 Michael Haag
|
f15ceb065d
|
Update powershell_4104_hunting.yml
|
2023-06-14 08:47:14 -06:00 |
|
|
research bot
|
6faa3e2311
|
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
|
2023-06-13 18:50:39 +00:00 |
|
|
Bhavin Patel
|
0451c2dc10
|
Merge pull request #2718 from splunk/asl_text
update ASL text
v4.5.0
|
2023-06-13 11:15:41 -07:00 |
|
|
Bhavin Patel
|
dcab2f1867
|
update ocsf
|
2023-06-13 11:06:53 -07:00 |
|
|
Bhavin Patel
|
69cdbdee85
|
Merge pull request #2678 from splunk/ad_ldap_account_locking_playbook
ad_ldap_account_locking_playbook
|
2023-06-13 10:54:40 -07:00 |
|
|
srv-rr-gh-researchbt
|
f5b303121c
|
Branch was auto-updated.
|
2023-06-13 10:48:24 -07:00 |
|
|
Bhavin Patel
|
0ec2ebaf19
|
Merge pull request #2672 from splunk/Azure_AD_Locking_Playbook
Azure_AD_Locking_Playbook
|
2023-06-13 10:47:51 -07:00 |
|
|
srv-rr-gh-researchbt
|
713d9d5547
|
Branch was auto-updated.
|
2023-06-12 17:39:34 -07:00 |
|
|
srv-rr-gh-researchbt
|
93ef25f3c5
|
Branch was auto-updated.
|
2023-06-12 17:39:30 -07:00 |
|
|
Bhavin Patel
|
043f6aa1fa
|
Merge pull request #2614 from nterl0k/nterl0k-T1505.003_generic_webshell
T1505.003 - You'll have a shell of a good time.
|
2023-06-12 17:39:12 -07:00 |
|
|
Bhavin Patel
|
71178f3c3a
|
Update detect_webshell_exploit_behavior.yml
Updated `security_content_summariesonly` and adding filter macro
|
2023-06-12 17:17:39 -07:00 |
|
|
Bhavin Patel
|
9faf0af7ab
|
Update detect_webshell_exploit_behavior.yml
added status key, fixing a typo and running validation scripts
|
2023-06-12 16:31:11 -07:00 |
|
|
srv-rr-gh-researchbt
|
3796dce940
|
Branch was auto-updated.
|
2023-06-12 15:48:23 -07:00 |
|
|
srv-rr-gh-researchbt
|
1ec5a1e89a
|
Branch was auto-updated.
|
2023-06-12 15:48:17 -07:00 |
|
|
Bhavin Patel
|
0e9b8a5643
|
Merge pull request #2686 from splunk/kvstory
KVstore update
|
2023-06-12 15:47:48 -07:00 |
|
|
Bhavin Patel
|
7cbe7c87c9
|
Update previously_seen_api_calls_from_user_roles.yml
|
2023-06-12 15:40:37 -07:00 |
|
|
Bhavin Patel
|
266a2a775b
|
adding lookups
|
2023-06-12 15:26:27 -07:00 |
|
|
srv-rr-gh-researchbt
|
f9d1ba78cb
|
Branch was auto-updated.
|
2023-06-12 15:10:15 -07:00 |
|
|
srv-rr-gh-researchbt
|
80d5e1a4f3
|
Branch was auto-updated.
|
2023-06-12 15:10:09 -07:00 |
|
|
srv-rr-gh-researchbt
|
0e192e2b8a
|
Branch was auto-updated.
|
2023-06-12 15:10:08 -07:00 |
|
|
Bhavin Patel
|
39d6fdd658
|
Merge pull request #2660 from splunk/dns_data_exfiltration_detection
Detect DNS Data Exfiltration using pretrained model in DSDL
|
2023-06-12 15:09:41 -07:00 |
|
|
srv-rr-gh-researchbt
|
910c4e7c85
|
Branch was auto-updated.
|
2023-06-12 14:54:35 -07:00 |
|
|
srv-rr-gh-researchbt
|
49b5801cb5
|
Branch was auto-updated.
|
2023-06-12 14:54:33 -07:00 |
|
|
srv-rr-gh-researchbt
|
6768761ce7
|
Branch was auto-updated.
|
2023-06-12 14:54:27 -07:00 |
|
|
srv-rr-gh-researchbt
|
4aa2ed738b
|
Branch was auto-updated.
|
2023-06-12 14:54:17 -07:00 |
|
|
Bhavin Patel
|
51a9729171
|
Merge pull request #2651 from splunk/steven_Test
Steven Dick - new detections
|
2023-06-12 14:53:53 -07:00 |
|
|
Bhavin Patel
|
bc1871025a
|
Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml
|
2023-06-12 14:41:43 -07:00 |
|
|
Bhavin Patel
|
21bd725eaa
|
yaml fix
|
2023-06-12 14:23:18 -07:00 |
|
|
Bhavin Patel
|
4293a508af
|
Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml
Triggering CI
|
2023-06-12 14:16:38 -07:00 |
|
|
Bhavin Patel
|
9e31186154
|
Update detect_rtlo_in_file_name.yml
double quotes
|
2023-06-12 14:06:53 -07:00 |
|
|
Namratha Sreekanta
|
f435b50a77
|
Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection
|
2023-06-12 13:56:33 -07:00 |
|
|
Namratha Sreekanta
|
0782930137
|
Adding missing lookup files
|
2023-06-12 13:56:20 -07:00 |
|
|
srv-rr-gh-researchbt
|
546fc04483
|
Branch was auto-updated.
|
2023-06-12 11:45:36 -07:00 |
|
|
srv-rr-gh-researchbt
|
7f3870e809
|
Branch was auto-updated.
|
2023-06-12 11:45:30 -07:00 |
|
|
srv-rr-gh-researchbt
|
90b7137441
|
Branch was auto-updated.
|
2023-06-12 11:45:26 -07:00 |
|
|
srv-rr-gh-researchbt
|
e9d14235a3
|
Branch was auto-updated.
|
2023-06-12 11:45:20 -07:00 |
|
|
srv-rr-gh-researchbt
|
853944ebd2
|
Branch was auto-updated.
|
2023-06-12 11:45:19 -07:00 |
|
|
Bhavin Patel
|
f5f8568763
|
Merge pull request #2695 from splunk/ssainyoureyes
The Order of The Haag
|
2023-06-12 11:44:58 -07:00 |
|
|
srv-rr-gh-researchbt
|
9ae2d3de5f
|
Branch was auto-updated.
|
2023-06-12 11:29:19 -07:00 |
|
|
srv-rr-gh-researchbt
|
d80f9acf1a
|
Branch was auto-updated.
|
2023-06-12 11:29:18 -07:00 |
|
|
srv-rr-gh-researchbt
|
9576004ac3
|
Branch was auto-updated.
|
2023-06-12 11:29:13 -07:00 |
|
|
srv-rr-gh-researchbt
|
60a2842cab
|
Branch was auto-updated.
|
2023-06-12 11:29:08 -07:00 |
|
|
srv-rr-gh-researchbt
|
25a7456979
|
Branch was auto-updated.
|
2023-06-12 11:29:07 -07:00 |
|
|
srv-rr-gh-researchbt
|
84e308fdb2
|
Branch was auto-updated.
|
2023-06-12 11:29:03 -07:00 |
|
|
Bhavin Patel
|
4b113e9b0d
|
Merge pull request #2684 from splunk/aws_asl_detections
ASL detections
|
2023-06-12 11:28:41 -07:00 |
|
|
Bhavin Patel
|
4c2f54a0dc
|
Update detect_rtlo_in_process.yml
|
2023-06-12 10:58:03 -07:00 |
|
|
Bhavin Patel
|
af3fe52811
|
Update detect_rtlo_in_file_name.yml
|
2023-06-12 10:57:39 -07:00 |
|
|
Bhavin Patel
|
2a217a7c0a
|
Update detect_rtlo_in_file_name.yml
|
2023-06-12 10:55:39 -07:00 |
|
|
Namratha Sreekanta
|
b3447c98c6
|
Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection
|
2023-06-08 14:00:36 -07:00 |
|
|
Namratha Sreekanta
|
05885bc6f2
|
changing the search
|
2023-06-08 14:00:28 -07:00 |
|