admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7159436577 reg_yml_analytics_updates tccontre 2022-01-26 11:20:07 +01:00
  • bae16a2928 test generate P4T12ICK 2022-01-26 10:57:21 +01:00
  • a9c5017c63 Reformatting YAML and calling out MLTK 5.3 dependency Michael Hart 2022-01-25 22:30:58 -05:00
  • d039de61ab Merge branch 'potentially_malicious_code_on_commandline' of github.com:splunk/security_content into potentially_malicious_code_on_commandline Michael Hart 2022-01-25 21:43:07 -05:00
  • 39d7121dcd Updating mlmodel to 5.3.x specification as well as the test apparatus Michael Hart 2022-01-25 21:42:16 -05:00
  • dd7477c38d fixed space before pipe Rod Soto 2022-01-25 16:32:00 -08:00
  • 18a9043ff1 added data model to searches Rod Soto 2022-01-25 16:12:04 -08:00
  • 4ccae6c618 testing to update a tag v3.33.1 patel-bhavin 2022-01-25 14:45:57 -08:00
  • 5a4242bee7 testing CI v3.30.0 patel-bhavin 2022-01-25 14:27:22 -08:00
  • 60d321e7a7 Update windows_nirsoft_utilities.yml mhaag-spl 2022-01-25 10:03:59 -07:00
  • b049bfd0f0 test generate P4T12ICK 2022-01-25 14:12:36 +01:00
  • f25735d831 test: updated logic to remove unneccesary tas Detection Testing Service 2022-01-25 18:03:28 +05:30
  • 20f295c2d6 test generate P4T12ICK 2022-01-25 10:29:52 +01:00
  • 40bb18dc39 test generate P4T12ICK 2022-01-25 10:15:08 +01:00
  • 1fd8e4931d test generate P4T12ICK 2022-01-25 10:07:18 +01:00
  • 74d1985013 test generate P4T12ICK 2022-01-25 10:05:25 +01:00
  • 8101dfb565 test generate P4T12ICK 2022-01-25 10:00:46 +01:00
  • 5d26e39e7c test generate P4T12ICK 2022-01-25 08:49:56 +01:00
  • fbe7c33f78 Merge branch 'develop' into ssa_add_body_fields P4T12ICK 2022-01-25 08:35:57 +01:00
  • e91c2b737d updating docs and package bits [ci skip] research bot 2022-01-25 02:37:48 +00:00
  • cca42c0009 moving to expermental patel-bhavin 2022-01-24 15:31:15 -08:00
  • 2b449a60f3 Some searches are still failing because they have not had time to fully ingest data, even with the check for indexing completion. If a search fails, then we will run the search again with a much longer check for data ingest in front of it. While this will add a lot of time in the case of a failed search, failed search are infrequent compared to successful ones and since this check reduces the number of successful searches incorrectly labeled as unsuccessful, it is good. pyth0n1c 2022-01-24 14:40:18 -08:00
  • 425125cbc4 references mhaag-spl 2022-01-24 15:08:39 -07:00
  • befe09f77c Nirsoft Software mhaag-spl 2022-01-24 15:07:20 -07:00
  • ad85b8b21b Branch was auto-updated. pyth0n1c 2022-01-24 10:51:04 -08:00
  • 4c125f1dd6 Branch was auto-updated. pyth0n1c 2022-01-24 10:51:03 -08:00
  • fc97ef9be2 Branch was auto-updated. pyth0n1c 2022-01-24 10:51:01 -08:00
  • 2254d203d8 Branch was auto-updated. pyth0n1c 2022-01-24 10:50:59 -08:00
  • e848c0a544 Branch was auto-updated. pyth0n1c 2022-01-24 10:50:58 -08:00
  • d1dcbfd629 Merge pull request #1873 from splunk/nixpost pyth0n1c 2022-01-24 10:50:37 -08:00
  • cbabad3107 Branch was auto-updated. pyth0n1c 2022-01-24 10:40:47 -08:00
  • 53ca345c06 Branch was auto-updated. pyth0n1c 2022-01-24 10:40:46 -08:00
  • 3f6c74cc53 Branch was auto-updated. pyth0n1c 2022-01-24 10:40:45 -08:00
  • dd538478f4 Branch was auto-updated. pyth0n1c 2022-01-24 10:40:44 -08:00
  • bbebfe7d07 Branch was auto-updated. pyth0n1c 2022-01-24 10:40:41 -08:00
  • ac214bafa6 Branch was auto-updated. pyth0n1c 2022-01-24 10:40:40 -08:00
  • 2a9b3648d2 Merge pull request #1946 from splunk/WhisperGateIsOpen Michael Haag 2022-01-24 11:40:18 -07:00
  • 9793232a8a Added whispergate story Michael Haag 2022-01-24 11:27:35 -07:00
  • 321fd725f1 minor changes mvelazco 2022-01-24 13:23:11 -05:00
  • fbbaef0c99 Quick fixes Michael Haag 2022-01-24 07:33:36 -07:00
  • c3159a29cb advanced 🏃 mhaag-spl 2022-01-24 07:25:06 -07:00
  • 8537e07fee Added detection testing service results inExcessive File Deletion In WinDefender Folder root 2022-01-24 09:29:59 +00:00
  • 83e24a88e9 Added detection testing service results inPing Sleep Batch Command root 2022-01-24 09:12:02 +00:00
  • 49f5de9836 Added detection testing service results inPowershell Remove Windows Defender Directory root 2022-01-24 08:45:36 +00:00
  • 99462820e1 Added detection testing service results inSuspicious Process With Discord DNS Query root 2022-01-24 08:27:32 +00:00
  • a81fbaef75 Finalizing the documentation Michael Hart 2022-01-21 19:31:02 -05:00
  • e962bfb4bd Merge branch 'develop' of github.com:splunk/security_content into potentially_malicious_code_on_commandline Michael Hart 2022-01-21 19:26:39 -05:00
  • 23a0acc37d updating docs and package bits [ci skip] research bot 2022-01-21 21:02:48 +00:00
  • 3ad47776fb Moving to experimental Lou Stella 2022-01-21 14:16:51 -06:00
  • 9f191dee05 Branch was auto-updated. pyth0n1c 2022-01-21 10:58:42 -08:00
  • ddd39ac989 Branch was auto-updated. pyth0n1c 2022-01-21 10:58:41 -08:00
  • 4cb05b9bad Branch was auto-updated. pyth0n1c 2022-01-21 10:58:40 -08:00
  • 5cc5318d37 Branch was auto-updated. pyth0n1c 2022-01-21 10:58:39 -08:00
  • cfd1c8d628 Branch was auto-updated. pyth0n1c 2022-01-21 10:58:38 -08:00
  • e7deccdf27 Branch was auto-updated. pyth0n1c 2022-01-21 10:58:37 -08:00
  • 63155722c0 Merge pull request #1952 from splunk/fixing_badge Bhavin Patel 2022-01-21 10:58:21 -08:00
  • 264294b2c8 Update README.md Jose Enrique Hernandez 2022-01-21 13:56:55 -05:00
  • 4fba87dec6 Branch was auto-updated. pyth0n1c 2022-01-21 09:35:11 -08:00
  • 3ca0459452 Branch was auto-updated. pyth0n1c 2022-01-21 09:35:10 -08:00
  • af15d18c31 Branch was auto-updated. pyth0n1c 2022-01-21 09:35:09 -08:00
  • f8603fd65e Branch was auto-updated. pyth0n1c 2022-01-21 09:35:07 -08:00
  • 0111b4f5a2 Branch was auto-updated. pyth0n1c 2022-01-21 09:35:04 -08:00
  • 82ef50c5ab Branch was auto-updated. pyth0n1c 2022-01-21 09:35:03 -08:00
  • 80ce7adc4e Merge pull request #1951 from splunk/move_comlpex_detections_to_experimental Jose Enrique Hernandez 2022-01-21 12:34:42 -05:00
  • 72d33b23ac moving to match what prod should have d1vious 2022-01-21 12:29:13 -05:00
  • 07e630fa3a generate main development P4T12ICK 2022-01-21 16:44:28 +01:00
  • 4752ceea0f WhisperGateIsOpen tccontre 2022-01-21 10:46:28 +01:00
  • 2b4f34956d WhisperGateIsOpen tccontre 2022-01-21 10:45:00 +01:00
  • 742441eb3d Update ping_sleep_batch_command.yml tccontre 2022-01-21 09:45:25 +01:00
  • bc0e4454c2 Update suspicious_process_file_path.yml tccontre 2022-01-21 09:38:21 +01:00
  • eef369a633 Update wscript_or_cscript_suspicious_child_process.yml tccontre 2022-01-21 09:37:16 +01:00
  • 044b81b922 Update add_or_set_windows_defender_exclusion.yml tccontre 2022-01-21 09:34:41 +01:00
  • ffa8c8652b Branch was auto-updated. pyth0n1c 2022-01-20 18:20:05 -08:00
  • debac7c483 Branch was auto-updated. pyth0n1c 2022-01-20 18:20:04 -08:00
  • 0621c82ddd Branch was auto-updated. pyth0n1c 2022-01-20 18:20:03 -08:00
  • 1a7afbbbde Branch was auto-updated. pyth0n1c 2022-01-20 18:20:02 -08:00
  • f4e36bc060 Branch was auto-updated. pyth0n1c 2022-01-20 18:20:01 -08:00
  • 1e7855e204 Branch was auto-updated. pyth0n1c 2022-01-20 18:20:00 -08:00
  • 693ba420b5 Branch was auto-updated. pyth0n1c 2022-01-20 18:19:59 -08:00
  • 72d48b26a8 Add mlmodel to lookups packaging (#1948) mhart-splunk 2022-01-20 21:18:54 -05:00
  • 906f0ee338 Changing the test dataset to the main branch Michael Hart 2022-01-20 21:09:22 -05:00
  • d8cb2d7a83 Branch was auto-updated. pyth0n1c 2022-01-20 16:07:15 -08:00
  • 020ed54b5b Branch was auto-updated. pyth0n1c 2022-01-20 16:07:14 -08:00
  • 1721347ae8 Branch was auto-updated. pyth0n1c 2022-01-20 16:07:13 -08:00
  • 6912709186 Branch was auto-updated. pyth0n1c 2022-01-20 16:07:12 -08:00
  • a8046a9927 Branch was auto-updated. pyth0n1c 2022-01-20 16:07:11 -08:00
  • 50b3efaf08 Branch was auto-updated. pyth0n1c 2022-01-20 16:07:10 -08:00
  • ad2324d863 Branch was auto-updated. pyth0n1c 2022-01-20 16:07:09 -08:00
  • de74520ad7 Merge pull request #1950 from splunk/ransomware_update Bhavin Patel 2022-01-20 16:06:49 -08:00
  • 6d13de615c duplicate patel-bhavin 2022-01-20 15:50:28 -08:00
  • 5bfcf2eea3 InstallUtil and DotNet Assemblies mhaag-spl 2022-01-20 14:34:04 -07:00
  • 2f9d410caf Updating test interval Michael Hart 2022-01-20 16:14:44 -05:00
  • 630f582ffc Branch was auto-updated. pyth0n1c 2022-01-20 13:07:09 -08:00
  • ce9cdf1b21 Branch was auto-updated. pyth0n1c 2022-01-20 13:07:09 -08:00
  • 89851095ec Branch was auto-updated. pyth0n1c 2022-01-20 13:07:08 -08:00
  • 8c912dd8d1 Branch was auto-updated. pyth0n1c 2022-01-20 13:07:07 -08:00
  • 0b540e0bc6 Branch was auto-updated. pyth0n1c 2022-01-20 13:07:06 -08:00
  • 594330362a Branch was auto-updated. pyth0n1c 2022-01-20 13:07:05 -08:00
  • 280b71bdb2 Branch was auto-updated. pyth0n1c 2022-01-20 13:07:04 -08:00
  • 69b262d1ab Merge pull request #1938 from splunk/update_ssa_ymls Jose Enrique Hernandez 2022-01-20 16:06:45 -05:00