Commit Graph

17039 Commits

Author SHA1 Message Date
pyth0n1c d77cb7c0a8 Branch was auto-updated. 2022-08-23 12:54:44 -07:00
Bhavin Patel 87d09b588a Merge pull request #2329 from splunk/cleaning_docs
Cleaning docs
2022-08-23 14:54:06 -05:00
pyth0n1c 9427786e60 Branch was auto-updated. 2022-08-23 12:50:29 -07:00
pyth0n1c 97c9905692 Branch was auto-updated. 2022-08-23 12:49:54 -07:00
Bhavin Patel 5f342c5324 Merge pull request #2324 from splunk/TR-2349_fillnull
TR-2349 adding fillnull_value
2022-08-23 14:49:52 -05:00
pyth0n1c b1fc807d1c Branch was auto-updated. 2022-08-23 12:49:52 -07:00
Bhavin Patel 5527f242d4 Merge pull request #2328 from splunk/updating_url
Updating url
2022-08-23 14:49:31 -05:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
Michael Haag 13d400611a LSA 🐍 SS 2022-08-22 21:16:12 -06:00
pyth0n1c 95c8b3f07d Branch was auto-updated. 2022-08-22 14:51:22 -07:00
pyth0n1c ffdc6b72e2 Branch was auto-updated. 2022-08-22 14:51:18 -07:00
pyth0n1c 296d64dce2 Branch was auto-updated. 2022-08-22 14:51:13 -07:00
pyth0n1c 6332b1c435 Branch was auto-updated. 2022-08-22 14:51:10 -07:00
mvelazco 1f82c4c215 Merge pull request #2338 from splunk/add_microsoft_cloud_services_ta
Adding Microsoft Cloud Services TA
2022-08-22 17:50:54 -04:00
mvelazco b0c3232991 adding microsoft cloud services ta 2022-08-22 17:38:49 -04:00
Michael Haag af639ac066 Update windows_dll_search_order_hijacking_hunt_with_sysmon.yml 2022-08-22 14:46:29 -06:00
pyth0n1c f0b053152e Update hijacklibs.csv
Forgot to include one of the dlls,
amsi.dll.  This caused the detection
testing to fail.
2022-08-22 12:29:21 -07:00
Michael Haag ed2bc99c46 sysmon fix 2022-08-22 10:14:10 -06:00
Michael Haag 17ba3c3e51 fix 2022-08-19 15:21:15 -06:00
Michael Haag 416ddb5fa8 lookup 1 2022-08-19 14:40:01 -06:00
Michael Haag fd88c88762 Hijack Libraries 2022-08-19 14:37:29 -06:00
pyth0n1c a2c0c6f415 Branch was auto-updated. 2022-08-16 12:39:50 -07:00
pyth0n1c 5e76db583b Branch was auto-updated. 2022-08-16 12:39:43 -07:00
d1vious bd8ffeeb52 removing playbooks 2022-08-16 15:29:43 -04:00
d1vious 1a84238959 updating to develop 2022-08-16 15:28:59 -04:00
d1vious 9173c0fdfe Merge branch 'develop' of github.com:splunk/security_content into develop 2022-08-16 15:27:33 -04:00
d1vious 7f08b301ab cleaning up CI 2022-08-16 15:24:07 -04:00
d1vious 8de4a55800 removing docs 2022-08-16 15:22:32 -04:00
d1vious 19f3a3b982 fixing on all places 2022-08-16 15:01:56 -04:00
d1vious b6e2ff6278 adding updated url 2022-08-16 15:01:17 -04:00
research bot f936b5bc17 updating docs and package bits [ci skip] 2022-08-16 16:22:49 +00:00
pyth0n1c 725027acf1 Branch was auto-updated. 2022-08-16 09:07:07 -07:00
Jose Enrique Hernandez 3b730ffb3c Merge pull request #2327 from splunk/dontfailonenrichment
Print error instead of bailing out on enrichment failure
v3.47.0
2022-08-16 12:06:46 -04:00
Lou Stella bc331db06c Print error instead of bailing out on enrichment failure 2022-08-16 11:04:24 -05:00
pyth0n1c 5750799073 Branch was auto-updated. 2022-08-16 08:41:03 -07:00
Jose Enrique Hernandez 8f541978cc Merge pull request #2326 from splunk/splunk_vulz_aug_16th
adding new detections
2022-08-16 11:40:35 -04:00
d1vious b7e1a5fe94 adding new detections 2022-08-16 11:30:24 -04:00
pyth0n1c 5d231c3a02 Branch was auto-updated. 2022-08-12 13:35:54 -07:00
Bhavin Patel e4b610a837 Merge pull request #2316 from splunk/Clean_and_Deploy
Clean and deploy
2022-08-12 13:35:34 -07:00
pyth0n1c 4f6c1f20d3 Fixed template files that were modified in error 2022-08-12 13:15:41 -07:00
pyth0n1c c5f94640af Branch was auto-updated. 2022-08-12 13:01:08 -07:00
pyth0n1c 4a0424c1ee Branch was auto-updated. 2022-08-12 13:01:02 -07:00
Bhavin Patel 149c19a617 Merge pull request #2318 from splunk/TR_2329_AWS_Credential_Access
Add AWS Credential Access detections
2022-08-12 13:00:43 -07:00
pyth0n1c 1a02a53f5d Updated the order of the options in the help menu for contentctl. This way, the options flow logically from creation to validation to building to deployment. 2022-08-12 12:59:53 -07:00
patel-bhavin 1e4b0353f8 search update 2022-08-12 12:46:25 -07:00
patel-bhavin 6969671bf9 Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access 2022-08-12 12:41:19 -07:00
patel-bhavin 24cd1afcb8 updatesusing datamodel 2022-08-12 12:34:02 -07:00
pyth0n1c a17b44daf7 Remove lookups from copied ESCU directory. 2022-08-12 12:09:17 -07:00
pyth0n1c ee0d1c788a Merge branch 'Clean_and_Deploy' of https://github.com/splunk/security_content into Clean_and_Deploy 2022-08-11 16:54:41 -07:00
pyth0n1c f632813720 Changes to a number of files to make them suitable for use in an app by a different name. 2022-08-11 16:54:05 -07:00