admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,146 Commits 697 Branches 195 Tags
v3.48.0
Commit Graph

2107 Commits

Author SHA1 Message Date
pyth0n1c bd2d1515cb Branch was auto-updated. 2022-08-26 10:01:42 -07:00
pyth0n1c 0ae64ea317 Branch was auto-updated. 2022-08-23 13:05:57 -07:00
pyth0n1c 4788d6c4e3 Branch was auto-updated. 2022-08-23 13:05:54 -07:00
pyth0n1c 7f5507a4c2 Branch was auto-updated. 2022-08-23 12:49:59 -07:00
pyth0n1c 80c9e04de8 Branch was auto-updated. 2022-08-23 12:49:55 -07:00
pyth0n1c b1fc807d1c Branch was auto-updated. 2022-08-23 12:49:52 -07:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
Michael Haag 13d400611a LSA 🐍 SS 2022-08-22 21:16:12 -06:00
Michael Haag fd88c88762 Hijack Libraries 2022-08-19 14:37:29 -06:00
d1vious 19f3a3b982 fixing on all places 2022-08-16 15:01:56 -04:00
mvelazco b2332df9a0 Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover 2022-08-16 12:13:02 -04:00
mvelazco d00a4b2ae6 updating detection yaml 2022-08-16 12:13:00 -04:00
pyth0n1c 8a72b522ac Branch was auto-updated. 2022-08-16 08:40:57 -07:00
pyth0n1c 7d441871cb Branch was auto-updated. 2022-08-16 08:40:56 -07:00
d1vious b7e1a5fe94 adding new detections 2022-08-16 11:30:24 -04:00
gowthamarajr 6759feccd4 Add Azure AD Multi-Factor Authentication Disabled 2022-08-15 17:22:54 -04:00
pyth0n1c 31be7c1b3e Branch was auto-updated. 2022-08-12 13:01:04 -07:00
gowthamarajr ddf0db898d Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301 2022-08-12 07:27:19 -04:00
gowthamarajr bed8043fe8 Add 12 More detections (T1548) 2022-08-12 07:27:16 -04:00
pyth0n1c 084d711188 Branch was auto-updated. 2022-08-11 12:16:22 -07:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 2eb9bf40de Branch was auto-updated. 2022-08-11 11:30:10 -07:00
pyth0n1c 0136017be3 Branch was auto-updated. 2022-08-11 11:30:09 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots 
Haag it!
 2022-08-11 11:29:48 -07:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
mvelazco 5579f1ebdb adding new detection 2022-08-10 13:34:18 -04:00
gowthamarajr 51693e4ba5 Add T1548.003 2022-08-10 06:58:54 -04:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
gowthamarajr 29a61f8cb6 Add detections for Awk, Node, Docker Lotl 2022-08-02 16:23:31 -04:00
Michael Haag 83e57921ad iscsi fix 2022-08-02 08:35:54 -06:00
tccontre 44517188c1 Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml 2022-08-01 14:22:35 +02:00
tccontre 7ef8d1dadf Update windows_ingress_tool_transfer_using_explorer_exe.test.yml 2022-08-01 14:18:38 +02:00
tccontre b67f2c69a1 dcrat-analytics3 2022-08-01 14:15:02 +02:00
Michael Haag 8bc3086675 iscsicpl 2022-07-29 17:39:55 -06:00
pyth0n1c 9b9ee9b2bf Branch was auto-updated. 2022-07-29 15:44:01 -07:00
Michael Haag 8ad83a0b5f Haag It 
Linux Curl Upload File
Linux Ingress Tool Transfer Hunting
Linux Ingress Tool Transfer with Curl
Linux Proxy Socks Curl
 2022-07-29 11:17:19 -06:00
tccontre bcb5aab4ee dcrat-analytics3 2022-07-29 10:06:40 +02:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
pyth0n1c 319530efa2 Branch was auto-updated. 2022-07-28 13:11:04 -07:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
pyth0n1c e35f6dc30a Branch was auto-updated. 2022-07-28 13:10:57 -07:00
Michael Haag 15147d6aa7 clipboard 2022-07-28 11:27:19 -06:00
tccontre e99ab33a15 dcrat-analytics2 2022-07-28 15:29:25 +02:00
Michael Haag 79f7fdd204 ssh and updated correlation 2022-07-27 16:25:56 -06:00
Michael Haag 55bc63720d auth key 2022-07-27 15:30:48 -06:00
Michael Haag 4c04be8f8a linux base64 decode 2022-07-27 15:08:05 -06:00
Michael Haag e2408b8c1a kmod list 2022-07-27 13:54:30 -06:00