admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • ee396fd819 Update disable_etw_through_registry.yml tccontre 2022-01-27 10:17:29 +01:00
  • 6e369a316f reg_yml_analytics_updates_2 tccontre 2022-01-27 10:14:52 +01:00
  • 4fd8604b9a removed SAAWS and automated_detection_testing flag P4T12ICK 2022-01-27 09:50:45 +01:00
  • a630b8a4b5 before removing SAAWS P4T12ICK 2022-01-27 09:39:14 +01:00
  • 7cc2713064 Delete detect_mimipenguin.yml truptilangalia-crest 2022-01-27 11:54:33 +05:30
  • 81809b4dcc Delete detect_linux_exploit_suggester_execution.yml truptilangalia-crest 2022-01-27 11:54:16 +05:30
  • 93a1d46758 Delete detect_linpeas_execution.yml truptilangalia-crest 2022-01-27 11:53:59 +05:30
  • aea9333e44 Delete detect_linenum_execution.yml truptilangalia-crest 2022-01-27 11:53:33 +05:30
  • 4e720c0415 Delete detect_autosuid_post_exploitation_tool.yml truptilangalia-crest 2022-01-27 11:52:54 +05:30
  • 807dd99672 Merge branch 'splunk:develop' into test/enrich_detections truptilangalia-crest 2022-01-27 11:49:35 +05:30
  • b80af6f151 Editing the macro to put the apply statement into the search query so that it's clear that MLTK is being used Michael Hart 2022-01-26 22:38:13 -05:00
  • e85fe9f5e7 updating mitre coverage map d1vious 2022-01-26 20:41:55 -05:00
  • fe5db9e78e adding lookup files patel-bhavin 2022-01-26 15:34:10 -08:00
  • 55a62e8365 updating docs and package bits [ci skip] research bot 2022-01-26 22:55:37 +00:00
  • 328417d4fa test files patel-bhavin 2022-01-26 14:31:04 -08:00
  • 5fa5def4d3 remove conflicts patel-bhavin 2022-01-26 14:29:41 -08:00
  • 3d3638c2e4 story file patel-bhavin 2022-01-26 14:20:54 -08:00
  • 0f3cc3e4f7 Branch was auto-updated. pyth0n1c 2022-01-26 14:10:09 -08:00
  • 3efed382fd Branch was auto-updated. pyth0n1c 2022-01-26 14:10:08 -08:00
  • 3058c7fa57 Merge pull request #1959 from splunk/remove_linux_post v3.34.0 Michael Haag 2022-01-26 15:09:43 -07:00
  • 341385a97c wrong file patel-bhavin 2022-01-26 13:54:01 -08:00
  • 45c4a7b600 remove files that are already merged patel-bhavin 2022-01-26 13:51:51 -08:00
  • df46c560d6 Merge branch 'develop' of github.com:splunk/security_content into develop patel-bhavin 2022-01-26 13:45:21 -08:00
  • 7078e714cf Merge branch 'nixpost3' of github.com:splunk/security_content into nixpost3 patel-bhavin 2022-01-26 13:45:05 -08:00
  • b095a62681 minor upddates patel-bhavin 2022-01-26 13:44:57 -08:00
  • f42a0b9e21 Branch was auto-updated. pyth0n1c 2022-01-26 13:36:13 -08:00
  • e737a019b9 Branch was auto-updated. pyth0n1c 2022-01-26 13:36:12 -08:00
  • 3068824d4f Branch was auto-updated. pyth0n1c 2022-01-26 13:36:08 -08:00
  • 67ba0750ef Merge pull request #1945 from splunk/whisper Bhavin Patel 2022-01-26 13:35:35 -08:00
  • 8cb1e0abe0 dataset again mhaag-spl 2022-01-26 13:50:32 -07:00
  • 5bc6118cb0 test:updated logic to remove unnesseary tas Detection Testing Service 2022-01-27 02:18:31 +05:30
  • bed6990986 datasets mhaag-spl 2022-01-26 13:40:09 -07:00
  • 67e413d0e0 Update __mlspl_unusual_commandline_detection.yml Michael Haag 2022-01-26 11:26:25 -07:00
  • 9148e13dd0 test generate P4T12ICK 2022-01-26 16:19:38 +01:00
  • 48fb45327b test generate P4T12ICK 2022-01-26 15:11:46 +01:00
  • ec66a35885 Update time_provider_persistence_registry.yml tccontre 2022-01-26 11:42:05 +01:00
  • c792da85e8 Update start_up_during_safe_mode_boot.yml tccontre 2022-01-26 11:41:47 +01:00
  • 28342ca7dc Update remcos_client_registry_install_entry.yml tccontre 2022-01-26 11:41:25 +01:00
  • 708552a3d0 Update registry_keys_used_for_privilege_escalation.yml tccontre 2022-01-26 11:41:06 +01:00
  • bcdf46a631 Update registry_keys_used_for_persistence.yml tccontre 2022-01-26 11:40:46 +01:00
  • 3bcf548b83 Update disable_defender_submit_samples_consent_feature.yml tccontre 2022-01-26 11:40:35 +01:00
  • eacd0a9534 Update disable_defender_spynet_reporting.yml tccontre 2022-01-26 11:40:18 +01:00
  • 1db596ff6c Update disable_defender_mpengine_registry.yml tccontre 2022-01-26 11:40:07 +01:00
  • abefdaef06 Update disable_defender_enhanced_notification.yml tccontre 2022-01-26 11:39:48 +01:00
  • c69a14fb35 Update disable_defender_blockatfirstseen_feature.yml tccontre 2022-01-26 11:39:37 +01:00
  • 644644675b Update disable_defender_antivirus_registry.yml tccontre 2022-01-26 11:39:27 +01:00
  • 4decf3f72b Update disable_amsi_through_registry.yml tccontre 2022-01-26 11:39:08 +01:00
  • 0d575b49f9 Update allow_operation_with_consent_admin.yml tccontre 2022-01-26 11:38:57 +01:00
  • 183e8cdd0d Update allow_inbound_traffic_by_firewall_rule_registry.yml tccontre 2022-01-26 11:38:47 +01:00
  • 8a5cd4b7c8 Update add_defaultuser_and_password_in_registry.yml tccontre 2022-01-26 11:38:33 +01:00
  • 11efabfcc7 Update active_setup_registry_autostart.yml tccontre 2022-01-26 11:38:21 +01:00
  • fda14b6eff Update time_provider_persistence_registry.yml tccontre 2022-01-26 11:37:52 +01:00
  • 21e55e786f Update start_up_during_safe_mode_boot.yml tccontre 2022-01-26 11:37:34 +01:00
  • 3fb82f029d Update revil_registry_entry.yml tccontre 2022-01-26 11:37:21 +01:00
  • a5581d4005 Update remcos_client_registry_install_entry.yml tccontre 2022-01-26 11:37:08 +01:00
  • 0f69994a73 Update registry_keys_used_for_persistence.yml tccontre 2022-01-26 11:36:54 +01:00
  • b161a606fd Update disable_defender_submit_samples_consent_feature.yml tccontre 2022-01-26 11:36:41 +01:00
  • fe4da25004 Update disable_defender_spynet_reporting.yml tccontre 2022-01-26 11:36:10 +01:00
  • 9cb8b0f08c Update disable_defender_mpengine_registry.yml tccontre 2022-01-26 11:35:57 +01:00
  • b466ccb66b Update disable_defender_enhanced_notification.yml tccontre 2022-01-26 11:35:46 +01:00
  • 7cdf1a7501 Update disable_defender_blockatfirstseen_feature.yml tccontre 2022-01-26 11:35:36 +01:00
  • 11d5f6a78e Update disable_defender_antivirus_registry.yml tccontre 2022-01-26 11:35:26 +01:00
  • 10235f204a Update disable_amsi_through_registry.yml tccontre 2022-01-26 11:35:14 +01:00
  • 67cf8b96fc Update allow_operation_with_consent_admin.yml tccontre 2022-01-26 11:35:02 +01:00
  • 94e528ed87 Update allow_inbound_traffic_by_firewall_rule_registry.yml tccontre 2022-01-26 11:34:51 +01:00
  • 4eb093adcb Update add_defaultuser_and_password_in_registry.yml tccontre 2022-01-26 11:34:36 +01:00
  • bf995a8d45 Update active_setup_registry_autostart.yml tccontre 2022-01-26 11:34:25 +01:00
  • 41101fbf59 Update disable_defender_submit_samples_consent_feature.yml tccontre 2022-01-26 11:31:28 +01:00
  • b5ee46bc9b Update registry_keys_used_for_persistence.yml tccontre 2022-01-26 11:31:15 +01:00
  • c92c800035 Update remcos_client_registry_install_entry.yml tccontre 2022-01-26 11:30:48 +01:00
  • c6082b5353 Update remcos_client_registry_install_entry.yml tccontre 2022-01-26 11:30:31 +01:00
  • 6d14d192ee Update revil_registry_entry.yml tccontre 2022-01-26 11:30:17 +01:00
  • efb7c61063 Update disable_defender_spynet_reporting.yml tccontre 2022-01-26 11:29:54 +01:00
  • cbd343b844 Update disable_defender_enhanced_notification.yml tccontre 2022-01-26 11:29:42 +01:00
  • 96ea6e6b16 Update disable_defender_blockatfirstseen_feature.yml tccontre 2022-01-26 11:29:26 +01:00
  • 1df9638804 Update disable_defender_antivirus_registry.yml tccontre 2022-01-26 11:29:12 +01:00
  • 6017b8d849 Update disable_amsi_through_registry.yml tccontre 2022-01-26 11:28:51 +01:00
  • 9b6ab3bacc Update allow_operation_with_consent_admin.yml tccontre 2022-01-26 11:28:37 +01:00
  • 9a60a7e41a Update allow_inbound_traffic_by_firewall_rule_registry.yml tccontre 2022-01-26 11:28:23 +01:00
  • 109b9e5b37 Update add_defaultuser_and_password_in_registry.yml tccontre 2022-01-26 11:28:09 +01:00
  • 91f273cbea Update active_setup_registry_autostart.yml tccontre 2022-01-26 11:27:51 +01:00
  • 366ea09869 Update start_up_during_safe_mode_boot.yml tccontre 2022-01-26 11:27:33 +01:00
  • d137c3f6c1 Update time_provider_persistence_registry.yml tccontre 2022-01-26 11:27:21 +01:00
  • e0edf84ca3 Update disable_defender_mpengine_registry.yml tccontre 2022-01-26 11:26:28 +01:00
  • f4a71d40d6 Update disable_defender_enhanced_notification.yml tccontre 2022-01-26 11:26:04 +01:00
  • 9ffff5bede Update disable_defender_blockatfirstseen_feature.yml tccontre 2022-01-26 11:25:53 +01:00
  • 58d480b0f6 Update disable_defender_antivirus_registry.yml tccontre 2022-01-26 11:25:43 +01:00
  • 250ed063d4 Update disable_amsi_through_registry.yml tccontre 2022-01-26 11:25:31 +01:00
  • abc1202e26 Update allow_operation_with_consent_admin.yml tccontre 2022-01-26 11:25:19 +01:00
  • ddc14a55d0 Update allow_inbound_traffic_by_firewall_rule_registry.yml tccontre 2022-01-26 11:25:04 +01:00
  • 34556d7e86 Update add_defaultuser_and_password_in_registry.yml tccontre 2022-01-26 11:24:53 +01:00
  • 272d28f5de Update active_setup_registry_autostart.yml tccontre 2022-01-26 11:24:38 +01:00
  • 626f16dada Update disable_defender_enhanced_notification.yml tccontre 2022-01-26 11:23:42 +01:00
  • d133a6b36d Update disable_defender_blockatfirstseen_feature.yml tccontre 2022-01-26 11:23:31 +01:00
  • c7d6287be9 Update disable_defender_antivirus_registry.yml tccontre 2022-01-26 11:23:19 +01:00
  • 441ae1b3a8 Update disable_amsi_through_registry.yml tccontre 2022-01-26 11:23:08 +01:00
  • 58369314a9 Update allow_operation_with_consent_admin.yml tccontre 2022-01-26 11:22:55 +01:00
  • 5de9c40af1 Update allow_inbound_traffic_by_firewall_rule_registry.yml tccontre 2022-01-26 11:22:44 +01:00
  • 941c3e4924 Update add_defaultuser_and_password_in_registry.yml tccontre 2022-01-26 11:22:32 +01:00
  • ada0fe5bf3 Update active_setup_registry_autostart.yml tccontre 2022-01-26 11:22:20 +01:00