admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e8abbd916b Added missing _internal custom_indexes to relevant test files. Removed the | character from searches that use index and sourcetype macros at the beginning of the search. pyth0n1c 2022-06-08 11:08:21 -07:00
  • 3fb342d4c4 Fixed improperly named macro. Renamed the macro in the tests that use that macro. Added the optional field, "custom_index" to the test files which MUST upload data into the _audit index. This branch doesn't support custom_index yet, but those changes will be merged soon from another branch. pyth0n1c 2022-06-08 10:31:53 -07:00
  • 7c2047e2cf Unbalanced quote - fixed pyth0n1c 2022-06-07 13:05:05 -07:00
  • 9191057b1b Changed to use a special host field to denote the source of all the data sets that we upload. This means that we don't need hacks to get around waiting for all of the data to finish indexing. pyth0n1c 2022-06-07 12:55:54 -07:00
  • d8c3d523b5 touchup Michael Haag 2022-06-07 07:10:27 -06:00
  • bc57962c0c more-defense-evasion tccontre 2022-06-07 13:13:02 +02:00
  • 7c2dd368cd more-defense-evasion tccontre 2022-06-07 12:53:31 +02:00
  • 066ac9ffb3 more-defense-evasion tccontre 2022-06-07 11:50:27 +02:00
  • aca19c102b Forgot to include return type from function pyth0n1c 2022-06-06 17:15:08 -07:00
  • 8212e22bcb Forgot to include a break on the forced timeout pyth0n1c 2022-06-06 17:03:59 -07:00
  • 7a18850877 Forcing a timeout... certain indexes may continue growing and never have the same number of events! pyth0n1c 2022-06-06 16:53:15 -07:00
  • d3da287905 Added support for specifying a custom index to delete after a test in each attack_data dataset in the test file. It is important to have this level of control (per-dataset), not just per test or per-file! pyth0n1c 2022-06-06 16:08:06 -07:00
  • e7c8d2c1f8 Merge branch 'bugfix/PEX-76-sse-api-fix' of github.com:splunk/security_content into bugfix/PEX-76-sse-api-fix Danny Leung 2022-06-06 15:01:49 -07:00
  • 84420a1912 PEX-76: fix the detections obj to include the J2 docs fields Danny Leung 2022-06-06 15:01:26 -07:00
  • 0fc379cbb3 updating docs and package bits [ci skip] research bot 2022-06-06 21:13:55 +00:00
  • 81882aafc6 Branch was auto-updated. pyth0n1c 2022-06-06 13:30:44 -07:00
  • 1ac4d22e6c Branch was auto-updated. pyth0n1c 2022-06-06 13:30:42 -07:00
  • 3b49e995b7 Branch was auto-updated. pyth0n1c 2022-06-06 13:30:41 -07:00
  • ba59c5716e Branch was auto-updated. pyth0n1c 2022-06-06 13:30:40 -07:00
  • 15082f2c8a Merge pull request #2239 from splunk/user_enum_fix v3.42.0 Lou Stella 2022-06-06 15:30:20 -05:00
  • 829bf8f02f Branch was auto-updated. pyth0n1c 2022-06-06 13:09:33 -07:00
  • dcf906f1ba Branch was auto-updated. pyth0n1c 2022-06-06 13:09:32 -07:00
  • b92eaaefb3 Branch was auto-updated. pyth0n1c 2022-06-06 13:09:31 -07:00
  • e510f31628 Branch was auto-updated. pyth0n1c 2022-06-06 13:09:29 -07:00
  • c2e2ed3f26 Branch was auto-updated. pyth0n1c 2022-06-06 13:09:27 -07:00
  • 17846cfafe Merge pull request #2238 from splunk/atlas Bhavin Patel 2022-06-06 13:09:06 -07:00
  • 607b7a1e37 Updated macro to not rely on field extraction Lou Stella 2022-06-06 14:55:56 -05:00
  • 6b84ec3bf3 Update confluence_unauthenticated_remote_code_execution_cve_2022_26134.yml Bhavin Patel 2022-06-06 12:48:32 -07:00
  • e28a396af4 cve fix2 mhaag-spl 2022-06-06 11:46:49 -06:00
  • 9f2943793d fixed cve number Michael Haag 2022-06-06 11:45:12 -06:00
  • 518251e8c8 PEX-76: add back the detection_names obj Danny Leung 2022-06-06 09:51:16 -07:00
  • 6d56a43435 Update confluence_unauthenticated_remote_code_execution_cve_2022_26314.yml mhaag-spl 2022-06-06 07:46:17 -06:00
  • 3891cbcd0f Update confluence_unauthenticated_remote_code_execution_cve_2022_26314.yml mhaag-spl 2022-06-04 16:56:27 -06:00
  • 05cd8a648d Update java_writing_jsp_file.yml mhaag-spl 2022-06-03 21:35:48 -06:00
  • a28de38199 tags mhaag-spl 2022-06-03 21:34:38 -06:00
  • 5b46edc201 Fluent in Confluence mhaag-spl 2022-06-03 21:29:00 -06:00
  • d90688997d Merge branch 'develop' into bugfix/PEX-76-sse-api-fix Danny Leung 2022-06-03 09:23:01 -07:00
  • a711a30878 Branch was auto-updated. pyth0n1c 2022-06-03 08:19:04 -07:00
  • dc5600373a Branch was auto-updated. pyth0n1c 2022-06-03 08:19:03 -07:00
  • 46e4e0840c Branch was auto-updated. pyth0n1c 2022-06-03 08:19:02 -07:00
  • 6fbbd8e1df Merge pull request #2236 from splunk/detection-fix-due-to-splunk-time mvelazco 2022-06-03 11:18:35 -04:00
  • ad992a4d88 Update excessive_usage_of_nslookup_app.yml tccontre 2022-06-03 16:33:18 +02:00
  • 136a3a1b92 detection-fix-due-to-splunk-time tccontre 2022-06-03 16:30:32 +02:00
  • 6dddbfaee8 detection-fix-due-to-splunk-time tccontre 2022-06-03 12:55:23 +02:00
  • c247d2cdd4 PEX-76: remove detection_names; modify detections to only contain name attribute Danny Leung 2022-06-02 21:03:36 -07:00
  • 61e827c41e added - to CVE Rod Soto 2022-06-01 17:38:28 -07:00
  • 9b6cd6a022 added tags Rod Soto 2022-06-01 17:31:53 -07:00
  • ae4dc00392 tags added Rod Soto 2022-06-01 17:21:54 -07:00
  • d5a1d0010e added cis tags Rod Soto 2022-06-01 17:19:38 -07:00
  • 01b2ce4ca2 Branch was auto-updated. pyth0n1c 2022-06-01 15:31:23 -07:00
  • 7e38f0da5f Branch was auto-updated. pyth0n1c 2022-06-01 15:31:22 -07:00
  • 297158ee20 Branch was auto-updated. pyth0n1c 2022-06-01 15:31:22 -07:00
  • 5a4606c746 Merge pull request #2225 from splunk/follina_path_traversal_update Michael Haag 2022-06-01 16:31:03 -06:00
  • f6dda32dd2 Update windows_command_and_scripting_interpreter_hunting_path_traversal.yml Michael Haag 2022-06-01 15:38:29 -06:00
  • 83e6b28f02 Branch was auto-updated. pyth0n1c 2022-06-01 14:34:32 -07:00
  • 36d4b64b9e Branch was auto-updated. pyth0n1c 2022-06-01 14:34:30 -07:00
  • 25d4adee28 Branch was auto-updated. pyth0n1c 2022-06-01 14:34:27 -07:00
  • 8d061726a9 Branch was auto-updated. pyth0n1c 2022-06-01 14:34:26 -07:00
  • cf78c7db84 Merge pull request #2227 from splunk/fellows Bhavin Patel 2022-06-01 14:34:05 -07:00
  • 58cb36ab2c Update windows_command_and_scripting_interpreter_hunting_path_traversal.yml Michael Haag 2022-06-01 15:21:08 -06:00
  • 11ab1d104b text Michael Haag 2022-06-01 15:20:15 -06:00
  • 97d51b71bf adding cves d1vious 2022-06-01 17:03:00 -04:00
  • 936f371e63 Branch was auto-updated. pyth0n1c 2022-06-01 13:10:08 -07:00
  • 7091af0864 Branch was auto-updated. pyth0n1c 2022-06-01 13:10:07 -07:00
  • b19550f6c0 Branch was auto-updated. pyth0n1c 2022-06-01 13:10:06 -07:00
  • 70d62d683f Branch was auto-updated. pyth0n1c 2022-06-01 13:10:05 -07:00
  • 32ac7731b4 Branch was auto-updated. pyth0n1c 2022-06-01 13:10:04 -07:00
  • 5eb91f7deb Merge pull request #2229 from splunk/sysmon_unload mvelazco 2022-06-01 16:09:42 -04:00
  • 779ecc5847 typo patel-bhavin 2022-06-01 12:37:43 -07:00
  • f4237cac86 updating datasets after sim patel-bhavin 2022-06-01 12:34:48 -07:00
  • 7686814bc7 fixing wrong field name mvelazco 2022-06-01 14:18:11 -04:00
  • f79d1ddb23 fixing wrong field name mvelazco 2022-06-01 14:07:23 -04:00
  • c60117fb6b fixing broken detection to avoid using non-existing fields mvelazco 2022-06-01 13:45:16 -04:00
  • f4cd60d8b5 fixing wrong field name mvelazco 2022-06-01 13:40:06 -04:00
  • 95fd4d85d0 Update windows_execute_arbitrary_commands_with_msdt.yml mhaag-spl 2022-06-01 11:31:30 -06:00
  • e3b816088b fixing issues with detection mvelazco 2022-06-01 13:30:32 -04:00
  • 9941b8009d fixing issue with printservice macro mvelazco 2022-06-01 13:13:24 -04:00
  • f05d4e2df9 Update windows_execute_arbitrary_commands_with_msdt.yml mhaag-spl 2022-06-01 08:36:13 -06:00
  • da7c18f234 Update windows_command_and_scripting_interpreter_hunting_path_traversal.yml tccontre 2022-06-01 16:28:03 +02:00
  • 223f4b73ba follina_path_traversal_update tccontre 2022-06-01 16:14:46 +02:00
  • e6a9d082b0 follina_path_traversal_update tccontre 2022-06-01 09:48:17 +02:00
  • aa490411d4 updating docs and package bits [ci skip] research bot 2022-05-31 18:14:42 +00:00
  • b71442549e Branch was auto-updated. pyth0n1c 2022-05-31 10:38:24 -07:00
  • b22699be1b Branch was auto-updated. pyth0n1c 2022-05-31 10:38:22 -07:00
  • 9fe8a091d5 Merge pull request #2222 from splunk/follina v3.41.0 Bhavin Patel 2022-05-31 10:38:01 -07:00
  • 588c301d84 Branch was auto-updated. pyth0n1c 2022-05-31 10:32:07 -07:00
  • 3a6182a9b4 Branch was auto-updated. pyth0n1c 2022-05-31 10:32:06 -07:00
  • 28e97d1639 Branch was auto-updated. pyth0n1c 2022-05-31 10:32:04 -07:00
  • b8583ba28b Merge pull request #2223 from splunk/path_traversal Bhavin Patel 2022-05-31 10:31:44 -07:00
  • 15c16fe736 Branch was auto-updated. pyth0n1c 2022-05-31 10:27:37 -07:00
  • f04e870bab Branch was auto-updated. pyth0n1c 2022-05-31 10:27:35 -07:00
  • 6c252a41fd Branch was auto-updated. pyth0n1c 2022-05-31 10:27:35 -07:00
  • 20fd18c46c Branch was auto-updated. pyth0n1c 2022-05-31 10:27:34 -07:00
  • 22905c89c0 Merge pull request #2224 from splunk/fix_issue_2215 Jose Enrique Hernandez 2022-05-31 13:27:10 -04:00
  • 376d1f2943 filter note Michael Haag 2022-05-31 11:12:24 -06:00
  • b1c1c43a01 Update windows_command_and_scripting_interpreter_path_traversal_exec.yml Bhavin Patel 2022-05-31 10:10:07 -07:00
  • 5e721eb933 Branch was auto-updated. pyth0n1c 2022-05-31 10:07:45 -07:00
  • 1a320af983 Branch was auto-updated. pyth0n1c 2022-05-31 10:07:41 -07:00
  • 30faa736ff Branch was auto-updated. pyth0n1c 2022-05-31 10:07:40 -07:00
  • fb17277a1e Branch was auto-updated. pyth0n1c 2022-05-31 10:07:39 -07:00