admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 346c21cdfc Branch was auto-updated. pyth0n1c 2022-05-31 10:07:38 -07:00
  • e6903a13c5 Merge pull request #2221 from splunk/adding_rba_note_research_site Jose Enrique Hernandez 2022-05-31 13:07:17 -04:00
  • c7ad4a013b Updating DM enum Lou Stella 2022-05-31 10:58:08 -05:00
  • 96a391dbc9 Updating DM Lou Stella 2022-05-31 10:38:13 -05:00
  • ce00e2414e fixing testing redux d1vious 2022-05-31 11:11:40 -04:00
  • baac782e94 updating tests d1vious 2022-05-31 10:14:24 -04:00
  • 5d3b302888 Update windows_drivers.yml mhaag-spl 2022-05-31 07:43:57 -06:00
  • 2af6559583 computer hard mhaag-spl 2022-05-31 07:32:49 -06:00
  • 3a1ad123bd url mhaag-spl 2022-05-31 07:23:11 -06:00
  • 87a9aea4dd Complete Follina mhaag-spl 2022-05-31 07:16:05 -06:00
  • 3aa7679d7b Update windows_command_and_scripting_interpreter_path_traversal_exec.yml tccontre 2022-05-31 15:08:39 +02:00
  • f16de553cc fix issue 2215 P4T12ICK 2022-05-31 11:04:09 +02:00
  • d0431af517 path_traversal tccontre 2022-05-30 15:51:13 +02:00
  • 7153bf7b80 path_traversal tccontre 2022-05-30 15:44:52 +02:00
  • bc46202f26 Create windows_execute_commands_with_msdt.yml mhaag-spl 2022-05-30 07:09:33 -06:00
  • 0df4a18e94 Update windows_office_product_spawning_msdt.yml mhaag-spl 2022-05-30 06:59:14 -06:00
  • c5df761c42 Falling for Follina mhaag-spl 2022-05-30 06:49:55 -06:00
  • 917d4e0dca just removing bolding d1vious 2022-05-27 20:36:32 -04:00
  • 2514983361 adding a note about how the score is calculated d1vious 2022-05-27 20:33:28 -04:00
  • ecc896bd11 Forgot to include updates to the the valdiate_args file as well. 20220527_update_apps pyth0n1c 2022-05-27 14:56:02 -07:00
  • 1e83599449 Update apps to latest version pyth0n1c 2022-05-27 14:40:56 -07:00
  • 80ea83fe6b Branch was auto-updated. pyth0n1c 2022-05-27 14:38:40 -07:00
  • 7dbbd16219 Branch was auto-updated. pyth0n1c 2022-05-27 14:38:39 -07:00
  • bc4e55c32a Revert "Updated the following apps:" pyth0n1c 2022-05-27 14:38:09 -07:00
  • 529faf008b adding files from PR 2194 patel-bhavin 2022-05-27 14:35:43 -07:00
  • 2e817b7947 Branch was auto-updated. pyth0n1c 2022-05-27 14:33:50 -07:00
  • 5cbd80e60c Branch was auto-updated. pyth0n1c 2022-05-27 14:33:46 -07:00
  • 0c74525449 Updated the following apps: Splunk Add on for Microsoft Windows Splunk Add on for Unix and Linux Splunk Stream Splunk Stream Knowledge Objects for Wire Data Splunk Stream Add On Splunk Add on for Microsoft Office 365 Splunk Common Information Model pyth0n1c 2022-05-27 14:33:29 -07:00
  • ce599810c6 confidence mhaag-spl 2022-05-27 15:00:35 -06:00
  • 926e63649a delete usage mhaag-spl 2022-05-27 14:41:34 -06:00
  • 177a9736d3 Update splunk_command_and_scripting_interpreter_risky_commands.yml mhaag-spl 2022-05-27 14:25:20 -06:00
  • f479ee5d1e Branch was auto-updated. pyth0n1c 2022-05-27 06:26:37 -07:00
  • caae8db8a9 Branch was auto-updated. pyth0n1c 2022-05-27 06:26:36 -07:00
  • 53aaa2d59c Merge pull request #2219 from splunk/issue_2216 P4T12ICK 2022-05-27 15:26:15 +02:00
  • a8f27bd7e5 Branch was auto-updated. pyth0n1c 2022-05-26 16:15:50 -07:00
  • dda96a5a44 Branch was auto-updated. pyth0n1c 2022-05-26 16:15:49 -07:00
  • d888de43fe Branch was auto-updated. pyth0n1c 2022-05-26 16:15:48 -07:00
  • f1deda1a93 Merge pull request #2217 from splunk/updating_coverage.csv Bhavin Patel 2022-05-26 16:15:26 -07:00
  • c87f34fafa minor url fix patel-bhavin 2022-05-26 16:06:56 -07:00
  • c54d4b2bb8 Branch was auto-updated. pyth0n1c 2022-05-26 14:30:05 -07:00
  • 38d961ccf1 Branch was auto-updated. pyth0n1c 2022-05-26 14:30:01 -07:00
  • 8415a1c307 Branch was auto-updated. pyth0n1c 2022-05-26 14:29:59 -07:00
  • 51a7c5511a Merge pull request #2218 from splunk/mitre_id_change_bug Bhavin Patel 2022-05-26 14:29:39 -07:00
  • 236edce7e1 updating mitre ids and other metadata patel-bhavin 2022-05-26 13:39:49 -07:00
  • 9ba04288e3 reporting on contentctl is not generating this d1vious 2022-05-26 16:01:56 -04:00
  • 06a98431f7 Merge branch 'vj9r' of https://github.com/splunk/security_content into vj9r mhaag-spl 2022-05-26 12:28:24 -06:00
  • 6ddebf3a2d ssl tls ver mhaag-spl 2022-05-26 12:28:21 -06:00
  • e6dcc82562 Updating tactic Lou Stella 2022-05-26 12:52:42 -05:00
  • bd0720f093 Merge branch 'vj9r' of https://github.com/splunk/security_content into vj9r Lou Stella 2022-05-26 12:46:42 -05:00
  • d807ca429a Updating MITRE ATT&CK Lou Stella 2022-05-26 12:46:34 -05:00
  • fb25e4def0 Splunk Command and Scripting Interpreter Risky Commands mhaag-spl 2022-05-26 11:38:35 -06:00
  • 21d5a68dd9 Splunk Command and Scripting Interpreter Risky Commands mhaag-spl 2022-05-26 11:28:08 -06:00
  • 7d2a728085 anomaly for non TLS forwarders Lou Stella 2022-05-26 12:21:20 -05:00
  • d43d0ce270 killchain Rod Soto 2022-05-26 10:18:53 -07:00
  • 2a9d78d7fd fixedimpact Rod Soto 2022-05-26 10:16:31 -07:00
  • a1e472d68d MMerge branch 'vj9r' of github.com:splunk/security_content into vj9r yup# Please enter a commit message to explain why this merge is necessary, Rod Soto 2022-05-26 10:08:45 -07:00
  • d0e6ef17ce fixedmacros Rod Soto 2022-05-26 10:08:38 -07:00
  • 7b1fb93a7e Merge branch 'vj9r' of https://github.com/splunk/security_content into vj9r Lou Stella 2022-05-26 12:05:16 -05:00
  • 234be83ef1 Updated observable Lou Stella 2022-05-26 12:05:14 -05:00
  • 4b7bfb516a terge branch 'vj9r' of github.com:splunk/security_content into vj9r Rod Soto 2022-05-26 10:00:24 -07:00
  • 522e569ced splkselfsigneddetection Rod Soto 2022-05-26 09:58:07 -07:00
  • 76f9fe7bbd Updated validation issues Lou Stella 2022-05-26 11:55:26 -05:00
  • ef9c0ab696 Updated references Lou Stella 2022-05-26 11:40:47 -05:00
  • 92037c5992 deployment server Lou Stella 2022-05-26 11:39:00 -05:00
  • 44a1886061 Missing field Lou Stella 2022-05-26 10:32:49 -05:00
  • a766811c56 0602 hunt Lou Stella 2022-05-26 10:32:09 -05:00
  • 39ee01a256 datasetx Rod Soto 2022-05-26 08:04:57 -07:00
  • 3f8d20e7b8 macrofix Rod Soto 2022-05-26 07:54:23 -07:00
  • 89ee09b0f0 fixedmacros Rod Soto 2022-05-26 07:50:10 -07:00
  • f29d6f9920 renamedsearch Rod Soto 2022-05-26 07:44:46 -07:00
  • b9d79c5ab1 changednameofdetection Rod Soto 2022-05-26 07:25:17 -07:00
  • 7bd8441806 Adding test, random data since irrelevant to detection Lou Stella 2022-05-25 13:55:43 -05:00
  • ef54563755 Adding detection Lou Stella 2022-05-25 13:54:26 -05:00
  • b51c088513 Fixing typo Lou Stella 2022-05-25 10:55:42 -05:00
  • 6ee7163421 Hostname Rod Soto 2022-05-24 17:40:12 -07:00
  • 16641935e0 fixanotherytpo Rod Soto 2022-05-24 17:37:39 -07:00
  • 5680afbce7 fixtype Rod Soto 2022-05-24 17:35:46 -07:00
  • 99d314eeea initialsearchskeleton Rod Soto 2022-05-24 17:29:15 -07:00
  • 4162e9b5eb Filter was missing any and all detections which started with s and a. Fixed it, and fixed the order of these detections. Now it should be easier to pre-merge changes from develop. pyth0n1c 2022-05-24 15:00:09 -07:00
  • a802fecce8 initialdraftc Rod Soto 2022-05-24 14:01:02 -07:00
  • 9d1e62c7d0 initialdraftb Rod Soto 2022-05-24 13:55:47 -07:00
  • 352ac64d51 initialdrafta Rod Soto 2022-05-24 13:12:46 -07:00
  • 872fa44741 initialdraft Rod Soto 2022-05-24 13:04:12 -07:00
  • 27bb4a28fc Fixed the ordering of all detections. This tool previously messed up that order... pyth0n1c 2022-05-24 13:01:09 -07:00
  • cd6f4c66de More cleanup... pyth0n1c 2022-05-23 17:00:20 -07:00
  • f771ad3a5f More restructuring and cleanup of the cleaner code - refactoring larger blocks of code into smaller, simplet functions. pyth0n1c 2022-05-23 16:50:13 -07:00
  • bd3ef0e51b Removed unused imports. pyth0n1c 2022-05-23 16:20:45 -07:00
  • bd90976ef2 Removed huge chunk of dead, unused code. pyth0n1c 2022-05-23 16:20:05 -07:00
  • e386a690d2 Updated the returns of some function so that if a function is not successful, it returns an empty dict instead of a modified dict representing the detection. Second, updated the text printed out in some errors. pyth0n1c 2022-05-23 16:17:43 -07:00
  • b02b9f096c Added the update functionality. About to perform some testing... pyth0n1c 2022-05-23 15:09:23 -07:00
  • dd1003cc04 Fixing and improving support for updating the datamodel field of the detection. pyth0n1c 2022-05-23 14:54:01 -07:00
  • baea913254 updating docs and package bits [ci skip] research bot 2022-05-23 20:49:38 +00:00
  • d782e5cf0c Branch was auto-updated. pyth0n1c 2022-05-23 15:41:13 -04:00
  • beda0c6f07 Merge pull request #2206 from splunk/vmware v3.40.0 Bhavin Patel 2022-05-23 12:40:54 -07:00
  • fbc95f83cd Branch was auto-updated. pyth0n1c 2022-05-23 15:19:32 -04:00
  • 0590a935ea Branch was auto-updated. pyth0n1c 2022-05-23 15:19:31 -04:00
  • e34eb4587a Merge pull request #2210 from splunk/tasktasky Bhavin Patel 2022-05-23 12:19:11 -07:00
  • 485196fff8 text update for validaation patel-bhavin 2022-05-23 12:03:23 -07:00
  • db732d9a4c text update patel-bhavin 2022-05-23 12:01:50 -07:00
  • 050ec416b8 Update schtasks_scheduling_job_on_remote_system.yml mhaag-spl 2022-05-23 13:01:45 -06:00