admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7f5475ff8b plink mhaag-spl 2021-11-15 14:17:20 -07:00
  • 6d49266a5a draft TR-1217 patel-bhavin 2021-11-15 12:34:48 -08:00
  • d7e88b2e1a adding first two detections mvelazco 2021-11-15 15:09:47 -05:00
  • 3bbc33ef4a Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag Detection Testing Service 2021-11-15 18:48:08 +00:00
  • 24b1994699 Added detection testing service results inWindows InstallUtil Remote Network Connection root 2021-11-15 18:48:07 +00:00
  • 592504ff67 Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag Detection Testing Service 2021-11-15 18:46:36 +00:00
  • 48c0b7d039 Added detection testing service results inWindows InstallUtil Credential Theft root 2021-11-15 18:46:36 +00:00
  • 734b8575db Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag Detection Testing Service 2021-11-15 18:38:46 +00:00
  • 000a3acefb Added detection testing service results inWindows InstallUtil URL in Command Line root 2021-11-15 18:38:45 +00:00
  • 87fe65ac66 Added detection testing service results inWindows InstallUtil Uninstall Option with Network root 2021-11-15 18:38:15 +00:00
  • 5446bc59a8 Added detection testing service results inWindows InstallUtil URL in Command Line root 2021-11-15 17:59:30 +00:00
  • 6e5b06270e Update windows_installutil_credential_theft.yml mhaag-spl 2021-11-15 10:21:17 -07:00
  • 1aa5852b19 Update exchange_powershell_module_usage.yml mhaag-spl 2021-11-15 07:53:20 -07:00
  • e6cc42371e minor_ssa_update tccontre 2021-11-15 11:39:06 +01:00
  • f64fef09d7 Still needs a lot of rework and cleanup - can't run right now. Looking to finish cleanup on Monday. pyth0n1c 2021-11-12 17:11:10 -08:00
  • 4e16ab139d More maintenance to make the testing code more modular and better documented. pyth0n1c 2021-11-12 16:37:05 -08:00
  • b20d34c6a2 Huge changes to refactor docker based detection testing. Broke down massive testing file into smaller files. Not running or tested yet, but in progress. pyth0n1c 2021-11-12 15:32:02 -08:00
  • 07c0bd828b Added detection testing service results inWindows InstallUtil Uninstall Option root 2021-11-12 22:11:12 +00:00
  • c2f0b8d0f6 Added detection testing service results inSchtasks scheduling job on remote system root 2021-11-12 21:38:18 +00:00
  • dcad854d1b Added detection testing service results inRemote Process Instantiation via WMI root 2021-11-12 21:17:29 +00:00
  • 28ea433a81 Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement Detection Testing Service 2021-11-12 20:56:42 +00:00
  • 159faea4c6 Added detection testing service results inWindows Service Initiation on Remote Endpoint root 2021-11-12 20:56:41 +00:00
  • 8ff650ebe8 Added detection testing service results inWindows Service Creation on Remote Endpoint root 2021-11-12 20:56:33 +00:00
  • a7a85f2fc3 Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement mvelazco 2021-11-12 15:06:22 -05:00
  • 4c7108e0a3 fixing unsupported character mvelazco 2021-11-12 15:06:16 -05:00
  • 9903554d3a Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement Detection Testing Service 2021-11-12 20:05:57 +00:00
  • 1307c28bf1 Added detection testing service results inRemote Process Instantiation via WinRM and Winrs root 2021-11-12 20:05:57 +00:00
  • c5e962acfd Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag mhaag-spl 2021-11-12 13:05:49 -07:00
  • 878c0c775b InstallUTIL 🍺 mhaag-spl 2021-11-12 13:05:19 -07:00
  • 8fc57a8dd7 Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:35 -08:00
  • 9d6cd1093b Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:35 -08:00
  • 34a3ed8e74 Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:34 -08:00
  • d5bd756c96 Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:32 -08:00
  • 694527c8d8 Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:32 -08:00
  • 4c754f2030 Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:31 -08:00
  • d0616f5d34 Branch was auto-updated. Bhavin Patel 2021-11-12 12:03:30 -08:00
  • dac4ecee18 Merge pull request #1832 from splunk/duplicate_1796 Bhavin Patel 2021-11-12 12:03:13 -08:00
  • 81aa84283e Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement mvelazco 2021-11-12 14:46:05 -05:00
  • aebcc438f4 fixing test yml mvelazco 2021-11-12 14:45:56 -05:00
  • 700383c15f Added detection testing service results inAWS IAM AccessDenied Discovery Events duplicate_1796 root 2021-11-12 19:26:05 +00:00
  • d2fe1d784f Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement Detection Testing Service 2021-11-12 19:22:53 +00:00
  • 2f871fbe6f Added detection testing service results inScheduled Task Creation on Remote Endpoint using At root 2021-11-12 19:22:53 +00:00
  • d5d2b60068 Added detection testing service results inScheduled Task Initiation on Remote Endpoint root 2021-11-12 19:22:34 +00:00
  • 6d152fdf0d spll update patel-bhavin 2021-11-12 11:03:40 -08:00
  • 44d590dc2b fixing test file mvelazco 2021-11-12 13:14:45 -05:00
  • dd13c6a3f0 Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement mvelazco 2021-11-12 13:11:11 -05:00
  • a1a28600d0 datasets ready mvelazco 2021-11-12 13:11:10 -05:00
  • a07158cc74 Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:10 -08:00
  • 00bd6f8f53 Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:09 -08:00
  • ad9c5a9aac Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:08 -08:00
  • ac9bc78511 Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:06 -08:00
  • 9fa1a3f7e9 Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:05 -08:00
  • e874dac78d Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:04 -08:00
  • af973c10a4 Branch was auto-updated. Bhavin Patel 2021-11-12 07:57:00 -08:00
  • e13b72b5df Merge pull request #1830 from splunk/minor_name_fix Lou Stella 2021-11-12 09:56:40 -06:00
  • e73437719e Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement mvelazco 2021-11-12 10:51:38 -05:00
  • b237b096bc updating detection mvelazco 2021-11-12 10:51:35 -05:00
  • b74a889f95 Update attempt_to_delete_services.yml Jose Enrique Hernandez 2021-11-12 10:37:28 -05:00
  • ab18816b44 Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:11 -08:00
  • 12a0f8e4b1 Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:09 -08:00
  • e14ed9a2f0 Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:08 -08:00
  • 0ed697ed5f Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:07 -08:00
  • 8df77451dc Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:05 -08:00
  • 39355719b0 Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:04 -08:00
  • 63dc3739cf Branch was auto-updated. Bhavin Patel 2021-11-12 07:31:03 -08:00
  • d0b38d71d4 Merge pull request #1829 from splunk/dependabot/pip/identify-2.3.5 Lou Stella 2021-11-12 09:30:44 -06:00
  • 829adae19e Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag Detection Testing Service 2021-11-12 15:28:30 +00:00
  • 7a72387e2c Added detection testing service results inWMIC XSL Execution via URL root 2021-11-12 15:28:29 +00:00
  • 0280fbf5e7 Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:58 -08:00
  • 8901dfdf99 Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:56 -08:00
  • b5ff612453 Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:55 -08:00
  • b91ee0b4ed Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:54 -08:00
  • 63eecacb22 Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:53 -08:00
  • 7eb22d646c Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:52 -08:00
  • d1f0bb2ccf Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:50 -08:00
  • 1286c66839 Branch was auto-updated. Bhavin Patel 2021-11-12 07:24:49 -08:00
  • e628da1dc2 Merge pull request #1827 from splunk/dependabot/pip/tzlocal-4.1 Lou Stella 2021-11-12 09:24:31 -06:00
  • ff2860c78b Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:55 -08:00
  • cbafff6081 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:53 -08:00
  • dbbb5f1e2d Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:51 -08:00
  • 87ee2e09d8 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:50 -08:00
  • 20059fbfe9 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:49 -08:00
  • 436f5d02b1 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:47 -08:00
  • 9340370301 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:45 -08:00
  • ba4511e4b9 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:45 -08:00
  • b0955e2669 Branch was auto-updated. Bhavin Patel 2021-11-12 07:18:44 -08:00
  • be07b7ab78 Merge pull request #1826 from splunk/dependabot/pip/importlib-resources-5.4.0 Lou Stella 2021-11-12 09:18:19 -06:00
  • fb123e5ed5 Bump identify from 2.2.13 to 2.3.5 dependabot[bot] 2021-11-12 15:12:31 +00:00
  • 9bf1a824d3 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:24 -08:00
  • 9cd842bac5 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:23 -08:00
  • a9a0e79454 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:22 -08:00
  • 3eafcad4e6 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:20 -08:00
  • 75bdc73650 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:19 -08:00
  • 268fa14693 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:18 -08:00
  • d9b2f7a053 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:17 -08:00
  • 9d81e7fda3 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:16 -08:00
  • 4713345f45 Branch was auto-updated. Bhavin Patel 2021-11-12 07:12:14 -08:00
  • 2465ce4aab Merge pull request #1821 from splunk/dependabot/pip/configparser-5.1.0 Lou Stella 2021-11-12 09:11:51 -06:00
  • 1d2a186ed7 Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag mhaag-spl 2021-11-12 08:08:00 -07:00
  • a5a1157c77 Update wmic_xsl_execution_via_url.test.yml mhaag-spl 2021-11-12 08:07:59 -07:00