be0667ea2d
Branch was auto-updated.
2022-09-14 09:24:30 -07:00
9e1fe81afe
Merge pull request #2340 from splunk/brute-ratel-1
...
brute-ratel-1
2022-09-14 11:23:59 -05:00
6ff76e699f
Branch was auto-updated.
2022-09-14 09:17:51 -07:00
7acdc93007
Branch was auto-updated.
2022-09-14 09:17:46 -07:00
3002e2e963
Merge pull request #2339 from splunk/TR-2390_Additional_Azure_Detections
...
Update Azure AD Account Takeover Analytic Story
2022-09-14 11:17:05 -05:00
480a6e7d1d
Branch was auto-updated.
2022-09-13 13:53:05 -07:00
4fe7e81c38
Branch was auto-updated.
2022-09-13 13:53:02 -07:00
f8d4b08af5
Branch was auto-updated.
2022-09-13 13:53:01 -07:00
940598b6c2
pass CI testing
2022-09-13 16:52:39 -04:00
754583e5f5
Branch was auto-updated.
2022-09-13 10:12:27 -07:00
c4f53b7ae4
Branch was auto-updated.
2022-09-13 10:12:26 -07:00
934844a293
Branch was auto-updated.
2022-09-13 10:12:23 -07:00
64908593d4
adds RBA to correlation rule titles
2022-09-13 13:11:51 -04:00
e43855c570
lolbas
2022-09-08 19:15:03 -04:00
b3aa8b4bb4
working scripts
2022-09-08 18:01:46 -04:00
6174db54d9
working detection generation
2022-09-08 13:59:46 -04:00
46dbe66fff
removing duplicate
2022-09-07 11:29:01 -04:00
7208f63c96
Branch was auto-updated.
2022-09-06 14:07:51 -07:00
e807d51570
Branch was auto-updated.
2022-09-06 14:07:50 -07:00
ae92b16c0a
Merge pull request #2351 from splunk/fixdescriptionpt
...
addedwords
2022-09-06 14:07:21 -07:00
73e84a326d
fixedpathlog
2022-09-06 13:40:08 -07:00
cca076f667
Branch was auto-updated.
2022-09-02 19:15:41 -04:00
3880a4f1cf
Branch was auto-updated.
2022-09-02 19:15:38 -04:00
e701306956
Branch was auto-updated.
2022-09-02 19:15:35 -04:00
95e4eb048c
Merge pull request #2359 from splunk/fix_sourcetype_for_linux_kernel_module_detection
...
Update linux_kernel_module_enumeration.test.yml
Since this is such a small and simple fix, I have merged it myself without review.
Note that this was just an update to a test file, not a modification to the detection itself.
2022-09-02 19:15:12 -04:00
5c4d054652
Update linux_kernel_module_enumeration.test.yml
...
Changing sourcetype from linux_sysmon --> sysmon_linux
2022-09-02 18:50:48 -04:00
537c13d063
addedwords
2022-08-30 11:56:41 -07:00
2adb6ca2ff
updating docs and package bits [ci skip]
2022-08-29 17:48:48 +00:00
34c6bb1887
Rename windows_service_created_in_uncommon_service_path.test.yml to windows_service_created_with_suspicious_service_path.test.yml
2022-08-29 19:09:19 +02:00
c79cb8f97b
Update windows_service_created_in_uncommon_service_path.test.yml
2022-08-29 19:05:32 +02:00
b59f8ecd34
Update and rename windows_service_created_in_uncommon_service_path.yml to windows_service_created_with_suspicious_service_path.yml
...
windows_service_created_with_suspicious_service_path_filter
2022-08-29 19:04:50 +02:00
024337cf62
improving detections
2022-08-29 11:46:57 -04:00
d9226071a7
Merge branch 'TR-2390_Additional_Azure_Detections' of github.com:splunk/security_content into TR-2390_Additional_Azure_Detections
2022-08-29 11:24:02 -04:00
02976117ce
improving detection
2022-08-29 11:24:00 -04:00
04715d7c08
Branch was auto-updated.
2022-08-26 14:04:35 -07:00
ffa7d052b4
Branch was auto-updated.
2022-08-26 14:04:33 -07:00
2dbcc2aa64
Merge pull request #2323 from splunk/eliminate_duplicate_python_requirements_files
...
Eliminate duplicate python requirements files
2022-08-26 16:04:11 -05:00
92e2d97588
Update detection-testing.yml
...
For a quotation mark
2022-08-26 13:52:30 -07:00
8d611bb546
Update detection-testing.yml
...
Updated to use pip cache
2022-08-26 13:50:57 -07:00
baeba5b319
Fixed pathing
...
Fixed pathing to venv and
requirements.txt files.
2022-08-26 13:34:37 -07:00
305a672f51
Delete contentctl_python_platforms_test.yml
...
Removed extra testing workflow. This logic will
be integrated into a separate repo at a later time.
2022-08-26 13:27:01 -07:00
e5962ef678
Update contentctl_python_platforms_test.yml
...
Reduce platforms we are testing
against for now until we can further
improve support.
2022-08-26 12:22:18 -07:00
c1be892bd1
Merge branch 'develop' into eliminate_duplicate_python_requirements_files
2022-08-26 12:09:54 -07:00
8046a7933e
Branch was auto-updated.
2022-08-26 11:42:38 -07:00
0d484e063f
Branch was auto-updated.
2022-08-26 11:42:37 -07:00
9f2fa92efd
Merge pull request #2336 from splunk/hijack
...
HijackThis
2022-08-26 13:42:17 -05:00
379e1b689a
Branch was auto-updated.
2022-08-26 10:01:46 -07:00
8f2a3bd754
Branch was auto-updated.
2022-08-26 10:01:45 -07:00
bd2d1515cb
Branch was auto-updated.
2022-08-26 10:01:42 -07:00
f9e770eaa5
Update log4shell_cve_2021_44228_exploitation.yml
2022-08-26 11:01:25 -06:00
pyth0n1c