admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7f5040e09b Branch was auto-updated. pyth0n1c 2022-04-14 13:55:51 -07:00
  • d8e5dc9b18 Branch was auto-updated. pyth0n1c 2022-04-14 13:55:50 -07:00
  • ef82f84e6e Branch was auto-updated. pyth0n1c 2022-04-14 13:55:49 -07:00
  • a99614452e Branch was auto-updated. pyth0n1c 2022-04-14 13:55:48 -07:00
  • 5d8d3c0613 Branch was auto-updated. pyth0n1c 2022-04-14 13:55:46 -07:00
  • e00c2eddc4 Merge pull request #2172 from splunk/moving_tcp_command_and_scripting_interpreter_outbound_ldap_traffic v3.38.1 Jose Enrique Hernandez 2022-04-14 16:55:25 -04:00
  • fdcd471d5d moving to experimental d1vious 2022-04-14 16:37:54 -04:00
  • 3cdd79a0dd Branch was auto-updated. pyth0n1c 2022-04-14 13:34:35 -07:00
  • 1e9129f44d Branch was auto-updated. pyth0n1c 2022-04-14 13:34:33 -07:00
  • 91ea06330b Branch was auto-updated. pyth0n1c 2022-04-14 13:34:32 -07:00
  • 862b131431 Branch was auto-updated. pyth0n1c 2022-04-14 13:34:32 -07:00
  • 0db3733598 Branch was auto-updated. pyth0n1c 2022-04-14 13:34:31 -07:00
  • ec3352beb0 Branch was auto-updated. pyth0n1c 2022-04-14 13:34:30 -07:00
  • 652920f18f Merge pull request #2170 from splunk/fishsticks Lou Stella 2022-04-14 15:34:11 -05:00
  • 327042ede5 Merge branch 'fishsticks' of https://github.com/splunk/security_content into fishsticks mhaag-spl 2022-04-14 14:13:26 -06:00
  • b356157dc0 Update ssa___windows_rundll32_comsvcs_memory_dump.yml mhaag-spl 2022-04-14 14:13:22 -06:00
  • a5f9b7938c Branch was auto-updated. pyth0n1c 2022-04-14 13:09:58 -07:00
  • cc66470680 Branch was auto-updated. pyth0n1c 2022-04-14 13:09:57 -07:00
  • 9f80fd245d Branch was auto-updated. pyth0n1c 2022-04-14 13:09:56 -07:00
  • 506f9b2def Branch was auto-updated. pyth0n1c 2022-04-14 13:09:55 -07:00
  • 00e3c44d64 Branch was auto-updated. pyth0n1c 2022-04-14 13:09:54 -07:00
  • ef83f1ed8f Branch was auto-updated. pyth0n1c 2022-04-14 13:09:52 -07:00
  • 9ff0da4725 Branch was auto-updated. pyth0n1c 2022-04-14 13:09:51 -07:00
  • ccffa29e3f Merge pull request #2171 from splunk/ssa_mshta_fix Michael Haag 2022-04-14 14:09:32 -06:00
  • 79ee477a19 comsvcs mhaag-spl 2022-04-14 14:04:13 -06:00
  • 71ad17def8 Modified 'required fields' Lou Stella 2022-04-14 14:43:30 -05:00
  • b75f8ed6aa Modifying field name Lou Stella 2022-04-14 14:40:38 -05:00
  • c3e7e4c850 Update ssa___windows_lolbin_binary_in_non_standard_path.yml mhaag-spl 2022-04-14 13:40:01 -06:00
  • be60ac00b4 Revert "Update ssa___windows_lolbin_binary_in_non_standard_path.yml" mhaag-spl 2022-04-14 13:39:00 -06:00
  • 81e57c3591 Modified Regex Lou Stella 2022-04-14 14:37:01 -05:00
  • b25fc779c3 Update ssa___windows_lolbin_binary_in_non_standard_path.yml mhaag-spl 2022-04-14 13:20:46 -06:00
  • 876071e45d fixed some small issues P4T12ICK 2022-04-14 12:24:13 +02:00
  • 3ad0e714fc push for Jud Lou Stella 2022-04-13 19:46:49 -05:00
  • 4b8c9f4281 Cover xml winevents, coalesce all disparate fields Michael Radka 2022-04-13 20:43:41 -04:00
  • 688a8f9a88 Cover xml winevents, add macros to the end Michael Radka 2022-04-13 18:00:00 -04:00
  • 11d6905b01 Cover xml winevents Michael Radka 2022-04-13 17:44:41 -04:00
  • 558d47a35d Branch was auto-updated. pyth0n1c 2022-04-13 05:29:58 -07:00
  • 1ffe4b10bf Branch was auto-updated. pyth0n1c 2022-04-13 05:29:57 -07:00
  • 54b48d65e0 Branch was auto-updated. pyth0n1c 2022-04-13 05:29:56 -07:00
  • c19a3744db Branch was auto-updated. pyth0n1c 2022-04-13 05:29:55 -07:00
  • 36d3bef8f8 Branch was auto-updated. pyth0n1c 2022-04-13 05:29:54 -07:00
  • cb363eb47a Merge pull request #2162 from splunk/acidrain tccontre 2022-04-13 14:29:32 +02:00
  • ce0f0852dd acidrain tccontre 2022-04-13 10:07:22 +02:00
  • a7bf512c15 acidrain tccontre 2022-04-13 09:34:11 +02:00
  • 5b01b8510b Merge branch 'TR-1735' of github.com:splunk/security_content into TR-1735 patel-bhavin 2022-04-12 17:40:23 -07:00
  • e171e3c6ea test updates patel-bhavin 2022-04-12 17:40:11 -07:00
  • ff32813382 Updates to validate datasets listed in test and detection files more cleanly. pyth0n1c 2022-04-12 16:10:59 -07:00
  • e6ec07a3ef Branch was auto-updated. pyth0n1c 2022-04-12 15:44:06 -07:00
  • 05e763398f Branch was auto-updated. pyth0n1c 2022-04-12 15:44:05 -07:00
  • 3ea30ac52f Branch was auto-updated. pyth0n1c 2022-04-12 15:44:04 -07:00
  • eff652293c Branch was auto-updated. pyth0n1c 2022-04-12 15:44:03 -07:00
  • 0c7293e114 Branch was auto-updated. pyth0n1c 2022-04-12 15:44:02 -07:00
  • fbcf4d97f9 Branch was auto-updated. pyth0n1c 2022-04-12 15:44:01 -07:00
  • e5a5b99f39 Merge pull request #2165 from splunk/bug_with_borked_links Jose Enrique Hernandez 2022-04-12 18:43:42 -04:00
  • 242449d59d Merge branch 'develop' into bug_with_borked_links d1vious 2022-04-12 18:43:20 -04:00
  • cab258e211 Update windows_registry_certificate_added.yml mhaag-spl 2022-04-12 15:29:20 -06:00
  • 90ca4186ed fixing minor linking bug d1vious 2022-04-12 17:12:25 -04:00
  • c0ec004980 Updated the tool to include argparse and added the base datamodel in CIM v5.0.1 pyth0n1c 2022-04-12 13:17:47 -07:00
  • ce62d1b326 Update doc_detections.j2 bug_with_broken_links Jose Enrique Hernandez 2022-04-12 16:13:06 -04:00
  • d6983689eb Branch was auto-updated. pyth0n1c 2022-04-12 11:29:18 -07:00
  • 790b753e70 Branch was auto-updated. pyth0n1c 2022-04-12 11:29:17 -07:00
  • a0b79754bc Branch was auto-updated. pyth0n1c 2022-04-12 11:29:16 -07:00
  • adfe9b6cc7 Branch was auto-updated. pyth0n1c 2022-04-12 11:29:15 -07:00
  • 03e2cf0b91 Branch was auto-updated. pyth0n1c 2022-04-12 11:29:14 -07:00
  • ec3aefad5c Branch was auto-updated. pyth0n1c 2022-04-12 11:29:10 -07:00
  • 1cc6ed2697 Merge pull request #2163 from splunk/ssa_mshta_fix Jose Enrique Hernandez 2022-04-12 14:28:48 -04:00
  • ec66e01b78 Fixed formatting Lou Stella 2022-04-12 13:11:57 -05:00
  • c199bcb06d re added macros since the search failed. demo_skeleton_branch pyth0n1c 2022-04-12 11:06:02 -07:00
  • 8d8998d243 adding nes to detection object patel-bhavin 2022-04-12 11:03:52 -07:00
  • c939cfb385 Added a single detection back that we will test. pyth0n1c 2022-04-12 10:54:31 -07:00
  • 891d2d293b First cut at removing all of the content that the security_content team has generated. pyth0n1c 2022-04-12 10:37:04 -07:00
  • da5eb1be3a Updated logic & fixed pathing Lou Stella 2022-04-12 12:01:48 -05:00
  • 63968601d2 parentheses to separate logic Lou Stella 2022-04-12 11:40:08 -05:00
  • 7c95560d2d Update linux_high_frequency_of_file_deletion_in_etc_folder.yml tccontre 2022-04-12 14:36:01 +02:00
  • 5c248ae716 Merge branch 'acidrain' of github.com:splunk/security_content into acidrain tccontre 2022-04-12 14:34:52 +02:00
  • 28d98d1af4 acidrain tccontre 2022-04-12 14:34:36 +02:00
  • 2102a39729 Branch was auto-updated. pyth0n1c 2022-04-12 04:13:51 -07:00
  • d2039d97f0 Branch was auto-updated. pyth0n1c 2022-04-12 04:13:50 -07:00
  • 4a9f25cd2c Branch was auto-updated. pyth0n1c 2022-04-12 04:13:49 -07:00
  • b236edabf7 Branch was auto-updated. pyth0n1c 2022-04-12 04:13:48 -07:00
  • ca6b15c89a Branch was auto-updated. shhh_be_quiet pyth0n1c 2022-04-12 04:13:45 -07:00
  • 7f1658560e Branch was auto-updated. ssa_finding_report_body_generation pyth0n1c 2022-04-12 04:13:44 -07:00
  • 2c63b204cd Branch was auto-updated. pyth0n1c 2022-04-12 04:13:42 -07:00
  • aada5bf4f9 Branch was auto-updated. pyth0n1c 2022-04-12 04:13:38 -07:00
  • 095210542a Merge pull request #2157 from splunk/cyclopsblink tccontre 2022-04-12 13:13:15 +02:00
  • f8eb31e796 Update acidrain.yml tccontre 2022-04-12 12:22:58 +02:00
  • 558953524e Update linux_deletion_of_services.yml tccontre 2022-04-12 12:22:42 +02:00
  • 2f3cc3d6f5 Update linux_deletion_of_init_daemon_script.yml tccontre 2022-04-12 12:22:29 +02:00
  • fbbe658060 Update linux_deletion_of_cron_jobs.yml tccontre 2022-04-12 12:22:19 +02:00
  • ba3dd9f2a6 Update cyclops_blink.yml tccontre 2022-04-12 12:21:30 +02:00
  • 143b243003 Update linux_stdout_redirection_to_dev_null_file.yml tccontre 2022-04-12 12:21:20 +02:00
  • 43c89619b2 Update linux_kworker_process_commandline.yml tccontre 2022-04-12 12:21:10 +02:00
  • 58aa54a1da Update linux_iptables_firewall_modification.yml tccontre 2022-04-12 12:21:00 +02:00
  • 5521807e2c Update Gitlab-CI to add SSA-Content builds to Pre-QA akhunti 2022-04-12 15:41:49 +05:30
  • 03ea408fc1 acidrain tccontre 2022-04-12 12:01:17 +02:00
  • ede69dcf57 Update linux_deletion_of_cron_jobs.yml tccontre 2022-04-12 11:34:55 +02:00
  • 91ac58c032 acidrain tccontre 2022-04-12 11:26:33 +02:00
  • 6f648f9a77 acidrain tccontre 2022-04-12 11:20:43 +02:00
  • 41e354485e updating docs and package bits [ci skip] research bot 2022-04-12 00:00:09 +00:00
  • 0d71323325 updating docs and package bits [ci skip] v3.38.0 research bot 2022-04-11 22:55:36 +00:00