Commit Graph

20504 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt e26ef0bfbd Branch was auto-updated. 2023-05-19 07:24:39 -07:00
Lou Stella d378f7b746 Merge pull request #2610 from splunk/TR-2886
Identifier Activity Analysis Dispatch
2023-05-19 09:24:06 -05:00
Lou Stella 66539b1f12 Last style update 2023-05-19 08:58:05 -05:00
srv-rr-gh-researchbt 1b103beb33 Branch was auto-updated. 2023-05-16 12:53:19 -07:00
srv-rr-gh-researchbt 386dbdb2db Branch was auto-updated. 2023-05-16 12:53:15 -07:00
research bot b954117257 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-05-16 19:52:55 +00:00
srv-rr-gh-researchbt c289e8dc7a Branch was auto-updated. 2023-05-16 12:30:50 -07:00
srv-rr-gh-researchbt 5bff54a02e Branch was auto-updated. 2023-05-16 12:30:45 -07:00
Bhavin Patel d3bc844e76 Merge pull request #2677 from splunk/ai_error
appinspect error
v4.2.0
2023-05-16 12:30:19 -07:00
patel-bhavin 8956784303 appinspect error 2023-05-16 12:25:20 -07:00
srv-rr-gh-researchbt e7b18e58cb Branch was auto-updated. 2023-05-16 11:25:57 -07:00
srv-rr-gh-researchbt 999dcaf51c Branch was auto-updated. 2023-05-16 11:25:53 -07:00
Bhavin Patel baae4ed7aa Merge pull request #2670 from splunk/newness
Guardians of the Haag: A Cosmic Adventure
2023-05-16 11:25:33 -07:00
Bhavin Patel 11e84e3839 Update windows_winlogon_with_public_network_connection.yml 2023-05-16 11:03:00 -07:00
pyth0n1c 987863ef46 Fix source and sourcetype of detection 2023-05-16 10:54:36 -07:00
srv-rr-gh-researchbt 7c4c395528 Branch was auto-updated. 2023-05-16 09:52:53 -07:00
srv-rr-gh-researchbt bd7f8df657 Branch was auto-updated. 2023-05-16 09:52:48 -07:00
srv-rr-gh-researchbt 2aa044eb0c Branch was auto-updated. 2023-05-16 09:52:40 -07:00
Bhavin Patel 5f96d4360d Merge pull request #2640 from splunk/TR-2980_AzureAd_PrivEsc
Azure Active Directory Privilege Escalation
2023-05-16 09:52:23 -07:00
mvelazco ac8f8e6184 Merge branch 'TR-2980_AzureAd_PrivEsc' of github.com:splunk/security_content into TR-2980_AzureAd_PrivEsc 2023-05-16 12:43:31 -04:00
Michael Haag b5765c546e Update windows_winlogon_with_public_network_connection.yml 2023-05-16 10:27:26 -06:00
Michael Haag 4dd8d8e704 Merge branch 'newness' of https://github.com/splunk/security_content into newness 2023-05-16 10:17:51 -06:00
Michael Haag 7cc2746c76 fix for bootexecute 2023-05-16 10:17:41 -06:00
srv-rr-gh-researchbt 43bd461142 Branch was auto-updated. 2023-05-16 09:15:05 -07:00
srv-rr-gh-researchbt fbfb378a21 Branch was auto-updated. 2023-05-16 09:14:56 -07:00
srv-rr-gh-researchbt 1a844056c8 Branch was auto-updated. 2023-05-16 09:14:52 -07:00
srv-rr-gh-researchbt 8120e6a0d9 Branch was auto-updated. 2023-05-16 09:14:50 -07:00
Bhavin Patel 03a96d1e20 Merge pull request #2675 from splunk/PaperCuts
The Haag Mile: A Journey of Redemption
2023-05-16 09:14:31 -07:00
patel-bhavin 49680f9e51 underscore 2023-05-16 09:09:57 -07:00
Michael Haag c17d09140a Rename papercutng_suspicious_behavior_debug_log.yml to papercut_ng_suspicious_behavior_debug_log.yml 2023-05-16 09:12:01 -06:00
Michael Haag 0f0002b9cf Rename papercutng_remote_web_access_attempt.yml to papercut_ng_remote_web_access_attempt.yml 2023-05-16 09:11:38 -06:00
Michael Haag 08fc892017 name fixes 2023-05-16 09:10:59 -06:00
Michael Haag 07be57790b Update and rename windows_papercutng_spawn_shell.yml to windows_papercut_ng_spawn_shell.yml 2023-05-16 09:08:35 -06:00
Bhavin Patel c51fe800a9 Update windows_snake_malware_file_modification_crmlog.yml 2023-05-15 15:22:22 -07:00
patel-bhavin 7b27c93bad story renames 2023-05-15 15:11:32 -07:00
Michael Haag f2cb3b89b4 fixes 2023-05-15 15:16:34 -06:00
pyth0n1c b24394affd Push a new github_actions test config file 2023-05-15 13:54:53 -07:00
pyth0n1c 4b04df1ff8 Updated all app baselines in validate_args 2023-05-15 13:52:12 -07:00
srv-rr-gh-researchbt efe91f0bda Branch was auto-updated. 2023-05-15 13:17:35 -07:00
srv-rr-gh-researchbt 3ebc08156c Branch was auto-updated. 2023-05-15 13:17:28 -07:00
srv-rr-gh-researchbt 1682280d43 Branch was auto-updated. 2023-05-15 13:17:17 -07:00
srv-rr-gh-researchbt 1c88fe306f Branch was auto-updated. 2023-05-15 13:17:16 -07:00
srv-rr-gh-researchbt b810097375 Branch was auto-updated. 2023-05-15 13:17:14 -07:00
Bhavin Patel c01c31e5be Merge pull request #2621 from splunk/aws_exfil
Aws Exfil Detections
2023-05-15 13:16:54 -07:00
pyth0n1c 4ef47f2fcc Fix source and sourcetype of attack_data 2023-05-15 12:56:47 -07:00
patel-bhavin 5f1c38800a search text updates 2023-05-15 12:52:17 -07:00
pyth0n1c 9e535bb5f0 Update baseline to include
suricata ta.  TA required 
for testing new detections.
Also, remove some 
duplicates apps from the 
baseline.
2023-05-15 12:49:18 -07:00
Michael Haag f5e121b1eb The Haag Mile: A Journey of Redemption 2023-05-15 13:22:04 -06:00
Michael Haag 72ab3d1e08 last of snake 2023-05-15 13:19:56 -06:00
srv-rr-gh-researchbt b29ce34cf1 Branch was auto-updated. 2023-05-15 12:16:36 -07:00