Commit Graph

  • a79e4b8f88 Bump gitpython from 3.1.30 to 3.1.31 dependabot[bot] 2023-03-01 23:56:48 +00:00
  • 18017128bf Bump pydantic from 1.10.4 to 1.10.5 dependabot[bot] 2023-03-01 23:56:41 +00:00
  • 4c250f6a53 Bump splunk-sdk from 1.7.2 to 1.7.3 dependabot[bot] 2023-03-01 23:56:35 +00:00
  • cb406cbd10 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:09 -08:00
  • 2001e6f891 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:09 -08:00
  • 58ce2895d1 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:08 -08:00
  • 4fde829b48 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:07 -08:00
  • af66c32811 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:06 -08:00
  • 4ae151f2dd Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:05 -08:00
  • fc5424b876 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:05 -08:00
  • 29fbbecb79 Branch was auto-updated. srv-rr-gh-researchbt 2023-03-01 14:16:02 -08:00
  • 377af6503a Merge pull request #2551 from splunk/minor-fix Bhavin Patel 2023-03-01 14:15:43 -08:00
  • c99fe588ea remove it from 3.61.0 patel-bhavin 2023-03-01 14:11:36 -08:00
  • ae3ef32e0a Update suspicious_process_file_path.yml Bhavin Patel 2023-03-01 12:38:01 -08:00
  • e904ff4e1e Update suspicious_process_file_path.yml Bhavin Patel 2023-03-01 11:08:40 -08:00
  • 4aaa2424c3 Update suspicious_process_file_path.yml Bhavin Patel 2023-03-01 11:04:11 -08:00
  • bbb9b5a421 Update suspicious_process_file_path.yml Bhavin Patel 2023-03-01 10:53:03 -08:00
  • 631c9d4cf0 XML driver load Michael Haag 2023-03-01 09:16:22 -07:00
  • 0de5be9030 Update suspicious_process_file_path.yml tccontre 2023-03-01 14:05:56 +01:00
  • a21deeb7a0 Update suspicious_process_file_path.yml tccontre 2023-03-01 14:05:31 +01:00
  • d115bfd4e0 converted ssa detections to ocsf P4T12ICK 2023-02-28 12:00:16 +01:00
  • 41fb7257cd Update suspicious_process_file_path.yml tccontre 2023-02-28 10:49:16 +01:00
  • 8d1a416b74 Adding ymls for playbooks Lou Stella 2023-02-27 16:54:13 -06:00
  • c54342e6b9 Copy content from phantomcyber/playbooks Lou Stella 2023-02-27 16:40:38 -06:00
  • 15150886c9 fixes Michael Haag 2023-02-24 12:24:55 -07:00
  • 70d7a6700e updating detection metadata mvelazco 2023-02-24 10:51:23 -05:00
  • 801f3b570c testing P4T12ICK 2023-02-24 15:52:15 +01:00
  • 768258a237 updates P4T12ICK 2023-02-24 14:51:15 +01:00
  • a5ec4f97ce updates P4T12ICK 2023-02-24 14:06:43 +01:00
  • f3841eb846 updates for testing P4T12ICK 2023-02-24 13:54:13 +01:00
  • 55c5f297fc adding dataset for T1620 mvelazco 2023-02-23 16:22:09 -05:00
  • cecc610ea6 Merge branch 'TR_2410_Domain_Controller_Attacks' of github.com:splunk/security_content into TR_2410_Domain_Controller_Attacks mvelazco 2023-02-22 14:35:51 -05:00
  • 70790ac1c8 fixing test file path mvelazco 2023-02-22 14:34:10 -05:00
  • decf71cc46 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-22 11:31:21 -08:00
  • c136060fd7 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-22 11:31:20 -08:00
  • b2f1f04ef7 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-22 11:31:18 -08:00
  • 5e910969a7 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-22 11:31:17 -08:00
  • 152c647dc2 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-22 11:31:12 -08:00
  • 2111501a54 Merge pull request #2547 from splunk/fortinacfix Bhavin Patel 2023-02-22 11:30:51 -08:00
  • b0e0481761 Update fortinet_fortinac_cve_2022_39952.yml Michael Haag 2023-02-22 12:27:53 -07:00
  • 8e13530a06 fixing file name mvelazco 2023-02-22 14:03:20 -05:00
  • 55850fe25e adding custom app mvelazco 2023-02-22 13:28:41 -05:00
  • 9c14295a6b Update windows_ad_same_domain_sid_history_addition.yml mvelazco 2023-02-22 12:01:18 -05:00
  • 6c6e63feac fixing bucket time in detections mvelazco 2023-02-22 11:54:54 -05:00
  • e1f93ce0c4 creating first detection, hunting for unmanaged powershell mvelazco 2023-02-22 11:16:40 -05:00
  • 8e59ac984f Fixing app number and version for Windows Fix App. pyth0n1c 2023-02-21 17:34:15 -08:00
  • eec8c7ff7f Fixing improperly named filter macro pyth0n1c 2023-02-21 17:26:31 -08:00
  • a871d51dfd Added the path TA to fix issues with the windows TA to S3. Added it to the baseline JSON and PY files. pyth0n1c 2023-02-21 17:24:25 -08:00
  • dc80d8ea36 Fixed up some incorrect paths in test and detection files. pyth0n1c 2023-02-21 16:25:24 -08:00
  • cb20193045 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 13:06:15 -08:00
  • 13ade5b304 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 13:06:14 -08:00
  • 9502b8678f Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 13:06:13 -08:00
  • a00ebdb0f5 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 13:06:12 -08:00
  • 95b05f0138 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag research bot 2023-02-21 21:05:53 +00:00
  • d979d60b87 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 12:44:23 -08:00
  • 5f025dec41 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 12:44:22 -08:00
  • e4ab7bd8b0 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 12:44:20 -08:00
  • e9c29ff2e3 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 12:44:19 -08:00
  • aca80cb7ed Merge pull request #2545 from splunk/FortinetNAC v3.60.0 Bhavin Patel 2023-02-21 12:43:58 -08:00
  • eb09ffd951 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:07:01 -08:00
  • 7286aa3428 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:07:00 -08:00
  • 041e18c9d8 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:06:57 -08:00
  • a5b7846cc5 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:06:56 -08:00
  • b8d60092c8 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:06:55 -08:00
  • 12002565f8 Merge pull request #2539 from splunk/SpiderHaag Bhavin Patel 2023-02-21 11:06:30 -08:00
  • 88d8ea2d28 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:03:58 -08:00
  • 79d5fac050 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:03:58 -08:00
  • 014705c986 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:03:57 -08:00
  • 9b3a441f0b Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:03:56 -08:00
  • 5b5d1b09e6 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:03:54 -08:00
  • 1943157207 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 11:03:53 -08:00
  • d17a859857 Merge pull request #2538 from splunk/awfulshred Bhavin Patel 2023-02-21 11:03:33 -08:00
  • 3c8b8c2073 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:09 -08:00
  • e86815967f Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:08 -08:00
  • 2181a41de4 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:07 -08:00
  • 709ceefe6a Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:06 -08:00
  • 7d0811bc1f Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:06 -08:00
  • 28c0250f00 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:05 -08:00
  • ad8ea55ed4 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:47:04 -08:00
  • cd9a00217a Merge pull request #2540 from splunk/version_jj Bhavin Patel 2023-02-21 10:46:47 -08:00
  • 2763f2df73 Update linux_unix_shell_enable_all_sysrq_functions.yml Bhavin Patel 2023-02-21 10:36:34 -08:00
  • ab8b96c49e Update linux_system_reboot_via_system_request_key.yml Bhavin Patel 2023-02-21 10:35:19 -08:00
  • f3c449e225 fixed Michael Haag 2023-02-21 11:27:07 -07:00
  • a2e68250a1 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:15:16 -08:00
  • 8aab534a3b Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:15:15 -08:00
  • 0dd066caaf Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:15:14 -08:00
  • 52abd74ff1 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:15:12 -08:00
  • c84694d1a9 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:15:01 -08:00
  • 1f0cf2806e Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:14:59 -08:00
  • 2b7f4f8d93 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:14:58 -08:00
  • 490fff7297 Branch was auto-updated. srv-rr-gh-researchbt 2023-02-21 10:14:58 -08:00
  • c0ce86a7b4 Merge pull request #2544 from splunk/lateral_movement_fix Bhavin Patel 2023-02-21 10:14:41 -08:00
  • b65986eb71 Update fortinet_fortinac_cve_2022_39952.yml Michael Haag 2023-02-21 11:07:04 -07:00
  • 92dcbcec70 CVE-2022-39952 Michael Haag 2023-02-21 10:59:54 -07:00
  • c1ab467c62 Added story back to deprecated Lou Stella 2023-02-21 11:11:03 -06:00
  • f73d760571 Update windows_steal_authentication_certificates_cryptoapi.yml Michael Haag 2023-02-21 09:07:23 -07:00
  • f2334bc080 Update windows_spearphishing_attachment_connect_to_none_ms_office_domain.yml tccontre 2023-02-21 09:31:42 +01:00
  • edb111c9b9 update P4T12ICK 2023-02-17 17:53:51 +01:00
  • 8cc5b11302 update P4T12ICK 2023-02-17 17:29:50 +01:00
  • ecf25b566f updates P4T12ICK 2023-02-17 17:21:55 +01:00