admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,975 Commits 697 Branches 195 Tags
c33b86ebb8fde42e6bcd49dbd88c378bfcbdfadf
Commit Graph

4975 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stanislav Miskovic c33b86ebb8 Adding old tests that point to S3 pre-parsed datasets. 2021-03-03 14:07:27 -08:00
github-actions[bot] d470eb0f81 Branch was auto-updated. 2021-03-03 21:27:17 +00:00
Bhavin Patel 20052c3d96 Merge pull request #1204 from splunk/dependabot/pip/python-daemon-2.3.0 
Bump python-daemon from 2.2.4 to 2.3.0
 2021-03-03 13:26:50 -08:00
github-actions[bot] ec5e48ee8a Branch was auto-updated. 2021-03-02 20:59:57 +00:00
github-actions[bot] 719a763e0c Branch was auto-updated. 2021-03-02 20:59:54 +00:00
Michael Haag ea36d1969a Merge pull request #1220 from splunk/fix_contentctl_bug 
wrong path in test file specs
 2021-03-02 13:59:20 -07:00
divious1 666c53d1b4 wrong path in test file specs 2021-03-02 15:44:05 -05:00
github-actions[bot] 1cb815451d Branch was auto-updated. 2021-03-02 19:02:21 +00:00
github-actions[bot] f869ff7107 Branch was auto-updated. 2021-03-02 19:02:19 +00:00
mhart-splunk 3c074e2665 Merge pull request #1218 from splunk/TR-495_misspelling 
Fixed misspelling in ransomware
 2021-03-02 14:01:50 -05:00
Michael Hart e37aa006db Fixed misspelling in ransomware 2021-03-02 13:31:55 -05:00
miskoSplunk 7088a5ca43 Delete ssa___credential_extraction_getaddbaccount_from_dump.test.yml 2021-02-26 14:11:11 -08:00
miskoSplunk 9331a7899e Delete ssa___credential_extraction_ms_debuggers_z_option.test.yml 2021-02-26 14:10:40 -08:00
miskoSplunk 023b1d6a47 Delete ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml 2021-02-26 14:10:15 -08:00
miskoSplunk 54d1c00df3 Delete ssa___credential_extraction_mimikatz_modules.test.yml 2021-02-26 14:09:56 -08:00
miskoSplunk 496e00240e Delete ssa___illegal_account_creation_via_powersploit_modules.test.yml 2021-02-26 14:09:26 -08:00
miskoSplunk 26c314a6c7 Delete ssa___illegal_access_user_content_via_powersploit_modules.test.yml 2021-02-26 14:09:11 -08:00
miskoSplunk f6fa021edc Delete ssa___illegal_log_deletion_via_mimikatz_modules.test.yml 2021-02-26 14:08:49 -08:00
miskoSplunk ceddaf134d Delete ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.test.yml 2021-02-26 14:08:05 -08:00
miskoSplunk 53842f55b0 Delete ssa___illegal_account_enable_disable_via_dsinternals_modules.test.yml 2021-02-26 14:07:43 -08:00
miskoSplunk cd84b7a659 Delete ssa___illegal_privilege_elevation_via_mimikatz_modules.test.yml 2021-02-26 14:07:14 -08:00
miskoSplunk 1295e2a8f9 Delete ssa___illegal_service_and_process_control_via_mimikatz_modules.test.yml 2021-02-26 14:06:57 -08:00
miskoSplunk d346de0dad Delete ssa___illegal_service_and_process_control_via_powersploit_modules.test.yml 2021-02-26 14:06:31 -08:00
miskoSplunk 6c7f50a875 Delete ssa___setting_credentials_via_dsinternals_modules.test.yml 2021-02-26 14:06:12 -08:00
miskoSplunk 8a3030b356 Delete ssa___setting_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:05:47 -08:00
miskoSplunk 0b40494235 Delete ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.test.yml 2021-02-26 14:05:25 -08:00
miskoSplunk b6343d93be Delete ssa___setting_credentials_via_powersploit_modules.test.yml 2021-02-26 14:04:47 -08:00
miskoSplunk 8319b76803 Delete ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.test.yml 2021-02-26 14:04:35 -08:00
miskoSplunk 1a75a35fdd Delete ssa___credential_extraction_powersploit_modules.test.yml 2021-02-26 14:04:23 -08:00
miskoSplunk 57a760619a Delete ssa___credential_extraction_lazagne_command_options.test.yml 2021-02-26 14:04:12 -08:00
miskoSplunk daf441733b Delete ssa___credential_extraction_fgdump_cachedump_v_option.test.yml 2021-02-26 14:04:02 -08:00
miskoSplunk 6e9483929f Delete ssa___credential_extraction_dsinternals_modules.test.yml 2021-02-26 14:03:49 -08:00
miskoSplunk 01cee15948 Delete ssa___credential_extraction_fgdump_cachedump_s_option.test.yml 2021-02-26 14:03:28 -08:00
miskoSplunk a156b9b4f1 Delete ssa___credential_extraction_dsinternals_conversion_modules.test.yml 2021-02-26 14:03:16 -08:00
miskoSplunk 0fc70f4957 Delete ssa___applying_stolen_credentials_via_powersploit_modules.test.yml 2021-02-26 14:01:56 -08:00
miskoSplunk 8f84e76b4e Delete ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:01:41 -08:00
Jose Enrique Hernandez 574b3c6aca Merge branch 'develop' into ssa_misko_raw_event_datasets 2021-02-26 16:06:11 -05:00
Jose Enrique Hernandez 1f8d6f95b4 Merge branch 'develop' into dependabot/pip/python-daemon-2.3.0 2021-02-25 16:12:42 -05:00
P4T12ICK f771fb5dd4 Merge pull request #1213 from splunk/improvements_contentctl 
improvements contentctl
 2021-02-25 15:12:56 +01:00
P4T12ICK 721afd048b improvements contentctl 2021-02-25 10:06:52 +01:00
Stanislav Miskovic 8632dcfe10 Modified detection and test files to point to new test datasets containing raw multiline Windows events for SSA. 2021-02-23 23:48:03 -08:00
github-actions[bot] 2827efdb0b Branch was auto-updated. 2021-02-23 14:18:15 +00:00
Jose Enrique Hernandez 5a6e68be32 Merge pull request #1201 from splunk/contentctl 
contentctl.py
 2021-02-23 09:17:53 -05:00
github-actions[bot] cd3ba2b07f Branch was auto-updated. 2021-02-22 23:01:56 +00:00
github-actions[bot] 6385124683 Branch was auto-updated. 2021-02-22 23:01:55 +00:00
Bhavin Patel 776a72224b Merge pull request #1205 from splunk/TR-300_fix_mitre_attack_id 
TR-300 fixing issue with mitre_attack_id not in common tags
 2021-02-22 15:01:29 -08:00
github-actions[bot] 34ad79bd55 Branch was auto-updated. 2021-02-22 17:32:55 +00:00
github-actions[bot] 7caa674067 Branch was auto-updated. 2021-02-22 17:32:54 +00:00
github-actions[bot] cd9d8bc3b1 Branch was auto-updated. 2021-02-22 17:32:52 +00:00
divious1 7ba1330f98 removed - SSA from the end of the detection names 2021-02-22 12:32:30 -05:00