admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • c8d88b6f93 added run once search registry Rod Soto 2022-02-16 18:51:23 -08:00
  • f19e5c01fd Much better support for persist_security_content with warnings if local changes will be overwritten. Much better checking if a detection search has failed - the search will be run again after some more time is allowed to pass. This makes sure that all the data has had time to be properly ingested. There is still a potential issue when checking out different branches which will need some additional testing. pyth0n1c 2022-02-16 17:31:01 -08:00
  • c80a1fdb83 spl update patel-bhavin 2022-02-16 16:26:43 -08:00
  • 9d780700de lookupss patel-bhavin 2022-02-16 16:23:19 -08:00
  • 550a592f78 Re-adding newline pyth0n1c 2022-02-16 13:42:16 -08:00
  • 252ed2576f Update ssa___windows_certutil_urlcache_download.yml mhaag-spl 2022-02-16 14:30:10 -07:00
  • eecd75c4a9 urlcache mhaag-spl 2022-02-16 14:24:50 -07:00
  • 271ee724c5 certutil - verifyctl mhaag-spl 2022-02-16 14:09:18 -07:00
  • 0be99ab0d6 Removed extra newlines pyth0n1c 2022-02-16 12:23:54 -08:00
  • 87aad0493c start-bitstransfer mhaag-spl 2022-02-16 13:16:13 -07:00
  • 6b6727b3d7 BITS mhaag-spl 2022-02-16 12:19:01 -07:00
  • 6a38346244 Merge branch 'TR_1550_Kerberos_Coverage_1' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_1 mvelazco 2022-02-16 14:16:19 -05:00
  • c51621060c update detection and adding a new one mvelazco 2022-02-16 14:16:15 -05:00
  • 8290451c2e Updating earliest time Michael Hart 2022-02-16 11:55:05 -05:00
  • 94f0108a4b improved Anomalous usage of Archive Tools based on feedback P4T12ICK 2022-02-16 17:04:19 +01:00
  • 14464f17a4 wip doc_gen P4T12ICK 2022-02-16 17:01:48 +01:00
  • 46a1cf105a Initial commit Michael Hart 2022-02-16 10:46:59 -05:00
  • 0c89faadd7 Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content P4T12ICK 2022-02-16 16:08:16 +01:00
  • ccf72b4b6f improved Anomalous usage of Archive Tools based on feedback P4T12ICK 2022-02-16 15:54:53 +01:00
  • 60ae79dde6 wip doc_gen P4T12ICK 2022-02-16 15:34:59 +01:00
  • 05898d1c72 Updated the test config used for github actions and the workflow to remove the use of the splunkbase username and password secrets. After this is merged, we can remove them from the repository. We will simply use the versions that we update in S3. pyth0n1c 2022-02-15 15:43:36 -08:00
  • 580dba242f Added ability to Ctrl-C/SIGINT the testing process and have it gracefully finish. This stops the containers and writes out partial progress to the output file. pyth0n1c 2022-02-15 15:37:17 -08:00
  • 5c8268f137 updating docs and package bits [ci skip] research bot 2022-02-15 23:10:10 +00:00
  • a4a1384f6e Branch was auto-updated. pyth0n1c 2022-02-15 14:54:53 -08:00
  • f57454771e Branch was auto-updated. pyth0n1c 2022-02-15 14:54:52 -08:00
  • 44b353c7d3 Branch was auto-updated. pyth0n1c 2022-02-15 14:54:52 -08:00
  • fba079141a Branch was auto-updated. pyth0n1c 2022-02-15 14:54:51 -08:00
  • a471272a39 Branch was auto-updated. pyth0n1c 2022-02-15 14:54:47 -08:00
  • c1fc1316ae Branch was auto-updated. pyth0n1c 2022-02-15 14:54:46 -08:00
  • 1254210ac7 Branch was auto-updated. pyth0n1c 2022-02-15 14:54:44 -08:00
  • 03680a72b5 Merge pull request #2017 from splunk/Log4ForgeLog4ShellLog4RCE v3.35.0 test/latest-tag-commit Bhavin Patel 2022-02-15 14:54:11 -08:00
  • 96609e50f1 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE d1vious 2022-02-15 17:40:57 -05:00
  • b767a93e5b fixing base on feedback d1vious 2022-02-15 17:40:51 -05:00
  • 1c5961c4c5 condition for tactic and jinja field for risk patel-bhavin 2022-02-15 13:45:08 -08:00
  • 9082c7c43d Windows Bits Job Persistence mhaag-spl 2022-02-15 14:34:11 -07:00
  • c708484703 oops mhaag-spl 2022-02-15 14:14:16 -07:00
  • 9ba8b98bb7 SSA Rasautou mhaag-spl 2022-02-15 14:09:25 -07:00
  • 2d1276ad92 Branch was auto-updated. pyth0n1c 2022-02-15 12:57:37 -08:00
  • 631e8e1993 Branch was auto-updated. pyth0n1c 2022-02-15 12:57:33 -08:00
  • 78882164b0 Branch was auto-updated. pyth0n1c 2022-02-15 12:57:33 -08:00
  • ce4e67a077 Branch was auto-updated. pyth0n1c 2022-02-15 12:57:32 -08:00
  • 47a4849c41 Branch was auto-updated. pyth0n1c 2022-02-15 12:57:31 -08:00
  • d17720f6ba Branch was auto-updated. pyth0n1c 2022-02-15 12:57:30 -08:00
  • 0ca10d6c14 Branch was auto-updated. pyth0n1c 2022-02-15 12:57:30 -08:00
  • 0261849c37 Merge pull request #2022 from splunk/encoding_horror Lou Stella 2022-02-15 14:57:13 -06:00
  • 990694e9e6 Update ssa___windows_powershell_downloadfile.yml Bhavin Patel 2022-02-15 12:38:12 -08:00
  • 6ef8187b2f Update ssa___windows_powershell_connect_to_internet_with_hidden_window.yml Bhavin Patel 2022-02-15 12:37:57 -08:00
  • 7482ac9113 Branch was auto-updated. pyth0n1c 2022-02-15 12:36:36 -08:00
  • dfaa4068d2 Branch was auto-updated. pyth0n1c 2022-02-15 12:36:35 -08:00
  • 6c95486517 Branch was auto-updated. pyth0n1c 2022-02-15 12:36:34 -08:00
  • 874969a012 Branch was auto-updated. pyth0n1c 2022-02-15 12:36:34 -08:00
  • 59292cf55e Branch was auto-updated. pyth0n1c 2022-02-15 12:36:33 -08:00
  • f4ff7721e1 Branch was auto-updated. pyth0n1c 2022-02-15 12:36:32 -08:00
  • f9ff87aa4d Branch was auto-updated. pyth0n1c 2022-02-15 12:36:28 -08:00
  • bd1c27edb1 Branch was auto-updated. pyth0n1c 2022-02-15 12:36:27 -08:00
  • e11779416e Merge pull request #2023 from splunk/DueDLLigence Bhavin Patel 2022-02-15 12:36:11 -08:00
  • 7f8e5221c7 Updated second detection with unicode codepoints Lou Stella 2022-02-15 14:17:55 -06:00
  • c9b8eb2985 rasautou DueDLLigence mhaag-spl 2022-02-15 13:08:59 -07:00
  • 95d060e135 Character sets are difficult Lou Stella 2022-02-15 13:52:01 -06:00
  • 83822861b6 Branch was auto-updated. pyth0n1c 2022-02-15 10:50:16 -08:00
  • 05d873a28b Branch was auto-updated. pyth0n1c 2022-02-15 10:50:13 -08:00
  • 44f9a47161 Branch was auto-updated. pyth0n1c 2022-02-15 10:50:12 -08:00
  • 818e125692 Branch was auto-updated. pyth0n1c 2022-02-15 10:50:12 -08:00
  • dc46d0121e Branch was auto-updated. pyth0n1c 2022-02-15 10:50:11 -08:00
  • 47d52db7aa Branch was auto-updated. pyth0n1c 2022-02-15 10:50:10 -08:00
  • 331e27834d Branch was auto-updated. pyth0n1c 2022-02-15 10:50:09 -08:00
  • 089b125c54 Merge pull request #2021 from splunk/deprecate_note Bhavin Patel 2022-02-15 10:49:52 -08:00
  • 85760fed63 Branch was auto-updated. pyth0n1c 2022-02-15 10:40:13 -08:00
  • 283013b9a0 Branch was auto-updated. pyth0n1c 2022-02-15 10:40:11 -08:00
  • 7e9e9eba3d Branch was auto-updated. pyth0n1c 2022-02-15 10:40:10 -08:00
  • 92f08cbf49 Branch was auto-updated. pyth0n1c 2022-02-15 10:40:09 -08:00
  • 1e7216b08c Branch was auto-updated. pyth0n1c 2022-02-15 10:40:08 -08:00
  • 1590b09155 Branch was auto-updated. pyth0n1c 2022-02-15 10:40:07 -08:00
  • d9fb2d6989 Branch was auto-updated. pyth0n1c 2022-02-15 10:40:03 -08:00
  • 63a5ac071a Branch was auto-updated. pyth0n1c 2022-02-15 10:40:01 -08:00
  • 9bb0b3a43e Merge pull request #2018 from splunk/duplicate_2011 Bhavin Patel 2022-02-15 10:39:43 -08:00
  • b42ec08d85 Fixed spacing on detection_of_dns_tunnels.yml pyth0n1c 2022-02-15 10:39:23 -08:00
  • f159afe268 Branch was auto-updated. pyth0n1c 2022-02-15 10:30:19 -08:00
  • 564f00501f Branch was auto-updated. pyth0n1c 2022-02-15 10:30:15 -08:00
  • 81a5583536 Branch was auto-updated. pyth0n1c 2022-02-15 10:30:14 -08:00
  • 733fa530ac Branch was auto-updated. pyth0n1c 2022-02-15 10:30:12 -08:00
  • a973a64d2c Branch was auto-updated. pyth0n1c 2022-02-15 10:30:11 -08:00
  • a687820b95 Branch was auto-updated. pyth0n1c 2022-02-15 10:30:10 -08:00
  • 45fb0c5afb Branch was auto-updated. pyth0n1c 2022-02-15 10:30:09 -08:00
  • 33ab1741f6 Branch was auto-updated. pyth0n1c 2022-02-15 10:30:08 -08:00
  • 1035b056b7 Branch was auto-updated. pyth0n1c 2022-02-15 10:30:08 -08:00
  • 7972577016 Merge pull request #2003 from splunk/qbot Bhavin Patel 2022-02-15 10:29:48 -08:00
  • e99b973973 note updadte patel-bhavin 2022-02-15 10:27:42 -08:00
  • 085cec0b0d adding note patel-bhavin 2022-02-15 10:26:12 -08:00
  • e2b0e4c32b mionr patel-bhavin 2022-02-15 10:21:43 -08:00
  • e241241bf2 ordinal Data mhaag-spl 2022-02-15 11:09:57 -07:00
  • a093ba7aaf Minor updates to fixed searches. Fixed some spacing issues and quotation mark issues that were causing search success problems. pyth0n1c 2022-02-15 09:47:36 -08:00
  • 77b300ab4e Accidentally changed detection file detections/cloud/aws_excessive_security_scanning.yml. That file should not have been modified. Rolling back those changes. pyth0n1c 2022-02-15 09:37:52 -08:00
  • 292d997eb5 Update data_destruction.yml tccontre 2022-02-15 11:04:28 +01:00
  • f1a5162d94 updated github action P4T12ICK 2022-02-15 10:58:28 +01:00
  • 2009364a6b linux_lolbin_stage1 tccontre 2022-02-15 10:55:01 +01:00
  • df3d2f030b updated github action P4T12ICK 2022-02-15 10:51:21 +01:00
  • 9395d9075a updated github action P4T12ICK 2022-02-15 10:46:15 +01:00
  • 49834cdeae updated github action P4T12ICK 2022-02-15 10:32:23 +01:00
  • 7cb1ea56b5 updated github action P4T12ICK 2022-02-15 10:28:39 +01:00