Commit Graph

  • 38231ef7be Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:43 -07:00
  • 632bfbec58 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:41 -07:00
  • 4890479c6f Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:38 -07:00
  • 761b064be5 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:37 -07:00
  • 29f35b61ba Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:36 -07:00
  • 8ad4a93b0c Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:34 -07:00
  • 6145916174 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:33 -07:00
  • 5ce9fb780c Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:31 -07:00
  • 0cc6a0cfc0 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:30 -07:00
  • 9bd408d4c3 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:29 -07:00
  • aa36e5301d Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:28 -07:00
  • 002ffd6805 Merge pull request #2394 from splunk/exchange2shell Bhavin Patel 2022-10-18 11:42:11 -07:00
  • 16fd563e2f Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:24:00 -07:00
  • 361bab64e9 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:59 -07:00
  • 3efdc993f4 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:57 -07:00
  • 056c2bfbf9 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:56 -07:00
  • 77343ecced Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:55 -07:00
  • 75de8f40b8 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:53 -07:00
  • 812ed6211f Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:52 -07:00
  • f7d938e663 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:50 -07:00
  • 0cd62e009a Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:49 -07:00
  • c0eb29655a Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:47 -07:00
  • d3a8d6091a Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:46 -07:00
  • 69f3732700 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:45 -07:00
  • 43ec99ece9 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:42 -07:00
  • 7f0fc80d7c Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:40 -07:00
  • bcac2fa388 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:39 -07:00
  • bbad412f77 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:23:38 -07:00
  • 996a830c0b Merge pull request #2409 from splunk/mshta_reg Bhavin Patel 2022-10-18 11:22:54 -07:00
  • 7a022070f8 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:44 -07:00
  • c5ce631983 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:43 -07:00
  • 36e598950f Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:43 -07:00
  • 370aea4dda Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:41 -07:00
  • 8c2ebc661d Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:40 -07:00
  • 092d6dfdd1 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:39 -07:00
  • b549c38a2a Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:39 -07:00
  • da071b5c17 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:38 -07:00
  • ae0589e186 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:37 -07:00
  • 8494772479 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:36 -07:00
  • 4a6978663e Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:36 -07:00
  • e3a58811b9 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:35 -07:00
  • 7cacb6bbbe Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:34 -07:00
  • 60dcad02c6 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:33 -07:00
  • 7460357d02 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:32 -07:00
  • 8570f978aa Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:32 -07:00
  • a03fa335da Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:19:31 -07:00
  • b72ecf09d1 Merge pull request #2413 from splunk/change_dga_detection_wiki_link Bhavin Patel 2022-10-18 11:19:11 -07:00
  • 32a899cb30 removing the testing detection josehelps 2022-10-18 13:14:12 -04:00
  • aef8daef2f moved test file from detections folder to tests folder pyth0n1c 2022-10-18 09:58:21 -07:00
  • 0219203fa9 adding 9 BA lolbas detection josehelps 2022-10-18 12:48:18 -04:00
  • 2298de8b1a baseline is set to auto, have to be more careful on threshold David Dorsey 2022-10-18 11:47:13 -05:00
  • 526ca4bd1b fixing detection mvelazco 2022-10-18 12:03:20 -04:00
  • 142d52872f updating detection mvelazco 2022-10-18 11:36:29 -04:00
  • eceb5f2b4a adding new detection mvelazco 2022-10-18 10:59:45 -04:00
  • 0c72ce5f21 fixing syntax issues with the search, now they are passing d1vious 2022-10-18 10:05:42 -04:00
  • f217d96ae9 Update qakbot.yml tccontre 2022-10-18 12:02:39 +02:00
  • c96c6d03d3 qakbot_1 tccontre 2022-10-18 11:57:58 +02:00
  • 0f162c9004 Merge branch 'detection_enrichment_project' of github.com:splunk/security_content into detection_enrichment_project josehelps 2022-10-17 14:50:32 -04:00
  • a2b6896f10 updating josehelps 2022-10-17 14:50:20 -04:00
  • e534b9dd94 adding 1 example d1vious 2022-10-17 14:35:42 -04:00
  • e95c7f6937 fixing detection mvelazco 2022-10-17 12:27:58 -04:00
  • bdaf3ebcf9 updating amazon S3 url mvelazco 2022-10-17 12:11:19 -04:00
  • 2afe6af188 fixing yaml issues mvelazco 2022-10-17 11:44:39 -04:00
  • 6ac9e6e08e reference to MSF Michael Haag 2022-10-17 07:56:05 -06:00
  • fafef8158f reference Michael Haag 2022-10-17 07:51:14 -06:00
  • 744dd3c713 Data add to Forti Michael Haag 2022-10-15 06:43:09 -06:00
  • ac0593d1a0 Update powershell_using_memory_as_backing_store.yml Michael Haag 2022-10-15 06:28:43 -06:00
  • 00433d62d7 Update executables_or_script_creation_in_suspicious_path.yml Michael Haag 2022-10-15 06:21:49 -06:00
  • 5b4074dd23 hti update patel-bhavin 2022-10-14 15:36:28 -07:00
  • 2100ef6fd1 changing the wiki link in the dga detection Namratha Sreekanta 2022-10-14 14:18:11 -07:00
  • 1580dfc67e Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:39 -07:00
  • c97ef7f1a7 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:38 -07:00
  • 60c6c7f7b3 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:38 -07:00
  • b04681c854 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:36 -07:00
  • 40e4218968 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:35 -07:00
  • 945fb121a7 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:34 -07:00
  • 3683b1d9d0 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:33 -07:00
  • 39fcc04762 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:33 -07:00
  • 090b1ae9e8 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:32 -07:00
  • 7ad1e041d7 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:31 -07:00
  • f6050057f1 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:30 -07:00
  • 2b8f8f071b Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:29 -07:00
  • 2a2ee9e576 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:29 -07:00
  • c3713043d9 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:28 -07:00
  • c23c0e4498 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-14 12:33:27 -07:00
  • be4daa969c Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag research bot 2022-10-14 19:33:11 +00:00
  • 7ab9b56f72 Update gcp_unusual_number_of_failed_authentications_from_ip.yml Bhavin Patel 2022-10-14 12:20:52 -07:00
  • ec4829ad7f Update gcp_multiple_users_failing_to_authenticate_from_ip.yml Bhavin Patel 2022-10-14 12:20:23 -07:00
  • c8f1c87203 update Michael Haag 2022-10-14 13:12:10 -06:00
  • d7f115f0c7 Update fortinet_appliance_auth_bypass.yml Michael Haag 2022-10-14 13:08:10 -06:00
  • ecda6231c9 gitignore fix mvelazco 2022-10-14 15:06:12 -04:00
  • 7bada443b3 Merge branch 'gcp_account_takeover' of github.com:splunk/security_content into gcp_account_takeover mvelazco 2022-10-14 15:03:56 -04:00
  • 744bc50190 adding 4 GCP account takeover detections mvelazco 2022-10-14 15:03:54 -04:00
  • b1bb130cd9 Merge pull request #2407 from splunk/fix_api_update_error v3.50.0 Bhavin Patel 2022-10-14 11:50:47 -07:00
  • 5e6be8b499 Update fortinet_appliance_auth_bypass.yml Michael Haag 2022-10-14 12:49:28 -06:00
  • 363677cc71 Update cve_2022_40684_fortinet_appliance_auth_bypass.yml Michael Haag 2022-10-14 12:26:35 -06:00
  • aad3a35478 Drop a Forti Michael Haag 2022-10-14 12:19:26 -06:00
  • b2ddf3a6c8 updates Michael Haag 2022-10-14 11:38:42 -06:00
  • 0867949d4d Update windows_mshta_execution_in_registry.yml tccontre 2022-10-14 17:51:37 +02:00
  • 6da0d7913a Update windows_mshta_execution_in_registry.test.yml tccontre 2022-10-14 17:50:56 +02:00