admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 8b7db54a68 Update high_process_termination_frequency.yml Bhavin Patel 2022-09-14 11:18:03 -05:00
  • 1620474465 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:54 -07:00
  • fdd3a8f4c5 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:53 -07:00
  • 6ff76e699f Branch was auto-updated. pyth0n1c 2022-09-14 09:17:51 -07:00
  • da686eb237 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:49 -07:00
  • 23dd2542eb Branch was auto-updated. pyth0n1c 2022-09-14 09:17:48 -07:00
  • 7acdc93007 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:46 -07:00
  • 374d1ddd82 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:45 -07:00
  • abade7b7a4 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:43 -07:00
  • e5d3be9cc2 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:42 -07:00
  • ce910606f4 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:40 -07:00
  • f6166684ec Branch was auto-updated. pyth0n1c 2022-09-14 09:17:39 -07:00
  • 7008681bce Branch was auto-updated. pyth0n1c 2022-09-14 09:17:37 -07:00
  • fe1d286217 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:36 -07:00
  • 64d3dd2b75 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:34 -07:00
  • 1c586303ff Branch was auto-updated. pyth0n1c 2022-09-14 09:17:31 -07:00
  • 5af60a2412 Branch was auto-updated. pyth0n1c 2022-09-14 09:17:30 -07:00
  • 3002e2e963 Merge pull request #2339 from splunk/TR-2390_Additional_Azure_Detections Bhavin Patel 2022-09-14 11:17:05 -05:00
  • 864ee0cda7 Merge branch 'develop' into TR-2408_rba_search_improvements d1vious 2022-09-14 12:02:34 -04:00
  • 1d4f5c6921 Update windows_gather_victim_identity_sam_info.yml tccontre 2022-09-14 14:43:13 +02:00
  • 71ff090c37 Update windows_process_injection_with_public_source_path.yml tccontre 2022-09-14 14:39:40 +02:00
  • a1023ca839 rename to account takeover patel-bhavin 2022-09-13 19:26:11 -05:00
  • 55a57ddd13 Remnoved extra kwargs from delete api call pyth0n1c 2022-09-13 17:06:05 -07:00
  • 96e81ef195 adding test file updates patel-bhavin 2022-09-13 18:49:00 -05:00
  • e710cc4582 Wrong dataset file specified in the test file for bitsadmin_download_file.test.yml pyth0n1c 2022-09-13 16:41:29 -07:00
  • 10e820d817 search updates patel-bhavin 2022-09-13 18:37:55 -05:00
  • 5f95c424ce Path to wrong data files in creation_of_shadow_copy detection. This caused a CI failure because the proper events were not being replayed. pyth0n1c 2022-09-13 15:48:46 -07:00
  • 3a0fefff73 validationn patel-bhavin 2022-09-13 17:40:20 -05:00
  • 7ae6ec7be1 search updates and datasets patel-bhavin 2022-09-13 17:37:24 -05:00
  • b94575579a Merge branch 'lawsochaos_updates' of github.com:splunk/security_content into lawsochaos_updates patel-bhavin 2022-09-13 17:19:48 -05:00
  • f3f6e9649a Always download the data file when it's linked via a URL pyth0n1c 2022-09-13 14:39:18 -07:00
  • a9395f7aa7 Fixed downloaded file caching behavior and better output file generation. pyth0n1c 2022-09-13 14:12:10 -07:00
  • 97af8730e5 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:09 -07:00
  • 1093237e08 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:08 -07:00
  • a5c171c3e0 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:08 -07:00
  • 5716ce5fb4 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:07 -07:00
  • bf0630e209 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:06 -07:00
  • 480a6e7d1d Branch was auto-updated. pyth0n1c 2022-09-13 13:53:05 -07:00
  • 697e7a9151 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:05 -07:00
  • f3e0313032 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:04 -07:00
  • 806c74e179 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:03 -07:00
  • 4fe7e81c38 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:02 -07:00
  • f8d4b08af5 Branch was auto-updated. pyth0n1c 2022-09-13 13:53:01 -07:00
  • 51ef75aa2d Branch was auto-updated. pyth0n1c 2022-09-13 13:53:00 -07:00
  • cf1e620611 Branch was auto-updated. pyth0n1c 2022-09-13 13:52:59 -07:00
  • 8812d838fa Branch was auto-updated. pyth0n1c 2022-09-13 13:52:59 -07:00
  • 766dee2cfa Branch was auto-updated. pyth0n1c 2022-09-13 13:52:58 -07:00
  • 8ed1be5c93 Branch was auto-updated. pyth0n1c 2022-09-13 13:52:57 -07:00
  • 940598b6c2 pass CI testing d1vious 2022-09-13 16:52:39 -04:00
  • 2c4745b22d Merge branch 'lawsochaos_updates' of github.com:splunk/security_content into lawsochaos_updates patel-bhavin 2022-09-13 15:33:57 -05:00
  • fd475e9625 adding datasets patel-bhavin 2022-09-13 15:33:46 -05:00
  • 4978fdfc07 Some fixes Michael Haag 2022-09-13 12:53:25 -06:00
  • 6f668df817 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:30 -07:00
  • 58daa0c0c2 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:29 -07:00
  • 8f15e2d351 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:28 -07:00
  • 754583e5f5 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:27 -07:00
  • c4f53b7ae4 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:26 -07:00
  • b80ed32428 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:25 -07:00
  • 12599b6566 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:24 -07:00
  • 934844a293 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:23 -07:00
  • 7664fe8dc4 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:22 -07:00
  • 931d198f23 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:21 -07:00
  • 981c9c990f Branch was auto-updated. pyth0n1c 2022-09-13 10:12:20 -07:00
  • 750e250fbb Branch was auto-updated. pyth0n1c 2022-09-13 10:12:18 -07:00
  • d792fcf09d Branch was auto-updated. pyth0n1c 2022-09-13 10:12:17 -07:00
  • 502fa10484 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:14 -07:00
  • 87167f92a5 Branch was auto-updated. pyth0n1c 2022-09-13 10:12:13 -07:00
  • 439e903c3f Branch was auto-updated. pyth0n1c 2022-09-13 10:12:12 -07:00
  • 64908593d4 adds RBA to correlation rule titles d1vious 2022-09-13 13:11:51 -04:00
  • fb15ba799a Update windows_identify_protocol_handlers.yml Michael Haag 2022-09-13 10:48:22 -06:00
  • a2b8a48b86 Merge branch 'develop' into TR-2408_rba_search_improvements Michael Haag 2022-09-13 10:42:16 -06:00
  • 56917d780e 2352 patel-bhavin 2022-09-12 18:21:33 -05:00
  • 486805934f Forgot to include the change that outputs the results file. pyth0n1c 2022-09-12 16:06:15 -07:00
  • 60e8c13ddc Tests are now running successfully and a basic output file is being generating. Still needs lots of smoketesting, but the new workflow is looking good! pyth0n1c 2022-09-12 16:05:30 -07:00
  • 6d1fe61568 Adding _time Lou Stella 2022-09-12 12:29:37 -05:00
  • c3dbdfa3cc updated search from 2343 patel-bhavin 2022-09-12 10:29:00 -05:00
  • 238718f23d updating dataset fields mvelazco 2022-09-12 11:16:39 -04:00
  • 36ffb11950 Update wineventlog_application.yml Michael Haag 2022-09-12 08:53:24 -06:00
  • 7507b45e78 Update windows_event_triggered_image_file_execution_options_injection.yml Michael Haag 2022-09-12 08:44:58 -06:00
  • 00a2a95961 space or tab, we'll never know Michael Haag 2022-09-12 08:18:30 -06:00
  • c3653c1404 test Michael Haag 2022-09-12 07:57:53 -06:00
  • f96267405b Adding Privileged User SID History Detection dluxtron 2022-09-12 21:36:03 +10:00
  • 65e996fffe Adding Privileged User SID History Detection dluxtron 2022-09-12 21:31:24 +10:00
  • c314119341 Adding Privileged User SID History Detection dluxtron 2022-09-12 21:05:45 +10:00
  • d472fbd0d2 Adding Privileged User SID History Detection dluxtron 2022-09-12 20:53:56 +10:00
  • 6a1236f059 Adding Privileged User SID History Detection dluxtron 2022-09-12 20:31:11 +10:00
  • eaa4ab9265 Adding Privileged User SID History Detection dluxtron 2022-09-12 18:27:57 +10:00
  • dba6767016 More progress towards generating the output summary. pyth0n1c 2022-09-11 11:42:02 -07:00
  • 37ce70685e Updates to results collection and output file generation. pyth0n1c 2022-09-10 10:30:11 -07:00
  • ac506cde60 Initial testing workflow looks like it is correct. However, errors during pyth0n1c 2022-09-10 09:10:01 -07:00
  • c46d7e494e Adding Detection for Disabling LSA defences via Reg dluxtron 2022-09-10 15:16:37 +10:00
  • e8e8b89f6c fix reference to attack_data of dict type instead of AttackData type pyth0n1c 2022-09-09 14:54:40 -07:00
  • ad8be14783 Fix how data is fetched and make sure to move on to another test after a failure pyth0n1c 2022-09-09 14:52:38 -07:00
  • 8290981f01 Temporary fix with warning to pathing for a baseline pyth0n1c 2022-09-09 14:35:29 -07:00
  • 5b04f3811e Better organization of objects and resolving a circular import pyth0n1c 2022-09-09 14:31:22 -07:00
  • 7ce4a575f4 Still a lot more changes, especially to how results are returned. Have not tested it running yet. pyth0n1c 2022-09-09 14:20:37 -07:00
  • 3a41a3f057 Update log4shell_cve_2021_44228_exploitation.yml Michael Haag 2022-09-09 13:34:24 -06:00
  • 53c3d4de45 Updates Michael Haag 2022-09-09 13:27:37 -06:00
  • e1a522e4ab Update living_off_the_land.yml Michael Haag 2022-09-09 13:21:57 -06:00
  • 8eef2e3e64 More refactoring of how tests are executed as we move from dicts to objects. Makes changes, maintenance, etc so much easier moving forward. pyth0n1c 2022-09-09 11:15:46 -07:00