admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
20,915 Commits 697 Branches 195 Tags
f15ceb065d892158fa040ae00dfb7e00a3565442
Commit Graph

5649 Commits

Author SHA1 Message Date
Michael Haag f15ceb065d Update powershell_4104_hunting.yml 2023-06-14 08:47:14 -06:00
Bhavin Patel 043f6aa1fa Merge pull request #2614 from nterl0k/nterl0k-T1505.003_generic_webshell 
T1505.003 - You'll have a shell of a good time.
 2023-06-12 17:39:12 -07:00
Bhavin Patel 71178f3c3a Update detect_webshell_exploit_behavior.yml 
Updated `security_content_summariesonly` and adding filter macro
 2023-06-12 17:17:39 -07:00
Bhavin Patel 9faf0af7ab Update detect_webshell_exploit_behavior.yml 
added status key, fixing a typo and running validation scripts
 2023-06-12 16:31:11 -07:00
Bhavin Patel 21bd725eaa yaml fix 2023-06-12 14:23:18 -07:00
Bhavin Patel 9e31186154 Update detect_rtlo_in_file_name.yml 
double quotes
 2023-06-12 14:06:53 -07:00
srv-rr-gh-researchbt 546fc04483 Branch was auto-updated. 2023-06-12 11:45:36 -07:00
Bhavin Patel 4c2f54a0dc Update detect_rtlo_in_process.yml 2023-06-12 10:58:03 -07:00
Bhavin Patel af3fe52811 Update detect_rtlo_in_file_name.yml 2023-06-12 10:57:39 -07:00
Bhavin Patel 2a217a7c0a Update detect_rtlo_in_file_name.yml 2023-06-12 10:55:39 -07:00
srv-rr-gh-researchbt 742194eede Branch was auto-updated. 2023-06-06 10:01:04 -07:00
srv-rr-gh-researchbt f976d66013 Branch was auto-updated. 2023-06-06 10:00:53 -07:00
Bhavin Patel 42fb320d4e minor fixes 2023-06-06 09:55:49 -07:00
Michael Haag 9094cc726c Update windows_moveit_transfer_writing_aspx.yml 2023-06-06 07:58:58 -06:00
Michael Haag 195db41ce0 Update windows_moveit_transfer_writing_aspx.yml 2023-06-06 07:36:03 -06:00
srv-rr-gh-researchbt 30f40110f4 Branch was auto-updated. 2023-06-01 11:27:15 -07:00
Michael Haag ff50d8a85b I Like to MOVEit, MOVEit 2023-06-01 10:25:58 -06:00
Michael Haag a79a2455f9 The Order of The Haag 2023-05-31 13:38:50 -06:00
patel-bhavin e71b78f22c macrosupdate 2023-05-26 14:25:21 -07:00
srv-rr-gh-researchbt 52bbbb93e6 Branch was auto-updated. 2023-05-26 11:43:32 -07:00
srv-rr-gh-researchbt 2f541a080d Branch was auto-updated. 2023-05-26 11:32:11 -07:00
srv-rr-gh-researchbt 102e48f023 Branch was auto-updated. 2023-05-26 11:31:59 -07:00
Bhavin Patel d992b9012c Merge branch 'develop' into volt_typhoon 2023-05-25 18:03:04 -07:00
srv-rr-gh-researchbt 460a414849 Branch was auto-updated. 2023-05-25 14:37:16 -07:00
srv-rr-gh-researchbt 424116dee0 Branch was auto-updated. 2023-05-25 14:37:08 -07:00
srv-rr-gh-researchbt e538f761ec Branch was auto-updated. 2023-05-25 11:14:55 -07:00
srv-rr-gh-researchbt 48b567dd1e Branch was auto-updated. 2023-05-25 11:14:50 -07:00
srv-rr-gh-researchbt 518422b945 Branch was auto-updated. 2023-05-25 11:14:45 -07:00
Michael Haag 8d768f513f name fixes 2023-05-25 10:47:03 -06:00
tccontre ba7f909caa volt_typhoon_2 2023-05-25 16:02:03 +02:00
Michael Haag 4ed5741a8a Create windows_ldifde_directory_object_behavior.yml 2023-05-25 07:44:14 -06:00
tccontre 2aa964f688 volt_typhoon_2 2023-05-25 15:42:09 +02:00
tccontre b617a454fa Merge branch 'volt_typhoon' of github.com:splunk/security_content into volt_typhoon 2023-05-25 15:07:58 +02:00
tccontre 2c935bb402 volt_typhoon 2023-05-25 15:05:13 +02:00
Michael Haag b881799d7f Update suspicious_copy_on_system32.yml 2023-05-25 06:44:12 -06:00
Michael Haag 29985a3e6c password spray 2023-05-25 06:35:11 -06:00
Michael Haag 435764203d Update windows_dns_gather_network_info.yml 2023-05-25 06:08:14 -06:00
Michael Haag b9b847b9f6 Merge branch 'volt_typhoon' of https://github.com/splunk/security_content into volt_typhoon 2023-05-25 06:07:27 -06:00
Michael Haag ec897a5cbb more 2023-05-25 06:07:25 -06:00
tccontre c887050e65 Merge branch 'volt_typhoon' of github.com:splunk/security_content into volt_typhoon 2023-05-25 14:01:57 +02:00
tccontre b76d701acf volt_typhoon 2023-05-25 14:01:24 +02:00
Michael Haag 20c60fb589 1 more 2023-05-25 06:00:45 -06:00
Michael Haag 9d15cfbf7e few more 2023-05-25 05:59:55 -06:00
Michael Haag 4110afa0bc volts 2023-05-25 05:52:07 -06:00
tccontre aad413f44c volt_typhoon 2023-05-25 12:16:00 +02:00
tccontre 03ad08635e iceid_dfir_coverage 2023-05-24 14:58:17 +02:00
tccontre 97307452a5 Update network_share_discovery_via_dir_command.yml 2023-05-24 10:50:56 +02:00
tccontre 742a34eefb iceid_dfir_coverage 2023-05-24 10:11:41 +02:00
mvelazco 71fcc66c96 Merge branch 'TR2850_RBA_PrivEsc' of github.com:splunk/security_content into TR2850_RBA_PrivEsc 2023-05-23 17:26:30 -04:00
mvelazco 508ca2a051 updates 2023-05-23 17:26:18 -04:00