admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 4d7d7ef645 wrong file patel-bhavin 2022-01-20 12:55:07 -08:00
  • 9f771f1052 Merge branch 'develop' into update_ssa_ymls Bhavin Patel 2022-01-20 12:53:19 -08:00
  • 2a614512e4 file name bugs patel-bhavin 2022-01-20 12:51:32 -08:00
  • 96b979bce4 Branch was auto-updated. pyth0n1c 2022-01-20 12:28:32 -08:00
  • bbb3ea16c0 Branch was auto-updated. pyth0n1c 2022-01-20 12:28:30 -08:00
  • 76221cf4dd Branch was auto-updated. pyth0n1c 2022-01-20 12:28:29 -08:00
  • 79766f5133 Branch was auto-updated. pyth0n1c 2022-01-20 12:28:28 -08:00
  • a5c6056aac Branch was auto-updated. pyth0n1c 2022-01-20 12:28:27 -08:00
  • f9cb7214f1 Branch was auto-updated. pyth0n1c 2022-01-20 12:28:26 -08:00
  • 4e583266ed Branch was auto-updated. pyth0n1c 2022-01-20 12:28:24 -08:00
  • 9909e710ac Merge pull request #1949 from splunk/dataupdate Jose Enrique Hernandez 2022-01-20 15:28:00 -05:00
  • 85c1f12905 Update ssa___fsutil_zeroing_file.test.yml mhaag-spl 2022-01-20 13:11:55 -07:00
  • adfe9703c4 Updated BA 4688 dataset mhaag-spl 2022-01-20 12:56:36 -07:00
  • 4a7435f998 Temporarily changing location for samples Michael Hart 2022-01-20 11:32:55 -05:00
  • a8e9287410 WhisperGateIsOpen tccontre 2022-01-20 16:13:00 +01:00
  • 1b510a0929 WhisperGateIsOpen tccontre 2022-01-20 15:11:12 +01:00
  • be8f75c5fa fixed detections and stories metadata P4T12ICK 2022-01-20 14:52:39 +01:00
  • 1fb3fb8064 Adding required fields and fixing URL in test Michael Hart 2022-01-20 08:47:34 -05:00
  • 14db58ca19 Adding a yaml file to ensure that contentctl copies the mlmodel file to the right place Michael Hart 2022-01-20 08:32:39 -05:00
  • a95e0e5aa6 fixed detections metadata P4T12ICK 2022-01-20 13:42:50 +01:00
  • 79f96d3270 WhisperGateIsOpen tccontre 2022-01-20 12:29:00 +01:00
  • f62552f7bb Added body field with Finding Report Object P4T12ICK 2022-01-20 11:43:36 +01:00
  • 3c883ef481 Merge branch 'develop' into ssa_add_body_fields P4T12ICK 2022-01-20 11:43:10 +01:00
  • 82c258bfdb Added body field with Finding Report Object P4T12ICK 2022-01-20 11:40:16 +01:00
  • c6d4e40abf Adding in attack data Michael Hart 2022-01-19 21:36:46 -05:00
  • 6cbf5b67d9 Updated detection logic Michael Hart 2022-01-19 21:15:51 -05:00
  • 5798dd291d Fixing references issue Michael Hart 2022-01-19 21:01:08 -05:00
  • 0f2eae3108 Fixing missing filter statement Michael Hart 2022-01-19 20:14:28 -05:00
  • c3f59cb750 Renaming the macro Michael Hart 2022-01-19 20:08:39 -05:00
  • 82e6efb466 Adding in model lookup file Michael Hart 2022-01-19 20:04:16 -05:00
  • b59380d324 Potentially malicious execution on command line Michael Hart 2022-01-19 20:02:42 -05:00
  • 167574e892 tweaked search Lou Stella 2022-01-19 17:35:10 -06:00
  • 23c578c95d pex-43: update detection JSON for v3.33.0 Danny Leung 2022-01-19 15:23:47 -08:00
  • d3aa2403d1 WhisperGateIsOpen tccontre 2022-01-19 18:53:16 +01:00
  • 14c26f7475 Branch was auto-updated. pyth0n1c 2022-01-19 09:41:52 -08:00
  • e0e7975c47 Branch was auto-updated. pyth0n1c 2022-01-19 09:41:51 -08:00
  • d46b1ddef5 Branch was auto-updated. pyth0n1c 2022-01-19 09:41:50 -08:00
  • 4885f91425 Branch was auto-updated. pyth0n1c 2022-01-19 09:41:49 -08:00
  • 152330c2a6 Branch was auto-updated. pyth0n1c 2022-01-19 09:41:45 -08:00
  • fdb5dfe6d8 Branch was auto-updated. pyth0n1c 2022-01-19 09:41:43 -08:00
  • 3703c6324a Merge pull request #1939 from splunk/ssa_rclone Bhavin Patel 2022-01-19 09:41:19 -08:00
  • 7d5cfe5ad5 added source Michael Haag 2022-01-19 09:15:37 -07:00
  • 93c662e5dc added body field P4T12ICK 2022-01-19 16:24:26 +01:00
  • a28d611cbc WhisperGateIsOpen tccontre 2022-01-19 14:55:02 +01:00
  • 4e971b693c WhisperGateIsOpen tccontre 2022-01-19 14:51:20 +01:00
  • 4cff83c86d WhisperGateIsOpen tccontre 2022-01-19 14:06:45 +01:00
  • 05218c71e8 WhisperGateIsOpen tccontre 2022-01-19 13:46:17 +01:00
  • 312be225c0 WhisperGateIsOpen tccontre 2022-01-19 13:41:50 +01:00
  • 6fd7a4e812 test: updated supported_tas to recommended_tas Detection Testing Service 2022-01-17 14:13:50 +05:30
  • fe541625eb fix detections P4T12ICK 2022-01-19 09:56:04 +01:00
  • f17abe251f Update cmd_carry_out_string_command_parameter.yml mhaag-spl 2022-01-18 19:41:50 -07:00
  • e5dfe45bf7 Update cmd_carry_out_string_command_parameter.yml mhaag-spl 2022-01-18 19:40:11 -07:00
  • bbea800499 whisper1 mhaag-spl 2022-01-18 19:36:58 -07:00
  • 021f7b65e6 Branch was auto-updated. pyth0n1c 2022-01-18 14:23:32 -08:00
  • c8097d685e Merge pull request #1944 from splunk/playbook_update Bhavin Patel 2022-01-18 14:23:16 -08:00
  • e9fa08a4a8 Branch was auto-updated. pyth0n1c 2022-01-18 14:03:24 -08:00
  • e3ef3cc2a9 Branch was auto-updated. pyth0n1c 2022-01-18 14:03:23 -08:00
  • 36a9c04c9a Merge pull request #1930 from splunk/dependabot/pip/pillow-9.0.0 Lou Stella 2022-01-18 16:03:05 -06:00
  • 498b7c8af9 Bump pillow from 8.4.0 to 9.0.0 dependabot[bot] 2022-01-18 21:54:44 +00:00
  • 09284d54f4 Branch was auto-updated. pyth0n1c 2022-01-18 13:29:17 -08:00
  • f40756f3b6 Branch was auto-updated. pyth0n1c 2022-01-18 13:29:16 -08:00
  • 852df4c6e7 Merge pull request #1943 from splunk/Fixing-Wrong-Data-Models mvelazco 2022-01-18 16:28:55 -05:00
  • b27059b4fe Updating playbooks Lou Stella 2022-01-18 15:12:03 -06:00
  • 3105bda778 fixing wrong data models mvelazco 2022-01-18 15:48:01 -05:00
  • 2cba1d3408 fixing wrong data models mvelazco 2022-01-18 12:58:06 -05:00
  • e9cff8e0a4 updating data model field mvelazco 2022-01-18 12:36:49 -05:00
  • 06fdc44cc2 Branch was auto-updated. pyth0n1c 2022-01-18 09:00:50 -08:00
  • 6216800158 Merge pull request #1940 from splunk/Minor-Fix-on-Lateral-Movement-Hunting-Analytic mvelazco 2022-01-18 12:00:23 -05:00
  • 774317fc97 adding missing '|' mvelazco 2022-01-18 11:08:19 -05:00
  • 5a3d277c9f fixed more detections P4T12ICK 2022-01-18 14:17:09 +01:00
  • 6e34aa9cc8 fixed more detections P4T12ICK 2022-01-18 13:58:57 +01:00
  • 96ba6f8e73 fixed more detections P4T12ICK 2022-01-18 13:51:37 +01:00
  • cc5d778466 fixed more detections P4T12ICK 2022-01-18 13:41:02 +01:00
  • 338f22f7e2 fixed more detections P4T12ICK 2022-01-18 13:13:30 +01:00
  • 84092434a2 fixed more detections P4T12ICK 2022-01-18 12:53:54 +01:00
  • 1568a95b47 fixed a bunch of detections P4T12ICK 2022-01-18 08:25:39 +01:00
  • f48f8f5b71 fixed bugs in detections after running new validate P4T12ICK 2022-01-17 17:45:12 +01:00
  • 98e5af3713 put baselines and investigations into its own folder P4T12ICK 2022-01-17 10:56:04 +01:00
  • 49ed1fad9e add content_organizer P4T12ICK 2022-01-17 10:51:45 +01:00
  • 15531b5cfc add content_organizer P4T12ICK 2022-01-17 10:49:57 +01:00
  • 9ed2766f6c improved content_changer P4T12ICK 2022-01-17 09:44:04 +01:00
  • 235ff4831b Merge branch 'splunk:develop' into test/enrich_detections truptilangalia-crest 2022-01-17 13:41:35 +05:30
  • 03ca15f346 remove dist/saaws patel-bhavin 2022-01-14 15:40:41 -08:00
  • da12571e7d file naming consistency patel-bhavin 2022-01-14 14:58:11 -08:00
  • af465476c9 file name errors patel-bhavin 2022-01-14 14:41:26 -08:00
  • f45d2067da fix for test key in yml patel-bhavin 2022-01-14 14:11:23 -08:00
  • e5403b97c6 Added detection testing service results inDetect LinEnum execution root 2022-01-14 17:24:17 +00:00
  • b928268e90 Merge pull request #1937 from splunk/DockerDetectionUpdatesAndFixes pyth0n1c 2022-01-14 08:55:34 -08:00
  • 774feed609 fix1k Rod Soto 2022-01-14 07:32:16 -08:00
  • 329d1433ab allabouttheT Rod Soto 2022-01-14 07:28:06 -08:00
  • d4155c8030 tftest Rod Soto 2022-01-14 07:20:45 -08:00
  • 1751378616 fixedtestfileag Rod Soto 2022-01-14 07:14:38 -08:00
  • 78eb40973e Merge branch 'nixpost' of github.com:splunk/security_content into nixpost Rod Soto 2022-01-14 07:07:28 -08:00
  • 09f0763913 Update detect_linenum_execution.test.yml Rod Soto 2022-01-14 07:00:45 -08:00
  • 82e32f0db6 fixedtestfile Rod Soto 2022-01-14 06:53:23 -08:00
  • 08a601fee6 Merge branch 'nixpost' of https://github.com/splunk/security_content into nixpost Detection Testing Service 2022-01-14 14:48:41 +00:00
  • 95be1b79b0 Added detection testing service results inDetect MimiPenguin root 2022-01-14 14:48:40 +00:00
  • ec3d2494b0 Merge branch 'nixpost' of https://github.com/splunk/security_content into nixpost Detection Testing Service 2022-01-14 14:48:22 +00:00
  • 16302611be Added detection testing service results inDetect Linux Exploit Suggester Execution root 2022-01-14 14:48:21 +00:00
  • 9c987e4222 Added detection testing service results inDetect AutoSUID post exploitation tool root 2022-01-14 14:47:41 +00:00