 Michael Haag
|
f73d760571
|
Update windows_steal_authentication_certificates_cryptoapi.yml
|
2023-02-21 09:07:23 -07:00 |
|
|
tccontre
|
f2334bc080
|
Update windows_spearphishing_attachment_connect_to_none_ms_office_domain.yml
|
2023-02-21 09:31:42 +01:00 |
|
|
Michael Haag
|
03e585fb7c
|
Added MSAccess
|
2023-02-15 07:19:07 -07:00 |
|
|
Michael Haag
|
24777f4907
|
Merge branch 'SpiderHaag' of https://github.com/splunk/security_content into SpiderHaag
|
2023-02-14 15:35:02 -07:00 |
|
|
Michael Haag
|
6a1edaa5f3
|
fixes
|
2023-02-14 15:35:00 -07:00 |
|
|
srv-rr-gh-researchbt
|
cd59884f9c
|
Branch was auto-updated.
|
2023-02-14 09:54:13 -08:00 |
|
|
research bot
|
4ce75dac95
|
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
|
2023-02-14 17:53:54 +00:00 |
|
|
srv-rr-gh-researchbt
|
ee70f283b2
|
Branch was auto-updated.
|
2023-02-14 09:35:21 -08:00 |
|
|
Bhavin Patel
|
ecf185a335
|
Merge pull request #2541 from splunk/2230214_release
2230214 release
v3.59.0
|
2023-02-14 09:35:00 -08:00 |
|
|
pyth0n1c
|
0640489c50
|
Fixed filter macro name
|
2023-02-14 09:17:16 -08:00 |
|
|
pyth0n1c
|
42dd0ae6ed
|
Forgot to change a path in test file
|
2023-02-14 09:06:16 -08:00 |
|
|
pyth0n1c
|
806baf7cb8
|
Merge branch '2230214_release' of https://github.com/splunk/security_content into 2230214_release
|
2023-02-14 08:47:09 -08:00 |
|
|
pyth0n1c
|
eb124998c7
|
fixed name
|
2023-02-14 08:46:33 -08:00 |
|
|
srv-rr-gh-researchbt
|
e005d910b3
|
Branch was auto-updated.
|
2023-02-14 08:42:02 -08:00 |
|
|
srv-rr-gh-researchbt
|
6ea5514ac8
|
Branch was auto-updated.
|
2023-02-14 08:41:57 -08:00 |
|
|
Bhavin Patel
|
cdf187b3b1
|
Merge pull request #2542 from splunk/version_quotes
add quotes
|
2023-02-14 08:41:35 -08:00 |
|
|
pyth0n1c
|
7679202115
|
fixing bad dataset link
|
2023-02-14 08:38:07 -08:00 |
|
|
patel-bhavin
|
f9498c3ace
|
add quotes
|
2023-02-14 08:26:34 -08:00 |
|
|
pyth0n1c
|
9d595cf451
|
added dataset links
|
2023-02-14 08:21:48 -08:00 |
|
|
pyth0n1c
|
e6c5fbd101
|
added all detections for release, still need to update dataset links
|
2023-02-14 06:46:13 -08:00 |
|
|
Michael Haag
|
5efc870783
|
Update windows_mimikatz_crypto_export_file_extensions.yml
|
2023-02-11 07:57:04 -07:00 |
|
|
Michael Haag
|
4f35ae54f0
|
Update windows_export_certificate.yml
forgot the event code :(
|
2023-02-11 07:26:31 -07:00 |
|
|
Michael Haag
|
2c29aea902
|
miimi
|
2023-02-09 15:06:29 -07:00 |
|
|
Michael Haag
|
9e03f7189a
|
Create windows_steal_authentication_certificates_cryptoapi.test.yml
|
2023-02-09 14:33:35 -07:00 |
|
|
Michael Haag
|
3a4380c16a
|
fixes
|
2023-02-09 14:32:34 -07:00 |
|
|
Michael Haag
|
ee19d1e134
|
Haageddon
|
2023-02-09 14:09:20 -07:00 |
|
|
research bot
|
acf6d3d9c9
|
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
|
2023-02-07 22:20:18 +00:00 |
|
|
Bhavin Patel
|
d2ddfc1fe1
|
Merge pull request #2537 from splunk/appinspect_dsdl
fixup
v3.58.0
|
2023-02-07 13:53:22 -08:00 |
|
|
patel-bhavin
|
7bb35392d0
|
fixup
|
2023-02-07 13:52:09 -08:00 |
|
|
Bhavin Patel
|
53279c36a1
|
Merge pull request #2534 from TheLawsOfChaos/develop
Multiple Updates
|
2023-02-07 13:12:24 -08:00 |
|
|
TheLawsOfChaos
|
376e204af1
|
Update windows_service_created_with_suspicious_service_path.yml
|
2023-02-07 16:09:51 -05:00 |
|
|
TheLawsOfChaos
|
64f1b2ecaa
|
Update windows_service_created_with_suspicious_service_path.yml
|
2023-02-07 16:03:16 -05:00 |
|
|
TheLawsOfChaos
|
d1fb0e3767
|
Update windows_service_created_with_suspicious_service_path.yml
|
2023-02-07 16:02:33 -05:00 |
|
|
TheLawsOfChaos
|
add6570b67
|
Update windows_service_created_with_suspicious_service_path.yml
Reverted back to Classic format fields per request.
|
2023-02-07 16:01:04 -05:00 |
|
|
Bhavin Patel
|
1d456aaf23
|
Merge pull request #2511 from splunk/suspicious_filename_ml_dsdl
Detect Suspicious Processname
|
2023-02-07 10:39:27 -08:00 |
|
|
dependabot[bot]
|
06f42798fe
|
Merge pull request #2523 from splunk/dependabot/pip/pytest-7.2.1
|
2023-02-07 18:10:24 +00:00 |
|
|
srv-rr-gh-researchbt
|
80b7739812
|
Branch was auto-updated.
|
2023-02-07 09:43:55 -08:00 |
|
|
srv-rr-gh-researchbt
|
133ce96ef8
|
Branch was auto-updated.
|
2023-02-07 09:43:53 -08:00 |
|
|
Bhavin Patel
|
170580d931
|
Merge pull request #2533 from splunk/security_content_commonalities_notebook
security_content_commonalities_notebook
|
2023-02-07 09:43:35 -08:00 |
|
|
Kumar Sharad
|
aaf4aa0552
|
Detection name update
|
2023-02-07 18:42:51 +01:00 |
|
|
ksharad-splunk
|
58476fa5fe
|
Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml
|
2023-02-07 15:35:43 +01:00 |
|
|
ksharad-splunk
|
22560697cf
|
Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.json
|
2023-02-07 15:35:31 +01:00 |
|
|
ksharad-splunk
|
559d7cae62
|
Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.ipynb
|
2023-02-07 15:35:11 +01:00 |
|
|
ksharad-splunk
|
3a4568bc3d
|
Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml
|
2023-02-07 15:34:47 +01:00 |
|
|
ksharad-splunk
|
918f54262d
|
Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.mlmodel
|
2023-02-07 15:34:23 +01:00 |
|
|
ksharad-splunk
|
3aa32bfc80
|
Delete detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml
|
2023-02-07 15:33:44 +01:00 |
|
|
Kumar Sharad
|
e9ed13ea31
|
Detection name update
|
2023-02-07 15:31:48 +01:00 |
|
|
tccontre
|
c681e8d78b
|
security_content_commonalities_notebook
|
2023-02-07 09:43:42 +01:00 |
|
|
TheLawsOfChaos
|
76b53a64a2
|
Update windows_service_created_with_suspicious_service_path.yml
Aftering syncing branch, the missing pipe (between the lastTime macro and the filter macro) was replaced. Verified code runs on own instance.
|
2023-02-06 21:22:37 -05:00 |
|
|
TheLawsOfChaos
|
361c607513
|
Merge branch 'splunk:develop' into develop
|
2023-02-06 21:12:52 -05:00 |
|