admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 31a0177b31 Added detection testing service results inGetCurrent User with PowerShell Script Block root 2021-09-14 13:35:28 +00:00
  • 4abb769c46 Added detection testing service results inGetCurrent User with PowerShell root 2021-09-14 13:33:53 +00:00
  • d3c2aed6b0 fin7 tccontre 2021-09-14 12:20:02 +02:00
  • d8d8c4e44c FIN7 tccontre 2021-09-14 12:17:55 +02:00
  • 893822a9c9 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 Detection Testing Service 2021-09-13 22:58:59 +00:00
  • a51106c70d Added detection testing service results inUser Discovery With Env Vars PowerShell root 2021-09-13 22:58:58 +00:00
  • d953fb05b1 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 Detection Testing Service 2021-09-13 22:58:57 +00:00
  • 137aa7a5e5 Added detection testing service results inUser Discovery With Env Vars PowerShell Script Block root 2021-09-13 22:58:57 +00:00
  • e4719b9437 Added detection testing service results inSystem User Discovery With Whoami root 2021-09-13 22:56:08 +00:00
  • 07e27ba6ae Added detection testing service results inSystem User Discovery With Query root 2021-09-13 22:03:33 +00:00
  • 2959c2edb7 Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9 mvelazco 2021-09-13 17:22:33 -04:00
  • 687fb1745c adding 4 detections mvelazco 2021-09-13 17:22:30 -04:00
  • 9522b364c5 Branch was auto-updated. Bhavin Patel 2021-09-13 11:10:27 -07:00
  • 70dc4c3414 Merge pull request #1658 from splunk/AD_Discovery_TR-789_8 Bhavin Patel 2021-09-13 11:10:10 -07:00
  • eca9191516 Branch was auto-updated. Bhavin Patel 2021-09-13 11:09:36 -07:00
  • b94510f831 Merge pull request #1624 from splunk/AD_Discovery_TR-789_3 Bhavin Patel 2021-09-13 11:09:16 -07:00
  • 5cd91c53c2 Branch was auto-updated. Bhavin Patel 2021-09-13 11:07:52 -07:00
  • 2a06605804 Merge pull request #1596 from splunk/AD_Discovery_TR-789_6 Bhavin Patel 2021-09-13 11:07:33 -07:00
  • 20913cd362 Branch was auto-updated. Bhavin Patel 2021-09-13 11:06:38 -07:00
  • 361c57dfc7 Merge pull request #1620 from splunk/AD_Discovery_TR-789_7 Bhavin Patel 2021-09-13 11:06:16 -07:00
  • ce3b5cadfd initial 2 detections mvelazco 2021-09-13 12:08:42 -04:00
  • 6684db4aab Delete CNAME Jose Enrique Hernandez 2021-09-13 11:30:38 -04:00
  • 1d1c93893b add new alert action P4T12ICK 2021-09-13 17:10:37 +02:00
  • fd34f91dcd Update create_or_delete_windows_shares_using_net_exe.yml mhaag-spl 2021-09-13 07:34:37 -06:00
  • 8c10f910e7 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs d1vious 2021-09-13 09:13:36 -04:00
  • a3cc73a53d add new alert action P4T12ICK 2021-09-13 13:48:46 +02:00
  • f6df3344bb add new alert action P4T12ICK 2021-09-13 12:59:00 +02:00
  • 8cae9d0130 add new alert action P4T12ICK 2021-09-13 12:56:16 +02:00
  • f69826e682 changed dashboard P4T12ICK 2021-09-13 12:36:59 +02:00
  • b708b3a376 changed dashboard P4T12ICK 2021-09-13 09:19:51 +02:00
  • c9cadfe6fb updating index d1vious 2021-09-13 00:16:26 -04:00
  • 6d0a679a9d Create CNAME Jose Enrique Hernandez 2021-09-12 20:40:25 -04:00
  • bbf6df82bd added analytic stories, cleaned up view a bit d1vious 2021-09-12 20:39:15 -04:00
  • 43a2bd5713 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs d1vious 2021-09-11 21:34:23 -04:00
  • 0b900fa7af Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-09-10 23:02:28 -07:00
  • 9d694d78a6 Merge pull request #1659 from splunk/cab-in-the-inf mvelazco 2021-09-10 15:08:29 -04:00
  • b138ecff4e Added detection testing service results inOffice Product Writing cab or inf root 2021-09-10 18:18:08 +00:00
  • 7ea257e5e5 Added detection testing service results inNetwork Connection Discovery With Arp root 2021-09-10 18:09:54 +00:00
  • d6e3761f86 Merge branch 'AD_Discovery_TR-789_8' of github.com:splunk/security_content into AD_Discovery_TR-789_8 mvelazco 2021-09-10 13:50:54 -04:00
  • 81055f2176 updating required fields mvelazco 2021-09-10 13:50:29 -04:00
  • b02426a8c0 Merge branch 'AD_Discovery_TR-789_8' of https://github.com/splunk/security_content into AD_Discovery_TR-789_8 Detection Testing Service 2021-09-10 17:46:52 +00:00
  • 08072c8fe8 Added detection testing service results inNetwork Connection Discovery With Netstat root 2021-09-10 17:46:51 +00:00
  • 46a099be87 Merge branch 'AD_Discovery_TR-789_8' of https://github.com/splunk/security_content into AD_Discovery_TR-789_8 Detection Testing Service 2021-09-10 17:41:36 +00:00
  • a9352e14ee Added detection testing service results inNetwork Connection Discovery With Arp root 2021-09-10 17:41:35 +00:00
  • 40e76edced Haag With the Wind: CVE-2021-40444 Edition mhaag-spl 2021-09-10 11:39:56 -06:00
  • 09b79bf310 Merge branch 'AD_Discovery_TR-789_8' of https://github.com/splunk/security_content into AD_Discovery_TR-789_8 Detection Testing Service 2021-09-10 17:39:06 +00:00
  • b32a091a30 Added detection testing service results inGetNetTcpconnection with PowerShell Script Block root 2021-09-10 17:39:05 +00:00
  • 4de7fe052d Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6 mvelazco 2021-09-10 13:31:21 -04:00
  • 92076d026b Added detection testing service results inGetNetTcpconnection with PowerShell root 2021-09-10 17:26:00 +00:00
  • 12a4e2220b adding required fields mvelazco 2021-09-10 13:17:48 -04:00
  • 97c6190248 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 Detection Testing Service 2021-09-10 17:14:51 +00:00
  • 2ff8e068bc Added detection testing service results inGetWmiObject Ds Group with PowerShell Script Block root 2021-09-10 17:14:50 +00:00
  • c2c6bfd959 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 Detection Testing Service 2021-09-10 17:14:09 +00:00
  • 56b8a29465 Added detection testing service results inGetDomainGroup with PowerShell Script Block root 2021-09-10 17:14:08 +00:00
  • 4b038ff4df Added detection testing service results inGetWmiObject Ds Group with PowerShell root 2021-09-10 17:14:02 +00:00
  • 83ab04fcdb adding required fields mvelazco 2021-09-10 13:04:57 -04:00
  • 1dacb8ca68 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 Detection Testing Service 2021-09-10 16:57:12 +00:00
  • e6b5c603b8 Added detection testing service results inGetAdGroup with PowerShell root 2021-09-10 16:57:11 +00:00
  • 5ad5d39790 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 Detection Testing Service 2021-09-10 16:53:03 +00:00
  • ff3b66af53 Added detection testing service results inGetDomainGroup with PowerShell root 2021-09-10 16:53:02 +00:00
  • 5a4c89a2cb Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 Detection Testing Service 2021-09-10 16:52:08 +00:00
  • e9ca2c0a77 Added detection testing service results inElevated Group Discovery With Wmic root 2021-09-10 16:52:07 +00:00
  • 0c30fbf96f Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 Detection Testing Service 2021-09-10 16:50:33 +00:00
  • a656d3e187 Added detection testing service results inGetAdGroup with PowerShell Script Block root 2021-09-10 16:50:32 +00:00
  • 356bd8eba6 Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6 mvelazco 2021-09-10 12:34:20 -04:00
  • 3fcdb20c51 fixing minor issue with dataset URL mvelazco 2021-09-10 12:34:18 -04:00
  • c26daab0d6 Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 16:13:20 +00:00
  • 25c0f57426 Added detection testing service results inRemote System Discovery with Wmic root 2021-09-10 16:13:19 +00:00
  • 4e9b83a8f9 Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 16:02:00 +00:00
  • 34401f6cc6 Added detection testing service results inRemote System Discovery with Dsquery root 2021-09-10 16:02:00 +00:00
  • cb381af6ba Added detection testing service results inElevated Group Discovery with PowerView root 2021-09-10 16:00:25 +00:00
  • a84ab61e40 Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 15:48:41 +00:00
  • 7a8f12432e Added detection testing service results inRemote System Discovery with Net root 2021-09-10 15:48:41 +00:00
  • 63ece3023a Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 15:44:05 +00:00
  • 49ed36b358 Added detection testing service results inRemote System Discovery with Dsquery root 2021-09-10 15:44:04 +00:00
  • 9eab9a64ba Added detection testing service results inRemote System Discovery with Adsisearcher root 2021-09-10 15:42:05 +00:00
  • 20ab50e311 Added detection testing service results inElevated Group Discovery With Net root 2021-09-10 15:36:08 +00:00
  • 2ee7ef47cc Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 15:24:22 +00:00
  • fc5afe8ab9 Added detection testing service results inGetWmiObject Ds Computer with PowerShell Script Block root 2021-09-10 15:24:21 +00:00
  • 813bd7b72e Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 15:20:16 +00:00
  • 1916597f39 Added detection testing service results inGetWmiObject Ds Computer with PowerShell root 2021-09-10 15:20:15 +00:00
  • 5bddb9ef4e Added detection testing service results inDomain Group Discovery With Wmic root 2021-09-10 15:18:41 +00:00
  • 2eabac8fae Added detection testing service results inGetDomainController with PowerShell Script Block root 2021-09-10 15:07:08 +00:00
  • 97cc361c5a adding T1049 detections mvelazco 2021-09-10 10:57:01 -04:00
  • eebd1ac1cc Added detection testing service results inDomain Group Discovery With Net root 2021-09-10 14:53:07 +00:00
  • d756fae0ef Added detection testing service results inGetDomainController with PowerShell root 2021-09-10 14:31:15 +00:00
  • 937fb3ebd3 Added detection testing service results inDomain Group Discovery With Dsquery root 2021-09-10 14:30:29 +00:00
  • 0aa0023140 Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6 mvelazco 2021-09-10 09:32:20 -04:00
  • 2d60937410 fixing detection mvelazco 2021-09-10 09:32:18 -04:00
  • 1af97d4754 chnaged dashbaord P4T12ICK 2021-09-10 14:29:43 +02:00
  • 943881d57c chnaged dashbaord P4T12ICK 2021-09-10 12:33:06 +02:00
  • cb0a120f48 chnaged dashbaord P4T12ICK 2021-09-10 10:40:44 +02:00
  • 64da81c63e Merge branch 'dev_sec_ops_work' of github.com:splunk/security_content into dev_sec_ops_work P4T12ICK 2021-09-10 09:59:49 +02:00
  • b6c03a1ad2 chnaged dashbaord P4T12ICK 2021-09-10 09:59:26 +02:00
  • 7a97b00762 Merge branch 'ssa_WIP_misko_stat_detections' of github.com:splunk/security-content into ssa_WIP_misko_stat_detections Stanislav Miskovic 2021-09-09 20:33:50 -07:00
  • 52b2b3ddfd Correcting some stuff Stanislav Miskovic 2021-09-09 20:33:13 -07:00
  • fe8287f7d4 Added detection testing service results inDomain Group Discovery with Adsisearcher root 2021-09-10 01:40:32 +00:00
  • d9bb492da9 Added detection testing service results inGetDomainComputer with PowerShell root 2021-09-10 01:38:10 +00:00
  • 00ccb9b107 Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7 Detection Testing Service 2021-09-10 00:52:16 +00:00
  • d200431336 Added detection testing service results inGetAdComputer with PowerShell Script Block root 2021-09-10 00:52:15 +00:00