admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,710 Commits 697 Branches 195 Tags
v3.34.3
Commit Graph

1286 Commits

Author SHA1 Message Date
tccontre e84063b9c2 Merge branch 'reg_yml_analytics_updates_4' of github.com:splunk/security_content into reg_yml_analytics_updates_4 2022-02-04 10:18:24 +01:00
tccontre 2704483cf5 reg_yml_analytics_updates_4 2022-02-04 10:18:17 +01:00
mhaag-spl e8dd9051bc pkexec 
Deprecating two detections that identified all rundll32 executions.
Added linux pkexec pwnkit detection.
 2022-02-01 09:52:52 -07:00
Bhavin Patel 14c145c133 Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline 
Potentially malicious code on commandline
 2022-01-28 13:27:59 -08:00
Bhavin Patel 3efcb99124 Merge pull request #1875 from splunk/ssa_multilogin 
Anomalous usage of account credentials
 2022-01-27 14:55:25 -08:00
Bhavin Patel 7fd71050fe Merge pull request #1878 from splunk/ssa_1 
Disable Defender AntiVirus Registry- SSA
 2022-01-27 14:51:23 -08:00
Bhavin Patel 1975ff75a2 Merge pull request #1900 from splunk/ssa_info_sabotage 
new_ssa_ifo_sabotage
 2022-01-27 14:11:19 -08:00
patel-bhavin 45c4a7b600 remove files that are already merged 2022-01-26 13:51:51 -08:00
patel-bhavin cca42c0009 moving to expermental 2022-01-24 15:31:15 -08:00
mhaag-spl befe09f77c Nirsoft Software 2022-01-24 15:07:20 -07:00
pyth0n1c ad85b8b21b Branch was auto-updated. 2022-01-24 10:51:04 -08:00
pyth0n1c 4c125f1dd6 Branch was auto-updated. 2022-01-24 10:51:03 -08:00
pyth0n1c fc97ef9be2 Branch was auto-updated. 2022-01-24 10:51:01 -08:00
pyth0n1c 2254d203d8 Branch was auto-updated. 2022-01-24 10:50:59 -08:00
pyth0n1c e848c0a544 Branch was auto-updated. 2022-01-24 10:50:58 -08:00
pyth0n1c cbabad3107 Branch was auto-updated. 2022-01-24 10:40:47 -08:00
pyth0n1c 53ca345c06 Branch was auto-updated. 2022-01-24 10:40:46 -08:00
pyth0n1c 3f6c74cc53 Branch was auto-updated. 2022-01-24 10:40:45 -08:00
pyth0n1c dd538478f4 Branch was auto-updated. 2022-01-24 10:40:44 -08:00
pyth0n1c bbebfe7d07 Branch was auto-updated. 2022-01-24 10:40:41 -08:00
pyth0n1c ac214bafa6 Branch was auto-updated. 2022-01-24 10:40:40 -08:00
mhaag-spl c3159a29cb advanced 🏃 2022-01-24 07:25:06 -07:00
Michael Hart e962bfb4bd Merge branch 'develop' of github.com:splunk/security_content into potentially_malicious_code_on_commandline 2022-01-21 19:26:39 -05:00
tccontre 2b4f34956d WhisperGateIsOpen 2022-01-21 10:45:00 +01:00
Michael Hart 906f0ee338 Changing the test dataset to the main branch 2022-01-20 21:09:22 -05:00
mhaag-spl 5bfcf2eea3 InstallUtil and DotNet Assemblies 2022-01-20 14:34:04 -07:00
Michael Hart 2f9d410caf Updating test interval 2022-01-20 16:14:44 -05:00
pyth0n1c 96b979bce4 Branch was auto-updated. 2022-01-20 12:28:32 -08:00
pyth0n1c bbb3ea16c0 Branch was auto-updated. 2022-01-20 12:28:30 -08:00
pyth0n1c 76221cf4dd Branch was auto-updated. 2022-01-20 12:28:29 -08:00
pyth0n1c 79766f5133 Branch was auto-updated. 2022-01-20 12:28:28 -08:00
pyth0n1c f9cb7214f1 Branch was auto-updated. 2022-01-20 12:28:26 -08:00
mhaag-spl 85c1f12905 Update ssa___fsutil_zeroing_file.test.yml 2022-01-20 13:11:55 -07:00
mhaag-spl adfe9703c4 Updated BA 4688 dataset 2022-01-20 12:56:36 -07:00
Michael Hart 4a7435f998 Temporarily changing location for samples 2022-01-20 11:32:55 -05:00
tccontre a8e9287410 WhisperGateIsOpen 2022-01-20 16:13:00 +01:00
tccontre 1b510a0929 WhisperGateIsOpen 2022-01-20 15:11:12 +01:00
Michael Hart 1fb3fb8064 Adding required fields and fixing URL in test 2022-01-20 08:47:34 -05:00
Michael Hart c6d4e40abf Adding in attack data 2022-01-19 21:36:46 -05:00
Michael Hart b59380d324 Potentially malicious execution on command line 2022-01-19 20:02:42 -05:00
pyth0n1c 14c26f7475 Branch was auto-updated. 2022-01-19 09:41:52 -08:00
pyth0n1c e0e7975c47 Branch was auto-updated. 2022-01-19 09:41:51 -08:00
pyth0n1c d46b1ddef5 Branch was auto-updated. 2022-01-19 09:41:50 -08:00
pyth0n1c 4885f91425 Branch was auto-updated. 2022-01-19 09:41:49 -08:00
pyth0n1c fdb5dfe6d8 Branch was auto-updated. 2022-01-19 09:41:43 -08:00
tccontre 4e971b693c WhisperGateIsOpen 2022-01-19 14:51:20 +01:00
patel-bhavin da12571e7d file naming consistency 2022-01-14 14:58:11 -08:00
patel-bhavin af465476c9 file name errors 2022-01-14 14:41:26 -08:00
Rod Soto 774feed609 fix1k 2022-01-14 07:32:16 -08:00
Rod Soto 329d1433ab allabouttheT 2022-01-14 07:28:06 -08:00