admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,109 Commits 697 Branches 195 Tags
v3.25.0
Commit Graph

8109 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bhavin Patel 8b5eb71c04 Merge pull request #1479 from splunk/fix_ci_bug 
fixing issue with wrong position of cti repo clone, causes doc_gen to…
v3.25.0 		2021-07-02 10:36:55 -05:00
divious1 6826f5b20f fixing issue with wrong position of cti repo clone, causes doc_gen to blow up 2021-07-02 11:32:22 -04:00
Jose Enrique Hernandez ff7e231171 Merge pull request #1471 from splunk/printnightmare 
Printing All Your Nightmares
 2021-07-02 11:06:33 -04:00
Jose Enrique Hernandez 7ce88879d6 fixing type 
yep yep
 2021-07-02 11:03:08 -04:00
tccontre dc0eac261d minor update3 2021-07-02 14:38:44 +02:00
tccontre 7f3f1f21f6 Merge branch 'printnightmare' of github.com:splunk/security_content into printnightmare 2021-07-02 14:09:48 +02:00
tccontre 2c948c9967 minor update2 2021-07-02 14:09:14 +02:00
tccontre 30af993c48 Delete wsreset_uac_bypass.test.yml 2021-07-02 14:03:53 +02:00
tccontre 2f74506fc0 minor update 2021-07-02 14:02:31 +02:00
Jose Enrique Hernandez 1d4278d250 Merge branch 'develop' into printnightmare 2021-07-01 17:39:51 -04:00
patel-bhavin 6f29b8877a adding process_id to spl 2021-07-01 16:26:42 -05:00
patel-bhavin ad74856496 Merge branch 'printnightmare' of github.com:splunk/security_content into printnightmare 2021-07-01 16:22:59 -05:00
patel-bhavin 237803358b updated spl and rba tags 2021-07-01 16:22:54 -05:00
mhaag-spl 63bdd403b0 Update printnightmare_cve_2021_1675.yml 2021-07-01 15:14:22 -06:00
mhaag-spl 2029cf855f Update spoolsv_spawning_rundll32.yml 2021-07-01 15:00:26 -06:00
root 8e06807020 Added detection testing service results inPrint Spooler Adding A Printer Driver 2021-07-01 20:30:15 +00:00
mhaag-spl 3c1be9b42f Update print_spooler_failed_to_load_a_plug_in.yml 2021-07-01 14:08:34 -06:00
Detection Testing Service e9fb78882d Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare 2021-07-01 20:01:15 +00:00
root 20d19f74a5 Added detection testing service results inSpoolsv Writing a DLL - Sysmon 2021-07-01 20:01:15 +00:00
Detection Testing Service 1651bab022 Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare 2021-07-01 19:51:10 +00:00
root 19e28a12ff Added detection testing service results inSpoolsv Writing a DLL 2021-07-01 19:51:09 +00:00
root 6c226fb4be Added detection testing service results inSpoolsv Suspicious Process Access 2021-07-01 19:50:04 +00:00
Detection Testing Service 69a5df0d8f Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare 2021-07-01 19:22:42 +00:00
root 34e0b36bb8 Added detection testing service results inSpoolsv Spawning Rundll32 2021-07-01 19:22:42 +00:00
root 917958cb79 Added detection testing service results inSpoolsv Suspicious Loaded Modules 2021-07-01 19:22:08 +00:00
root e5d0c5789d Added detection testing service results inPrint Spooler Adding A Printer Driver 2021-07-01 18:56:49 +00:00
mhaag-spl 5c29c36356 Update printnightmare_cve_2021_1675.yml 2021-07-01 12:20:34 -06:00
mhaag-spl a1a6fe9258 Update printnightmare_cve_2021_1675.yml 2021-07-01 12:18:34 -06:00
mhaag-spl 97e039bdce Path issues 2021-07-01 12:14:19 -06:00
mhaag-spl 0c86774b15 Added a Macro 2021-07-01 12:11:49 -06:00
mhaag-spl e86a988621 Printing All your Nightmares 2021-07-01 12:01:45 -06:00
Bhavin Patel a88ba2d01a Merge pull request #1469 from splunk/contentctl_update 
adding new description logic for our generated template
 2021-07-01 11:33:17 -05:00
github-actions[bot] 78360ad461 Branch was auto-updated. 2021-06-30 20:23:39 +00:00
Jose Enrique Hernandez f436742c0d Merge pull request #1452 from splunk/rba_poc 
Context Builder AKA RBA++ AKA security emojis
 2021-06-30 16:23:22 -04:00
divious1 63d2581343 Merge branch 'develop' into rba_poc 2021-06-30 16:10:23 -04:00
divious1 b86a57f2a2 adding new description logic for our generated template 2021-06-30 15:04:01 -04:00
patel-bhavin 9d063ed669 conflicts 2021-06-30 12:22:48 -05:00
Michael Haag 743ca45fbd Update access_lsass_memory_for_dump_creation.yml 2021-06-30 08:56:38 -06:00
Michael Haag 25794989c6 Merge pull request #1468 from splunk/autoencoder_for_anomaly_detection 
Notebook describing autoencoders for anomaly detection
 2021-06-30 08:41:55 -06:00
Michael Hart 858f567c67 Merge branch 'autoencoder_for_anomaly_detection' of github.com:splunk/security_content into autoencoder_for_anomaly_detection 2021-06-29 14:49:15 -04:00
Michael Hart 8773f14523 More edits 2021-06-29 14:48:27 -04:00
github-actions[bot] 3124d0b301 Branch was auto-updated. 2021-06-29 18:30:59 +00:00
Bhavin Patel fb6f9c82a7 Merge pull request #1462 from splunk/ssa_wevtutil_branch_reversion 
[PR-1444] fix branch reversion.
 2021-06-29 13:30:38 -05:00
patel-bhavin e7b854b7e6 validate risk score 2021-06-29 13:15:56 -05:00
Michael Hart 04c4263b56 Adding edits 2021-06-29 09:47:37 -04:00
Michael Hart 4dbc42c86c Initial commit 2021-06-28 22:10:15 -04:00
github-actions[bot] 52aaa53e40 Branch was auto-updated. 2021-06-28 18:29:47 +00:00
Michael Haag 40278784b2 Merge pull request #1465 from splunk/excessive_sc_start_disable 
Excessive number of sc.exe start as disabled calls
 2021-06-28 12:29:30 -06:00
Michael Hart d9c8e10920 Slight correction. Process contains cmd line arguments for finding distinct number of sc invocations. Removing this and process id from BY clause 2021-06-28 14:14:42 -04:00
Michael Haag f10bdb4742 Update excessive_number_of_service_control_start_as_disabled.yml 2021-06-28 11:34:18 -06:00