admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,936 Commits 697 Branches 195 Tags
e5a3abaedbbbbfa8d3dd32a9daf577fbde4c8389
Commit Graph

7511 Commits

Author SHA1 Message Date
P4T12ICK 2861d04434 merged with ba ocsf work 2023-03-03 13:28:14 +01:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
Bhavin Patel ae3ef32e0a Update suspicious_process_file_path.yml 2023-03-01 12:38:01 -08:00
Bhavin Patel e904ff4e1e Update suspicious_process_file_path.yml 2023-03-01 11:08:40 -08:00
Bhavin Patel 4aaa2424c3 Update suspicious_process_file_path.yml 2023-03-01 11:04:11 -08:00
Bhavin Patel bbb9b5a421 Update suspicious_process_file_path.yml 2023-03-01 10:53:03 -08:00
tccontre 0de5be9030 Update suspicious_process_file_path.yml 2023-03-01 14:05:56 +01:00
tccontre a21deeb7a0 Update suspicious_process_file_path.yml 2023-03-01 14:05:31 +01:00
P4T12ICK d115bfd4e0 converted ssa detections to ocsf 2023-02-28 12:00:16 +01:00
tccontre 41fb7257cd Update suspicious_process_file_path.yml 
minor fix for wrong name in observable fields.
 2023-02-28 10:49:16 +01:00
srv-rr-gh-researchbt b8d60092c8 Branch was auto-updated. 2023-02-21 11:06:55 -08:00
srv-rr-gh-researchbt 79d5fac050 Branch was auto-updated. 2023-02-21 11:03:58 -08:00
srv-rr-gh-researchbt 1943157207 Branch was auto-updated. 2023-02-21 11:03:53 -08:00
Bhavin Patel 2763f2df73 Update linux_unix_shell_enable_all_sysrq_functions.yml 2023-02-21 10:36:34 -08:00
Bhavin Patel ab8b96c49e Update linux_system_reboot_via_system_request_key.yml 2023-02-21 10:35:19 -08:00
Michael Haag f3c449e225 fixed 2023-02-21 11:27:07 -07:00
Michael Haag 92dcbcec70 CVE-2022-39952 2023-02-21 10:59:54 -07:00
Michael Haag f73d760571 Update windows_steal_authentication_certificates_cryptoapi.yml 2023-02-21 09:07:23 -07:00
tccontre f2334bc080 Update windows_spearphishing_attachment_connect_to_none_ms_office_domain.yml 2023-02-21 09:31:42 +01:00
tccontre 743b0cdba3 Update linux_impair_defenses_process_kill.yml 2023-02-16 10:57:09 +01:00
tccontre e83277db2b awfulshred 2023-02-16 09:56:29 +01:00
tccontre 9fd1c9e299 Update linux_indicator_removal_service_file_deletion.yml 2023-02-15 15:53:14 +01:00
tccontre c2ea0685ac awfulshred 2023-02-15 15:45:34 +01:00
Michael Haag 03e585fb7c Added MSAccess 2023-02-15 07:19:07 -07:00
tccontre d9f175ae6d awfulshred 2023-02-15 13:47:56 +01:00
tccontre 2b2c02d110 Update linux_unix_shell_enable_all_sysrq_functions.yml 2023-02-15 11:39:56 +01:00
tccontre bcdfb2bbde Update linux_impair_defenses_process_kill.yml 2023-02-15 11:23:47 +01:00
Michael Haag 24777f4907 Merge branch 'SpiderHaag' of https://github.com/splunk/security_content into SpiderHaag 2023-02-14 15:35:02 -07:00
Michael Haag 6a1edaa5f3 fixes 2023-02-14 15:35:00 -07:00
srv-rr-gh-researchbt 3bdd258a36 Branch was auto-updated. 2023-02-14 09:35:23 -08:00
srv-rr-gh-researchbt ee70f283b2 Branch was auto-updated. 2023-02-14 09:35:21 -08:00
pyth0n1c 0640489c50 Fixed filter macro name 2023-02-14 09:17:16 -08:00
pyth0n1c eb124998c7 fixed name 2023-02-14 08:46:33 -08:00
pyth0n1c 9d595cf451 added dataset links 2023-02-14 08:21:48 -08:00
pyth0n1c e6c5fbd101 added all detections for release, still need to update dataset links 2023-02-14 06:46:13 -08:00
tccontre 366a794f47 Update linux_indicator_removal_service_file_deletion.yml 2023-02-14 10:50:12 +01:00
tccontre c800d2a07e awfulshred 2023-02-14 10:43:41 +01:00
Michael Haag 5efc870783 Update windows_mimikatz_crypto_export_file_extensions.yml 2023-02-11 07:57:04 -07:00
Michael Haag 4f35ae54f0 Update windows_export_certificate.yml 
forgot the event code :(
 2023-02-11 07:26:31 -07:00
tccontre d874461a74 awfulshred 2023-02-10 13:22:40 +01:00
Michael Haag 2c29aea902 miimi 2023-02-09 15:06:29 -07:00
Michael Haag 3a4380c16a fixes 2023-02-09 14:32:34 -07:00
Michael Haag ee19d1e134 Haageddon 2023-02-09 14:09:20 -07:00
tccontre 8620fe38c9 awfulshred 2023-02-09 15:30:39 +01:00
tccontre a53b8e72b8 awfulshred 2023-02-09 15:25:14 +01:00
tccontre e336b73fee awfulshred 2023-02-08 15:28:32 +01:00
patel-bhavin 7bb35392d0 fixup 2023-02-07 13:52:09 -08:00
Bhavin Patel 53279c36a1 Merge pull request #2534 from TheLawsOfChaos/develop 
Multiple Updates
 2023-02-07 13:12:24 -08:00
TheLawsOfChaos 376e204af1 Update windows_service_created_with_suspicious_service_path.yml 2023-02-07 16:09:51 -05:00
TheLawsOfChaos 64f1b2ecaa Update windows_service_created_with_suspicious_service_path.yml 2023-02-07 16:03:16 -05:00