admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
21,995 Commits 697 Branches 195 Tags
c8bb7550385cb09f211ed461cd2675efbd4739fa
Commit Graph

21995 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
srv-rr-gh-researchbt c8bb755038 Branch was auto-updated. 2023-08-17 09:18:10 -07:00
research bot 3d57047379 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-08-17 16:17:48 +00:00
srv-rr-gh-researchbt 8c7df956db Branch was auto-updated. 2023-08-17 08:54:49 -07:00
Lou Stella 5f6968715e Merge pull request #2809 from splunk/ssa_escalation_Aug16 
SSA Regex Bugfixes
v4.9.1 		2023-08-17 10:54:23 -05:00
Lou Stella 45c6fda795 Version bumps 2023-08-17 10:47:29 -05:00
Lou Stella 1832570a39 Swap back to regex with new escapes 2023-08-17 10:36:36 -05:00
Lou Stella 2410b52d7a Regenerated for testing 2023-08-17 10:12:34 -05:00
Lou Stella 74a3891f78 Running mass conversion 2023-08-17 10:12:04 -05:00
Lou Stella 779b5aea63 Switch to using like 2023-08-17 10:10:59 -05:00
Lou Stella 2b77ace7e0 code change 2023-08-17 10:10:32 -05:00
Lou Stella e74457dfab adding generated non-functioning regex 2023-08-16 15:58:22 -05:00
Lou Stella 0052fd4a61 adding converted version 2023-08-16 15:55:34 -05:00
Lou Stella 937beacded Adding updated full regex 2023-08-16 15:55:02 -05:00
Lou Stella d4eb301111 push for troulbeshooting 2023-08-16 15:42:17 -05:00
Lou Stella 3045c568d0 Manual edit to remove extra escaping that seems to break the detection 2023-08-16 15:34:48 -05:00
Lou Stella 024be40b55 Updated regex again 2023-08-16 15:34:17 -05:00
Lou Stella 7efd991ae8 pushing to share for troubleshooting 2023-08-16 14:44:18 -05:00
Lou Stella 649304fe95 tweak regex because tool supplies case insensitivity 2023-08-16 13:49:46 -05:00
Lou Stella ffed36c532 generated detection 2023-08-16 13:38:03 -05:00
Lou Stella 868bf4984a Updated regex, removed duplicate pwsh 2023-08-16 13:13:39 -05:00
srv-rr-gh-researchbt aef1887c4f Branch was auto-updated. 2023-08-09 08:50:15 -07:00
research bot e17ab01225 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-08-09 15:49:37 +00:00
srv-rr-gh-researchbt ce6cb4cb06 Branch was auto-updated. 2023-08-08 09:49:36 -07:00
Bhavin Patel b1b8f2ee69 Merge pull request #2801 from splunk/cve-2023-35082 
Ivanti CVE-2023-35082
v4.9.0 		2023-08-08 09:49:15 -07:00
Michael Haag a99eeef7d7 Ivanti CVE-2023-35082 2023-08-08 10:23:50 -06:00
srv-rr-gh-researchbt 787893c7f0 Branch was auto-updated. 2023-08-07 14:23:41 -07:00
Bhavin Patel e8fa5ab05d Merge pull request #2796 from splunk/fix-aws-al-desc 
Update description
 2023-08-07 14:23:07 -07:00
srv-rr-gh-researchbt 00f1d3099e Branch was auto-updated. 2023-08-07 14:22:05 -07:00
srv-rr-gh-researchbt c84c9514ff Branch was auto-updated. 2023-08-07 14:22:04 -07:00
Bhavin Patel 99ecdbc031 Merge pull request #2800 from splunk/observablefix 
Updates to Observable!
 2023-08-07 14:21:47 -07:00
Bhavin Patel a474fb4456 Update o365_added_service_principal.yml 2023-08-07 14:02:36 -07:00
Bhavin Patel 4c76d950f8 Update o365_added_service_principal.yml 2023-08-07 14:01:06 -07:00
Bhavin Patel 8b4de41253 update mode ongit add . 2023-08-07 13:52:27 -07:00
Bhavin Patel 424ce1f1c5 Update o365_new_federated_domain_added.yml 2023-08-07 13:03:40 -07:00
Bhavin Patel caf4ce8fdb updates 2023-08-07 12:58:36 -07:00
srv-rr-gh-researchbt c72c5c9315 Branch was auto-updated. 2023-08-07 12:45:07 -07:00
srv-rr-gh-researchbt 4a0383ed27 Branch was auto-updated. 2023-08-07 12:45:05 -07:00
Bhavin Patel f9b7d09490 Merge pull request #2766 from splunk/goot_test 
G00t Duplicate for testing by Steven Dick
 2023-08-07 12:44:30 -07:00
Bhavin Patel b80946f363 Update windows_scheduled_task_service_spawned_shell.yml 2023-08-07 12:16:31 -07:00
Bhavin Patel f8c9715966 Update powershell_webrequest_using_memory_stream.yml 2023-08-07 12:06:24 -07:00
Bhavin Patel 183902ba38 Update powershell_script_block_with_url_chain.yml 2023-08-07 12:06:01 -07:00
srv-rr-gh-researchbt 6299e51571 Branch was auto-updated. 2023-08-07 11:23:38 -07:00
srv-rr-gh-researchbt cace3d94e6 Branch was auto-updated. 2023-08-07 11:23:27 -07:00
srv-rr-gh-researchbt 1018438824 Branch was auto-updated. 2023-08-07 11:23:26 -07:00
Bhavin Patel 433973d177 Merge pull request #2786 from splunk/observable_endpoint 
Endpoint Observables (A- C)
 2023-08-07 11:23:07 -07:00
Bhavin Patel 84ef02814e updated 3 detections 2023-08-07 10:39:11 -07:00
Bhavin Patel 2def6d5476 wrong story 2023-08-03 09:27:44 -07:00
srv-rr-gh-researchbt b325d6e1b9 Branch was auto-updated. 2023-08-02 16:49:17 -07:00
srv-rr-gh-researchbt 32af0080b1 Branch was auto-updated. 2023-08-02 16:49:06 -07:00
srv-rr-gh-researchbt b4caea16db Branch was auto-updated. 2023-08-02 16:49:06 -07:00