admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,936 Commits 697 Branches 195 Tags
e5a3abaedbbbbfa8d3dd32a9daf577fbde4c8389
Commit Graph

147 Commits

Author SHA1 Message Date
pyth0n1c e6c5fbd101 added all detections for release, still need to update dataset links 2023-02-14 06:46:13 -08:00
ksharad-splunk 3a4568bc3d Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml 2023-02-07 15:34:47 +01:00
ksharad-splunk 918f54262d Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.mlmodel 2023-02-07 15:34:23 +01:00
Kumar Sharad e9ed13ea31 Detection name update 2023-02-07 15:31:48 +01:00
Kumar Sharad 87d5b60b0a Detect suspicious Filename updates 2023-01-27 17:23:58 +01:00
srv-rr-gh-researchbt a9242d7e60 Branch was auto-updated. 2023-01-24 12:37:52 -08:00
srv-rr-gh-researchbt 1acbc9eabe Branch was auto-updated. 2023-01-24 12:36:10 -08:00
srv-rr-gh-researchbt 59954ea010 Branch was auto-updated. 2023-01-24 12:36:04 -08:00
srv-rr-gh-researchbt 4562759834 Branch was auto-updated. 2023-01-24 11:18:52 -08:00
srv-rr-gh-researchbt af60fd3d8c Branch was auto-updated. 2023-01-24 11:18:50 -08:00
srv-rr-gh-researchbt 4c961f2d4f Branch was auto-updated. 2023-01-24 11:18:49 -08:00
Kumar Sharad 944b7a7e82 Detect Suspicious Filename 2023-01-23 17:24:37 +01:00
Namratha Sreekanta 6195517045 adding detect suspicious dns txt records using pretrained model in dsdl 2023-01-17 15:26:01 -08:00
tccontre bf8f2339b8 lockbit-chaos-ransomware 2023-01-17 15:37:37 +01:00
tccontre 5955920298 lockbit-chaos-ransomware 2023-01-16 10:10:28 +01:00
srv-rr-gh-researchbt 6ee71eb8f8 Branch was auto-updated. 2023-01-10 13:34:04 -08:00
Michael Haag 3642d36c7f Bespoke Drivers 2022-12-31 14:14:11 -07:00
Michael Haag 22f6d4ae92 Fantastic IIS Modules and Where to Find Them 2022-12-21 08:53:03 -07:00
srv-rr-gh-researchbt 0cc6a0cfc0 Branch was auto-updated. 2022-10-18 11:42:30 -07:00
Michael Haag f29367bf37 CISA and mimikatz add 2022-10-06 16:07:25 -06:00
srv-rr-gh-researchbt 62247ec23d Branch was auto-updated. 2022-10-03 13:18:04 -07:00
Bhavin Patel 8a6bc4e348 Merge branch 'develop' into OktaHaag 2022-10-03 13:15:37 -07:00
srv-rr-gh-researchbt 597a041b92 Branch was auto-updated. 2022-09-29 13:55:31 -07:00
Namratha Sreekanta 84ae1743fe changing file names 2022-09-28 13:16:22 -07:00
Namratha Sreekanta 179e58e087 changing files 2022-09-28 12:36:40 -07:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Namratha Sreekanta d1788686d5 initial commit for dga 2022-09-15 17:50:36 -07:00
d1vious 782b9bed8a updating csv 2022-09-15 14:57:53 -04:00
pyth0n1c 775d7c8305 Branch was auto-updated. 2022-09-15 09:15:57 -07:00
pyth0n1c 934844a293 Branch was auto-updated. 2022-09-13 10:12:23 -07:00
d1vious e43855c570 lolbas 2022-09-08 19:15:03 -04:00
d1vious b3aa8b4bb4 working scripts 2022-09-08 18:01:46 -04:00
mvelazco 441a1542bd adding new detection. fixing types. adding line to lookup 2022-09-02 18:03:14 -04:00
mvelazco 6e07f25d0b fixing lookup name typo 2022-08-29 17:30:34 -04:00
mvelazco 79f7f9c16e adding new detection 2022-08-29 17:00:05 -04:00
Michael Haag 11eb0feac6 T1003.001 Update 2022-08-25 08:04:20 -06:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
pyth0n1c f0b053152e Update hijacklibs.csv 
Forgot to include one of the dlls,
amsi.dll.  This caused the detection
testing to fail.
 2022-08-22 12:29:21 -07:00
Michael Haag 17ba3c3e51 fix 2022-08-19 15:21:15 -06:00
Michael Haag 416ddb5fa8 lookup 1 2022-08-19 14:40:01 -06:00
pyth0n1c 87a8bc0442 Merged develop into this branch and resolved merge conflicts. 2022-08-03 06:47:22 -07:00
pyth0n1c 2a5a055a7f Branch was auto-updated. 2022-07-19 10:46:12 -07:00
Michael Haag 0a56c2470f proto fix 2022-07-14 09:50:41 -06:00
Michael Haag 8ec266233b Windows Protocol Handler 2022-07-12 14:43:39 -06:00
pyth0n1c 012b360989 Branch was auto-updated. 2022-07-07 07:56:47 -07:00
Jose Enrique Hernandez 9cc85a614f Update security_services.csv 2022-07-07 10:43:17 -04:00
Kumar Sharad 28c799e829 model to detect risky commands 2022-06-29 23:45:27 +02:00
Kumar Sharad 8d568ae416 model to detect risky commands 2022-06-23 22:43:22 +02:00
Kumar Sharad 7328ea1aa3 model to detect risky commands 2022-06-22 19:34:06 +02:00
Kumar Sharad defa7b1bd0 model to detect risky commands 2022-06-22 16:57:52 +02:00