Commit Graph

  • 748e952751 Branch was auto-updated. pyth0n1c 2022-08-23 13:02:38 -07:00
  • 46bd2c51d6 Branch was auto-updated. pyth0n1c 2022-08-23 13:02:36 -07:00
  • 157a434a53 Merge pull request #2335 from yaleman/patch-1 Bhavin Patel 2022-08-23 15:02:11 -05:00
  • 528cb5ff9d Branch was auto-updated. pyth0n1c 2022-08-23 13:01:14 -07:00
  • ddf891514d Branch was auto-updated. pyth0n1c 2022-08-23 13:01:13 -07:00
  • 05c4965c2d Branch was auto-updated. pyth0n1c 2022-08-23 13:01:12 -07:00
  • 2b4945a054 Branch was auto-updated. pyth0n1c 2022-08-23 13:01:11 -07:00
  • 1e407c9b9d Branch was auto-updated. pyth0n1c 2022-08-23 13:01:11 -07:00
  • a66c693ff3 Branch was auto-updated. pyth0n1c 2022-08-23 13:01:09 -07:00
  • 5b62c6c216 Merge pull request #2331 from splunk/removing_strontic Bhavin Patel 2022-08-23 15:00:50 -05:00
  • dfb96af0a9 Branch was auto-updated. pyth0n1c 2022-08-23 12:54:52 -07:00
  • d828ec2c12 Branch was auto-updated. pyth0n1c 2022-08-23 12:54:51 -07:00
  • a623020a0a Branch was auto-updated. pyth0n1c 2022-08-23 12:54:48 -07:00
  • 31d1a8f84c Branch was auto-updated. pyth0n1c 2022-08-23 12:54:47 -07:00
  • d57a68ce76 Branch was auto-updated. pyth0n1c 2022-08-23 12:54:46 -07:00
  • 3998eb96c4 Branch was auto-updated. pyth0n1c 2022-08-23 12:54:45 -07:00
  • d77cb7c0a8 Branch was auto-updated. pyth0n1c 2022-08-23 12:54:44 -07:00
  • 87d09b588a Merge pull request #2329 from splunk/cleaning_docs Bhavin Patel 2022-08-23 14:54:06 -05:00
  • 9427786e60 Branch was auto-updated. pyth0n1c 2022-08-23 12:50:29 -07:00
  • 6ff7080c6e Branch was auto-updated. pyth0n1c 2022-08-23 12:50:02 -07:00
  • 2388e62052 Branch was auto-updated. pyth0n1c 2022-08-23 12:50:00 -07:00
  • 7f5507a4c2 Branch was auto-updated. pyth0n1c 2022-08-23 12:49:59 -07:00
  • 6413bdb41c Branch was auto-updated. pyth0n1c 2022-08-23 12:49:58 -07:00
  • b577dc4ff4 Branch was auto-updated. pyth0n1c 2022-08-23 12:49:56 -07:00
  • 80c9e04de8 Branch was auto-updated. pyth0n1c 2022-08-23 12:49:55 -07:00
  • 97c9905692 Branch was auto-updated. pyth0n1c 2022-08-23 12:49:54 -07:00
  • 58d617267b Branch was auto-updated. pyth0n1c 2022-08-23 12:49:53 -07:00
  • b1fc807d1c Branch was auto-updated. pyth0n1c 2022-08-23 12:49:52 -07:00
  • 5f342c5324 Merge pull request #2324 from splunk/TR-2349_fillnull Bhavin Patel 2022-08-23 14:49:52 -05:00
  • 5527f242d4 Merge pull request #2328 from splunk/updating_url Bhavin Patel 2022-08-23 14:49:31 -05:00
  • 8248278109 Remote Access Software Michael Haag 2022-08-22 21:57:53 -06:00
  • 13d400611a LSA 🐍 SS Michael Haag 2022-08-22 21:16:12 -06:00
  • 95c8b3f07d Branch was auto-updated. pyth0n1c 2022-08-22 14:51:22 -07:00
  • 01b47416e2 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:21 -07:00
  • 4ac73c8614 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:20 -07:00
  • 6d6dd8718d Branch was auto-updated. pyth0n1c 2022-08-22 14:51:19 -07:00
  • ffdc6b72e2 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:18 -07:00
  • a9cdfe3050 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:17 -07:00
  • cfa60f73c5 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:16 -07:00
  • 296d64dce2 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:13 -07:00
  • 82f771dc08 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:12 -07:00
  • 84cd964c0b Branch was auto-updated. pyth0n1c 2022-08-22 14:51:11 -07:00
  • 6332b1c435 Branch was auto-updated. pyth0n1c 2022-08-22 14:51:10 -07:00
  • 1f82c4c215 Merge pull request #2338 from splunk/add_microsoft_cloud_services_ta mvelazco 2022-08-22 17:50:54 -04:00
  • b0c3232991 adding microsoft cloud services ta mvelazco 2022-08-22 17:38:49 -04:00
  • af639ac066 Update windows_dll_search_order_hijacking_hunt_with_sysmon.yml Michael Haag 2022-08-22 14:46:29 -06:00
  • 0a10ef85d6 fixing detection. adding azure_audit macro mvelazco 2022-08-22 15:36:25 -04:00
  • f0b053152e Update hijacklibs.csv pyth0n1c 2022-08-22 12:29:21 -07:00
  • ed2bc99c46 sysmon fix Michael Haag 2022-08-22 10:14:10 -06:00
  • e7102508d9 Removed with: develop from the detection- testing workflows since we need to test a new version of the detection testing code. pyth0n1c 2022-08-19 15:05:40 -07:00
  • 17ba3c3e51 fix Michael Haag 2022-08-19 15:21:15 -06:00
  • 416ddb5fa8 lookup 1 Michael Haag 2022-08-19 14:40:01 -06:00
  • fd88c88762 Hijack Libraries Michael Haag 2022-08-19 14:37:29 -06:00
  • 136cbb1ea8 Add detection for "Azure AD External Guest User Invited" gowthamarajr 2022-08-19 10:39:07 -04:00
  • fae2c64476 adding new detection. other minor changes mvelazco 2022-08-19 00:16:18 -04:00
  • b81b41e137 small fixes mvelazco 2022-08-18 17:46:34 -04:00
  • 38ee247989 Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence mvelazco 2022-08-18 14:50:18 -04:00
  • 7b137ad6b9 adding new detection and fixing a few others mvelazco 2022-08-18 14:50:16 -04:00
  • 75b2daa449 Update msg and ref gowthamarajr 2022-08-18 14:09:25 -04:00
  • d8f41b1c5d update risk sccore gowthamarajr 2022-08-18 11:41:29 -04:00
  • 729574b236 grammar correction in template James Hodgkinson 2022-08-18 13:32:34 +10:00
  • 55c18d0c40 Update "Azure AD Service Principal Created" gowthamarajr 2022-08-17 18:54:10 -04:00
  • da48c720c6 Update "Azure AD Service Principal Created" gowthamarajr 2022-08-17 18:53:22 -04:00
  • 41a7f4380e Add 2 detections gowthamarajr 2022-08-17 18:43:40 -04:00
  • 7174360cee creating analytic story yaml mvelazco 2022-08-17 12:22:16 -04:00
  • 799bdbae5b we do not use it d1vious 2022-08-16 15:45:06 -04:00
  • a2c0c6f415 Branch was auto-updated. pyth0n1c 2022-08-16 12:39:50 -07:00
  • 7648b16649 Branch was auto-updated. pyth0n1c 2022-08-16 12:39:49 -07:00
  • 18a582b786 Branch was auto-updated. pyth0n1c 2022-08-16 12:39:47 -07:00
  • 544a496b62 Branch was auto-updated. pyth0n1c 2022-08-16 12:39:45 -07:00
  • 131da29741 Branch was auto-updated. pyth0n1c 2022-08-16 12:39:44 -07:00
  • 5e76db583b Branch was auto-updated. pyth0n1c 2022-08-16 12:39:43 -07:00
  • bd8ffeeb52 removing playbooks d1vious 2022-08-16 15:29:43 -04:00
  • 1a84238959 updating to develop d1vious 2022-08-16 15:28:59 -04:00
  • 9173c0fdfe Merge branch 'develop' of github.com:splunk/security_content into develop d1vious 2022-08-16 15:27:33 -04:00
  • 7f08b301ab cleaning up CI d1vious 2022-08-16 15:24:07 -04:00
  • 8de4a55800 removing docs d1vious 2022-08-16 15:22:32 -04:00
  • 19f3a3b982 fixing on all places d1vious 2022-08-16 15:01:56 -04:00
  • b6e2ff6278 adding updated url d1vious 2022-08-16 15:01:17 -04:00
  • f936b5bc17 updating docs and package bits [ci skip] research bot 2022-08-16 16:22:49 +00:00
  • 393e7775f1 fixing typo mvelazco 2022-08-16 12:19:07 -04:00
  • b2332df9a0 Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover mvelazco 2022-08-16 12:13:02 -04:00
  • d00a4b2ae6 updating detection yaml mvelazco 2022-08-16 12:13:00 -04:00
  • 13a79e1bd4 Branch was auto-updated. pyth0n1c 2022-08-16 09:07:13 -07:00
  • a1cfe86ee0 Branch was auto-updated. pyth0n1c 2022-08-16 09:07:11 -07:00
  • b91a7b5e96 Branch was auto-updated. pyth0n1c 2022-08-16 09:07:10 -07:00
  • aa28fd67d4 Branch was auto-updated. pyth0n1c 2022-08-16 09:07:08 -07:00
  • 725027acf1 Branch was auto-updated. pyth0n1c 2022-08-16 09:07:07 -07:00
  • 3b730ffb3c Merge pull request #2327 from splunk/dontfailonenrichment v3.47.0 Jose Enrique Hernandez 2022-08-16 12:06:46 -04:00
  • bc331db06c Print error instead of bailing out on enrichment failure Lou Stella 2022-08-16 11:04:24 -05:00
  • 5750799073 Branch was auto-updated. pyth0n1c 2022-08-16 08:41:03 -07:00
  • 6689c7c599 Branch was auto-updated. pyth0n1c 2022-08-16 08:41:02 -07:00
  • d6454c2d3e Branch was auto-updated. pyth0n1c 2022-08-16 08:41:00 -07:00
  • 8a72b522ac Branch was auto-updated. pyth0n1c 2022-08-16 08:40:57 -07:00
  • 7d441871cb Branch was auto-updated. pyth0n1c 2022-08-16 08:40:56 -07:00
  • 8f541978cc Merge pull request #2326 from splunk/splunk_vulz_aug_16th Jose Enrique Hernandez 2022-08-16 11:40:35 -04:00
  • b7e1a5fe94 adding new detections d1vious 2022-08-16 11:30:24 -04:00
  • d99dd1ac71 Update requirements.txt pyth0n1c 2022-08-15 16:30:17 -07:00
  • 6759feccd4 Add Azure AD Multi-Factor Authentication Disabled gowthamarajr 2022-08-15 17:22:54 -04:00
  • ff2b154f5f Branch was auto-updated. pyth0n1c 2022-08-12 13:36:01 -07:00