 Jose Enrique Hernandez
|
f0c1ef304f
|
Merge pull request #1887 from splunk/The_Day_After_Log4shell
The Day After Log4Shell
v3.32.0
|
2021-12-14 21:46:40 -05:00 |
|
|
d1vious
|
53b9f9033e
|
Merge branch 'develop' into The_Day_After_Log4shell
|
2021-12-14 21:41:21 -05:00 |
|
|
d1vious
|
7c72f6e192
|
updating docs
|
2021-12-14 21:40:19 -05:00 |
|
|
d1vious
|
17344644e1
|
updating docs
|
2021-12-14 21:33:54 -05:00 |
|
|
root
|
97a20df8ae
|
Added detection testing service results inHunting for Log4Shell
|
2021-12-15 02:19:55 +00:00 |
|
|
mhaag-spl
|
cea91f725e
|
Create hunting_for_log4shell.test.yml
|
2021-12-14 19:00:04 -07:00 |
|
|
Lou Stella
|
82b45a1cf9
|
the final push
|
2021-12-14 19:47:53 -06:00 |
|
|
Lou Stella
|
f8d3d5a1f9
|
SSH response
|
2021-12-14 19:43:19 -06:00 |
|
|
Lou Stella
|
fafa45fcc9
|
fixing backslide
|
2021-12-14 19:41:19 -06:00 |
|
|
Lou Stella
|
2cd9e3940d
|
Two more yamls
|
2021-12-14 19:38:19 -06:00 |
|
|
Lou Stella
|
da086f8c00
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 19:31:59 -06:00 |
|
|
Lou Stella
|
4a5154592e
|
the YAMLfication of words
|
2021-12-14 19:31:42 -06:00 |
|
|
Bhavin Patel
|
f453a537b1
|
Update java_class_file_download_by_java_user_agent.yml
|
2021-12-14 17:28:16 -08:00 |
|
|
Lou Stella
|
544c7b0b9f
|
parent playbook
|
2021-12-14 19:27:42 -06:00 |
|
|
Lou Stella
|
5fb532e10d
|
Another playbook
|
2021-12-14 19:24:32 -06:00 |
|
|
Lou Stella
|
7eef18e0dc
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 19:05:57 -06:00 |
|
|
Lou Stella
|
fa976bcfa8
|
Update internal_host_splunk_investigate_log4j.yml
|
2021-12-14 19:05:49 -06:00 |
|
|
d1vious
|
a6fbee30e8
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 19:59:32 -05:00 |
|
|
d1vious
|
b9987c68d3
|
fixing stories spelling mistakes
|
2021-12-14 19:59:27 -05:00 |
|
|
Lou Stella
|
60e3d4f4e5
|
... and another one
|
2021-12-14 18:59:22 -06:00 |
|
|
Lou Stella
|
4b7e38cdee
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 18:47:04 -06:00 |
|
|
Lou Stella
|
94b3fa5aa3
|
Create log4j_investigate_and_respond.png
|
2021-12-14 18:46:51 -06:00 |
|
|
d1vious
|
1d04e6f78a
|
minor playbook updates
|
2021-12-14 19:46:04 -05:00 |
|
|
d1vious
|
bba9f90754
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 19:38:55 -05:00 |
|
|
d1vious
|
16b771eae2
|
adding tags to detections
|
2021-12-14 19:38:51 -05:00 |
|
|
Lou Stella
|
54c8f81958
|
Another one
|
2021-12-14 18:38:02 -06:00 |
|
|
Lou Stella
|
d33ed87e73
|
Some playbooks
|
2021-12-14 18:34:37 -06:00 |
|
|
Lou Stella
|
672609671b
|
Add screenshot & updated description text
|
2021-12-14 18:20:29 -06:00 |
|
|
Lou Stella
|
bf1fec5139
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 18:01:17 -06:00 |
|
|
Lou Stella
|
62e14b678a
|
Initial YAML commit
|
2021-12-14 18:01:14 -06:00 |
|
|
patel-bhavin
|
6eb4eab2bb
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 13:51:14 -08:00 |
|
|
mhaag-spl
|
918e73d414
|
Update hunting_for_log4shell.yml
|
2021-12-14 14:35:25 -07:00 |
|
|
patel-bhavin
|
55ccb09927
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 13:09:12 -08:00 |
|
|
mhaag-spl
|
303d082e43
|
Create hunting_for_log4shell.yml
|
2021-12-14 13:20:22 -07:00 |
|
|
Bhavin Patel
|
a4aaf03206
|
Update outbound_network_connection_from_java_using_default_ports.yml
|
2021-12-14 12:18:58 -08:00 |
|
|
Bhavin Patel
|
9ba2c45a24
|
Update cmd_carry_out_string_command_parameter.yml
|
2021-12-14 12:17:08 -08:00 |
|
|
patel-bhavin
|
05b189232d
|
ldap outbound
|
2021-12-14 10:10:23 -08:00 |
|
|
root
|
66a72dff7a
|
Added detection testing service results inLog4Shell JNDI Payload Injection with Outbound Connection
|
2021-12-14 18:05:07 +00:00 |
|
|
P4T12ICK
|
f59961186a
|
log4j
|
2021-12-14 18:43:55 +01:00 |
|
|
P4T12ICK
|
b278b43978
|
log4j
|
2021-12-14 18:43:02 +01:00 |
|
|
root
|
f03ab2f721
|
Added detection testing service results inLog4Shell JNDI Payload Injection Attempt
|
2021-12-14 17:42:22 +00:00 |
|
|
P4T12ICK
|
3f59f79b93
|
log4j
|
2021-12-14 18:21:58 +01:00 |
|
|
Lou Stella
|
3bf46de4c7
|
removed files causing generate to break
|
2021-12-14 11:20:13 -06:00 |
|
|
P4T12ICK
|
a9edbc20bd
|
log4j
|
2021-12-14 17:49:26 +01:00 |
|
|
P4T12ICK
|
45cd729295
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 17:44:19 +01:00 |
|
|
P4T12ICK
|
3dc854e68e
|
log4j
|
2021-12-14 17:43:19 +01:00 |
|
|
Lou Stella
|
50ef5d4193
|
Renamed splunk investigation playbook
|
2021-12-14 09:58:17 -06:00 |
|
|
Lou Stella
|
b33a05700c
|
initial commit of playbook yamls
|
2021-12-14 09:55:34 -06:00 |
|
|
P4T12ICK
|
f84b61357c
|
Improved Proxy detection
|
2021-12-14 16:35:31 +01:00 |
|
|
d1vious
|
7e6cb9381b
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-14 00:54:44 -05:00 |
|