d671db062d
Branch was auto-updated.
2022-06-21 15:28:41 -07:00
e470e2b6d8
Merge pull request #2257 from splunk/2253_fix
...
Rundll32 LockWorkstation search
2022-06-21 18:28:11 -04:00
88f26544e2
Branch was auto-updated.
2022-06-21 14:46:26 -07:00
c42c8acce2
Branch was auto-updated.
2022-06-21 14:46:22 -07:00
6fc1b95369
Merge pull request #2258 from splunk/properly_detected_failed_attack_data_downloads
...
Properly detected failed attack data downloads
2022-06-21 14:46:03 -07:00
26f6bbfc92
Adding the URL_TOOLBOX app to
...
the application baseline.
2022-06-21 14:29:11 -07:00
6554d4a42b
Moved ssa___ test file from the tests/network directory to the tests/experimental/endpoint directory because that's where the corresponding detection resides.
2022-06-21 13:59:50 -07:00
5762b4e373
Updated the app baseline as well as
...
the python code for generating the
default config. Also updated the
print behavior for when files are
downloaded.
App baseline is now current, and
files are hosted on S3, as
of 06/21/2022.
2022-06-21 13:53:26 -07:00
575cd80e01
Updated observable & asset_type
2022-06-21 15:17:25 -05:00
6b06ab718b
Fixing a link to a dataset that has been moved.
2022-06-21 13:13:50 -07:00
e681b766c2
Fixing field name
2022-06-21 14:59:48 -05:00
c98d7b6855
Fix an issue where trying to download a file from attack_data that returns a 404 fails too late in the process, giving a nondescriptive error message and resulting in a bad filename being included in the detection failure manifest.
2022-06-21 12:52:32 -07:00
85f4f107a3
Changed to anomaly
2022-06-21 14:45:43 -05:00
53bc5dcda4
fixing incorrect story pointer
2022-06-20 16:33:35 -04:00
fc06b83cf6
Merge pull request #2250 from splunk/fix_cve_tag
...
CVE Tag Fix
2022-06-16 14:35:07 -04:00
dbf1c52864
Update splunk_process_injection_forwarder_bundle_downloads.yml
2022-06-16 13:08:02 -05:00
81180f53ca
Merge pull request #2248 from splunk/exp_unauth_assets_fix
...
Experimental Network search update
2022-06-15 15:21:11 -04:00
863259df93
Updated per #2235
2022-06-15 13:49:56 -05:00
0cf536acd5
fix path error
2022-06-14 20:13:42 -07:00
51e6298c9f
Merge pull request #2247 from splunk/research_update
...
update site
2022-06-14 11:56:42 -04:00
72c71bbfcb
update site
2022-06-14 10:38:43 -05:00
6807c3cc4f
Merge pull request #2246 from splunk/story_fix
...
Update splunk_process_injection_forwarder_bundle_downloads.yml
2022-06-14 10:18:07 -05:00
b392ca9aa5
Update splunk_process_injection_forwarder_bundle_downloads.yml
...
Spelling fix
2022-06-14 09:58:09 -05:00
22de947482
updating docs and package bits [ci skip]
2022-06-14 14:10:53 +00:00
7dba5cef06
Merge pull request #2245 from splunk/fixing_appinspect_tscollect
...
fixing tscollect error
2022-06-14 09:35:08 -04:00
9c3eb1640a
fixing tscollect error
2022-06-14 09:17:24 -04:00
6d6e7339c4
Merge pull request #2213 from splunk/vj9r
...
Vj9r
2022-06-14 08:41:57 -04:00
0288c10f70
Update splunk_identified_ssl_tls_certificates.yml
2022-06-14 08:18:53 -04:00
3513587707
Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml
2022-06-14 08:17:53 -04:00
937a7317cf
Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml
2022-06-14 08:17:25 -04:00
4b95ac0339
Update splunk_digital_certificates_infrastructure_version.yml
2022-06-14 08:15:36 -04:00
b8d7a20e73
fixing dm to drop from davids suggestion
2022-06-14 08:10:11 -04:00
9e28d378cc
updated from karims suggestion
2022-06-14 08:09:20 -04:00
cbbe436585
updated given davids suggestions
2022-06-14 08:07:14 -04:00
786b26d858
fixing base on feedback from david
2022-06-14 08:04:57 -04:00
d91d88ecb7
updated base on karims comments
2022-06-14 07:58:41 -04:00
c701be5699
for review comment
2022-06-14 00:30:38 -07:00
a247079b45
update and typos
2022-06-13 17:15:45 -07:00
000e75040d
fix typos
2022-06-13 16:39:09 -07:00
7b2dc90afb
fixedsearchdescription
2022-06-13 15:51:53 -07:00
99cbc03fd5
fixedhosts
2022-06-13 15:47:06 -07:00
f94759101b
Merge branch 'vj9r' of github.com:splunk/security_content into vj9r
2022-06-13 15:33:29 -07:00
9a266a78ee
update per review comments
2022-06-13 15:33:12 -07:00
be1c572724
Fixed field
2022-06-13 16:50:50 -05:00
a0967fe429
Workbook how_to_implement & references
2022-06-13 16:49:49 -05:00
66d7814fed
Update splunk_identified_ssl_tls_certificates.yml
2022-06-13 15:43:18 -06:00
46cd276adf
Update splunk_identified_ssl_tls_certificates.yml
2022-06-13 15:40:49 -06:00
3afeaa8a3b
Update splunk_command_and_scripting_interpreter_delete_usage.yml
2022-06-13 15:39:43 -06:00
e109bc48cc
Merge branch 'vj9r' of https://github.com/splunk/security_content into vj9r
2022-06-13 16:19:08 -05:00
5414d530fe
Update splunk_command_and_scripting_interpreter_risky_commands.yml
2022-06-13 15:18:21 -06:00
pyth0n1c