admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e16bc9a3b8 dev_sec2 tccontre 2021-08-23 13:16:30 +02:00
  • ccede9d326 dev_sec2 tccontre 2021-08-23 13:13:53 +02:00
  • bbf0a39460 new detection P4T12ICK 2021-08-23 13:07:23 +02:00
  • 9f6ec5febb new detection P4T12ICK 2021-08-23 11:39:21 +02:00
  • 622442cd3a new detection P4T12ICK 2021-08-23 10:21:21 +02:00
  • 71bf7623c1 Merge branch 'develop' into k8s_detections P4T12ICK 2021-08-23 10:18:35 +02:00
  • 749df59357 new detection P4T12ICK 2021-08-23 10:17:40 +02:00
  • b0c2e80271 dev_git tccontre 2021-08-23 09:06:58 +02:00
  • 0945cc72c9 Update protocols_passing_authentication_in_cleartext.yml Amir hossein Mahboubi 2021-08-21 08:55:07 +04:30
  • 546e70f2d8 Merge branch 'splunk:develop' into optimized Amir hossein Mahboubi 2021-08-21 08:53:50 +04:30
  • 2ef149f2e3 updating docs and package bits [ci skip] research bot 2021-08-20 22:22:11 +00:00
  • c302325663 Updated URLs and fixes mhaag-spl 2021-08-20 11:53:42 -06:00
  • b6aa47aa17 Update suspicious_microsoft_workflow_compiler_rename.test.yml mhaag-spl 2021-08-20 11:20:34 -06:00
  • 619aebc33b Update certutil_exe_certificate_extraction.yml mhaag-spl 2021-08-20 10:46:28 -06:00
  • 89fb2682b0 dev_git tccontre 2021-08-20 14:09:49 +02:00
  • e5ae722014 dev_git tccontre 2021-08-20 13:59:06 +02:00
  • ea29a11c37 dev_sec2 tccontre 2021-08-20 10:40:33 +02:00
  • 806daec83d Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:59 +00:00
  • 557cba826d Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:56 +00:00
  • 710175f110 Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:54 +00:00
  • f8a25f6133 Merge pull request #1544 from splunk/dependabot/pip/distlib-0.3.2 Bhavin Patel 2021-08-19 14:14:38 -07:00
  • dcb3aa1dae Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:23 +00:00
  • c8c6070f90 Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:21 +00:00
  • 64e4f3c715 Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:20 +00:00
  • a42878fd5b Branch was auto-updated. github-actions[bot] 2021-08-19 21:14:18 +00:00
  • 0659aaca50 Merge pull request #1568 from splunk/rename_icedid Bhavin Patel 2021-08-19 14:14:00 -07:00
  • 9fb5d44326 Update powershell_4104_hunting.yml mhaag-spl 2021-08-19 15:07:40 -06:00
  • 0115aa3b0c Merge branch 'develop' into rename_icedid Bhavin Patel 2021-08-19 14:01:01 -07:00
  • 1ba5fa6da2 Update powershell_4104_hunting.yml mhaag-spl 2021-08-19 14:46:06 -06:00
  • e861da59c3 4104 Hunting mhaag-spl 2021-08-19 14:09:43 -06:00
  • 175ad7deb8 Branch was auto-updated. docs_CI github-actions[bot] 2021-08-19 15:42:44 +00:00
  • 3f90fc50cb Branch was auto-updated. github-actions[bot] 2021-08-19 15:42:43 +00:00
  • 7527582cd9 Branch was auto-updated. github-actions[bot] 2021-08-19 15:42:39 +00:00
  • 725439a703 Branch was auto-updated. github-actions[bot] 2021-08-19 15:42:38 +00:00
  • 9b8f54d2fa Branch was auto-updated. github-actions[bot] 2021-08-19 15:42:36 +00:00
  • 782163a201 Merge pull request #1572 from splunk/aws_ecr_detections_2 P4T12ICK 2021-08-19 17:42:13 +02:00
  • 0bfb8ba325 Filter blocked traffic because it made a lot of false positive specially when something like port scan happen, also add description to "how_to_implement" section to limit result just to organization private and public IP range for more accurate result sec-researcher 2021-08-19 18:59:04 +04:30
  • fcdd9de006 Create active_directory_discovery.yml mvelazco 2021-08-19 09:56:23 -04:00
  • dd419961e7 container upload aws ecr P4T12ICK 2021-08-19 15:51:17 +02:00
  • a7f7f0b090 dev_sec2 tccontre 2021-08-19 15:45:36 +02:00
  • fcfeab5c93 Branch was auto-updated. github-actions[bot] 2021-08-19 13:35:57 +00:00
  • 740d3a5aff Branch was auto-updated. github-actions[bot] 2021-08-19 13:35:55 +00:00
  • 23c7b7dc36 Branch was auto-updated. github-actions[bot] 2021-08-19 13:35:53 +00:00
  • 081dd8933d Branch was auto-updated. github-actions[bot] 2021-08-19 13:35:52 +00:00
  • 354cd08838 Merge pull request #1570 from splunk/aws_eks_detections P4T12ICK 2021-08-19 15:35:28 +02:00
  • d1933b28da container upload aws ecr P4T12ICK 2021-08-19 15:07:12 +02:00
  • 0e19432a1d msbuild and microsoftworkflowcompiler mhaag-spl 2021-08-19 06:57:11 -06:00
  • 4c242df80e container upload aws ecr P4T12ICK 2021-08-19 14:07:23 +02:00
  • 4da21c97ff Branch was auto-updated. github-actions[bot] 2021-08-19 11:15:59 +00:00
  • 59ae237866 Branch was auto-updated. github-actions[bot] 2021-08-19 11:15:58 +00:00
  • 2ed8ce4c7a Branch was auto-updated. github-actions[bot] 2021-08-19 11:15:56 +00:00
  • 896619d146 Branch was auto-updated. github-actions[bot] 2021-08-19 11:15:53 +00:00
  • 417b37128f Merge pull request #1563 from splunk/dev_ops_uc tccontre 2021-08-19 13:15:27 +02:00
  • 484df79def Branch was auto-updated. github-actions[bot] 2021-08-19 11:07:32 +00:00
  • 5039e0a773 Branch was auto-updated. github-actions[bot] 2021-08-19 11:07:29 +00:00
  • c0b5b96365 Branch was auto-updated. github-actions[bot] 2021-08-19 11:07:26 +00:00
  • a4673cfe06 Branch was auto-updated. github-actions[bot] 2021-08-19 11:07:21 +00:00
  • d9360e030a Branch was auto-updated. github-actions[bot] 2021-08-19 11:07:18 +00:00
  • 63d21f2e46 Merge pull request #1552 from splunk/conti_leak tccontre 2021-08-19 13:06:54 +02:00
  • c7b6dfd9f3 dev_ops_uc tccontre 2021-08-19 12:08:22 +02:00
  • ceb9c848a2 dev_ops_uc tccontre 2021-08-19 12:05:53 +02:00
  • 5c8bd617be dev_ops_uc tccontre 2021-08-19 12:03:28 +02:00
  • 6eec6d28a6 Merge branch 'develop' into conti_leak P4T12ICK 2021-08-19 10:39:31 +02:00
  • 0d4ebafb2f clone the tag patel-bhavin 2021-08-18 14:12:02 -07:00
  • c7bc4d7243 rename patel-bhavin 2021-08-18 13:49:15 -07:00
  • cab3328ea6 updates to readme update_readme divious1 2021-08-18 16:32:56 -04:00
  • 2ca7ca8bec updating docs and package bits [ci skip] research bot 2021-08-18 19:10:04 +00:00
  • 8681ca59d2 Rolling back to previous requirements.txt file. pyth0n1c 2021-08-18 11:36:31 -07:00
  • 12b95f5a3a Using pip to update all the requirements and save off the versions as an artifact. pyth0n1c 2021-08-18 11:27:50 -07:00
  • fedf42d570 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-18 10:57:46 -07:00
  • f29578deaa Updated the requirements.txt file using pur. pyth0n1c 2021-08-18 10:57:32 -07:00
  • bd37cde924 Merge branch 'Haagust' of https://github.com/splunk/security_content into Haagust mhaag-spl 2021-08-18 11:14:22 -06:00
  • 495a94bbbc Update process_esentutl.yml mhaag-spl 2021-08-18 11:14:13 -06:00
  • b7a8e5c579 Merge branch 'develop' into Haagust Michael Haag 2021-08-18 11:00:17 -06:00
  • 7acfff10d9 Update esentutl_sam_copy.yml mhaag-spl 2021-08-18 10:59:50 -06:00
  • 2c9e7b58a8 updating docs and package bits [ci skip] research bot 2021-08-18 16:56:31 +00:00
  • 47817a2b37 Merge branch 'Haagust' of https://github.com/splunk/security_content into Haagust mhaag-spl 2021-08-18 10:54:38 -06:00
  • cdd44a91ab Update esentutl_sam_copy.yml mhaag-spl 2021-08-18 10:54:32 -06:00
  • 703d22457f updating docs and package bits [ci skip] research bot 2021-08-18 16:54:18 +00:00
  • e1ac9603d3 Merge branch 'develop' into Haagust Michael Haag 2021-08-18 10:53:07 -06:00
  • 1eb1f40ae0 esentutil mhaag-spl 2021-08-18 10:47:58 -06:00
  • 628ed6b76b Branch was auto-updated. github-actions[bot] 2021-08-18 16:24:27 +00:00
  • 611ef2af16 Branch was auto-updated. github-actions[bot] 2021-08-18 16:24:25 +00:00
  • 82dd3f6540 Branch was auto-updated. github-actions[bot] 2021-08-18 16:24:23 +00:00
  • 1919c9f073 Branch was auto-updated. github-actions[bot] 2021-08-18 16:24:23 +00:00
  • f2b75a2e7d Branch was auto-updated. github-actions[bot] 2021-08-18 16:24:22 +00:00
  • 232895de96 Merge pull request #1566 from splunk/pretty_yaml_error v3.27.0 Bhavin Patel 2021-08-18 09:24:04 -07:00
  • 19fad3da58 fix for type patel-bhavin 2021-08-18 09:13:13 -07:00
  • 09f29ad081 macros mhaag-spl 2021-08-18 09:50:08 -06:00
  • 02a22a0564 Merge branch 'conti_leak' of https://github.com/splunk/security_content into conti_leak Detection Testing Service 2021-08-18 15:48:22 +00:00
  • a0fa0a2610 Added detection testing service results in7zip CommandLine To SMB Share Path root 2021-08-18 15:48:21 +00:00
  • 65273870d1 Added detection testing service results inUAC Bypass With Colorui COM Object root 2021-08-18 15:46:05 +00:00
  • 5f87d79e1c Merge branch 'dev_ops_uc' of github.com:splunk/security_content into dev_ops_uc tccontre 2021-08-18 15:58:55 +02:00
  • 1bde88fc3f dev_ops_uc tccontre 2021-08-18 15:58:35 +02:00
  • 23ad824dec Branch was auto-updated. github-actions[bot] 2021-08-18 13:39:08 +00:00
  • cc928f010d Branch was auto-updated. github-actions[bot] 2021-08-18 13:39:07 +00:00
  • de4254985b Branch was auto-updated. github-actions[bot] 2021-08-18 13:39:05 +00:00
  • 483bc07b98 Branch was auto-updated. github-actions[bot] 2021-08-18 13:39:04 +00:00
  • 3970a09387 Branch was auto-updated. github-actions[bot] 2021-08-18 13:39:03 +00:00
  • ab3915f56d Merge pull request #1565 from splunk/aws_ecr_detections P4T12ICK 2021-08-18 15:38:43 +02:00