admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 3270cdc014 aws ecr dataset P4T12ICK 2021-08-18 14:53:28 +02:00
  • 2075f8a9fd AWS ECR detections P4T12ICK 2021-08-18 14:07:45 +02:00
  • 1cae849652 AWS ECR detections P4T12ICK 2021-08-18 13:04:30 +02:00
  • 51967d9f89 AWS ECR detections P4T12ICK 2021-08-18 13:00:09 +02:00
  • c10d11aa94 AWS ECR detections P4T12ICK 2021-08-18 12:57:22 +02:00
  • d648d525b3 macro'd bitsadmin mhaag-spl 2021-08-17 15:20:40 -06:00
  • 71481634a3 macro'd netsh mhaag-spl 2021-08-17 15:14:35 -06:00
  • ba6c98c292 macro'd certutil mhaag-spl 2021-08-17 15:00:51 -06:00
  • e1752d3440 macro'd hh mhaag-spl 2021-08-17 14:29:16 -06:00
  • 9b71656519 reg + fix mhaag-spl 2021-08-17 14:23:58 -06:00
  • 169a192f2b Removed baselines from the pretty_yaml.py script. pyth0n1c 2021-08-17 13:13:23 -07:00
  • fa7ac7bfbf Removed a line from pretty_yaml that was causing an error because the format of the file changed. pyth0n1c 2021-08-17 13:10:27 -07:00
  • 5dc0e8f211 macro'd net mhaag-spl 2021-08-17 13:56:57 -06:00
  • a1a670203f macro'd mshta mhaag-spl 2021-08-17 13:38:11 -06:00
  • ad88e9a0ff macro'd regsvr32 mhaag-spl 2021-08-17 13:27:48 -06:00
  • 3251fcc1f6 macrod rundll32 mhaag-spl 2021-08-17 13:21:24 -06:00
  • 291af648bb Make sure we store report on appsinpect failure. pyth0n1c 2021-08-17 12:11:56 -07:00
  • 33640f3b7d Added missing autoescape to new code in generate.py pyth0n1c 2021-08-17 11:48:32 -07:00
  • b3f7e10005 Apparently I forgot to save the files after changing them, so that changes actually weren't committed. Let's try again... pyth0n1c 2021-08-17 11:36:24 -07:00
  • 0b3569d714 Massive merge from upstream. Should be good now. pyth0n1c 2021-08-17 11:31:24 -07:00
  • 644747d578 macro'd reg cmd mhaag-spl 2021-08-17 12:09:31 -06:00
  • b1a744cf88 Merge remote-tracking branch 'upstream/master' into develop pyth0n1c 2021-08-17 11:07:20 -07:00
  • 9958c82c3c macro'd wmic mhaag-spl 2021-08-17 11:44:30 -06:00
  • 9d89399e25 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-17 10:36:15 -07:00
  • 0dd4c8ef65 Put requirement on tag validation for detection-testing. pyth0n1c 2021-08-17 10:36:08 -07:00
  • bae7eebbcd updating docs and package bits [ci skip] research bot 2021-08-17 17:27:11 +00:00
  • c4a62635b1 Merge branch 'develop' into The-Haag-of-The-Storm Michael Haag 2021-08-17 11:19:42 -06:00
  • 20000828f3 Macro'd powershell mhaag-spl 2021-08-17 11:15:36 -06:00
  • d26a2b0215 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-08-17 10:14:49 -07:00
  • 2fde2fe090 Fixed bash if else syntax pyth0n1c 2021-08-17 09:55:52 -07:00
  • 08d935a15d Fixing the set-output calls pyth0n1c 2021-08-17 09:50:02 -07:00
  • c7cab850e9 Finally fixed getting the tag/branch name properly. pyth0n1c 2021-08-17 09:39:59 -07:00
  • 0141d689a6 Fixed the tag name again.: pyth0n1c 2021-08-17 09:28:21 -07:00
  • aae755c578 New syntax to fix tag name for build sources step when running on non-tagged release. pyth0n1c 2021-08-17 09:25:48 -07:00
  • 1fba6c47da conti_leak tccontre 2021-08-17 17:51:41 +02:00
  • 0e0d275a78 conti_leak tccontre 2021-08-17 17:49:58 +02:00
  • 9880e48d47 conti_leak tccontre 2021-08-17 15:28:46 +02:00
  • 1f1dba6837 Merge branch 'dev_ops_uc' of github.com:splunk/security_content into dev_ops_uc tccontre 2021-08-17 15:19:08 +02:00
  • a3da84e2ff dev_ops_uc tccontre 2021-08-17 15:18:49 +02:00
  • a3c0ae62d7 Branch was auto-updated. github-actions[bot] 2021-08-17 12:48:13 +00:00
  • fb05d24498 Branch was auto-updated. github-actions[bot] 2021-08-17 12:48:12 +00:00
  • 6467c2e69e Branch was auto-updated. github-actions[bot] 2021-08-17 12:48:11 +00:00
  • cade65b486 Branch was auto-updated. github-actions[bot] 2021-08-17 12:48:04 +00:00
  • 1f6d8fd2f2 Merge pull request #1564 from splunk/update_detection_testing P4T12ICK 2021-08-17 14:47:48 +02:00
  • 769114303d Added detection testing service results inAttempted Credential Dump From Registry via Reg exe root 2021-08-17 11:42:16 +00:00
  • eb08775564 Merge branch 'develop' into update_detection_testing P4T12ICK 2021-08-17 13:14:51 +02:00
  • 35581ae80d Added detection testing service results inAttempted Credential Dump From Registry via Reg exe root 2021-08-17 11:07:18 +00:00
  • f3e723e1d0 update detection testing P4T12ICK 2021-08-17 11:03:00 +02:00
  • 5b47f3bff9 Fixed getting branch name/tag name for build-sources. pyth0n1c 2021-08-16 16:55:27 -07:00
  • be6bffca01 Including the proper python interpreter and installing any requirements for it. pyth0n1c 2021-08-16 16:34:57 -07:00
  • 7d5edec822 Added calling of the create_baseline_folder.py script. pyth0n1c 2021-08-16 16:22:35 -07:00
  • 1e1506d167 Branch was auto-updated. github-actions[bot] 2021-08-16 23:06:38 +00:00
  • 19c25e1b05 Branch was auto-updated. github-actions[bot] 2021-08-16 23:06:36 +00:00
  • 698e4f4480 Branch was auto-updated. github-actions[bot] 2021-08-16 23:06:35 +00:00
  • d3c276ebe7 Branch was auto-updated. github-actions[bot] 2021-08-16 23:06:33 +00:00
  • 08ed88bd88 Merge pull request #1530 from splunk/analytic_types Bhavin Patel 2021-08-16 16:06:14 -07:00
  • e1ff3993cd run generate again patel-bhavin 2021-08-16 15:57:44 -07:00
  • 8ae3aa8ba9 conflicts and tests patel-bhavin 2021-08-16 15:34:57 -07:00
  • 87e1ef6dca Changed all of the python versions from 3.9.5 to 3.9. We want the latest patch. If we just include the MAJOR.MINOR, the latest patch will always be used. pyth0n1c 2021-08-16 13:06:13 -07:00
  • 317e337b2d Branch was auto-updated. github-actions[bot] 2021-08-16 19:02:26 +00:00
  • a681b112ee Branch was auto-updated. github-actions[bot] 2021-08-16 19:02:26 +00:00
  • 1a97010a28 Branch was auto-updated. github-actions[bot] 2021-08-16 19:02:25 +00:00
  • 6078852611 Branch was auto-updated. github-actions[bot] 2021-08-16 19:02:24 +00:00
  • d251132ac0 Branch was auto-updated. github-actions[bot] 2021-08-16 19:02:21 +00:00
  • a659d56501 Merge pull request #1554 from splunk/misko_scores Bhavin Patel 2021-08-16 12:02:03 -07:00
  • 9b0ceeb732 Branch was auto-updated. github-actions[bot] 2021-08-16 18:36:36 +00:00
  • 06b970b7a1 Merge branch 'develop' into dependabot/pip/distlib-0.3.2 Bhavin Patel 2021-08-16 11:36:32 -07:00
  • 74733df087 Branch was auto-updated. github-actions[bot] 2021-08-16 18:36:32 +00:00
  • d9882d0222 Branch was auto-updated. github-actions[bot] 2021-08-16 18:36:26 +00:00
  • 346b0796fe Branch was auto-updated. github-actions[bot] 2021-08-16 18:36:25 +00:00
  • acd9ec2006 Branch was auto-updated. github-actions[bot] 2021-08-16 18:36:24 +00:00
  • 4462c6b68c Merge pull request #1558 from splunk/renaming_to_match_ssa_names Bhavin Patel 2021-08-16 11:36:10 -07:00
  • 5e20436911 Merge branch 'develop' into misko_scores Bhavin Patel 2021-08-16 11:24:20 -07:00
  • 209e9f300c Merge branch 'develop' into renaming_to_match_ssa_names Bhavin Patel 2021-08-16 11:20:12 -07:00
  • 2ff22d36e6 dev_ops_uc tccontre 2021-08-16 16:54:54 +02:00
  • bd65f1b2c1 dev_ops_uc tccontre 2021-08-16 15:05:15 +02:00
  • dacebfebcf Delete powershell_execute_com_object.yml devsec_ops tccontre 2021-08-16 15:01:13 +02:00
  • 8ea2d13a07 Delete fsutil_zeroing_file.yml tccontre 2021-08-16 15:00:55 +02:00
  • af13307b13 Delete allow_inbound_traffic_in_firewall_rule.yml tccontre 2021-08-16 15:00:48 +02:00
  • 34b36eee9d devsec_ops tccontre 2021-08-16 14:59:06 +02:00
  • 7eba8594b3 conti_leak tccontre 2021-08-13 14:05:33 +02:00
  • e8e306362c Added detection testing service results inUninstall App Using MsiExec root 2021-08-12 10:06:47 +00:00
  • ede4862234 Added detection testing service results inRundll32 LockWorkStation root 2021-08-12 10:11:39 +00:00
  • 6f3a90e5f6 conti_leak tccontre 2021-08-12 17:49:16 +02:00
  • 36866ce6c5 conti_leak tccontre 2021-08-12 11:48:18 +02:00
  • ed734278df Added detection testing service results inPowershell Execute COM Object root 2021-08-12 09:19:27 +00:00
  • d11d58d8db Added detection testing service results inFsutil Zeroing File root 2021-08-12 08:07:27 +00:00
  • 092996bd09 lockbit_ttp tccontre 2021-08-11 18:37:03 +02:00
  • e1a96aed84 conti_leak tccontre 2021-08-10 16:03:22 +02:00
  • 1656962cdd conti_leak tccontre 2021-08-10 14:24:54 +02:00
  • 8fd704947e conti_leak tccontre 2021-08-10 14:16:33 +02:00
  • 51e4ec72c1 conti_leak tccontre 2021-08-10 14:13:54 +02:00
  • d7c5f02d84 conti leak tccontre 2021-08-10 13:27:30 +02:00
  • 07768fb305 conti_leak tccontre 2021-08-09 17:04:36 +02:00
  • 48799ff4ed Merge branch 'develop' into The-Haag-of-The-Storm Michael Haag 2021-08-13 15:16:33 -06:00
  • 4d0223b62e Added detection testing service results inDetect SharpHound Usage mhaag-spl 2021-08-13 15:09:24 -06:00
  • 2b7298b3fc updating docs and package bits [ci skip] research bot 2021-08-13 19:31:39 +00:00
  • b099bac0d9 Update detect_sharphound_usage.yml mhaag-spl 2021-08-13 13:19:05 -06:00
  • f5b55df95a updating docs and package bits [ci skip] research bot 2021-08-13 19:14:16 +00:00
  • b7212b6781 Finally fixed the tag name - was forgetitng to include id:vars pyth0n1c 2021-08-13 12:03:30 -07:00