admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • c6768d15ae Branch was auto-updated. github-actions[bot] 2021-07-02 15:06:58 +00:00
  • 2f948931df Branch was auto-updated. github-actions[bot] 2021-07-02 15:06:57 +00:00
  • 32d3374f24 Branch was auto-updated. github-actions[bot] 2021-07-02 15:06:55 +00:00
  • 51ce55801d Branch was auto-updated. github-actions[bot] 2021-07-02 15:06:54 +00:00
  • ce8c057e0d Branch was auto-updated. github-actions[bot] 2021-07-02 15:06:51 +00:00
  • ff7e231171 Merge pull request #1471 from splunk/printnightmare Jose Enrique Hernandez 2021-07-02 11:06:33 -04:00
  • 7ce88879d6 fixing type Jose Enrique Hernandez 2021-07-02 11:03:08 -04:00
  • d3ecd712fc Merge branch 'automated_detections_testing_2' of github.com:splunk/security_content into automated_detections_testing_2 P4T12ICK 2021-07-02 15:00:07 +02:00
  • 432ae1c0c4 small bug fix P4T12ICK 2021-07-02 14:59:44 +02:00
  • d58ccc5e0b WIP P4T12ICK 2021-07-02 14:58:37 +02:00
  • dc0eac261d minor update3 tccontre 2021-07-02 14:38:44 +02:00
  • 7f3f1f21f6 Merge branch 'printnightmare' of github.com:splunk/security_content into printnightmare tccontre 2021-07-02 14:09:48 +02:00
  • 2c948c9967 minor update2 tccontre 2021-07-02 14:09:14 +02:00
  • 30af993c48 Delete wsreset_uac_bypass.test.yml tccontre 2021-07-02 14:03:53 +02:00
  • 2f74506fc0 minor update tccontre 2021-07-02 14:02:31 +02:00
  • 6bb811e491 detections patel-bhavin 2021-07-01 20:40:44 -05:00
  • 79964cac60 Bump markupsafe from 2.0.0 to 2.0.1 dependabot[bot] 2021-07-01 23:01:03 +00:00
  • 9eab3ba0e0 Bump execnet from 1.8.0 to 1.9.0 dependabot[bot] 2021-07-01 23:00:55 +00:00
  • 7218d8aa1c Bump importlib-resources from 5.1.3 to 5.2.0 dependabot[bot] 2021-07-01 23:00:53 +00:00
  • c4c7db3a03 Bump pre-commit from 2.12.1 to 2.13.0 dependabot[bot] 2021-07-01 23:00:50 +00:00
  • 07f7d1d395 Bump boto3 from 1.17.74 to 1.17.104 dependabot[bot] 2021-07-01 23:00:47 +00:00
  • 1d4278d250 Merge branch 'develop' into printnightmare Jose Enrique Hernandez 2021-07-01 17:39:51 -04:00
  • 6f29b8877a adding process_id to spl patel-bhavin 2021-07-01 16:26:42 -05:00
  • ad74856496 Merge branch 'printnightmare' of github.com:splunk/security_content into printnightmare patel-bhavin 2021-07-01 16:22:59 -05:00
  • 237803358b updated spl and rba tags patel-bhavin 2021-07-01 16:22:54 -05:00
  • 63bdd403b0 Update printnightmare_cve_2021_1675.yml mhaag-spl 2021-07-01 15:14:22 -06:00
  • 2029cf855f Update spoolsv_spawning_rundll32.yml mhaag-spl 2021-07-01 15:00:26 -06:00
  • 8e06807020 Added detection testing service results inPrint Spooler Adding A Printer Driver root 2021-07-01 20:30:15 +00:00
  • 0438432951 message update patel-bhavin 2021-07-01 15:14:20 -05:00
  • 8a77bf1b9a updating next 5 patel-bhavin 2021-07-01 15:10:32 -05:00
  • 3c1be9b42f Update print_spooler_failed_to_load_a_plug_in.yml mhaag-spl 2021-07-01 14:08:34 -06:00
  • e9fb78882d Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare Detection Testing Service 2021-07-01 20:01:15 +00:00
  • 20d19f74a5 Added detection testing service results inSpoolsv Writing a DLL - Sysmon root 2021-07-01 20:01:15 +00:00
  • 1651bab022 Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare Detection Testing Service 2021-07-01 19:51:10 +00:00
  • 19e28a12ff Added detection testing service results inSpoolsv Writing a DLL root 2021-07-01 19:51:09 +00:00
  • 6c226fb4be Added detection testing service results inSpoolsv Suspicious Process Access root 2021-07-01 19:50:04 +00:00
  • 69a5df0d8f Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare Detection Testing Service 2021-07-01 19:22:42 +00:00
  • 34e0b36bb8 Added detection testing service results inSpoolsv Spawning Rundll32 root 2021-07-01 19:22:42 +00:00
  • 917958cb79 Added detection testing service results inSpoolsv Suspicious Loaded Modules root 2021-07-01 19:22:08 +00:00
  • e5d0c5789d Added detection testing service results inPrint Spooler Adding A Printer Driver root 2021-07-01 18:56:49 +00:00
  • 5c29c36356 Update printnightmare_cve_2021_1675.yml mhaag-spl 2021-07-01 12:20:34 -06:00
  • a1a6fe9258 Update printnightmare_cve_2021_1675.yml mhaag-spl 2021-07-01 12:18:34 -06:00
  • 97e039bdce Path issues mhaag-spl 2021-07-01 12:14:19 -06:00
  • 0c86774b15 Added a Macro mhaag-spl 2021-07-01 12:11:49 -06:00
  • e86a988621 Printing All your Nightmares mhaag-spl 2021-07-01 12:01:45 -06:00
  • 030cfdc35c Branch was auto-updated. github-actions[bot] 2021-07-01 16:33:41 +00:00
  • bb0111b8f4 Branch was auto-updated. github-actions[bot] 2021-07-01 16:33:40 +00:00
  • 00d45922eb Branch was auto-updated. github-actions[bot] 2021-07-01 16:33:39 +00:00
  • 413b239ae4 Branch was auto-updated. github-actions[bot] 2021-07-01 16:33:38 +00:00
  • 4d9032c1f4 Branch was auto-updated. github-actions[bot] 2021-07-01 16:33:37 +00:00
  • d7b290ba7c Branch was auto-updated. github-actions[bot] 2021-07-01 16:33:36 +00:00
  • a88ba2d01a Merge pull request #1469 from splunk/contentctl_update Bhavin Patel 2021-07-01 11:33:17 -05:00
  • d3f8728816 RBA mhaag-spl 2021-07-01 06:52:15 -06:00
  • 79993f272e Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-06-30 15:14:38 -07:00
  • 36cb084235 first 6 ymls patel-bhavin 2021-06-30 16:48:13 -05:00
  • 4ebf2e22ba remove extrra files patel-bhavin 2021-06-30 15:53:05 -05:00
  • 68ea56830b Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:45 +00:00
  • 5514077de0 Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:44 +00:00
  • deceb7a284 Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:43 +00:00
  • d96bf8b30a Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:42 +00:00
  • 624b4a5a1c Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:41 +00:00
  • edb29f3874 Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:40 +00:00
  • 78360ad461 Branch was auto-updated. github-actions[bot] 2021-06-30 20:23:39 +00:00
  • f436742c0d Merge pull request #1452 from splunk/rba_poc Jose Enrique Hernandez 2021-06-30 16:23:22 -04:00
  • 63d2581343 Merge branch 'develop' into rba_poc divious1 2021-06-30 16:10:23 -04:00
  • b86a57f2a2 adding new description logic for our generated template divious1 2021-06-30 15:04:01 -04:00
  • 9d063ed669 conflicts patel-bhavin 2021-06-30 12:22:48 -05:00
  • e5e2b62f39 Merge branch 'cloud_detection_rba_yml' of github.com:splunk/security_content into cloud_detection_rba_yml patel-bhavin 2021-06-30 10:39:08 -05:00
  • 743ca45fbd Update access_lsass_memory_for_dump_creation.yml Michael Haag 2021-06-30 08:56:38 -06:00
  • b69ebbf728 Branch was auto-updated. github-actions[bot] 2021-06-30 14:42:23 +00:00
  • 7f98688e4a Branch was auto-updated. github-actions[bot] 2021-06-30 14:42:22 +00:00
  • 2bc052d925 Branch was auto-updated. github-actions[bot] 2021-06-30 14:42:21 +00:00
  • 9b2ed2e366 Branch was auto-updated. github-actions[bot] 2021-06-30 14:42:20 +00:00
  • de0490be22 Branch was auto-updated. github-actions[bot] 2021-06-30 14:42:19 +00:00
  • b355530176 Branch was auto-updated. github-actions[bot] 2021-06-30 14:42:18 +00:00
  • 25794989c6 Merge pull request #1468 from splunk/autoencoder_for_anomaly_detection Michael Haag 2021-06-30 08:41:55 -06:00
  • 33003660c0 att tccontre 2021-06-30 16:30:48 +02:00
  • 936869f15b attack_tool_t2 tccontre 2021-06-30 16:23:52 +02:00
  • cad22bac34 Delete ssa___attempt_to_delete_services.test.yml tccontre 2021-06-30 16:19:17 +02:00
  • ee5f9cc230 Delete ssa___attempt_to_disable_services.test.yml tccontre 2021-06-30 16:19:09 +02:00
  • e1a7371e75 Delete ssa___delete_a_net_user.test.yml tccontre 2021-06-30 16:18:58 +02:00
  • af63b893ea Delete ssa___disable_net_user_account.test.yml tccontre 2021-06-30 16:18:45 +02:00
  • 76b594be15 Delete ssa___resize_shadowstorage_volume.test.yml tccontre 2021-06-30 16:18:39 +02:00
  • e52cd142ec Delete attacker_tools_on_endpoint.test.yml tccontre 2021-06-30 16:18:06 +02:00
  • 1adebd5f5a Delete ssa___resize_shadowstorage_volume.yml tccontre 2021-06-30 16:17:55 +02:00
  • 2af43e044b Delete ssa___disable_net_user_account.yml tccontre 2021-06-30 16:17:36 +02:00
  • e511c2bcfa Delete ssa___delete_a_net_user.yml tccontre 2021-06-30 16:17:28 +02:00
  • 273400cf56 Delete ssa___attempt_to_disable_services.yml tccontre 2021-06-30 16:17:17 +02:00
  • 1f6393f9a8 Delete ssa___attempt_to_delete_services.yml tccontre 2021-06-30 16:17:10 +02:00
  • 7da993833d attacker_tool_t1 tccontre 2021-06-30 16:15:57 +02:00
  • 5b7255c9df Merge branch 'refactor_xmrig' of github.com:splunk/security_content into refactor_xmrig tccontre 2021-06-30 16:11:29 +02:00
  • 42d2afeae8 adding keys to all cloud detections with a patel-bhavin 2021-06-29 16:58:47 -05:00
  • 7194ba1867 adding empty keys to the ymls patel-bhavin 2021-06-29 15:36:04 -05:00
  • 858f567c67 Merge branch 'autoencoder_for_anomaly_detection' of github.com:splunk/security_content into autoencoder_for_anomaly_detection Michael Hart 2021-06-29 14:49:15 -04:00
  • 8773f14523 More edits Michael Hart 2021-06-29 14:48:27 -04:00
  • 7f2423864a Branch was auto-updated. github-actions[bot] 2021-06-29 18:31:02 +00:00
  • afbea01685 Branch was auto-updated. github-actions[bot] 2021-06-29 18:31:01 +00:00
  • 90d62f8358 Branch was auto-updated. github-actions[bot] 2021-06-29 18:31:00 +00:00
  • 72e304cb79 Branch was auto-updated. github-actions[bot] 2021-06-29 18:30:59 +00:00
  • 3124d0b301 Branch was auto-updated. github-actions[bot] 2021-06-29 18:30:59 +00:00