:25:57 -07:00
pyth0n1c 6046907270 Branch was auto-updated. 2022-04-04 09:25:55 -07:00
tccontre f6f5db9ade Merge pull request #2147 from splunk/descp_fix 
descp_fix
v3.37.1 		2022-04-04 18:25:34 +02:00
tccontre 3ca03bc7fa descp_fix 2022-04-04 17:11:12 +02:00
pyth0n1c ea9969a6f1 Branch was auto-updated. 2022-04-04 05:07:04 -07:00
pyth0n1c 0126bba9f4 Branch was auto-updated. 2022-04-04 05:07:01 -07:00
P4T12ICK e0c30ec1a5 Merge pull request #2146 from splunk/improve_detection_github 
improved GitHub detection
 2022-04-04 14:06:40 +02:00
P4T12ICK 9354dad823 improved GitHub detection 2022-04-04 13:23:37 +02:00
pyth0n1c f89e4664e1 Branch was auto-updated. 2022-04-04 04:15:08 -07:00
pyth0n1c 92957c039d Branch was auto-updated. 2022-04-04 04:15:07 -07:00
tccontre 1d1ffe6c74 Merge pull request #2144 from splunk/service_name_added 
service_name_added
 2022-04-04 13:14:44 +02:00
pyth0n1c 6208c5d2ec Branch was auto-updated. 2022-04-04 03:47:15 -07:00
pyth0n1c 6e72249df8 Branch was auto-updated. 2022-04-04 03:47:13 -07:00
pyth0n1c 172e06ad6c Branch was auto-updated. 2022-04-04 03:47:11 -07:00
P4T12ICK 68738c66fc Merge pull request #2145 from splunk/github_detection 
github actions detection
 2022-04-04 12:46:53 +02:00
P4T12ICK 4ffa5540e4 github actions detection 2022-04-04 11:08:39 +02:00