admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
21,982 Commits 697 Branches 195 Tags
v4.9.1
Commit Graph

21982 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Lou Stella 5f6968715e Merge pull request #2809 from splunk/ssa_escalation_Aug16 
SSA Regex Bugfixes
v4.9.1 		2023-08-17 10:54:23 -05:00
Lou Stella 45c6fda795 Version bumps 2023-08-17 10:47:29 -05:00
Lou Stella 1832570a39 Swap back to regex with new escapes 2023-08-17 10:36:36 -05:00
Lou Stella 2410b52d7a Regenerated for testing 2023-08-17 10:12:34 -05:00
Lou Stella 74a3891f78 Running mass conversion 2023-08-17 10:12:04 -05:00
Lou Stella 779b5aea63 Switch to using like 2023-08-17 10:10:59 -05:00
Lou Stella 2b77ace7e0 code change 2023-08-17 10:10:32 -05:00
Lou Stella e74457dfab adding generated non-functioning regex 2023-08-16 15:58:22 -05:00
Lou Stella 0052fd4a61 adding converted version 2023-08-16 15:55:34 -05:00
Lou Stella 937beacded Adding updated full regex 2023-08-16 15:55:02 -05:00
Lou Stella d4eb301111 push for troulbeshooting 2023-08-16 15:42:17 -05:00
Lou Stella 3045c568d0 Manual edit to remove extra escaping that seems to break the detection 2023-08-16 15:34:48 -05:00
Lou Stella 024be40b55 Updated regex again 2023-08-16 15:34:17 -05:00
Lou Stella 7efd991ae8 pushing to share for troubleshooting 2023-08-16 14:44:18 -05:00
Lou Stella 649304fe95 tweak regex because tool supplies case insensitivity 2023-08-16 13:49:46 -05:00
Lou Stella ffed36c532 generated detection 2023-08-16 13:38:03 -05:00
Lou Stella 868bf4984a Updated regex, removed duplicate pwsh 2023-08-16 13:13:39 -05:00
research bot e17ab01225 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-08-09 15:49:37 +00:00
Bhavin Patel b1b8f2ee69 Merge pull request #2801 from splunk/cve-2023-35082 
Ivanti CVE-2023-35082
v4.9.0 		2023-08-08 09:49:15 -07:00
Michael Haag a99eeef7d7 Ivanti CVE-2023-35082 2023-08-08 10:23:50 -06:00
Bhavin Patel e8fa5ab05d Merge pull request #2796 from splunk/fix-aws-al-desc 
Update description
 2023-08-07 14:23:07 -07:00
srv-rr-gh-researchbt c84c9514ff Branch was auto-updated. 2023-08-07 14:22:04 -07:00
Bhavin Patel 99ecdbc031 Merge pull request #2800 from splunk/observablefix 
Updates to Observable!
 2023-08-07 14:21:47 -07:00
Bhavin Patel a474fb4456 Update o365_added_service_principal.yml 2023-08-07 14:02:36 -07:00
Bhavin Patel 4c76d950f8 Update o365_added_service_principal.yml 2023-08-07 14:01:06 -07:00
Bhavin Patel 8b4de41253 update mode ongit add . 2023-08-07 13:52:27 -07:00
Bhavin Patel 424ce1f1c5 Update o365_new_federated_domain_added.yml 2023-08-07 13:03:40 -07:00
Bhavin Patel caf4ce8fdb updates 2023-08-07 12:58:36 -07:00
srv-rr-gh-researchbt 4a0383ed27 Branch was auto-updated. 2023-08-07 12:45:05 -07:00
Bhavin Patel f9b7d09490 Merge pull request #2766 from splunk/goot_test 
G00t Duplicate for testing by Steven Dick
 2023-08-07 12:44:30 -07:00
Bhavin Patel b80946f363 Update windows_scheduled_task_service_spawned_shell.yml 2023-08-07 12:16:31 -07:00
Bhavin Patel f8c9715966 Update powershell_webrequest_using_memory_stream.yml 2023-08-07 12:06:24 -07:00
Bhavin Patel 183902ba38 Update powershell_script_block_with_url_chain.yml 2023-08-07 12:06:01 -07:00
srv-rr-gh-researchbt 6299e51571 Branch was auto-updated. 2023-08-07 11:23:38 -07:00
srv-rr-gh-researchbt cace3d94e6 Branch was auto-updated. 2023-08-07 11:23:27 -07:00
Bhavin Patel 433973d177 Merge pull request #2786 from splunk/observable_endpoint 
Endpoint Observables (A- C)
 2023-08-07 11:23:07 -07:00
Bhavin Patel 84ef02814e updated 3 detections 2023-08-07 10:39:11 -07:00
srv-rr-gh-researchbt b325d6e1b9 Branch was auto-updated. 2023-08-02 16:49:17 -07:00
srv-rr-gh-researchbt 32af0080b1 Branch was auto-updated. 2023-08-02 16:49:06 -07:00
srv-rr-gh-researchbt b4caea16db Branch was auto-updated. 2023-08-02 16:49:06 -07:00
Bhavin Patel 7fbd59ad03 Merge pull request #2797 from splunk/fix_missing_observable_name 
Fixing 'null' name field to src_ip
 2023-08-02 16:48:48 -07:00
pyth0n1c 583b60d911 Fixing 'null' name field to src_ip 2023-08-02 14:33:48 -07:00
srv-rr-gh-researchbt 0469637b56 Branch was auto-updated. 2023-08-02 10:29:23 -07:00
srv-rr-gh-researchbt 277e490445 Branch was auto-updated. 2023-08-02 10:29:22 -07:00
srv-rr-gh-researchbt 97e2d71fd8 Branch was auto-updated. 2023-08-02 10:29:09 -07:00
Bhavin Patel 3400373779 Merge pull request #2775 from splunk/o365_fix_update 
o365_fix_update
 2023-08-02 10:28:50 -07:00
srv-rr-gh-researchbt a0eeabab19 Branch was auto-updated. 2023-08-02 09:43:44 -07:00
srv-rr-gh-researchbt 6694306916 Branch was auto-updated. 2023-08-02 09:43:40 -07:00
srv-rr-gh-researchbt c7a577f922 Branch was auto-updated. 2023-08-02 09:43:39 -07:00
srv-rr-gh-researchbt 3abaaea054 Branch was auto-updated. 2023-08-02 09:43:35 -07:00