 Michael Haag
|
c5db61e52d
|
Quick fix
|
2022-01-28 12:49:03 -07:00 |
|
|
Michael Hart
|
f71e3fe202
|
Adding references
|
2022-01-27 13:13:42 -05:00 |
|
|
Michael Hart
|
b80af6f151
|
Editing the macro to put the apply statement into the search query so that it's clear that MLTK is being used
|
2022-01-26 22:38:13 -05:00 |
|
|
Michael Haag
|
67e413d0e0
|
Update __mlspl_unusual_commandline_detection.yml
|
2022-01-26 11:26:25 -07:00 |
|
|
Michael Hart
|
a9c5017c63
|
Reformatting YAML and calling out MLTK 5.3 dependency
|
2022-01-25 22:30:58 -05:00 |
|
|
Michael Hart
|
d039de61ab
|
Merge branch 'potentially_malicious_code_on_commandline' of github.com:splunk/security_content into potentially_malicious_code_on_commandline
|
2022-01-25 21:43:07 -05:00 |
|
|
Michael Hart
|
39d7121dcd
|
Updating mlmodel to 5.3.x specification as well as the test apparatus
|
2022-01-25 21:42:16 -05:00 |
|
|
pyth0n1c
|
4c125f1dd6
|
Branch was auto-updated.
|
2022-01-24 10:51:03 -08:00 |
|
|
pyth0n1c
|
d1dcbfd629
|
Merge pull request #1873 from splunk/nixpost
Nixpost - following test shows success:
https://github.com/splunk/security_content/runs/4888172812?check_suite_focus=true
|
2022-01-24 10:50:37 -08:00 |
|
|
pyth0n1c
|
53ca345c06
|
Branch was auto-updated.
|
2022-01-24 10:40:46 -08:00 |
|
|
pyth0n1c
|
bbebfe7d07
|
Branch was auto-updated.
|
2022-01-24 10:40:41 -08:00 |
|
|
Michael Haag
|
2a9b3648d2
|
Merge pull request #1946 from splunk/WhisperGateIsOpen
WhisperGateIsOpen
|
2022-01-24 11:40:18 -07:00 |
|
|
mvelazco
|
321fd725f1
|
minor changes
|
2022-01-24 13:23:11 -05:00 |
|
|
Michael Haag
|
fbbaef0c99
|
Quick fixes
|
2022-01-24 07:33:36 -07:00 |
|
|
root
|
8537e07fee
|
Added detection testing service results inExcessive File Deletion In WinDefender Folder
|
2022-01-24 09:29:59 +00:00 |
|
|
root
|
83e24a88e9
|
Added detection testing service results inPing Sleep Batch Command
|
2022-01-24 09:12:02 +00:00 |
|
|
root
|
49f5de9836
|
Added detection testing service results inPowershell Remove Windows Defender Directory
|
2022-01-24 08:45:36 +00:00 |
|
|
root
|
99462820e1
|
Added detection testing service results inSuspicious Process With Discord DNS Query
|
2022-01-24 08:27:32 +00:00 |
|
|
Michael Hart
|
a81fbaef75
|
Finalizing the documentation
|
2022-01-21 19:31:02 -05:00 |
|
|
Michael Hart
|
e962bfb4bd
|
Merge branch 'develop' of github.com:splunk/security_content into potentially_malicious_code_on_commandline
|
2022-01-21 19:26:39 -05:00 |
|
|
research bot
|
23a0acc37d
|
updating docs and package bits [ci skip]
|
2022-01-21 21:02:48 +00:00 |
|
|
pyth0n1c
|
9f191dee05
|
Branch was auto-updated.
|
2022-01-21 10:58:42 -08:00 |
|
|
pyth0n1c
|
e7deccdf27
|
Branch was auto-updated.
|
2022-01-21 10:58:37 -08:00 |
|
|
Bhavin Patel
|
63155722c0
|
Merge pull request #1952 from splunk/fixing_badge
Update README.md
|
2022-01-21 10:58:21 -08:00 |
|
|
Jose Enrique Hernandez
|
264294b2c8
|
Update README.md
|
2022-01-21 13:56:55 -05:00 |
|
|
pyth0n1c
|
4fba87dec6
|
Branch was auto-updated.
|
2022-01-21 09:35:11 -08:00 |
|
|
pyth0n1c
|
82ef50c5ab
|
Branch was auto-updated.
|
2022-01-21 09:35:03 -08:00 |
|
|
Jose Enrique Hernandez
|
80ce7adc4e
|
Merge pull request #1951 from splunk/move_comlpex_detections_to_experimental
moving to match what prod should have
|
2022-01-21 12:34:42 -05:00 |
|
|
d1vious
|
72d33b23ac
|
moving to match what prod should have
|
2022-01-21 12:29:13 -05:00 |
|
|
tccontre
|
4752ceea0f
|
WhisperGateIsOpen
|
2022-01-21 10:46:28 +01:00 |
|
|
tccontre
|
2b4f34956d
|
WhisperGateIsOpen
|
2022-01-21 10:45:00 +01:00 |
|
|
tccontre
|
742441eb3d
|
Update ping_sleep_batch_command.yml
|
2022-01-21 09:45:25 +01:00 |
|
|
tccontre
|
bc0e4454c2
|
Update suspicious_process_file_path.yml
|
2022-01-21 09:38:21 +01:00 |
|
|
tccontre
|
eef369a633
|
Update wscript_or_cscript_suspicious_child_process.yml
|
2022-01-21 09:37:16 +01:00 |
|
|
tccontre
|
044b81b922
|
Update add_or_set_windows_defender_exclusion.yml
|
2022-01-21 09:34:41 +01:00 |
|
|
pyth0n1c
|
0621c82ddd
|
Branch was auto-updated.
|
2022-01-20 18:20:03 -08:00 |
|
|
pyth0n1c
|
693ba420b5
|
Branch was auto-updated.
|
2022-01-20 18:19:59 -08:00 |
|
|
mhart-splunk
|
72d48b26a8
|
Add mlmodel to lookups packaging (#1948)
Adding support for packaging mlmodel lookup files in github actions
|
2022-01-20 21:18:54 -05:00 |
|
|
Michael Hart
|
906f0ee338
|
Changing the test dataset to the main branch
|
2022-01-20 21:09:22 -05:00 |
|
|
pyth0n1c
|
d8cb2d7a83
|
Branch was auto-updated.
|
2022-01-20 16:07:15 -08:00 |
|
|
pyth0n1c
|
a8046a9927
|
Branch was auto-updated.
|
2022-01-20 16:07:11 -08:00 |
|
|
Bhavin Patel
|
de74520ad7
|
Merge pull request #1950 from splunk/ransomware_update
ransomware update
|
2022-01-20 16:06:49 -08:00 |
|
|
patel-bhavin
|
6d13de615c
|
duplicate
|
2022-01-20 15:50:28 -08:00 |
|
|
Michael Hart
|
2f9d410caf
|
Updating test interval
|
2022-01-20 16:14:44 -05:00 |
|
|
pyth0n1c
|
630f582ffc
|
Branch was auto-updated.
|
2022-01-20 13:07:09 -08:00 |
|
|
pyth0n1c
|
280b71bdb2
|
Branch was auto-updated.
|
2022-01-20 13:07:04 -08:00 |
|
|
Jose Enrique Hernandez
|
69b262d1ab
|
Merge pull request #1938 from splunk/update_ssa_ymls
adding risk_severity to SSA ymls
|
2022-01-20 16:06:45 -05:00 |
|
|
patel-bhavin
|
4d7d7ef645
|
wrong file
|
2022-01-20 12:55:07 -08:00 |
|
|
Bhavin Patel
|
9f771f1052
|
Merge branch 'develop' into update_ssa_ymls
|
2022-01-20 12:53:19 -08:00 |
|
|
patel-bhavin
|
2a614512e4
|
file name bugs
|
2022-01-20 12:51:32 -08:00 |
|