 Bhavin Patel
|
f6fdcd098c
|
updating search and other meta
|
2025-08-26 12:55:56 -07:00 |
|
|
Bhavin Patel
|
69278ca671
|
Merge pull request #3656 from splunk/objectivity_stealer
objectivity_stealer
|
2025-08-26 10:30:44 -07:00 |
|
|
Bhavin Patel
|
9c8742b4d8
|
Merge branch 'develop' into objectivity_stealer
|
2025-08-26 09:48:14 -07:00 |
|
|
Bhavin Patel
|
0cff5fb832
|
Merge pull request #3649 from splunk/path_wiper
path_wiper
|
2025-08-26 09:48:01 -07:00 |
|
|
Nasreddine Bencherchali
|
3a00645eaf
|
Merge branch 'develop' into objectivity_stealer
|
2025-08-26 15:10:32 +02:00 |
|
|
Bhavin Patel
|
aa1608fc24
|
Merge branch 'develop' into path_wiper
|
2025-08-25 13:28:31 -07:00 |
|
|
Bhavin Patel
|
1384d69043
|
Merge pull request #3651 from PJS-Cyber/patch-1
Update windows_wmi_process_and_service_list.yml
|
2025-08-25 12:50:11 -07:00 |
|
|
Bhavin Patel
|
05be24dec3
|
Merge branch 'develop' into patch-1
|
2025-08-25 12:35:17 -07:00 |
|
|
Bhavin Patel
|
6db1a3c95d
|
Merge pull request #3650 from splunk/disable_lsa
disable_lsa
|
2025-08-25 11:40:49 -07:00 |
|
|
Bhavin Patel
|
6b8b7c14d4
|
Merge branch 'develop' into disable_lsa
|
2025-08-25 11:39:43 -07:00 |
|
|
Bhavin Patel
|
d6c886c30d
|
Merge pull request #3657 from splunk/macro_fix
Remove duplicate filter macro
|
2025-08-25 10:35:42 -07:00 |
|
|
Teoderick Contreras
|
897986eaa5
|
objectivity_stealer
|
2025-08-25 18:46:15 +02:00 |
|
|
Br3akp0int
|
9e56adf724
|
Update stories/obj3ctivity_stealer.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-08-25 18:02:15 +02:00 |
|
|
Nasreddine Bencherchali
|
6abb0f792a
|
Merge branch 'develop' into objectivity_stealer
|
2025-08-25 17:55:06 +02:00 |
|
|
Br3akp0int
|
9a2ed13cac
|
Update windows_dll_module_loaded_in_temp_dir.yml
|
2025-08-25 16:13:48 +02:00 |
|
|
Br3akp0int
|
f488577b9d
|
Update windows_dll_module_loaded_in_temp_dir.yml
|
2025-08-25 16:09:47 +02:00 |
|
|
Lou Stella
|
c50b5fd119
|
Merge branch 'develop' into macro_fix
|
2025-08-25 08:43:58 -05:00 |
|
|
Lou Stella
|
f8b9b828cb
|
Merge pull request #3660 from splunk/auto-ta-update-368
Automated Splunk TA Update 368
|
2025-08-25 08:43:39 -05:00 |
|
|
Br3akp0int
|
0dde715c39
|
Update stories/pathwiper.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-08-25 13:22:30 +02:00 |
|
|
Nasreddine Bencherchali
|
05b159153c
|
Update WMI Process and Service List version and date
|
2025-08-25 12:53:21 +02:00 |
|
|
patel-bhavin
|
e4135caf6e
|
Updated TAs
|
2025-08-25 06:59:36 +00:00 |
|
|
ljstella
|
5efd078769
|
Remove duplicate filter macro
|
2025-08-22 10:24:02 -04:00 |
|
|
Teoderick Contreras
|
e99692b3e6
|
objectivity_stealer
|
2025-08-22 09:54:09 +02:00 |
|
|
Bhavin Patel
|
a063ed3249
|
Merge pull request #3654 from splunk/fixes_5130
Remove Drilldown
v5.13.0
|
2025-08-21 14:22:21 -07:00 |
|
|
Bhavin Patel
|
227bb64ccc
|
remove drilldown
|
2025-08-21 14:04:16 -07:00 |
|
|
Bhavin Patel
|
2f988c5fd7
|
Merge pull request #3653 from splunk/ciscoios2018
CVE-2018-0171
|
2025-08-21 13:45:30 -07:00 |
|
|
Bhavin Patel
|
6a561d6119
|
updating macro
|
2025-08-21 13:10:38 -07:00 |
|
|
Bhavin Patel
|
23944ac544
|
adding detection from pcap
|
2025-08-21 12:59:30 -07:00 |
|
|
Bhavin Patel
|
5efc96202d
|
updating spl
|
2025-08-21 12:21:54 -07:00 |
|
|
Michael Haag
|
c58213d18e
|
Create cisco_configuration_archive_logging_analysis.yml
|
2025-08-21 13:18:04 -06:00 |
|
|
Michael Haag
|
900803f962
|
Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018
|
2025-08-21 13:16:33 -06:00 |
|
|
Michael Haag
|
aea4629c0a
|
Create cisco_configuration_file_exfiltration_attempts.yml
|
2025-08-21 13:16:32 -06:00 |
|
|
Bhavin Patel
|
7541c45be5
|
data source description
|
2025-08-21 11:24:20 -07:00 |
|
|
Bhavin Patel
|
62f32549c9
|
fixing dd
|
2025-08-21 11:17:12 -07:00 |
|
|
Bhavin Patel
|
d895fa6034
|
yaml fixes
|
2025-08-21 11:12:52 -07:00 |
|
|
Michael Haag
|
9bc27c2b0d
|
Create cisco_tftp_server_configuration_for_data_exfiltration.yml
|
2025-08-21 11:43:59 -06:00 |
|
|
Michael Haag
|
ec698f88ec
|
Create cisco_network_interface_modifications.yml
|
2025-08-21 11:43:03 -06:00 |
|
|
Michael Haag
|
91c9a99d62
|
Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018
|
2025-08-21 11:27:07 -06:00 |
|
|
Michael Haag
|
1781f034ba
|
Create cisco_snmp_community_string_configuration_changes.yml
|
2025-08-21 11:26:58 -06:00 |
|
|
Bhavin Patel
|
7ec158832d
|
adding a new detections for snort with static tundra sigs
|
2025-08-21 10:17:54 -07:00 |
|
|
Bhavin Patel
|
94a7f291e8
|
updating dataset link
|
2025-08-21 10:17:54 -07:00 |
|
|
Michael Haag
|
b24cb334a3
|
Create cisco_ios_suspicious_privileged_account_creation.yml
|
2025-08-21 11:06:59 -06:00 |
|
|
Bhavin Patel
|
c31013241b
|
updatings with snort detection and lookup also contentctl
|
2025-08-21 09:43:02 -07:00 |
|
|
Michael Haag
|
125486536c
|
DS + new
|
2025-08-21 10:08:59 -06:00 |
|
|
Michael Haag
|
521cfc1d2c
|
Create cisco_smart_install_remote_code_execution_cve_2018_0171.yml
|
2025-08-21 08:16:14 -06:00 |
|
|
Teoderick Contreras
|
77c7751cb0
|
path_wiper
|
2025-08-21 12:42:07 +02:00 |
|
|
Teoderick Contreras
|
2e7cf28401
|
path_wiper
|
2025-08-21 12:37:58 +02:00 |
|
|
PJS-Cyber
|
3b713fae62
|
Update windows_wmi_process_and_service_list.yml
Resolved a detection bypass technique where inserting multiple spaces between commands allowed evasion. Validated the fix in a production environment.
|
2025-08-20 15:51:44 -04:00 |
|
|
Teoderick Contreras
|
69fd51bbd7
|
disable_lsa
|
2025-08-20 17:16:02 +02:00 |
|
|
Teoderick Contreras
|
ffa784db1e
|
path_wiper
|
2025-08-20 12:13:44 +02:00 |
|