admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
25,478 Commits 697 Branches 195 Tags
bd1c8364f10cb3f08ed080cc548e6432e47d1136
Commit Graph

25478 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nasreddine Bencherchali bd1c8364f1 CI fixes 2025-01-22 20:57:29 +01:00
Nasreddine Bencherchali b1bf4c6310 more fixes 2025-01-22 20:51:36 +01:00
Nasreddine Bencherchali 8cf6cfecf6 rba changes 2025-01-22 20:18:12 +01:00
Nasreddine Bencherchali 480e29b27b remove fields 2025-01-22 12:12:08 +01:00
Nasreddine Bencherchali c0418cff2e Merge branch 'develop' of https://github.com/splunk/security_content into major-updates 2025-01-22 11:40:26 +01:00
Bhavin Patel 8431eaee91 Merge pull request #3286 from splunk/version_bump_alpha2 
Version bumps
 2025-01-21 14:43:24 -08:00
research-bot 3d646fa16d updating version 2025-01-21 14:34:51 -08:00
Bhavin Patel f1ca83e7dc Merge pull request #3204 from splunk/rba_migration 
RBA Migration
 2025-01-21 14:17:47 -08:00
research-bot 8bf0425187 bump to alpha2 2025-01-21 13:58:50 -08:00
Nasreddine Bencherchali 9b97d31129 bug fix 2025-01-20 19:19:41 +01:00
Nasreddine Bencherchali 65cea95443 Update windows_sensitive_registry_hive_dump_via_commandline.yml 2025-01-20 18:33:03 +01:00
Nasreddine Bencherchali 473b732972 Update office_product_spawning_wmic.yml 2025-01-20 18:30:36 +01:00
Nasreddine Bencherchali 3452135c58 update more office analytics and others 2025-01-20 18:29:42 +01:00
Nasreddine Bencherchali b3d58a6b4e update to pass tests 2025-01-20 17:43:32 +01:00
Nasreddine Bencherchali ec6f2da84d Update windows_password_policy_discovery_with_net.yml 2025-01-20 16:45:15 +01:00
Nasreddine Bencherchali 0d976cfffe additional updates and fixes 2025-01-20 16:42:07 +01:00
Nasreddine Bencherchali 548deb0b4b update logic to match tests 2025-01-20 15:11:16 +01:00
Nasreddine Bencherchali 16e99d2f3d Merge branch 'develop' into major-updates 2025-01-20 11:54:03 +01:00
Nasreddine Bencherchali 04d10316f8 upgrade analytics version 2025-01-20 11:02:07 +01:00
Nasreddine Bencherchali 51106278d0 fix additional issues with filter macros 2025-01-20 10:51:42 +01:00
Nasreddine Bencherchali 1e430e5cf4 fix error with filter macros 2025-01-20 10:45:36 +01:00
research-bot d2726d6d0e specify ctl version 2025-01-17 17:14:37 -08:00
research-bot fc2b5d4a1e empty commit 2025-01-17 17:12:35 -08:00
Nasreddine Bencherchali 0d36a4ed1a update 048839e4-1eaa-43ff-8a22-86d17f6fcc13 2025-01-17 18:45:32 +01:00
Nasreddine Bencherchali be154a1bdc update 827409a1-5393-4d8d-8da4-bbb297c262a7 2025-01-17 15:45:43 +01:00
Nasreddine Bencherchali c1bee7dc58 update additional analytics 2025-01-17 12:57:09 +01:00
Nasreddine Bencherchali 4476cd6bfa add rename to auditd analytics 2025-01-17 12:56:57 +01:00
pyth0n1c b49a76db7f fix baseline which referenced lookups 
that do not exist
 2025-01-16 15:23:47 -08:00
Nasreddine Bencherchali 9fea5dc874 rename some analytics 2025-01-16 23:04:11 +01:00
Nasreddine Bencherchali aa6a3f340a move to deprecated 2025-01-16 23:03:54 +01:00
Lou Stella e5269905d9 Merge pull request #3269 from splunk/strict_yml_from_rba 
Strict yml from rba
 2025-01-16 12:49:33 -06:00
pyth0n1c 5b6f8ea262 Fix more errors with missing lookups, baselines, and detections 2025-01-16 10:45:46 -08:00
Lou Stella 8894f2dbfc Merge branch 'develop' into rba_migration 2025-01-16 12:14:04 -06:00
Michael Haag 8ce3783394 Update windows_exchange_autodiscover_ssrf_abuse.yml 
- Updated detection description to better explain ProxyShell (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207) and ProxyNotShell (CVE-2022-41040, CVE-2022-41082) attack patterns
- Enhanced search query:
  - X-Rps-CAT parameter
  - Suspicious user agent strings
 2025-01-16 10:02:05 -07:00
Jose Enrique Hernandez 863eb07dc9 Merge pull request #3281 from splunk/remove_auto_update 
removed auto update
 2025-01-15 19:26:05 -05:00
Jose Enrique Hernandez 88926b1620 removed auto update 2025-01-15 19:24:23 -05:00
ljstella ef2ac2a45f Removal of fields from new detections 2025-01-15 15:17:50 -06:00
Bhavin Patel 9ee2e1de7d Branch was auto-updated. 2025-01-15 13:05:43 -08:00
ljstella 70861d2d57 More migrations: AWS, Azure, O365 2025-01-15 15:05:18 -06:00
Lou Stella 1d086b4a2b Merge branch 'rba_migration' into strict_yml_from_rba 2025-01-15 14:16:35 -06:00
Lou Stella 9c5b3aadd0 Merge branch 'develop' into rba_migration 2025-01-15 14:12:36 -06:00
Patrick Bareiss a7d061c5a1 Add ASL AWS CloudTrail data source 2025-01-15 14:07:43 -06:00
research-bot 2b637650a8 minor udpates to yaml 2025-01-15 14:06:09 -06:00
Patrick Bareiss 633655df4c improvements 2025-01-15 14:06:09 -06:00
Patrick Bareiss 37ec540937 change 2025-01-15 14:06:09 -06:00
Patrick Bareiss 8e0b643626 new detections 2025-01-15 14:06:09 -06:00
Patrick Bareiss 22e401ab90 new detection 2025-01-15 14:06:09 -06:00
Patrick Bareiss e937232ec9 bug fix 2025-01-15 14:06:09 -06:00
Patrick Bareiss 378645172f new detection 2025-01-15 14:06:09 -06:00
Patrick Bareiss 2f0c371d9b new detection 2025-01-15 14:01:34 -06:00