admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 974d1bfc40 Branch was auto-updated. minor_api_gen_bug Bhavin Patel 2021-12-15 11:47:08 -08:00
  • 589aa6e233 Merge pull request #1891 from splunk/bug_with_playbook_detections Jose Enrique Hernandez 2021-12-15 14:46:51 -05:00
  • 2862f68474 fixing bug with dead links d1vious 2021-12-15 14:35:04 -05:00
  • 0465904d55 fixing links reported by Josh Morris via Slack bug_with_playbook_detections_link d1vious 2021-12-15 14:25:23 -05:00
  • b341343435 Updated friendly name Lou Stella 2021-12-15 11:30:26 -06:00
  • c8cc65bf3d updated api d1vious 2021-12-15 11:18:17 -05:00
  • 028863eea9 Updated screenshot Lou Stella 2021-12-15 10:15:39 -06:00
  • be760c4171 test:conflict resolved Detection Testing Service 2021-12-15 21:21:45 +05:30
  • a2b6fff739 test:updated ymls Detection Testing Service 2021-12-15 21:15:02 +05:30
  • 8ef6a460ab added story and story tags entities P4T12ICK 2021-12-15 13:39:24 +01:00
  • 6f2a298788 fixes a logic bug with the api that caused ci to fail d1vious 2021-12-14 22:52:18 -05:00
  • ff3319329e updating docs and package bits [ci skip] research bot 2021-12-15 02:58:27 +00:00
  • 341ecd9280 Branch was auto-updated. Bhavin Patel 2021-12-14 18:47:11 -08:00
  • e432fe6630 Branch was auto-updated. Bhavin Patel 2021-12-14 18:47:09 -08:00
  • 605951a96e Branch was auto-updated. Bhavin Patel 2021-12-14 18:47:08 -08:00
  • 61d583e45e Branch was auto-updated. Bhavin Patel 2021-12-14 18:47:02 -08:00
  • 8502feeb2a Branch was auto-updated. Bhavin Patel 2021-12-14 18:47:00 -08:00
  • f0c1ef304f Merge pull request #1887 from splunk/The_Day_After_Log4shell v3.32.0 Jose Enrique Hernandez 2021-12-14 21:46:40 -05:00
  • 53b9f9033e Merge branch 'develop' into The_Day_After_Log4shell d1vious 2021-12-14 21:41:21 -05:00
  • 7c72f6e192 updating docs d1vious 2021-12-14 21:40:19 -05:00
  • 88c14b72b7 Branch was auto-updated. Bhavin Patel 2021-12-14 18:34:20 -08:00
  • 24b69b7405 Branch was auto-updated. Bhavin Patel 2021-12-14 18:34:19 -08:00
  • 3cec71117f Branch was auto-updated. Bhavin Patel 2021-12-14 18:34:16 -08:00
  • 7408694676 Branch was auto-updated. Bhavin Patel 2021-12-14 18:34:15 -08:00
  • 0b850a34d2 Branch was auto-updated. Bhavin Patel 2021-12-14 18:34:14 -08:00
  • 17344644e1 updating docs d1vious 2021-12-14 21:33:54 -05:00
  • 97a20df8ae Added detection testing service results inHunting for Log4Shell root 2021-12-15 02:19:55 +00:00
  • cea91f725e Create hunting_for_log4shell.test.yml mhaag-spl 2021-12-14 19:00:04 -07:00
  • 82b45a1cf9 the final push Lou Stella 2021-12-14 19:47:53 -06:00
  • f8d3d5a1f9 SSH response Lou Stella 2021-12-14 19:43:19 -06:00
  • fafa45fcc9 fixing backslide Lou Stella 2021-12-14 19:41:19 -06:00
  • 2cd9e3940d Two more yamls Lou Stella 2021-12-14 19:38:19 -06:00
  • da086f8c00 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell Lou Stella 2021-12-14 19:31:59 -06:00
  • 4a5154592e the YAMLfication of words Lou Stella 2021-12-14 19:31:42 -06:00
  • f453a537b1 Update java_class_file_download_by_java_user_agent.yml Bhavin Patel 2021-12-14 17:28:16 -08:00
  • 544c7b0b9f parent playbook Lou Stella 2021-12-14 19:27:42 -06:00
  • 5fb532e10d Another playbook Lou Stella 2021-12-14 19:24:32 -06:00
  • 7eef18e0dc Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell Lou Stella 2021-12-14 19:05:57 -06:00
  • fa976bcfa8 Update internal_host_splunk_investigate_log4j.yml Lou Stella 2021-12-14 19:05:49 -06:00
  • a6fbee30e8 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell d1vious 2021-12-14 19:59:32 -05:00
  • b9987c68d3 fixing stories spelling mistakes d1vious 2021-12-14 19:59:27 -05:00
  • 60e3d4f4e5 ... and another one Lou Stella 2021-12-14 18:59:22 -06:00
  • 4b7e38cdee Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell Lou Stella 2021-12-14 18:47:04 -06:00
  • 94b3fa5aa3 Create log4j_investigate_and_respond.png Lou Stella 2021-12-14 18:46:51 -06:00
  • 1d04e6f78a minor playbook updates d1vious 2021-12-14 19:46:04 -05:00
  • bba9f90754 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell d1vious 2021-12-14 19:38:55 -05:00
  • 16b771eae2 adding tags to detections d1vious 2021-12-14 19:38:51 -05:00
  • 54c8f81958 Another one Lou Stella 2021-12-14 18:38:02 -06:00
  • d33ed87e73 Some playbooks Lou Stella 2021-12-14 18:34:37 -06:00
  • 672609671b Add screenshot & updated description text Lou Stella 2021-12-14 18:20:29 -06:00
  • bf1fec5139 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell Lou Stella 2021-12-14 18:01:17 -06:00
  • 62e14b678a Initial YAML commit Lou Stella 2021-12-14 18:01:14 -06:00
  • 6eb4eab2bb Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell patel-bhavin 2021-12-14 13:51:14 -08:00
  • 918e73d414 Update hunting_for_log4shell.yml mhaag-spl 2021-12-14 14:35:25 -07:00
  • 34cfcef5cb Fixed a bug where we were printing the wrong skipped tests due to folder names. Instead we were printing the tests we did not skip. pyth0n1c 2021-12-14 13:14:31 -08:00
  • 55ccb09927 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell patel-bhavin 2021-12-14 13:09:12 -08:00
  • a475df1cb0 Removed throwing error if experimental is in the path of a test/detection. pyth0n1c 2021-12-14 13:01:07 -08:00
  • 49695ed2c5 Preparing fixes for properly allowing testing to include or exclude folders. For example, by default we will not include and test detections or tests in experimental. pyth0n1c 2021-12-14 12:59:17 -08:00
  • 303d082e43 Create hunting_for_log4shell.yml mhaag-spl 2021-12-14 13:20:22 -07:00
  • a4aaf03206 Update outbound_network_connection_from_java_using_default_ports.yml Bhavin Patel 2021-12-14 12:18:58 -08:00
  • 9ba2c45a24 Update cmd_carry_out_string_command_parameter.yml Bhavin Patel 2021-12-14 12:17:08 -08:00
  • 05b189232d ldap outbound patel-bhavin 2021-12-14 10:10:23 -08:00
  • 66a72dff7a Added detection testing service results inLog4Shell JNDI Payload Injection with Outbound Connection root 2021-12-14 18:05:07 +00:00
  • f59961186a log4j P4T12ICK 2021-12-14 18:43:55 +01:00
  • b278b43978 log4j P4T12ICK 2021-12-14 18:43:02 +01:00
  • f03ab2f721 Added detection testing service results inLog4Shell JNDI Payload Injection Attempt root 2021-12-14 17:42:22 +00:00
  • 3f59f79b93 log4j P4T12ICK 2021-12-14 18:21:58 +01:00
  • 3bf46de4c7 removed files causing generate to break Lou Stella 2021-12-14 11:20:13 -06:00
  • a9edbc20bd log4j P4T12ICK 2021-12-14 17:49:26 +01:00
  • 45cd729295 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell P4T12ICK 2021-12-14 17:44:19 +01:00
  • 3dc854e68e log4j P4T12ICK 2021-12-14 17:43:19 +01:00
  • 50ef5d4193 Renamed splunk investigation playbook Lou Stella 2021-12-14 09:58:17 -06:00
  • b33a05700c initial commit of playbook yamls Lou Stella 2021-12-14 09:55:34 -06:00
  • f84b61357c Improved Proxy detection P4T12ICK 2021-12-14 16:35:31 +01:00
  • bb06f84f61 test:added enriched detections and script for the same Detection Testing Service 2021-12-14 14:21:31 +05:30
  • 343ceae12f Updated detection files with supported TA list. tlangalia 2021-12-14 13:27:55 +05:50
  • 7e6cb9381b Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell d1vious 2021-12-14 00:54:44 -05:00
  • 946503dc76 added two new detections, ymls are not finished d1vious 2021-12-14 00:54:37 -05:00
  • e17ecfc007 Added detection testing service results inDetect Outbound LDAP Traffic log4shell_johan_queries root 2021-12-14 02:28:50 +00:00
  • e2ffa28957 testing using zeek patel-bhavin 2021-12-13 18:08:18 -08:00
  • 166cb7d3f0 minor patel-bhavin 2021-12-13 17:59:05 -08:00
  • 10418d295a Update outbound_network_connection_from_java_using_default_ports.yml mvelazco 2021-12-13 20:22:14 -05:00
  • c1dac05e2b Added detection testing service results inOutbound Network Connection from Java Using Default Ports root 2021-12-13 23:19:25 +00:00
  • 72005d4806 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell mvelazco 2021-12-13 18:00:30 -05:00
  • 19bd2fd736 updating sysmon macro mvelazco 2021-12-13 18:00:14 -05:00
  • 8f1408ba42 Added detection testing service results inJava Class File download by Java User Agent root 2021-12-13 22:45:11 +00:00
  • df73312009 filter patel-bhavin 2021-12-13 14:14:45 -08:00
  • 1c26e4738e Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell mvelazco 2021-12-13 17:07:03 -05:00
  • 52692732cd fixing minor issue mvelazco 2021-12-13 17:07:02 -05:00
  • 2565ad2bbf Update windows_shells.yml Michael Haag 2021-12-13 14:37:40 -07:00
  • cb4d003f4e updating dataset tag mvelazco 2021-12-13 16:24:39 -05:00
  • 193ea6fdfb attack datasets patel-bhavin 2021-12-13 13:15:41 -08:00
  • 1671728147 Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell mvelazco 2021-12-13 15:51:45 -05:00
  • 2c62039a03 adding detection mvelazco 2021-12-13 15:51:43 -05:00
  • 71313ccfb4 first version of ldap patel-bhavin 2021-12-13 12:38:38 -08:00
  • 28633f099a Update java_class_file_download_by_java_user_agent.yml mhaag-spl 2021-12-13 13:35:20 -07:00
  • 050bc8d886 ☕ mhaag-spl 2021-12-13 13:32:27 -07:00
  • 5a91ebedd2 Removed Analytic Story Execution App (ASX) from default apps + Actions config and added sysmon for linux app to the the Actions Config File pyth0n1c 2021-12-13 12:20:28 -08:00
  • 71295432e3 Windows shells mhaag-spl 2021-12-13 13:01:45 -07:00
  • f3b31c113b java Shells mhaag-spl 2021-12-13 11:54:59 -07:00