admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,368 Commits 697 Branches 195 Tags
bfbbd8dd18dea755b33eff494ebc6bfc2b6077c0
Commit Graph

1928 Commits

Author SHA1 Message Date
pyth0n1c bfbbd8dd18 Branch was auto-updated. 2022-07-19 09:57:09 -07:00
mvelazco d6dd5098be adding new detection 2022-07-14 13:29:55 -04:00
mvelazco b615728924 fixing file path 2022-07-13 14:38:13 -04:00
mvelazco 7807c66f73 adding new detection 2022-07-13 14:16:09 -04:00
mvelazco 18aa9f2e7a adding new detection 2022-07-12 18:03:26 -04:00
mvelazco f8e28dde20 adding new detection 2022-07-12 13:54:32 -04:00
mvelazco 743b94d8a9 updating test files 2022-07-12 11:22:38 -04:00
mvelazco ba163055eb adding 2 detections 2022-07-11 17:29:18 -04:00
pyth0n1c e8299b4726 Branch was auto-updated. 2022-07-07 09:47:25 -07:00
gowthamarajr 9689073946 Edit windows_powerview_kerberos_service_ticket_request detection 
Edit the windows_powerview_kerberos_service_ticket_request detection to support xml logs
 2022-07-01 16:24:42 -04:00
mhaag-spl db9c7a6e4c Merge branch '4104allday' of https://github.com/splunk/security_content into 4104allday 2022-06-29 12:58:06 -06:00
mhaag-spl 0468911676 fixes2 2022-06-29 12:57:59 -06:00
pyth0n1c c24b800476 Branch was auto-updated. 2022-06-29 11:55:53 -07:00
d1vious b75b56b81d removing test files 2022-06-29 14:18:47 -04:00
mhaag-spl 2920c25c93 fixes 2022-06-29 11:45:21 -06:00
mhaag-spl 8da41163ae reflection 2022-06-29 10:35:44 -06:00
mhaag-spl 23d89687be win32proc 2022-06-29 10:21:35 -06:00
mhaag-spl ca93df0797 adsi 2022-06-29 10:13:46 -06:00
mhaag-spl 0ae31b8ef1 streamreader 2022-06-29 10:00:23 -06:00
pyth0n1c dcfebdea91 Merging latest develop into 4104allday branch in prep for opening PR. 2022-06-27 17:07:31 -07:00
pyth0n1c 3532991644 Updating other spellings of 
XmlWinEventLog to 
xmlwineventlog.  At least in 
data ingest, this is case
sensitive.
 2022-06-27 16:27:32 -07:00
mvelazco 757e6b92b8 updating field name to use ScriptBlockText 2022-06-24 11:18:28 -04:00
mvelazco 2637c12014 updating sourcetype to xmlwineventlog 2022-06-24 11:05:02 -04:00
gowthamarajr fd78ddcb6f Merge branch 'TR-2113_New_Kerberoasting_detections' of https://github.com/splunk/security_content into TR-2113_New_Kerberoasting_detections 2022-06-24 10:17:56 -04:00
gowthamarajr 0f23640526 Updating test file for PowerView SPN detection 2022-06-24 10:17:52 -04:00
pyth0n1c 6f30962fd6 Branch was auto-updated. 2022-06-23 13:55:27 -07:00
mhaag-spl 056b07a686 remove detection 2022-06-23 11:09:07 -06:00
gowthamarajr 28eefb325d adding 2 new detections for kerberoasting 2022-06-22 17:35:37 -04:00
pyth0n1c e53e9cf232 Branch was auto-updated. 2022-06-22 10:19:36 -07:00
Jose Enrique Hernandez cda681eb8b Merge pull request #2260 from splunk/DetectionFixes 
Detection fixes
 2022-06-22 13:19:16 -04:00
pyth0n1c b73ea9e5ae Added another custom_index to a test 
file that was failing because it did not
have one.
 2022-06-21 16:59:44 -07:00
pyth0n1c ff0a57e526 Branch was auto-updated. 2022-06-21 16:45:18 -07:00
pyth0n1c cc03d129c3 Branch was auto-updated. 2022-06-21 16:07:17 -07:00
pyth0n1c 62ed8fe817 Branch was auto-updated. 2022-06-21 16:07:16 -07:00
pyth0n1c b5c79b6db8 Added a custom index for a detection test 
that was created when custom_index
support did not yet exist.
 2022-06-21 15:53:26 -07:00
pyth0n1c b44da42de6 Branch was auto-updated. 2022-06-21 15:28:40 -07:00
pyth0n1c 6616463196 Branch was auto-updated. 2022-06-21 15:28:39 -07:00
pyth0n1c 6cbace8412 Branch was auto-updated. 2022-06-21 15:28:38 -07:00
patel-bhavin d5d0868005 merge from develop 2022-06-21 14:53:25 -07:00
pyth0n1c de30c530eb Branch was auto-updated. 2022-06-21 14:46:29 -07:00
pyth0n1c 25e4a180b1 Branch was auto-updated. 2022-06-21 14:46:28 -07:00
pyth0n1c c42c8acce2 Branch was auto-updated. 2022-06-21 14:46:22 -07:00
pyth0n1c 6554d4a42b Moved ssa___ test file from the tests/network directory to the tests/experimental/endpoint directory because that's where the corresponding detection resides. 2022-06-21 13:59:50 -07:00
pyth0n1c 6b06ab718b Fixing a link to a dataset that has been moved. 2022-06-21 13:13:50 -07:00
Lou Stella e681b766c2 Fixing field name 2022-06-21 14:59:48 -05:00
Lou Stella 85f4f107a3 Changed to anomaly 2022-06-21 14:45:43 -05:00
patel-bhavin 2ea683be87 Merge branch 'develop' into inspired_2194 2022-06-21 11:04:27 -07:00
mhaag-spl 56394444ce fix 2022-06-17 13:09:37 -06:00
mhaag-spl 2788e8e63c path fix 2022-06-17 10:22:24 -06:00
mhaag-spl 9a25da4387 T1218.007 - MSIExec 2022-06-17 09:36:34 -06:00