admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 1ddbd68f21 adding missing req fields mvelazco 2022-05-02 14:52:18 -04:00
  • a2c4b0fe41 wmiobject mhaag-spl 2022-05-02 12:46:36 -06:00
  • fe1077bbc1 get-adcomputer mhaag-spl 2022-05-02 12:42:12 -06:00
  • 445cce67ca get-aduser mhaag-spl 2022-05-02 12:39:31 -06:00
  • f56aa3bfb9 remote mhaag-spl 2022-05-02 12:36:02 -06:00
  • 544f609428 Update detect_mimikatz_with_powershell_script_block_logging.test.yml mhaag-spl 2022-05-02 12:30:30 -06:00
  • c8358acf36 getdomain getnettcp mhaag-spl 2022-05-02 12:28:17 -06:00
  • d4c24ac55d Merge branch 'mcduck' of github.com:splunk/security_content into mcduck mvelazco 2022-05-02 14:25:28 -04:00
  • c3037dc1b8 minor changes mvelazco 2022-05-02 14:25:25 -04:00
  • 86023bf0b2 Branch was auto-updated. pyth0n1c 2022-05-02 11:14:06 -07:00
  • 3972133ecc Branch was auto-updated. pyth0n1c 2022-05-02 11:14:04 -07:00
  • 7f6ba323ab Branch was auto-updated. pyth0n1c 2022-05-02 11:14:03 -07:00
  • f2baee512f Branch was auto-updated. pyth0n1c 2022-05-02 11:14:01 -07:00
  • 2792f77890 Branch was auto-updated. pyth0n1c 2022-05-02 11:14:00 -07:00
  • 09558752ba Branch was auto-updated. pyth0n1c 2022-05-02 11:13:59 -07:00
  • f9d58a839e Branch was auto-updated. pyth0n1c 2022-05-02 11:13:58 -07:00
  • 4f148bc68d Branch was auto-updated. cyclopsblink_fix pyth0n1c 2022-05-02 11:13:57 -07:00
  • 13d612611a Merge pull request #2183 from splunk/feature/PEX-63-api-version-error Bhavin Patel 2022-05-02 14:13:34 -04:00
  • 489829b2a6 Merge branch 'develop' into cyclopsblink_fix patel-bhavin 2022-05-02 11:06:38 -07:00
  • 6b7c56dcf1 Branch was auto-updated. pyth0n1c 2022-05-02 10:49:16 -07:00
  • 069c078bbb Branch was auto-updated. pyth0n1c 2022-05-02 10:49:15 -07:00
  • cf86995ec8 Branch was auto-updated. pyth0n1c 2022-05-02 10:49:14 -07:00
  • 1e8622f7e1 Branch was auto-updated. pyth0n1c 2022-05-02 10:49:13 -07:00
  • 37a38ca3e1 Branch was auto-updated. feature/PEX-63-api-version-error pyth0n1c 2022-05-02 10:49:13 -07:00
  • a617559700 Branch was auto-updated. pyth0n1c 2022-05-02 10:49:11 -07:00
  • 11bbd18563 Branch was auto-updated. pyth0n1c 2022-05-02 10:49:10 -07:00
  • 5dfa22b482 Branch was auto-updated. pyth0n1c 2022-05-02 10:49:09 -07:00
  • a4c8eb5eb6 Merge pull request #2184 from splunk/dependabot/bundler/docs/nokogiri-1.13.4 Jose Enrique Hernandez 2022-05-02 13:48:47 -04:00
  • b9be566fe8 service mhaag-spl 2022-05-02 11:40:31 -06:00
  • fbc5848fc1 Branch was auto-updated. pyth0n1c 2022-05-02 10:28:20 -07:00
  • 9fae516994 Branch was auto-updated. pyth0n1c 2022-05-02 10:28:19 -07:00
  • 3a1c7918a4 Branch was auto-updated. pyth0n1c 2022-05-02 10:28:18 -07:00
  • f6e19a37d5 Branch was auto-updated. pyth0n1c 2022-05-02 10:28:16 -07:00
  • 48a64e6d1b Branch was auto-updated. pyth0n1c 2022-05-02 10:28:15 -07:00
  • d3c54c4754 Branch was auto-updated. pyth0n1c 2022-05-02 10:28:14 -07:00
  • d71d913cb5 Branch was auto-updated. suspiciously_named_exe pyth0n1c 2022-05-02 10:28:13 -07:00
  • 6ac3d5c42d Branch was auto-updated. Cover-xml-winevents-T1021.002-executable_file_written_in_administrative_smb_share pyth0n1c 2022-05-02 10:28:12 -07:00
  • 09e5710dc3 Branch was auto-updated. pyth0n1c 2022-05-02 10:28:11 -07:00
  • 2a5417b42c Branch was auto-updated. pyth0n1c 2022-05-02 10:28:10 -07:00
  • b2bd03786d Branch was auto-updated. pyth0n1c 2022-05-02 10:28:09 -07:00
  • 4bdda8e22c Merge pull request #2181 from splunk/setting_update_timestamp_default Bhavin Patel 2022-05-02 13:27:47 -04:00
  • eebb13e0b8 Bump nokogiri from 1.13.3 to 1.13.4 in /docs dependabot[bot] 2022-05-02 15:59:59 +00:00
  • 04139d3510 Branch was auto-updated. pyth0n1c 2022-05-02 08:59:39 -07:00
  • 5cff335d88 Branch was auto-updated. pyth0n1c 2022-05-02 08:59:38 -07:00
  • 2af4edaa9a Branch was auto-updated. pyth0n1c 2022-05-02 08:59:37 -07:00
  • 2a88e7463d Branch was auto-updated. pyth0n1c 2022-05-02 08:59:36 -07:00
  • 2e311696a8 Branch was auto-updated. pyth0n1c 2022-05-02 08:59:35 -07:00
  • 396f004aec Branch was auto-updated. pyth0n1c 2022-05-02 08:59:34 -07:00
  • 71822c0f38 Branch was auto-updated. pyth0n1c 2022-05-02 08:59:33 -07:00
  • 2de0788eae Branch was auto-updated. pyth0n1c 2022-05-02 08:59:32 -07:00
  • ffb1bf2e1a Branch was auto-updated. pyth0n1c 2022-05-02 08:59:30 -07:00
  • 92e4622843 Branch was auto-updated. pyth0n1c 2022-05-02 08:59:29 -07:00
  • 03815b6394 Branch was auto-updated. pyth0n1c 2022-05-02 08:59:28 -07:00
  • 77ab281576 Merge pull request #2048 from splunk/dependabot/bundler/docs/nokogiri-1.13.3 Jose Enrique Hernandez 2022-05-02 11:59:03 -04:00
  • 798ad69f41 Merge branch 'develop' into dependabot/bundler/docs/nokogiri-1.13.3 Jose Enrique Hernandez 2022-05-02 11:58:42 -04:00
  • 54ee69397b snipe mhaag-spl 2022-05-02 09:47:56 -06:00
  • 9c080cf54c Updated story Lou Stella 2022-05-02 10:25:04 -05:00
  • a11ca5314d shadow mhaag-spl 2022-05-02 09:15:47 -06:00
  • 8d647c1424 quickie mhaag-spl 2022-05-02 09:02:27 -06:00
  • 80e87b95d9 Dates & Refs Lou Stella 2022-05-02 09:50:39 -05:00
  • d342b02b71 Update exchange_powershell_module_usage.yml mhaag-spl 2022-05-02 06:32:55 -06:00
  • 63b83bfc7a Update exchange_powershell_module_usage.yml mhaag-spl 2022-05-02 06:32:06 -06:00
  • 27bc30da6f Updated detection files with recommended TA list. test_security_content_automation truptilangalia-crest 2022-05-02 11:41:09 +05:50
  • 31149c3e61 More changes to defaults and argument parsing to support offline and cached mode. pyth0n1c 2022-04-29 17:04:57 -07:00
  • f81a103b01 Added the majority of support for offline and cached mode for contentctl. This means that developers can much more rapidly test new builds without waiting on slow API end points \(taking build and validate job from upwards of 10 minutes to a few seconds\). It also means that the tool can be used in completely offline, secure environments that do not mirror the required HTTP endpoints. pyth0n1c 2022-04-29 16:53:20 -07:00
  • b0cc63f715 PEX-63: remove comments Danny Leung 2022-04-29 16:28:07 -07:00
  • 710b582b15 Added an option for all, meaning that all of the transforms \(besides the transform on test files\) will be run. pyth0n1c 2022-04-29 15:58:03 -07:00
  • 3c5a342479 Better support in contentctl and content_changer for updating yml files. The help statement for content_changer in content_ctl now dynamically lists the transforms that can be performed on detections. In addition, a redundant transfrom was removed. pyth0n1c 2022-04-29 15:43:01 -07:00
  • 5b59b4cf50 changedateindes Rod Soto 2022-04-29 15:03:37 -07:00
  • 52c8023678 Added support for enumerating all of the different actions that content_changer can make. This list of actions will be dynamically updated base on the names of the functions added in content_changer.py! pyth0n1c 2022-04-29 13:31:56 -07:00
  • a71f12b921 Merge branch 'TR-1828' of github.com:splunk/security_content into TR-1828 Rod Soto 2022-04-29 10:18:39 -07:00
  • c43dc89bbf detectionsforlocalprivescpathtraversal Rod Soto 2022-04-29 10:17:14 -07:00
  • c61f8670f8 CVE-2021-33845 Lou Stella 2022-04-29 11:31:33 -05:00
  • 1106c798a3 cyclopsblink_fix tccontre 2022-04-29 17:47:59 +02:00
  • 6194e9075d Update linux_iptables_firewall_modification.yml tccontre 2022-04-29 17:40:36 +02:00
  • f93e34f9d5 adding it by default d1vious 2022-04-29 11:17:53 -04:00
  • a1ad406a56 Update linux_iptables_firewall_modification.yml tccontre 2022-04-29 17:10:53 +02:00
  • 0d9944051f Update linux_iptables_firewall_modification.yml tccontre 2022-04-29 17:02:50 +02:00
  • 0785cb279f Update linux_iptables_firewall_modification.yml tccontre 2022-04-29 16:09:09 +02:00
  • 87603878f8 Update linux_kworker_process_in_writable_process_path.test.yml tccontre 2022-04-29 15:39:41 +02:00
  • 8c334270d8 cyclopsblink_fix tccontre 2022-04-29 12:11:29 +02:00
  • 37d0a8b7bd cyclopsblink_fix tccontre 2022-04-29 12:06:55 +02:00
  • 857fe9eddf updating analytics story narrative mvelazco 2022-04-28 18:46:05 -04:00
  • 15bcaa9082 PEX-63: debug Danny Leung 2022-04-28 15:33:46 -07:00
  • bf282e4eeb PEX-63: move version generation into API update job Danny Leung 2022-04-28 15:18:34 -07:00
  • fce3ecbfa6 updating analytic story name mvelazco 2022-04-28 18:10:40 -04:00
  • 2752a930ad PEX-63: add version build dependency before upload Danny Leung 2022-04-28 15:03:43 -07:00
  • a73f7a9077 PEX-63: debug cp s3 Danny Leung 2022-04-28 14:48:02 -07:00
  • 8f5422b7bd PEX-63: test upload version.json s3 Danny Leung 2022-04-28 14:37:07 -07:00
  • 6f2eb6854d PEX-63: move version json to separate job Danny Leung 2022-04-28 14:27:12 -07:00
  • 342adc31a1 PEX-63: debug Danny Leung 2022-04-28 13:13:11 -07:00
  • 8a8581d959 Create krbrelayup.yml mhaag-spl 2022-04-28 09:23:57 -06:00
  • 4afce144f2 krb mhaag-spl 2022-04-28 09:18:03 -06:00
  • 445c217cc5 Update windows_root_domain_linked_policies_discovery.yml tccontre 2022-04-28 15:35:22 +02:00
  • f914fcdf5d Update windows_root_domain_linked_policies_discovery.test.yml tccontre 2022-04-28 15:33:51 +02:00
  • 6730a5bb6d Update windows_root_domain_linked_policies_discovery.test.yml tccontre 2022-04-28 15:09:26 +02:00
  • 78b20f13ea industroyer2_PR3 tccontre 2022-04-28 14:45:29 +02:00
  • c175368af3 industroyer2_PR3 tccontre 2022-04-28 14:25:13 +02:00
  • ec40177bd6 Update windows_root_domain_linked_policies_discovery.test.yml tccontre 2022-04-28 14:00:39 +02:00
  • 6a365a14f6 Update windows_root_domain_linked_policies_discovery.test.yml tccontre 2022-04-28 14:00:08 +02:00