Commit Graph

20402 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt e26f2c34bd Branch was auto-updated. 2023-05-16 12:30:39 -07:00
Bhavin Patel d3bc844e76 Merge pull request #2677 from splunk/ai_error
appinspect error
v4.2.0
2023-05-16 12:30:19 -07:00
patel-bhavin 8956784303 appinspect error 2023-05-16 12:25:20 -07:00
srv-rr-gh-researchbt 0442d5b1f8 Branch was auto-updated. 2023-05-16 11:26:03 -07:00
Bhavin Patel baae4ed7aa Merge pull request #2670 from splunk/newness
Guardians of the Haag: A Cosmic Adventure
2023-05-16 11:25:33 -07:00
Bhavin Patel 11e84e3839 Update windows_winlogon_with_public_network_connection.yml 2023-05-16 11:03:00 -07:00
pyth0n1c 987863ef46 Fix source and sourcetype of detection 2023-05-16 10:54:36 -07:00
srv-rr-gh-researchbt 2715051cb8 Branch was auto-updated. 2023-05-16 09:52:41 -07:00
srv-rr-gh-researchbt 2aa044eb0c Branch was auto-updated. 2023-05-16 09:52:40 -07:00
Bhavin Patel 5f96d4360d Merge pull request #2640 from splunk/TR-2980_AzureAd_PrivEsc
Azure Active Directory Privilege Escalation
2023-05-16 09:52:23 -07:00
mvelazco ac8f8e6184 Merge branch 'TR-2980_AzureAd_PrivEsc' of github.com:splunk/security_content into TR-2980_AzureAd_PrivEsc 2023-05-16 12:43:31 -04:00
Michael Haag b5765c546e Update windows_winlogon_with_public_network_connection.yml 2023-05-16 10:27:26 -06:00
Michael Haag 4dd8d8e704 Merge branch 'newness' of https://github.com/splunk/security_content into newness 2023-05-16 10:17:51 -06:00
Michael Haag 7cc2746c76 fix for bootexecute 2023-05-16 10:17:41 -06:00
srv-rr-gh-researchbt 43bd461142 Branch was auto-updated. 2023-05-16 09:15:05 -07:00
srv-rr-gh-researchbt ccdd69cd22 Branch was auto-updated. 2023-05-16 09:15:04 -07:00
srv-rr-gh-researchbt 8120e6a0d9 Branch was auto-updated. 2023-05-16 09:14:50 -07:00
Bhavin Patel 03a96d1e20 Merge pull request #2675 from splunk/PaperCuts
The Haag Mile: A Journey of Redemption
2023-05-16 09:14:31 -07:00
patel-bhavin 49680f9e51 underscore 2023-05-16 09:09:57 -07:00
Michael Haag c17d09140a Rename papercutng_suspicious_behavior_debug_log.yml to papercut_ng_suspicious_behavior_debug_log.yml 2023-05-16 09:12:01 -06:00
Michael Haag 0f0002b9cf Rename papercutng_remote_web_access_attempt.yml to papercut_ng_remote_web_access_attempt.yml 2023-05-16 09:11:38 -06:00
Michael Haag 08fc892017 name fixes 2023-05-16 09:10:59 -06:00
Michael Haag 07be57790b Update and rename windows_papercutng_spawn_shell.yml to windows_papercut_ng_spawn_shell.yml 2023-05-16 09:08:35 -06:00
Bhavin Patel c51fe800a9 Update windows_snake_malware_file_modification_crmlog.yml 2023-05-15 15:22:22 -07:00
patel-bhavin 7b27c93bad story renames 2023-05-15 15:11:32 -07:00
Michael Haag f2cb3b89b4 fixes 2023-05-15 15:16:34 -06:00
pyth0n1c b24394affd Push a new github_actions test config file 2023-05-15 13:54:53 -07:00
pyth0n1c 4b04df1ff8 Updated all app baselines in validate_args 2023-05-15 13:52:12 -07:00
srv-rr-gh-researchbt 991c16d8a5 Branch was auto-updated. 2023-05-15 13:17:18 -07:00
srv-rr-gh-researchbt 1682280d43 Branch was auto-updated. 2023-05-15 13:17:17 -07:00
srv-rr-gh-researchbt 1c88fe306f Branch was auto-updated. 2023-05-15 13:17:16 -07:00
srv-rr-gh-researchbt b810097375 Branch was auto-updated. 2023-05-15 13:17:14 -07:00
Bhavin Patel c01c31e5be Merge pull request #2621 from splunk/aws_exfil
Aws Exfil Detections
2023-05-15 13:16:54 -07:00
pyth0n1c 4ef47f2fcc Fix source and sourcetype of attack_data 2023-05-15 12:56:47 -07:00
patel-bhavin 5f1c38800a search text updates 2023-05-15 12:52:17 -07:00
pyth0n1c 9e535bb5f0 Update baseline to include
suricata ta.  TA required 
for testing new detections.
Also, remove some 
duplicates apps from the 
baseline.
2023-05-15 12:49:18 -07:00
Michael Haag f5e121b1eb The Haag Mile: A Journey of Redemption 2023-05-15 13:22:04 -06:00
Michael Haag 72ab3d1e08 last of snake 2023-05-15 13:19:56 -06:00
srv-rr-gh-researchbt b29ce34cf1 Branch was auto-updated. 2023-05-15 12:16:36 -07:00
srv-rr-gh-researchbt dce9b8f0fa Branch was auto-updated. 2023-05-15 12:16:35 -07:00
srv-rr-gh-researchbt 96d1c24cc5 Branch was auto-updated. 2023-05-15 12:16:20 -07:00
srv-rr-gh-researchbt b09e5b7c6c Branch was auto-updated. 2023-05-15 12:16:19 -07:00
Bhavin Patel 7643758830 Merge pull request #2587 from splunk/joinopolis
HaagJoinopolis
2023-05-15 12:16:00 -07:00
mvelazco 2361f204ba Merge branch 'TR-2980_AzureAd_PrivEsc' of github.com:splunk/security_content into TR-2980_AzureAd_PrivEsc 2023-05-15 14:39:02 -04:00
mvelazco 63bee455fc Update azure_active_directory_privilege_escalation.yml 2023-05-15 14:38:58 -04:00
srv-rr-gh-researchbt 5f355c66e9 Branch was auto-updated. 2023-05-15 11:25:49 -07:00
srv-rr-gh-researchbt 6ad23c6bb2 Branch was auto-updated. 2023-05-15 11:25:41 -07:00
srv-rr-gh-researchbt d3d7180671 Branch was auto-updated. 2023-05-15 11:25:34 -07:00
srv-rr-gh-researchbt 9bc418c823 Branch was auto-updated. 2023-05-15 11:25:33 -07:00
srv-rr-gh-researchbt b04d091888 Branch was auto-updated. 2023-05-15 11:25:30 -07:00