 research bot
|
0d71323325
|
updating docs and package bits [ci skip]
v3.38.0
|
2022-04-11 22:55:36 +00:00 |
|
|
Bhavin Patel
|
9a829d9a67
|
Merge pull request #2152 from splunk/detection_improvement_mac_os
improved MacOS detection
|
2022-04-11 10:46:14 -07:00 |
|
|
pyth0n1c
|
b384f2b137
|
Branch was auto-updated.
|
2022-04-11 10:23:27 -07:00 |
|
|
Bhavin Patel
|
8a75b7ee7c
|
Merge pull request #2158 from splunk/hunt
Haags Dream Land
|
2022-04-11 10:23:01 -07:00 |
|
|
Bhavin Patel
|
a921f72806
|
Merge pull request #2156 from splunk/enrich-detection-code-deletion
Removed enrich detection script and Github Action stage
|
2022-04-11 09:32:39 -07:00 |
|
|
mhaag-spl
|
d3e26be675
|
T# add
|
2022-04-07 15:06:13 -06:00 |
|
|
mhaag-spl
|
305a20bc54
|
Hunting
Changed to hunting, added renamed logic to not use the process_macro
Issue #2010
|
2022-04-07 14:39:56 -06:00 |
|
|
akhunti
|
c55e114dac
|
Removed enrich detection script and Github Action stage
|
2022-04-07 12:11:15 +05:30 |
|
|
pyth0n1c
|
e62b2ae8be
|
Branch was auto-updated.
|
2022-04-06 14:47:40 -07:00 |
|
|
Bhavin Patel
|
48cb17f56d
|
Merge pull request #2153 from splunk/springshowers
Spring for Shells
|
2022-04-06 14:47:14 -07:00 |
|
|
patel-bhavin
|
2c8fa42b98
|
minor updates and gitignore
|
2022-04-06 14:03:06 -07:00 |
|
|
mhaag-spl
|
f457ffed90
|
Update java_writing_jsp_file.yml
|
2022-04-06 13:47:38 -06:00 |
|
|
mhaag-spl
|
9f370036f5
|
Update web_spring4shell_http_request_class_module.yml
|
2022-04-06 10:26:23 -06:00 |
|
|
mhaag-spl
|
8649a7c990
|
Web Spring4Shell HTTP Request Class Module
|
2022-04-06 09:58:24 -06:00 |
|
|
mhaag-spl
|
ebb920f47d
|
rename
|
2022-04-06 08:39:34 -06:00 |
|
|
pyth0n1c
|
257957fa5b
|
Branch was auto-updated.
|
2022-04-05 14:52:19 -07:00 |
|
|
pyth0n1c
|
bdfa26a0ed
|
Branch was auto-updated.
|
2022-04-05 14:52:17 -07:00 |
|
|
Bhavin Patel
|
c5528e72ea
|
Merge pull request #2113 from splunk/InDirectToVideo
LOLBin
|
2022-04-05 14:51:59 -07:00 |
|
|
mhaag-spl
|
bc2ab62ee8
|
typo
|
2022-04-05 15:41:35 -06:00 |
|
|
mhaag-spl
|
a03b6719de
|
function and CVE-2022-22965 fixes
|
2022-04-05 15:36:38 -06:00 |
|
|
pyth0n1c
|
082d15ac3d
|
Updating paths to dataset for testing
|
2022-04-05 14:14:42 -07:00 |
|
|
pyth0n1c
|
39c8ab5e12
|
Branch was auto-updated.
|
2022-04-05 13:56:48 -07:00 |
|
|
pyth0n1c
|
01b94c45f4
|
Branch was auto-updated.
|
2022-04-05 13:56:47 -07:00 |
|
|
Bhavin Patel
|
1b5deca353
|
Merge pull request #2150 from splunk/hermeticwipertag
Hermeticwipertag
|
2022-04-05 13:56:21 -07:00 |
|
|
pyth0n1c
|
fd5a14cae3
|
Reverting changes that we made to the
macros file.
|
2022-04-05 13:37:51 -07:00 |
|
|
pyth0n1c
|
9638205131
|
Fixed paths to attack data sets
and updated required_fields
format to matrch the rest of the
detections in the repo.
|
2022-04-05 13:36:36 -07:00 |
|
|
pyth0n1c
|
ec2c1bff73
|
Branch was auto-updated.
|
2022-04-05 13:12:38 -07:00 |
|
|
pyth0n1c
|
0fe4d397f4
|
Branch was auto-updated.
|
2022-04-05 13:12:36 -07:00 |
|
|
pyth0n1c
|
4503340635
|
Branch was auto-updated.
|
2022-04-05 13:12:33 -07:00 |
|
|
Bhavin Patel
|
0f0bac3789
|
Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo
Fix Detection Testing YML
|
2022-04-05 13:12:05 -07:00 |
|
|
mhaag-spl
|
0da666fc10
|
nix write jsp
|
2022-04-05 12:38:53 -06:00 |
|
|
mhaag-spl
|
6ebca18614
|
Spring4Shell
|
2022-04-05 11:53:23 -06:00 |
|
|
pyth0n1c
|
c7e1a04873
|
Update windows_indirect_command_execution_via_forfiles.yml
Updated dataset. Need to update again after dataset is merged from branch into main of attack_data
|
2022-04-05 10:21:42 -07:00 |
|
|
pyth0n1c
|
30ff35bcd8
|
Update windows_indirect_command_execution_via_pcalua.yml
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
|
2022-04-05 10:20:58 -07:00 |
|
|
pyth0n1c
|
b385ef2ead
|
Update windows_indirect_command_execution_via_pcalua.yml
Adding second reference for pcalua.exe
|
2022-04-05 10:15:26 -07:00 |
|
|
pyth0n1c
|
0cde033ac1
|
Update windows_indirect_command_execution_via_pcalua.yml
Added UUID
|
2022-04-05 10:13:20 -07:00 |
|
|
pyth0n1c
|
71fe3edea7
|
Update windows_indirect_command_execution_via_forfiles.yml
Added UUID
|
2022-04-05 10:12:45 -07:00 |
|
|
pyth0n1c
|
90424b7e0c
|
Update windows_indirect_command_execution_via_forfiles.yml
Updated description info on forfiles detection yaml
|
2022-04-05 10:08:49 -07:00 |
|
|
pyth0n1c
|
2d2fdb6be0
|
Update windows_indirect_command_execution_via_pcalua.yml
Updated description in YML
|
2022-04-05 10:05:21 -07:00 |
|
|
P4T12ICK
|
9ba9575db7
|
improved MacOS detection
|
2022-04-05 19:00:05 +02:00 |
|
|
pyth0n1c
|
90abd35b92
|
Previously had uses and run keys in the
same step. That caused all jobs
to fail at parsing the workflow yml.
|
2022-04-05 09:40:41 -07:00 |
|
|
Rod Soto
|
901a73aa5f
|
secondbatchwinprivesctaghermeticwiper
|
2022-04-05 08:02:47 -07:00 |
|
|
Rod Soto
|
b3cd632c29
|
hermeticwipertagswindowsprivesc
|
2022-04-05 07:55:03 -07:00 |
|
|
P4T12ICK
|
9e79d31e66
|
Merge pull request #2131 from splunk/mac_os_detections
plutil mac os detection
|
2022-04-05 15:37:48 +02:00 |
|
|
pyth0n1c
|
eb0cbac38e
|
Branch was auto-updated.
|
2022-04-04 16:57:13 -07:00 |
|
|
Jose Enrique Hernandez
|
16175e510f
|
Merge pull request #2149 from splunk/NightlyDetectionTestingS3Artifacts
Nightly detection testing s3 artifacts
|
2022-04-04 19:56:56 -04:00 |
|
|
pyth0n1c
|
eafc7f7867
|
Branch was auto-updated.
|
2022-04-04 16:39:04 -07:00 |
|
|
pyth0n1c
|
3e2136f784
|
Branch was auto-updated.
|
2022-04-04 16:38:59 -07:00 |
|
|
Jose Enrique Hernandez
|
273367a2e0
|
Merge pull request #2148 from splunk/IncreasePostWidth
Increased the width of research.splunk.com posts
|
2022-04-04 19:38:41 -04:00 |
|
|
pyth0n1c
|
93176ca83b
|
Updated S3 upload code to proper bucket path
|
2022-04-04 15:52:49 -07:00 |
|