admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 697fa3875f Branch was auto-updated. pyth0n1c 2022-04-11 10:46:41 -07:00
  • ad50755906 Branch was auto-updated. pyth0n1c 2022-04-11 10:46:40 -07:00
  • 127f1beca8 Branch was auto-updated. pyth0n1c 2022-04-11 10:46:40 -07:00
  • a5846bcf6d Branch was auto-updated. pyth0n1c 2022-04-11 10:46:39 -07:00
  • 1b69b845bd Branch was auto-updated. pyth0n1c 2022-04-11 10:46:38 -07:00
  • e98b526afc Branch was auto-updated. pyth0n1c 2022-04-11 10:46:37 -07:00
  • 16055d5eff Branch was auto-updated. pyth0n1c 2022-04-11 10:46:36 -07:00
  • 96e4aff19a Branch was auto-updated. pyth0n1c 2022-04-11 10:46:35 -07:00
  • 9a829d9a67 Merge pull request #2152 from splunk/detection_improvement_mac_os Bhavin Patel 2022-04-11 10:46:14 -07:00
  • cc4c80a7e9 Branch was auto-updated. pyth0n1c 2022-04-11 10:23:33 -07:00
  • 21ed11ce40 Branch was auto-updated. pyth0n1c 2022-04-11 10:23:32 -07:00
  • 924210384a Branch was auto-updated. pyth0n1c 2022-04-11 10:23:31 -07:00
  • f1dd35944d Branch was auto-updated. pyth0n1c 2022-04-11 10:23:30 -07:00
  • 1f25437890 Branch was auto-updated. pyth0n1c 2022-04-11 10:23:29 -07:00
  • b384f2b137 Branch was auto-updated. pyth0n1c 2022-04-11 10:23:27 -07:00
  • 5179f27fe1 Branch was auto-updated. pyth0n1c 2022-04-11 10:23:26 -07:00
  • 07ce79c334 Branch was auto-updated. pyth0n1c 2022-04-11 10:23:25 -07:00
  • fac8fbf99c Branch was auto-updated. pyth0n1c 2022-04-11 10:23:23 -07:00
  • 8a75b7ee7c Merge pull request #2158 from splunk/hunt Bhavin Patel 2022-04-11 10:23:01 -07:00
  • a921f72806 Merge pull request #2156 from splunk/enrich-detection-code-deletion Bhavin Patel 2022-04-11 09:32:39 -07:00
  • cc29450acb return value patel-bhavin 2022-04-11 09:29:43 -07:00
  • 103e4b441a fixed observables P4T12ICK 2022-04-11 09:21:28 +02:00
  • ef9b64c968 Updated detection-testing.yml to the same as the version in develop so that testing can proceed. Since there is a PR open, why didn't this auto update? pyth0n1c 2022-04-08 06:34:56 -07:00
  • e62c65675e Updated detection files with recommended TA list. security_content_automation_1649407434 root 2022-04-08 08:43:54 +00:00
  • 6ec5e58608 Update cyclops_blink.yml tccontre 2022-04-08 09:49:46 +02:00
  • 6c4516730d Updated tests to remove update_timestamp and modified testing code to always update timestamp. This will cause some issues as not all sourcetypes are supported, yet. We will work to support them all before merging these changes to develop. datetime_fixes pyth0n1c 2022-04-07 15:44:24 -07:00
  • d3e26be675 T# add mhaag-spl 2022-04-07 15:06:13 -06:00
  • 305a20bc54 Hunting mhaag-spl 2022-04-07 14:39:56 -06:00
  • d6cfeecc50 Forcing use of offline mitre enrichment data... FOR SPEEEEEED contentctl_optimizations pyth0n1c 2022-04-07 13:15:54 -07:00
  • 372d9f60c7 caching api calls and pickling data to make it as fast as possible. pyth0n1c 2022-04-07 13:11:03 -07:00
  • 1470c6713c Update linux_stdout_redirection_to_dev_null_file.yml tccontre 2022-04-07 15:10:06 +02:00
  • 8b6970f5c7 Update linux_kworker_process_commandline.yml tccontre 2022-04-07 15:01:53 +02:00
  • fcba8c2731 cyclopsblink tccontre 2022-04-07 14:58:11 +02:00
  • c1035681a2 cyclopsblink tccontre 2022-04-07 14:53:59 +02:00
  • c55e114dac Removed enrich detection script and Github Action stage akhunti 2022-04-07 12:11:15 +05:30
  • 279606d502 Branch was auto-updated. pyth0n1c 2022-04-06 14:47:41 -07:00
  • e62b2ae8be Branch was auto-updated. pyth0n1c 2022-04-06 14:47:40 -07:00
  • b380106950 Branch was auto-updated. pyth0n1c 2022-04-06 14:47:38 -07:00
  • d53ab464c3 Branch was auto-updated. pyth0n1c 2022-04-06 14:47:36 -07:00
  • 9c7bc38f0c Branch was auto-updated. pyth0n1c 2022-04-06 14:47:35 -07:00
  • 147b1fcac1 Branch was auto-updated. pyth0n1c 2022-04-06 14:47:34 -07:00
  • a61ee0b07e Branch was auto-updated. pyth0n1c 2022-04-06 14:47:33 -07:00
  • 0ee6e97727 Branch was auto-updated. pyth0n1c 2022-04-06 14:47:32 -07:00
  • 48cb17f56d Merge pull request #2153 from splunk/springshowers Bhavin Patel 2022-04-06 14:47:14 -07:00
  • 2c8fa42b98 minor updates and gitignore patel-bhavin 2022-04-06 14:03:06 -07:00
  • 743a9455bd Marking 4 noisy searches as experimental David Dorsey 2022-04-06 15:40:27 -05:00
  • f457ffed90 Update java_writing_jsp_file.yml mhaag-spl 2022-04-06 13:47:38 -06:00
  • ed5bb59358 better time logging for diffing summaries experiment fp_experiments pyth0n1c 2022-04-06 09:28:01 -07:00
  • 9f370036f5 Update web_spring4shell_http_request_class_module.yml mhaag-spl 2022-04-06 10:26:23 -06:00
  • 8649a7c990 Web Spring4Shell HTTP Request Class Module mhaag-spl 2022-04-06 09:58:24 -06:00
  • ebb920f47d rename mhaag-spl 2022-04-06 08:39:34 -06:00
  • bc7d8af437 small improvements ssa generate P4T12ICK 2022-04-06 11:43:01 +02:00
  • be59f544d0 small improvements ssa generate P4T12ICK 2022-04-06 11:24:34 +02:00
  • dca6dfee2d small improvements ssa generate P4T12ICK 2022-04-06 10:35:52 +02:00
  • a8117a5c4a Branch was auto-updated. pyth0n1c 2022-04-05 14:52:24 -07:00
  • 6a2cce0f50 Branch was auto-updated. pyth0n1c 2022-04-05 14:52:23 -07:00
  • 1dbf3c7436 Branch was auto-updated. pyth0n1c 2022-04-05 14:52:22 -07:00
  • 3323162b8c Branch was auto-updated. pyth0n1c 2022-04-05 14:52:21 -07:00
  • 257957fa5b Branch was auto-updated. pyth0n1c 2022-04-05 14:52:19 -07:00
  • 2a11a18b75 Branch was auto-updated. pyth0n1c 2022-04-05 14:52:18 -07:00
  • bdfa26a0ed Branch was auto-updated. pyth0n1c 2022-04-05 14:52:17 -07:00
  • c5528e72ea Merge pull request #2113 from splunk/InDirectToVideo Bhavin Patel 2022-04-05 14:51:59 -07:00
  • bc2ab62ee8 typo mhaag-spl 2022-04-05 15:41:35 -06:00
  • a03b6719de function and CVE-2022-22965 fixes mhaag-spl 2022-04-05 15:36:38 -06:00
  • 082d15ac3d Updating paths to dataset for testing pyth0n1c 2022-04-05 14:14:42 -07:00
  • 39c8ab5e12 Branch was auto-updated. pyth0n1c 2022-04-05 13:56:48 -07:00
  • 01b94c45f4 Branch was auto-updated. pyth0n1c 2022-04-05 13:56:47 -07:00
  • 4f9a10f862 Branch was auto-updated. pyth0n1c 2022-04-05 13:56:45 -07:00
  • a2bf324f0b Branch was auto-updated. pyth0n1c 2022-04-05 13:56:44 -07:00
  • d748a0bc4c Branch was auto-updated. pyth0n1c 2022-04-05 13:56:43 -07:00
  • da1da062fc Branch was auto-updated. pyth0n1c 2022-04-05 13:56:42 -07:00
  • 185ccfd0af Branch was auto-updated. pyth0n1c 2022-04-05 13:56:41 -07:00
  • 1b5deca353 Merge pull request #2150 from splunk/hermeticwipertag Bhavin Patel 2022-04-05 13:56:21 -07:00
  • df65357cf5 destt in str patel-bhavin 2022-04-05 13:48:37 -07:00
  • fd5a14cae3 Reverting changes that we made to the macros file. pyth0n1c 2022-04-05 13:37:51 -07:00
  • 9638205131 Fixed paths to attack data sets and updated required_fields format to matrch the rest of the detections in the repo. pyth0n1c 2022-04-05 13:36:36 -07:00
  • ac3bed4a4b str for nes fields patel-bhavin 2022-04-05 13:32:31 -07:00
  • 7bbfbcfbde Branch was auto-updated. pyth0n1c 2022-04-05 13:12:42 -07:00
  • f487c762dd Branch was auto-updated. pyth0n1c 2022-04-05 13:12:41 -07:00
  • 25306fef98 Branch was auto-updated. pyth0n1c 2022-04-05 13:12:40 -07:00
  • 6c56d193ee Branch was auto-updated. pyth0n1c 2022-04-05 13:12:39 -07:00
  • ec2c1bff73 Branch was auto-updated. pyth0n1c 2022-04-05 13:12:38 -07:00
  • 0fe4d397f4 Branch was auto-updated. pyth0n1c 2022-04-05 13:12:36 -07:00
  • 4503340635 Branch was auto-updated. pyth0n1c 2022-04-05 13:12:33 -07:00
  • 0f0bac3789 Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo Bhavin Patel 2022-04-05 13:12:05 -07:00
  • 0da666fc10 nix write jsp mhaag-spl 2022-04-05 12:38:53 -06:00
  • 6ebca18614 Spring4Shell mhaag-spl 2022-04-05 11:53:23 -06:00
  • c7e1a04873 Update windows_indirect_command_execution_via_forfiles.yml pyth0n1c 2022-04-05 10:21:42 -07:00
  • 30ff35bcd8 Update windows_indirect_command_execution_via_pcalua.yml pyth0n1c 2022-04-05 10:20:58 -07:00
  • b385ef2ead Update windows_indirect_command_execution_via_pcalua.yml pyth0n1c 2022-04-05 10:15:26 -07:00
  • 0cde033ac1 Update windows_indirect_command_execution_via_pcalua.yml pyth0n1c 2022-04-05 10:13:20 -07:00
  • 71fe3edea7 Update windows_indirect_command_execution_via_forfiles.yml pyth0n1c 2022-04-05 10:12:45 -07:00
  • 90424b7e0c Update windows_indirect_command_execution_via_forfiles.yml pyth0n1c 2022-04-05 10:08:49 -07:00
  • 2d2fdb6be0 Update windows_indirect_command_execution_via_pcalua.yml pyth0n1c 2022-04-05 10:05:21 -07:00
  • 9ba9575db7 improved MacOS detection P4T12ICK 2022-04-05 19:00:05 +02:00
  • 90abd35b92 Previously had uses and run keys in the same step. That caused all jobs to fail at parsing the workflow yml. pyth0n1c 2022-04-05 09:40:41 -07:00
  • 901a73aa5f secondbatchwinprivesctaghermeticwiper Rod Soto 2022-04-05 08:02:47 -07:00
  • b3cd632c29 hermeticwipertagswindowsprivesc Rod Soto 2022-04-05 07:55:03 -07:00
  • 783c6393f3 Branch was auto-updated. pyth0n1c 2022-04-05 06:38:14 -07:00
  • dccca40d27 Branch was auto-updated. pyth0n1c 2022-04-05 06:38:13 -07:00