admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 1539fcb1cc Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:50 -08:00
  • 4263408a65 Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:46 -08:00
  • a4bcaef6db Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:43 -08:00
  • 266b6e1151 Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:42 -08:00
  • daffaeac60 Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:41 -08:00
  • 19eb60a778 Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:40 -08:00
  • 3ddbaae002 Branch was auto-updated. Bhavin Patel 2021-11-18 12:58:38 -08:00
  • a449b3d5cf Merge pull request #1825 from splunk/prodigal_haag Michael Haag 2021-11-18 13:58:18 -07:00
  • e7f395d6a5 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 mvelazco 2021-11-18 15:43:58 -05:00
  • 7d25f2599c updating other detections mvelazco 2021-11-18 15:43:56 -05:00
  • b78ea71386 Added detection testing service results inLoading Of Dynwrapx Module root 2021-11-18 14:28:20 +00:00
  • 08cc78c723 ioc_detections tccontre 2021-11-18 15:10:02 +01:00
  • ee2e94cd0d Merge branch 'ioc_detections' of github.com:splunk/security_content into ioc_detections tccontre 2021-11-18 13:00:41 +01:00
  • f2f3eb3231 ioc_detections tccontre 2021-11-18 13:00:20 +01:00
  • 8d42e73720 Added detection testing service results inSuspicious Process DNS Query Known Abuse Web Services root 2021-11-18 11:27:52 +00:00
  • b20185a037 Update ssa___attempt_to_delete_services.yml tccontre 2021-11-18 12:11:02 +01:00
  • d7b23700ef Update information_sabotage.yml tccontre 2021-11-18 12:10:21 +01:00
  • b566f7c72f ioc_detections tccontre 2021-11-18 12:05:43 +01:00
  • 82d53ccbd9 Moving to json based configuration files and a framework to generate that file, too pyth0n1c 2021-11-17 16:23:39 -08:00
  • 56f4223ecd Added some supporting code that will make generating config files and validating arguments easier. pyth0n1c 2021-11-17 14:09:28 -08:00
  • 7ba2d8d412 removed mhaag-spl 2021-11-17 14:47:49 -07:00
  • 18ad17726e Update windows_enable_defaultaccount.yml mhaag-spl 2021-11-17 12:01:58 -07:00
  • 7014972391 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 Detection Testing Service 2021-11-17 18:00:11 +00:00
  • a442e207fe Added detection testing service results inRemote Process Instantiation via WinRM and PowerShell Script Block root 2021-11-17 18:00:10 +00:00
  • bba838dde1 Added detection testing service results inRemote Process Instantiation via WinRM and PowerShell root 2021-11-17 17:59:33 +00:00
  • 4f356d3398 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 Detection Testing Service 2021-11-17 17:38:32 +00:00
  • 16218d8d85 Added detection testing service results inRemote Process Instantiation via WMI and PowerShell Script Block root 2021-11-17 17:38:32 +00:00
  • 75e7628f04 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 Detection Testing Service 2021-11-17 17:34:46 +00:00
  • 5c8c71e813 Added detection testing service results inRemote Process Instantiation via WMI and PowerShell root 2021-11-17 17:34:45 +00:00
  • 59ad0b224b Added detection testing service results inRemote Process Instantiation via DCOM and PowerShell Script Block root 2021-11-17 17:32:46 +00:00
  • 006c70ca7c Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections Detection Testing Service 2021-11-17 17:29:56 +00:00
  • 1697f8fdc1 Added detection testing service results inRunas Execution in CommandLine root 2021-11-17 17:29:56 +00:00
  • 476656b206 Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections Detection Testing Service 2021-11-17 17:21:52 +00:00
  • be52e7f820 Added detection testing service results inNetwork Discovery Using Route Windows App root 2021-11-17 17:21:51 +00:00
  • 9060785858 Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections Detection Testing Service 2021-11-17 17:18:18 +00:00
  • 0d919f6d15 Added detection testing service results inCSC Net On The Fly Compilation root 2021-11-17 17:18:17 +00:00
  • 525c57d80f Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections Detection Testing Service 2021-11-17 17:16:05 +00:00
  • c1e4366302 Added detection testing service results inFirewall Allowed Program Enable root 2021-11-17 17:16:04 +00:00
  • 82ad0c564d Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections Detection Testing Service 2021-11-17 17:12:42 +00:00
  • 5720f62c97 Added detection testing service results inHigh Frequency Copy Of Files In Network Share root 2021-11-17 17:12:42 +00:00
  • 64cf4a3e24 Added detection testing service results inRemote Process Instantiation via DCOM and PowerShell root 2021-11-17 17:05:18 +00:00
  • ff8df1c3da ioc_detections tccontre 2021-11-17 17:59:06 +01:00
  • 982f48a037 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 mvelazco 2021-11-17 11:27:11 -05:00
  • dbd6f1eb73 Merge branch 'develop' into TR-1085_LateralMovement_2 mvelazco 2021-11-17 11:27:08 -05:00
  • 596de7d662 ioc_detections tccontre 2021-11-17 17:09:43 +01:00
  • aadd9fb471 ioc_detections tccontre 2021-11-17 16:20:52 +01:00
  • 9fa410ac29 ioc_detections tccontre 2021-11-17 16:09:42 +01:00
  • e6a6ad5598 Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag mhaag-spl 2021-11-17 07:39:20 -07:00
  • 6eb9d23776 Update windows_enable_defaultaccount.yml mhaag-spl 2021-11-17 07:39:18 -07:00
  • 873b417893 Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:26 -08:00
  • 4f52e33aff Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:24 -08:00
  • 129970c069 Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:20 -08:00
  • d8123c70f0 Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:19 -08:00
  • 1db238749c Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:18 -08:00
  • 3eaee07536 Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:17 -08:00
  • fb544d5cae Branch was auto-updated. Bhavin Patel 2021-11-17 05:23:16 -08:00
  • ec4ebdcb83 Merge branch 'develop' into prodigal_haag P4T12ICK 2021-11-17 14:22:32 +01:00
  • 531f8a64c0 Merge pull request #1837 from splunk/fix_generate_bug P4T12ICK 2021-11-17 14:21:49 +01:00
  • 55848f9277 fixed bug in handling imports P4T12ICK 2021-11-17 13:47:13 +01:00
  • 095bf01565 ssa_sdelete tccontre 2021-11-17 12:02:33 +01:00
  • 3411e3dd94 ssa_sdelete tccontre 2021-11-17 11:52:43 +01:00
  • 7948c3c1c6 Update ssa___attempt_to_disable_services.yml tccontre 2021-11-17 11:42:54 +01:00
  • 49d0042b19 ssa_sdelete tccontre 2021-11-17 11:25:01 +01:00
  • e2bbcdb9b9 ssa_sdelete tccontre 2021-11-17 11:20:05 +01:00
  • 5a93a95a75 ssa_sdelete tccontre 2021-11-17 11:16:54 +01:00
  • 7666379cb3 Merge branch 'publish_build_to_pre_qa' of github.com:splunk/security_content into publish_build_to_pre_qa mjobanputra 2021-11-17 14:57:28 +05:30
  • a13e6356d4 Update log message mjobanputra 2021-11-17 14:56:48 +05:30
  • 80a1b9ad9b More progress adding and parsing new arguments. pyth0n1c 2021-11-16 17:19:43 -08:00
  • f521e76d0a adding two extra detections mvelazco 2021-11-16 17:41:01 -05:00
  • 4b42586bfd Created a new file to develop the arguments parsing logic. pyth0n1c 2021-11-16 12:47:42 -08:00
  • a915e56292 rebuilt mhaag-spl 2021-11-16 09:38:19 -07:00
  • 66ba3885da spacing mhaag-spl 2021-11-16 07:49:37 -07:00
  • fca927b3f7 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 mvelazco 2021-11-15 22:42:24 -05:00
  • 37845b815d adding 2 extra detections mvelazco 2021-11-15 22:42:22 -05:00
  • 7aca8f6203 Removed the image_manager.py file - it was simple and its functionality was integrated into the container_manager.py. pyth0n1c 2021-11-15 16:11:17 -08:00
  • 9d1f391883 Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:33 -08:00
  • 91693022e2 Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:32 -08:00
  • 09748cc1c0 Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:31 -08:00
  • 5a6f592586 Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:27 -08:00
  • 2170e89b6e Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:26 -08:00
  • b89e7c6579 Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:24 -08:00
  • af23d0506c Branch was auto-updated. Bhavin Patel 2021-11-15 14:53:23 -08:00
  • ffba11d491 Merge pull request #1773 from splunk/feature/PEX-33-API-lambda-scalability-issue Bhavin Patel 2021-11-15 14:53:04 -08:00
  • 9e435bbc43 Lots more changes as we break into separate files for more readability and maintainability. Big changes around printing status and managing different threads as they run. pyth0n1c 2021-11-15 14:47:24 -08:00
  • f5a627f091 Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag Detection Testing Service 2021-11-15 22:23:16 +00:00
  • 76b92849a3 Added detection testing service results inWindows DiskCryptor Usage root 2021-11-15 22:23:15 +00:00
  • 98eebd76fd Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag Detection Testing Service 2021-11-15 22:21:34 +00:00
  • 6e45efbf98 Added detection testing service results inWindows DiskCryptor Usage root 2021-11-15 22:21:33 +00:00
  • 8f6fe7cc45 Added detection testing service results inWindows DiskCryptor Usage root 2021-11-15 22:17:34 +00:00
  • 6cb7daf9b1 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:27 -08:00
  • 5df971fe13 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:25 -08:00
  • e4cc990a57 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:24 -08:00
  • c0038f5c82 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:22 -08:00
  • 1a20a79a1b Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:19 -08:00
  • 8f9eb87116 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:18 -08:00
  • 4ec3670291 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:18 -08:00
  • 6e68c6b3f5 Branch was auto-updated. Bhavin Patel 2021-11-15 13:49:17 -08:00
  • a83e0ce977 Merge pull request #1798 from splunk/fixing_issues pyth0n1c 2021-11-15 13:48:56 -08:00
  • ee3e77b45c DefaultAccount mhaag-spl 2021-11-15 14:30:14 -07:00
  • 084e781385 dcrypt mhaag-spl 2021-11-15 14:22:39 -07:00