admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 0b1f09fda7 swiftslicer tccontre 2023-02-03 09:52:47 +01:00
  • fe3c940162 swiftslicer tccontre 2023-02-03 09:47:51 +01:00
  • af5c030cb3 Update executables_or_script_creation_in_suspicious_path.yml tccontre 2023-02-03 09:17:11 +01:00
  • ecda0cb289 Update suspicious_process_file_path.yml tccontre 2023-02-03 09:15:35 +01:00
  • 4aab4bfe1a Update wsreset_uac_bypass.yml Bhavin Patel 2023-02-02 17:39:40 -08:00
  • 33fe8597eb Update wsreset_uac_bypass.yml ported_errors_2516 Bhavin Patel 2023-02-02 17:38:55 -08:00
  • a94e1c8878 Update how we ge the release tag and the timestamp. Now, we get it from the workflow and the current datetime pyth0n1c 2023-02-02 17:35:27 -08:00
  • 191ced0e03 Update windows_modify_show_compress_color_and_info_tip_registry.yml Bhavin Patel 2023-02-02 17:22:35 -08:00
  • 60f4507a52 checking failures patel-bhavin 2023-02-02 16:53:41 -08:00
  • 525f26ac73 adding new detection from community patel-bhavin 2023-02-02 16:40:32 -08:00
  • 60ea283f53 Moving failing tests to experimental pyth0n1c 2023-02-02 16:32:24 -08:00
  • ddc779103b Update office_application_drop_executable.yml Bhavin Patel 2023-02-02 16:30:42 -08:00
  • 5ae3a295a7 fix typo mvelazco 2023-02-02 19:09:32 -05:00
  • bc7fa3078f multiple fixes mvelazco 2023-02-02 18:38:06 -05:00
  • f50008a88f adding commits patel-bhavin 2023-02-02 13:42:18 -08:00
  • a056d1bece Update delete_shadowcopy_with_powershell.yml TheLawsOfChaos 2023-02-02 16:25:43 -05:00
  • e8cd643c40 Update create_local_admin_accounts_using_net_exe.yml TheLawsOfChaos 2023-02-02 16:10:33 -05:00
  • 330a31e9f2 Update windows_service_created_with_suspicious_service_path.yml TheLawsOfChaos 2023-02-02 12:32:23 -05:00
  • 4f774be1b4 Update powershell_fileless_script_contains_base64_encoded_content.yml TheLawsOfChaos 2023-02-02 12:04:36 -05:00
  • f6f4c306fd Update powershell_fileless_script_contains_base64_encoded_content.yml TheLawsOfChaos 2023-02-02 11:39:58 -05:00
  • 2c92876813 fix requirements add_experimental_filter_and_manual_test P4T12ICK 2023-02-02 16:46:02 +01:00
  • 327ab6b4c7 fixed detections P4T12ICK 2023-02-02 15:24:43 +01:00
  • 126ab0c3a1 solved merge conflict requirements P4T12ICK 2023-02-02 12:11:38 +01:00
  • 4d5ff48962 merged with develop P4T12ICK 2023-02-02 09:16:36 +01:00
  • ffa1210a00 merged with develop P4T12ICK 2023-02-02 09:15:59 +01:00
  • 0daa31c481 Updated the macro in another search whose test file was changed. pyth0n1c 2023-02-01 18:01:19 -08:00
  • 9cf9d1d3f7 Fixing incorrect macro in a detection whose test file was updated. pyth0n1c 2023-02-01 17:59:02 -08:00
  • 7c88bf93c9 validation error patel-bhavin 2023-02-01 17:19:30 -08:00
  • 389d1e34ae updating test filee patel-bhavin 2023-02-01 17:14:07 -08:00
  • 706b0842a3 minor error test file patel-bhavin 2023-02-01 17:12:36 -08:00
  • 5c81a87b51 fixedsourcetype Rod Soto 2023-02-01 17:08:13 -08:00
  • 5dd64e3fd1 aws concurrent detections patel-bhavin 2023-02-01 17:01:28 -08:00
  • 2fafe9c0f4 fixedtestfilesourcetype Rod Soto 2023-02-01 16:57:19 -08:00
  • e376095429 fixsourcedtypesplunkwebxmacro Rod Soto 2023-02-01 16:33:44 -08:00
  • a39c9cf03b Bump requests from 2.28.1 to 2.28.2 dependabot[bot] 2023-02-01 23:22:49 +00:00
  • 801fb26e99 Merge pull request #2524 from splunk/dependabot/pip/splunk-appinspect-2.32.0 dependabot[bot] 2023-02-01 23:22:07 +00:00
  • 0377959be6 Bump splunk-appinspect from 2.30.0 to 2.32.0 dependabot[bot] 2023-02-01 23:00:39 +00:00
  • fe3bd00d31 Bump pytest from 7.2.0 to 7.2.1 dependabot[bot] 2023-02-01 23:00:37 +00:00
  • 697dcfed0b fix yaml patel-bhavin 2023-01-31 17:02:34 -08:00
  • 1e9e0a1c5a remove wrong file patel-bhavin 2023-01-31 16:50:58 -08:00
  • ae07e87dc1 spl update patel-bhavin 2023-01-31 16:42:19 -08:00
  • f6c78edc5d new mfa added aws patel-bhavin 2023-01-31 11:34:28 -08:00
  • 71273d8fe1 fix the errors patel-bhavin 2023-01-30 15:13:45 -08:00
  • 8dd93e3149 adding new detection mvelazco 2023-01-30 17:33:25 -05:00
  • b629b14dca spl and yaml updates patel-bhavin 2023-01-30 13:38:41 -08:00
  • 14edea4ca0 new aws detection patel-bhavin 2023-01-30 13:10:13 -08:00
  • 27e5bf0c2a Update data manipulation and macro typo ErrorPatches_20230130 pyth0n1c 2023-01-30 09:31:11 -08:00
  • e57ab2220d Detect suspicious Filename updates Kumar Sharad 2023-01-30 17:07:34 +01:00
  • 58c6987122 update finding report generation P4T12ICK 2023-01-30 14:08:14 +01:00
  • 30e41b0c7f update test file patel-bhavin 2023-01-27 17:23:05 -08:00
  • 54459489c1 new line remove patel-bhavin 2023-01-27 17:11:53 -08:00
  • a7e908313a timeframe in test patel-bhavin 2023-01-27 17:10:02 -08:00
  • 03598ec031 new detectiono aws patel-bhavin 2023-01-27 16:58:28 -08:00
  • 87d5b60b0a Detect suspicious Filename updates Kumar Sharad 2023-01-27 17:23:58 +01:00
  • 709068dcb8 Detect suspicious DNS text YML update Kumar Sharad 2023-01-27 15:48:17 +01:00
  • be97f1d620 minor-update-lnx tccontre 2023-01-27 14:19:15 +01:00
  • 5206d43c71 asyncrat-onenote-chain2 tccontre 2023-01-27 14:15:06 +01:00
  • cf1ec25aef asyncrat-onenote-chain2 tccontre 2023-01-27 14:14:35 +01:00
  • 6d2aea64cc minor fix patel-bhavin 2023-01-26 17:14:53 -08:00
  • 2ff71df1b0 new detection and update 1 patel-bhavin 2023-01-26 17:11:29 -08:00
  • a9f12d3c6b Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:46 -08:00
  • 3e591dbd21 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:45 -08:00
  • c76bebdac2 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:45 -08:00
  • 1f9bab8595 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:43 -08:00
  • d274e5b0b9 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:42 -08:00
  • 37fd6e2ee7 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:41 -08:00
  • 25dc0a66b8 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:40 -08:00
  • 4cbd449ede Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:39 -08:00
  • 26806310ea Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:37 -08:00
  • 505d369db4 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:36 -08:00
  • 87a8775a85 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-26 14:37:34 -08:00
  • 5a98c280e9 Merge pull request #2521 from splunk/revert-2503-always_upload_summary_artifact_for_scheduled_run Bhavin Patel 2023-01-26 14:37:18 -08:00
  • e7af7456cb Revert "Upload test artifact/results" Bhavin Patel 2023-01-26 14:26:24 -08:00
  • 3db30e0ba1 Update windows_shells.yml Michael Haag 2023-01-26 15:21:15 -07:00
  • 8e0d9c4e23 Attemted fix at "always" uploading results, but only for scheduled runs. fixDetectionTestingPassFail pyth0n1c 2023-01-26 14:12:34 -08:00
  • 8a8a7b3173 updating analytic story description mvelazco 2023-01-26 17:06:13 -05:00
  • 5306030d74 fixes mvelazco 2023-01-26 16:35:43 -05:00
  • 6e695cb16e asyncrat-onenote-chain2 tccontre 2023-01-26 18:00:00 +01:00
  • 9f0394613d updating microsoft cloud services app metadata mvelazco 2023-01-26 11:13:28 -05:00
  • a1bc51a4e8 ocsf ba P4T12ICK 2023-01-26 16:12:24 +01:00
  • b6f2b63081 Update windows_powershell_cryptography_namespace.yml tccontre 2023-01-26 14:15:28 +01:00
  • b8d7a20f31 asyncrat-onenote-chain2 tccontre 2023-01-26 14:12:32 +01:00
  • af0333c45c Update linux_service_restarted.yml tccontre 2023-01-26 09:47:38 +01:00
  • 39f00e42be minor-update-lnx tccontre 2023-01-26 09:42:46 +01:00
  • 4999f933e3 Adding detection for disabling audit policy on a DC dluxtron 2023-01-26 13:03:57 +10:00
  • cc55d3abb5 Adding detection for disabling audit policy on a DC dluxtron 2023-01-26 13:01:37 +10:00
  • 50b884c8d1 Adding new Detection for DC Promo Events dluxtron 2023-01-26 11:54:08 +10:00
  • c6aae77bd6 adding new detection from Steven Dick mvelazco 2023-01-25 18:33:40 -05:00
  • 046516ea66 yml fixes patel-bhavin 2023-01-25 14:19:35 -08:00
  • 6c1ceb1bad Ported all changes from interlock pyth0n1c 2023-01-25 13:31:11 -08:00
  • 69aa452df2 Merge branch 'asyncrat-onenote-chain2' of github.com:splunk/security_content into asyncrat-onenote-chain2 tccontre 2023-01-25 15:17:03 +01:00
  • f32b5bc51e asyncrat-onenote-chain2 tccontre 2023-01-25 15:14:05 +01:00
  • 24d3ef152a Update powershell_fileless_script_contains_base64_encoded_content.yml tccontre 2023-01-25 15:11:30 +01:00
  • f1628eefd3 asyncrat-onenote-chain2 tccontre 2023-01-25 15:08:29 +01:00
  • 90ca7c8f11 Merge branch 'TR1921_CompromisedUserAccount' of github.com:splunk/security_content into TR1921_CompromisedUserAccount mvelazco 2023-01-24 18:50:53 -05:00
  • 0c79ce7d96 adding new detection mvelazco 2023-01-24 18:50:51 -05:00
  • 9e7be53e76 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:18 -08:00
  • 97c399200b Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:18 -08:00
  • 0939647156 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:17 -08:00
  • ef950810a1 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:16 -08:00