admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,221 Commits 697 Branches 195 Tags
ui_updated
Commit Graph

1634 Commits

Author SHA1 Message Date
root e82523e7fa Added detection testing service results inClop Common Exec Parameter 2021-03-30 14:42:45 +00:00
tcontreras e538e8138b minor_modificatio_add_process_check 2021-03-30 16:10:51 +02:00
research bot 55582c4e2f updating docs and package bits [ci skip] 2021-03-29 18:48:37 +00:00
bpatel d658fec539 fix from drew's PR 2021-03-29 09:42:44 -07:00
P4T12ICK c38768e3f5 updated test file 2021-03-29 17:17:58 +02:00
P4T12ICK c5ab64e872 updated test file 2021-03-29 16:53:20 +02:00
P4T12ICK f12d9a90bb updated test file 2021-03-29 16:49:13 +02:00
P4T12ICK bf1c11e5b5 test file updated 2021-03-29 16:03:06 +02:00
P4T12ICK 1c4908d6a8 merged 2021-03-26 16:26:13 +01:00
P4T12ICK 243121ce04 merged 2021-03-26 16:23:30 +01:00
P4T12ICK da86a0b7cf updated test files 2021-03-26 12:04:51 +01:00
research bot 6212932c35 updating docs and package bits [ci skip] 2021-03-25 19:35:07 +00:00
Detection Testing Service f2abe0bf4e Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-25 17:49:42 +00:00
root 41eb40bed8 Added detection testing service results inCertUtil With Decode Argument 2021-03-25 17:49:42 +00:00
github-actions[bot] e6d57ecba1 Branch was auto-updated. 2021-03-25 17:34:18 +00:00
mhaag-spl 1c3d7a3350 Create certutil_with_decode_argument.yml 
CertUtil Decode
 2021-03-25 11:18:36 -06:00
mhaag-spl a2fdff88e0 Added required fields 2021-03-25 11:17:53 -06:00
Detection Testing Service dcf55d15e3 Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-25 14:05:22 +00:00
root e2f266ab05 Added detection testing service results inCertUtil Download With VerifyCtl and Split Arguments 2021-03-25 14:05:21 +00:00
root e18f11f424 Added detection testing service results inCertUtil Download With URLCache and Split Arguments 2021-03-25 14:04:46 +00:00
mhaag-spl 106fc29c15 fix again 2021-03-25 07:08:05 -06:00
mhaag-spl bc7d16d5ac Fixed markers 2021-03-25 07:02:11 -06:00
mhaag-spl 5b7aa4ada2 fix 2021-03-24 15:36:19 -06:00
mhaag-spl 52015bd2b5 certutil 2021-03-24 15:32:46 -06:00
mhaag-spl 2e8c38f926 Update attempt_to_add_untrusted_certificate_to_certificate_store.yml 2021-03-24 15:28:17 -06:00
mhaag-spl fb662881d4 Update attempt_to_add_untrusted_certificate_to_certificate_store.yml 2021-03-24 15:19:36 -06:00
mhaag-spl 249fd0a549 Update Certutil 
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
 2021-03-24 15:15:47 -06:00
bpatel 8d12500905 adding risk and product tags 2021-03-23 15:03:02 -07:00
bpatel 7df6e65645 Merge branch 'aws_priv_escalation' of github.com:splunk/security_content into aws_priv_escalation 2021-03-23 13:12:56 -07:00
bpatel 4e0776d751 updates 2021-03-23 13:12:47 -07:00
github-actions[bot] 53f2f58a0a Branch was auto-updated. 2021-03-23 16:31:13 +00:00
github-actions[bot] 25a1febeb0 Branch was auto-updated. 2021-03-23 16:20:50 +00:00
github-actions[bot] 3a99bf8df2 Branch was auto-updated. 2021-03-23 16:20:49 +00:00
tcontreras 9e240c9530 false_positive_field_mod 2021-03-23 16:44:40 +01:00
tcontreras 191e42f58a clop_detection_mod 2021-03-23 14:13:33 +01:00
root 526a5c7893 Added detection testing service results inHigh Process Termination Frequency 2021-03-23 12:41:38 +00:00
root 57e4a62a01 Added detection testing service results inHigh File Deletion Frequency 2021-03-23 12:18:35 +00:00
root f95182fca6 Added detection testing service results inProcess Deleting Its Process File Path 2021-03-23 11:59:50 +00:00
tcontreras 3fd704cdcd Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 2021-03-23 12:29:08 +01:00
tcontreras 1696edba41 clop_detection_processid_mod 2021-03-23 12:28:54 +01:00
root 6da776bb4a Added detection testing service results inClop Ransomware Known Service Name 2021-03-23 11:04:30 +00:00
tcontreras f5bfe97b81 clop_mod_detections_add_processid_comments 2021-03-23 11:33:10 +01:00
P4T12ICK e3e4e2b512 bug fixes test files 2021-03-23 11:06:15 +01:00
tcontreras 0a8ea69864 Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 2021-03-23 10:57:23 +01:00
P4T12ICK f778e43bef Merge branch 'develop' into ssa_detection_testing 2021-03-23 09:00:22 +01:00
github-actions[bot] d7b4d0f818 Branch was auto-updated. 2021-03-23 07:59:39 +00:00
github-actions[bot] 0949eb9272 Branch was auto-updated. 2021-03-23 07:59:33 +00:00
github-actions[bot] 1571523c8f Branch was auto-updated. 2021-03-23 07:59:32 +00:00
divious1 24cad18e2f fixing requirements issues 2021-03-22 19:23:17 -04:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00