admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 46da0af83b Use hec, with hec setup and token grabbing and indexer acknowledgement, to replay data. Test seaches, to include baselines, using exponential backoff algorithm. This can result in a huge testing speedup. pyth0n1c 2022-09-19 14:47:12 -07:00
  • 85895e14a2 agent-with-tesla-2 tccontre 2022-09-19 18:04:55 +02:00
  • 8c40b9c5fc agent-with-tesla-1 tccontre 2022-09-19 11:35:19 +02:00
  • 888a148bbb agent-with-tesla-1 tccontre 2022-09-19 11:28:07 +02:00
  • 24cbcc1af2 changing notebook code and adding json file for the model, moved all contents under dga_dltk folder Namratha Sreekanta 2022-09-16 17:32:18 -07:00
  • c417a9a4af changing the search in the yml Namratha Sreekanta 2022-09-16 15:13:58 -07:00
  • 3bbfee8ad4 Branch was auto-updated. pyth0n1c 2022-09-16 12:53:55 -07:00
  • c6dc38a106 Branch was auto-updated. pyth0n1c 2022-09-16 12:53:54 -07:00
  • d27587f7bd Branch was auto-updated. pyth0n1c 2022-09-16 12:53:52 -07:00
  • 041a6099f6 Branch was auto-updated. pyth0n1c 2022-09-16 12:53:51 -07:00
  • eb9c712888 Branch was auto-updated. pyth0n1c 2022-09-16 12:53:50 -07:00
  • 5bad55c6d8 Branch was auto-updated. pyth0n1c 2022-09-16 12:53:49 -07:00
  • c7c9b69dfd Branch was auto-updated. pyth0n1c 2022-09-16 12:53:48 -07:00
  • b87ff44a36 Branch was auto-updated. pyth0n1c 2022-09-16 12:53:46 -07:00
  • e09003db64 Merge pull request #2358 from splunk/komodo v3.49.0 Bhavin Patel 2022-09-16 14:53:31 -05:00
  • 713c605097 adding files into dist patel-bhavin 2022-09-16 14:37:13 -05:00
  • 206e826492 Update ssa___windows_execute_arbitrary_commands_with_msdt.yml Michael Haag 2022-09-16 13:29:25 -06:00
  • 0e9f00f19f Update ssa___windows_execute_arbitrary_commands_with_msdt.yml Michael Haag 2022-09-16 13:10:09 -06:00
  • 593c433ae8 fixes Michael Haag 2022-09-16 12:47:19 -06:00
  • d1788686d5 initial commit for dga Namratha Sreekanta 2022-09-15 17:50:36 -07:00
  • 23b140e8e6 A few more changes in the story builder to get references working properly. pyth0n1c 2022-09-15 17:18:50 -07:00
  • bb84ef752b One more change to substitution string pyth0n1c 2022-09-15 16:30:32 -07:00
  • c8a7c61b74 Changes to apss the name of the app to the story builder, since it is required for generate. pyth0n1c 2022-09-15 16:26:34 -07:00
  • d84aba8af0 Fixed another issue with the filename. pyth0n1c 2022-09-15 13:28:36 -07:00
  • af16d25ca2 Fixed file name find and replace issue pyth0n1c 2022-09-15 13:27:48 -07:00
  • 017cf9a284 fixing ssa detection d1vious 2022-09-15 16:23:35 -04:00
  • 6fe804f8ed changed one more location where the path to escu is hardcoded. pyth0n1c 2022-09-15 13:18:00 -07:00
  • a4d143d4f1 better app name valdiation message pyth0n1c 2022-09-15 12:58:52 -07:00
  • b5bfc29fb5 Basic validation on the app_name pyth0n1c 2022-09-15 12:57:12 -07:00
  • 444026f32b Another small modification to replace static ESCU name with the name of your app pyth0n1c 2022-09-15 12:53:29 -07:00
  • 6d1734b902 msdt Michael Haag 2022-09-15 13:43:28 -06:00
  • 0597208d3d cant type Michael Haag 2022-09-15 13:06:37 -06:00
  • 81dcbae81c Update ssa___windows_odbcconf_load_response_file.yml Michael Haag 2022-09-15 13:02:54 -06:00
  • 782b9bed8a updating csv d1vious 2022-09-15 14:57:53 -04:00
  • 0ff8d76b90 fixing by adding an asterisk d1vious 2022-09-15 14:52:57 -04:00
  • fdb7e18510 Merge branch 'detection_enrichment_project' of github.com:splunk/security_content into detection_enrichment_project d1vious 2022-09-15 14:42:35 -04:00
  • 7a95a27a2c ODBC Michael Haag 2022-09-15 12:42:34 -06:00
  • 5385bc77cf making path generic to their location and not specific location of file d1vious 2022-09-15 14:42:30 -04:00
  • 49f0d7ac0c Branch was auto-updated. pyth0n1c 2022-09-15 11:33:13 -07:00
  • 097e7dca27 Branch was auto-updated. pyth0n1c 2022-09-15 11:33:13 -07:00
  • fa066b6082 Branch was auto-updated. pyth0n1c 2022-09-15 11:33:12 -07:00
  • 61d871ef9b Branch was auto-updated. pyth0n1c 2022-09-15 11:33:11 -07:00
  • dae11e3432 Branch was auto-updated. pyth0n1c 2022-09-15 11:33:10 -07:00
  • 2ab2821d0d Branch was auto-updated. pyth0n1c 2022-09-15 11:33:09 -07:00
  • 60ee6c453a Branch was auto-updated. pyth0n1c 2022-09-15 11:33:08 -07:00
  • 2aa16f2c0f Branch was auto-updated. pyth0n1c 2022-09-15 11:33:07 -07:00
  • ed8fa344c1 Merge pull request #2373 from splunk/fix_app_renaming_in_init Bhavin Patel 2022-09-15 13:32:42 -05:00
  • 124fd0d465 Fix search string to be more broad pyth0n1c 2022-09-15 11:22:05 -07:00
  • 5e85c0dd7c Windows Ingress Tool Transfer Using Explorer SSA Michael Haag 2022-09-15 12:19:18 -06:00
  • 615b24fe6d PLINK Michael Haag 2022-09-15 10:52:56 -06:00
  • 5a0966aa89 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:43 -07:00
  • 7e9710d625 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:42 -07:00
  • 50a6b72e4d Branch was auto-updated. pyth0n1c 2022-09-15 09:33:41 -07:00
  • 6da197a062 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:40 -07:00
  • 79c5fd19e5 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:39 -07:00
  • 0e98b43789 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:39 -07:00
  • a582d2cad5 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:38 -07:00
  • 8f7b0aead7 Branch was auto-updated. pyth0n1c 2022-09-15 09:33:37 -07:00
  • 8cc148105c Merge pull request #2356 from splunk/brute-ratel-3 Bhavin Patel 2022-09-15 11:33:18 -05:00
  • 2c57c078a0 minor patel-bhavin 2022-09-15 11:21:05 -05:00
  • 335213620c Branch was auto-updated. pyth0n1c 2022-09-15 09:15:58 -07:00
  • 775d7c8305 Branch was auto-updated. pyth0n1c 2022-09-15 09:15:57 -07:00
  • 5efe1cae88 Branch was auto-updated. pyth0n1c 2022-09-15 09:15:56 -07:00
  • dff89bda3c Branch was auto-updated. pyth0n1c 2022-09-15 09:15:55 -07:00
  • 109a571569 Branch was auto-updated. pyth0n1c 2022-09-15 09:15:54 -07:00
  • ccffacffe4 Branch was auto-updated. pyth0n1c 2022-09-15 09:15:53 -07:00
  • 5cd001e040 Branch was auto-updated. pyth0n1c 2022-09-15 09:15:51 -07:00
  • b3ae4b7a08 Branch was auto-updated. pyth0n1c 2022-09-15 09:15:48 -07:00
  • ecb91e050e Branch was auto-updated. pyth0n1c 2022-09-15 09:15:44 -07:00
  • 8e7a546d70 Merge pull request #2333 from splunk/TR-2361_Azure_AD_Persistence Bhavin Patel 2022-09-15 11:15:22 -05:00
  • 2fa429127b CISA AA22-257A tag Michael Haag 2022-09-15 10:07:38 -06:00
  • 3030c694bf Branch was auto-updated. pyth0n1c 2022-09-15 08:08:58 -07:00
  • 4d7ea6dc0e Branch was auto-updated. pyth0n1c 2022-09-15 08:08:57 -07:00
  • 209449795f Branch was auto-updated. pyth0n1c 2022-09-15 08:08:56 -07:00
  • 87ec2e6846 Branch was auto-updated. pyth0n1c 2022-09-15 08:08:56 -07:00
  • 48f2ed109d Branch was auto-updated. pyth0n1c 2022-09-15 08:08:55 -07:00
  • feaf3c91c6 Branch was auto-updated. pyth0n1c 2022-09-15 08:08:54 -07:00
  • 932f7a7c36 Branch was auto-updated. pyth0n1c 2022-09-15 08:08:53 -07:00
  • 1cc5266ca9 Branch was auto-updated. pyth0n1c 2022-09-15 08:08:52 -07:00
  • acbb906f56 Branch was auto-updated. pyth0n1c 2022-09-15 08:08:51 -07:00
  • 710e6aab5e Branch was auto-updated. pyth0n1c 2022-09-15 08:08:50 -07:00
  • 5db5524752 Merge pull request #2362 from splunk/TR-2408_rba_search_improvements Bhavin Patel 2022-09-15 10:08:04 -05:00
  • a6061849dc Branch was auto-updated. pyth0n1c 2022-09-15 08:05:19 -07:00
  • 14b7f51adf Branch was auto-updated. pyth0n1c 2022-09-15 08:05:18 -07:00
  • d2663ce2a7 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:16 -07:00
  • 446c558c23 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:15 -07:00
  • 12b088e6c8 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:13 -07:00
  • ec87c40b3f Branch was auto-updated. pyth0n1c 2022-09-15 08:05:12 -07:00
  • 34109e6236 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:10 -07:00
  • 8f8cc478c2 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:09 -07:00
  • e6e76569e9 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:07 -07:00
  • 82fa9b4de5 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:05 -07:00
  • 7bc8bb29c7 Branch was auto-updated. pyth0n1c 2022-09-15 08:05:03 -07:00
  • 83aee5cd70 Merge pull request #2350 from splunk/correlate Bhavin Patel 2022-09-15 10:04:42 -05:00
  • 3397919067 new-xml-src-data tccontre 2022-09-15 09:59:04 +02:00
  • e6078a39e4 Merge branch 'aws_account_takeover_rename' of github.com:splunk/security_content into aws_account_takeover_rename patel-bhavin 2022-09-14 18:25:10 -05:00
  • 819b016b37 search updaate and remove import patel-bhavin 2022-09-14 18:24:59 -05:00
  • 50a2d18163 fixing missing test d1vious 2022-09-14 19:20:57 -04:00
  • 0f75b25b0d Merge branch 'TR-2408_rba_search_improvements' of github.com:splunk/security_content into TR-2408_rba_search_improvements d1vious 2022-09-14 18:33:50 -04:00
  • e027f13add removing risk objects from correlation searches on savedsearchesconf to avoid circular risk loop d1vious 2022-09-14 18:33:15 -04:00