admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
17,421 Commits 697 Branches 195 Tags
v3.49.0
Commit Graph

152 Commits

Author SHA1 Message Date
pyth0n1c da686eb237 Branch was auto-updated. 2022-09-14 09:17:49 -07:00
mvelazco d8cce69644 adding new detection 2022-09-06 16:08:35 -04:00
mvelazco 3d308b862f adding new detection 2022-09-02 18:25:34 -04:00
mvelazco 441a1542bd adding new detection. fixing types. adding line to lookup 2022-09-02 18:03:14 -04:00
mvelazco 9e94c62a6a adding new detection 2022-08-30 18:25:25 -04:00
mvelazco 927d46a74e adding new detection 2022-08-30 13:07:41 -04:00
mvelazco 79f7f9c16e adding new detection 2022-08-29 17:00:05 -04:00
mvelazco 2a0c7a69d1 adding new detection 2022-08-25 16:02:54 -04:00
mvelazco 779ec07f0e adding description. updating dataset url 2022-08-24 11:13:03 -04:00
mvelazco f0926a5372 update detections 2022-08-23 23:40:54 -04:00
mvelazco 0a6592b9e2 adding new detection. fixing another 2022-08-23 21:45:22 -04:00
mvelazco 63398504c5 Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-08-23 16:28:56 -04:00
mvelazco 63f87f5a12 adding new detection 2022-08-23 16:28:55 -04:00
pyth0n1c a1b3e4c6f7 Branch was auto-updated. 2022-08-23 13:05:52 -07:00
mvelazco 0a10ef85d6 fixing detection. adding azure_audit macro 2022-08-22 15:36:25 -04:00
gowthamarajr 136cbb1ea8 Add detection for "Azure AD External Guest User Invited" 2022-08-19 10:39:07 -04:00
mvelazco fae2c64476 adding new detection. other minor changes 2022-08-19 00:16:18 -04:00
mvelazco 38ee247989 Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-08-18 14:50:18 -04:00
mvelazco 7b137ad6b9 adding new detection and fixing a few others 2022-08-18 14:50:16 -04:00
gowthamarajr 41a7f4380e Add 2 detections 2022-08-17 18:43:40 -04:00
mvelazco b2332df9a0 Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover 2022-08-16 12:13:02 -04:00
mvelazco d00a4b2ae6 updating detection yaml 2022-08-16 12:13:00 -04:00
pyth0n1c 7d441871cb Branch was auto-updated. 2022-08-16 08:40:56 -07:00
gowthamarajr 6759feccd4 Add Azure AD Multi-Factor Authentication Disabled 2022-08-15 17:22:54 -04:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
mvelazco 5579f1ebdb adding new detection 2022-08-10 13:34:18 -04:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
patel-bhavin a78c180836 file update 2022-07-26 17:21:56 -07:00
patel-bhavin 8672c8d824 security sercvices deleteion activities 2022-07-26 16:54:42 -07:00
patel-bhavin 7eea768cde new detection putbucket lifecycle 2022-07-25 16:29:57 -07:00
Bhavin Patel c55b3ed7e0 Merge pull request #2287 from splunk/TR-2222 
AWS Defense Evasion Stop Logging Cloudtrail
 2022-07-25 10:48:37 -07:00
gowthamarajr c2decc3b9c Add AWS defense evasion 
1. Update Cloudtrail
2. Delete CloudWatch log group
 2022-07-19 11:56:41 -04:00
mvelazco d6dd5098be adding new detection 2022-07-14 13:29:55 -04:00
patel-bhavin 5bf8a69beb delete cloudtrail 2022-07-13 12:49:43 -07:00
patel-bhavin c0996437b5 remove update 2022-07-13 11:40:55 -07:00
mvelazco b615728924 fixing file path 2022-07-13 14:38:13 -04:00
mvelazco 7807c66f73 adding new detection 2022-07-13 14:16:09 -04:00
patel-bhavin 9756e681f7 aws cloudtrail stop logging 2022-07-12 17:47:58 -07:00
mvelazco 18aa9f2e7a adding new detection 2022-07-12 18:03:26 -04:00
mvelazco f8e28dde20 adding new detection 2022-07-12 13:54:32 -04:00
mvelazco 743b94d8a9 updating test files 2022-07-12 11:22:38 -04:00
mvelazco ba163055eb adding 2 detections 2022-07-11 17:29:18 -04:00
patel-bhavin 4d4a4767d7 search, data and yml updates 2022-05-17 17:36:49 -07:00
P4T12ICK 4ffa5540e4 github actions detection 2022-04-04 11:08:39 +02:00
pyth0n1c 9710f9888e Renamed two test files whose detection files are in the experimental detection folder. Since the new branch looks for an fails on these, we fix them here. 2022-03-23 13:40:31 -07:00
pyth0n1c e61e35c3f6 In a previous update, baselines were moved into the baselines folder, but the path to the baselines was not updated in the test files. All of the paths have now been updated. 2022-03-18 16:10:52 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00