admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,948 Commits 697 Branches 195 Tags
d346de0dade63a2dbd3bbb5b676739de8d85cd82
Commit Graph

4948 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
miskoSplunk d346de0dad Delete ssa___illegal_service_and_process_control_via_powersploit_modules.test.yml 2021-02-26 14:06:31 -08:00
miskoSplunk 6c7f50a875 Delete ssa___setting_credentials_via_dsinternals_modules.test.yml 2021-02-26 14:06:12 -08:00
miskoSplunk 8a3030b356 Delete ssa___setting_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:05:47 -08:00
miskoSplunk 0b40494235 Delete ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.test.yml 2021-02-26 14:05:25 -08:00
miskoSplunk b6343d93be Delete ssa___setting_credentials_via_powersploit_modules.test.yml 2021-02-26 14:04:47 -08:00
miskoSplunk 8319b76803 Delete ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.test.yml 2021-02-26 14:04:35 -08:00
miskoSplunk 1a75a35fdd Delete ssa___credential_extraction_powersploit_modules.test.yml 2021-02-26 14:04:23 -08:00
miskoSplunk 57a760619a Delete ssa___credential_extraction_lazagne_command_options.test.yml 2021-02-26 14:04:12 -08:00
miskoSplunk daf441733b Delete ssa___credential_extraction_fgdump_cachedump_v_option.test.yml 2021-02-26 14:04:02 -08:00
miskoSplunk 6e9483929f Delete ssa___credential_extraction_dsinternals_modules.test.yml 2021-02-26 14:03:49 -08:00
miskoSplunk 01cee15948 Delete ssa___credential_extraction_fgdump_cachedump_s_option.test.yml 2021-02-26 14:03:28 -08:00
miskoSplunk a156b9b4f1 Delete ssa___credential_extraction_dsinternals_conversion_modules.test.yml 2021-02-26 14:03:16 -08:00
miskoSplunk 0fc70f4957 Delete ssa___applying_stolen_credentials_via_powersploit_modules.test.yml 2021-02-26 14:01:56 -08:00
miskoSplunk 8f84e76b4e Delete ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:01:41 -08:00
Jose Enrique Hernandez 574b3c6aca Merge branch 'develop' into ssa_misko_raw_event_datasets 2021-02-26 16:06:11 -05:00
P4T12ICK f771fb5dd4 Merge pull request #1213 from splunk/improvements_contentctl 
improvements contentctl
 2021-02-25 15:12:56 +01:00
P4T12ICK 721afd048b improvements contentctl 2021-02-25 10:06:52 +01:00
Stanislav Miskovic 8632dcfe10 Modified detection and test files to point to new test datasets containing raw multiline Windows events for SSA. 2021-02-23 23:48:03 -08:00
Jose Enrique Hernandez 5a6e68be32 Merge pull request #1201 from splunk/contentctl 
contentctl.py
 2021-02-23 09:17:53 -05:00
github-actions[bot] cd3ba2b07f Branch was auto-updated. 2021-02-22 23:01:56 +00:00
Bhavin Patel 776a72224b Merge pull request #1205 from splunk/TR-300_fix_mitre_attack_id 
TR-300 fixing issue with mitre_attack_id not in common tags
 2021-02-22 15:01:29 -08:00
github-actions[bot] 7caa674067 Branch was auto-updated. 2021-02-22 17:32:54 +00:00
github-actions[bot] cd9d8bc3b1 Branch was auto-updated. 2021-02-22 17:32:52 +00:00
divious1 7ba1330f98 removed - SSA from the end of the detection names 2021-02-22 12:32:30 -05:00
divious1 42ff71b2a2 normalized ids 2021-02-22 12:15:33 -05:00
github-actions[bot] 904bc6b59a Branch was auto-updated. 2021-02-22 14:11:42 +00:00
dependabot[bot] cdba351a3b Merge pull request #1202 from splunk/dependabot/pip/tabulate-0.8.9 2021-02-22 14:11:17 +00:00
dependabot[bot] e67b634831 Bump tabulate from 0.8.8 to 0.8.9 
Bumps [tabulate](https://github.com/astanin/python-tabulate) from 0.8.8 to 0.8.9.
- [Release notes](https://github.com/astanin/python-tabulate/releases)
- [Changelog](https://github.com/astanin/python-tabulate/blob/master/CHANGELOG)
- [Commits](https://github.com/astanin/python-tabulate/compare/v0.8.8...v0.8.9)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-22 14:03:06 +00:00
divious1 8684d3509b Merge branch 'contentctl' of github.com:splunk/security_content into contentctl 2021-02-20 21:26:58 -05:00
divious1 be90350641 adding correct links 2021-02-20 21:26:45 -05:00
Jose Enrique Hernandez 019e1ed2f7 Merge branch 'develop' into contentctl 2021-02-20 21:11:41 -05:00
divious1 85905e2901 updating README 2021-02-20 21:09:42 -05:00
divious1 3ef02c2213 adjusting ci jobs 2021-02-20 20:38:57 -05:00
divious1 f5fe07171f updated given feedback from the team 2021-02-19 22:59:09 -05:00
divious1 8a73c3237b first set of feedback 2021-02-18 21:32:59 -05:00
research bot d9b977a7a6 updating docs and package bits [ci skip] 2021-02-18 18:22:48 +00:00
Bhavin Patel 56cde67680 Merge pull request #1197 from splunk/datamodel-add 
Add datamodel field to yml
v3.15.0 		2021-02-18 10:06:14 -08:00
mhaag-spl 2e8b6e4898 Add datamodel field to yml 2021-02-18 10:56:24 -07:00
Bhavin Patel ee47910bf9 Merge pull request #1196 from splunk/drewchuruch_fix_okta 
duplicate PR and typos
 2021-02-18 08:54:10 -08:00
github-actions[bot] 194300b8d0 Branch was auto-updated. 2021-02-18 16:36:15 +00:00
Bhavin Patel d5cd5b896a Merge pull request #1195 from splunk/remove_ui_tour 
Remove UI tour
 2021-02-18 08:35:52 -08:00
bpatel 49721bfdbb duplicate PR and typos 2021-02-18 08:24:49 -08:00
Bhavin Patel a747feca92 Merge branch 'develop' into remove_ui_tour 2021-02-18 08:18:58 -08:00
bpatel 4fbaea460d remove ui tour 2021-02-18 08:17:46 -08:00
divious1 b81bb8c53d fixed minor bug 2021-02-18 10:29:19 -05:00
dependabot[bot] 372a224366 Merge pull request #1194 from splunk/dependabot/pip/tabulate-0.8.8 2021-02-18 14:11:27 +00:00
dependabot[bot] 9290dee689 Bump tabulate from 0.8.7 to 0.8.8 
Bumps [tabulate](https://github.com/astanin/python-tabulate) from 0.8.7 to 0.8.8.
- [Release notes](https://github.com/astanin/python-tabulate/releases)
- [Changelog](https://github.com/astanin/python-tabulate/blob/master/CHANGELOG)
- [Commits](https://github.com/astanin/python-tabulate/compare/v0.8.7...v0.8.8)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-18 14:02:44 +00:00
divious1 6634909d8e added wizard for detections and tests 2021-02-17 23:18:18 -05:00
Bhavin Patel 0b09857eae Merge pull request #1186 from splunk/02rel2 
WIP - rel2 02-2020
 2021-02-17 16:03:44 -08:00
mhaag-spl 54f26f3498 story name fix 2021-02-17 13:48:49 -07:00