admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 5a7f37ffbf Branch was auto-updated. github-actions[bot] 2021-06-29 18:30:58 +00:00
  • 6c34a1c52e Branch was auto-updated. github-actions[bot] 2021-06-29 18:30:57 +00:00
  • fb6f9c82a7 Merge pull request #1462 from splunk/ssa_wevtutil_branch_reversion Bhavin Patel 2021-06-29 13:30:38 -05:00
  • e7b854b7e6 validate risk score patel-bhavin 2021-06-29 13:15:56 -05:00
  • ebfa202cae time patel-bhavin 2021-06-29 12:35:04 -05:00
  • 63937f9521 Merge branch 'ssa_det' of github.com:splunk/security_content into ssa_det tccontre 2021-06-29 17:01:58 +02:00
  • 5c3fe3dda1 ssa8 tccontre 2021-06-29 17:01:40 +02:00
  • 04c4263b56 Adding edits Michael Hart 2021-06-29 09:47:37 -04:00
  • 4dbc42c86c Initial commit Michael Hart 2021-06-28 22:10:15 -04:00
  • 868a3fe2a1 Branch was auto-updated. github-actions[bot] 2021-06-28 18:29:50 +00:00
  • dc67fbd644 Branch was auto-updated. github-actions[bot] 2021-06-28 18:29:49 +00:00
  • 5bed9d99fe Branch was auto-updated. github-actions[bot] 2021-06-28 18:29:48 +00:00
  • e4a7b5a75d Branch was auto-updated. github-actions[bot] 2021-06-28 18:29:47 +00:00
  • 52aaa53e40 Branch was auto-updated. ssa_wevtutil_branch_reversion github-actions[bot] 2021-06-28 18:29:47 +00:00
  • 73a7d75731 Branch was auto-updated. github-actions[bot] 2021-06-28 18:29:46 +00:00
  • 828f08bc04 Branch was auto-updated. github-actions[bot] 2021-06-28 18:29:45 +00:00
  • 40278784b2 Merge pull request #1465 from splunk/excessive_sc_start_disable Michael Haag 2021-06-28 12:29:30 -06:00
  • d9c8e10920 Slight correction. Process contains cmd line arguments for finding distinct number of sc invocations. Removing this and process id from BY clause Michael Hart 2021-06-28 14:14:42 -04:00
  • f10bdb4742 Update excessive_number_of_service_control_start_as_disabled.yml Michael Haag 2021-06-28 11:34:18 -06:00
  • bfa5d036ae Update excessive_number_of_service_control_start_as_disabled.yml Michael Haag 2021-06-28 10:35:29 -06:00
  • ae269feb4b Update excessive_number_of_service_control_start_as_disabled.yml Michael Haag 2021-06-28 10:35:01 -06:00
  • d57b067af1 Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:43 +00:00
  • 62b9fa10e6 Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:42 +00:00
  • f17961abd1 Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:41 +00:00
  • 8722a9fae7 Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:41 +00:00
  • 6c514d738e Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:40 +00:00
  • 46d89a16e5 Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:39 +00:00
  • 14492e2c5a Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:38 +00:00
  • ac009d421e Branch was auto-updated. github-actions[bot] 2021-06-28 16:09:37 +00:00
  • c5919dee1f Merge pull request #1467 from splunk/doc_gen_bug Jose Enrique Hernandez 2021-06-28 12:09:20 -04:00
  • a5eab04560 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-06-27 22:55:23 -07:00
  • 8ae54e8e1e this was brough up by doc team, it was causing docs to not be updated divious1 2021-06-25 15:54:57 -04:00
  • d644883579 Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:27 +00:00
  • ab932a64f9 Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:26 +00:00
  • 4b6321029b Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:25 +00:00
  • d67e5ced6a Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:24 +00:00
  • 1796f6cc2b Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:24 +00:00
  • 6885dcaaa5 Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:23 +00:00
  • 85f267f3ed Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:22 +00:00
  • 874a906d4b Branch was auto-updated. github-actions[bot] 2021-06-25 19:51:21 +00:00
  • 8ab5325de6 Merge pull request #1466 from splunk/mustang_fixing_names Jose Enrique Hernandez 2021-06-25 15:51:05 -04:00
  • d184ff8b1e Added detection testing service results inExcessive number of service control start as disabled root 2021-06-25 19:29:17 +00:00
  • 30b6ec1eed Revert "changing O365 to Office 365" divious1 2021-06-25 15:05:19 -04:00
  • 022c5be43e Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming" divious1 2021-06-25 15:03:55 -04:00
  • 1a26fc38e3 contentctl puts relative link to detection file in wrong place Michael Hart 2021-06-25 15:00:46 -04:00
  • 98a7b4e3ff Adding references Michael Hart 2021-06-25 14:56:08 -04:00
  • b05af9f100 changing O365 to Office 365 divious1 2021-06-25 14:52:58 -04:00
  • f262360d0a updated CloudTrails to AWS CloudTrails divious1 2021-06-25 14:50:50 -04:00
  • 518d03b1a1 Detection looks for excessive number of sc.exe start as disabled calls Michael Hart 2021-06-25 14:48:48 -04:00
  • 45c138d518 updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming divious1 2021-06-25 14:44:02 -04:00
  • 33de9753a3 ssa_det7 tccontre 2021-06-25 19:19:51 +02:00
  • 5c1431addd Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:26 +00:00
  • 0405921d39 Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:25 +00:00
  • 3b143ca0cf Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:24 +00:00
  • 23861ef01a Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:23 +00:00
  • 169c71f6bd Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:22 +00:00
  • 1054dbbac0 Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:22 +00:00
  • 402a871763 Branch was auto-updated. github-actions[bot] 2021-06-25 13:14:21 +00:00
  • 9011c52d9c Merge pull request #1463 from splunk/fixing_reporting_bugs Jose Enrique Hernandez 2021-06-25 09:14:04 -04:00
  • b29a96d222 Merge branch 'fixing_reporting_bugs' of github.com:splunk/security_content into fixing_reporting_bugs divious1 2021-06-25 08:41:54 -04:00
  • 3c39aa59ae with the change of the default image pip is treated slightly different divious1 2021-06-25 08:41:48 -04:00
  • 5523d3e296 Merge branch 'ransom_ttp2' of github.com:splunk/security_content into ransom_ttp2 tccontre 2021-06-25 10:21:38 +02:00
  • 69b11d3471 rttp4 tccontre 2021-06-25 10:21:04 +02:00
  • 199c36af2d Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:37 +00:00
  • 18d4d85ee4 Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:36 +00:00
  • 5a9d1122f4 Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:35 +00:00
  • 2507a0ee75 Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:34 +00:00
  • 58fbe35161 Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:31 +00:00
  • 7fc55957df Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:28 +00:00
  • ab143dd3ab Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:27 +00:00
  • 93c7997b49 Branch was auto-updated. github-actions[bot] 2021-06-25 07:49:24 +00:00
  • e72f6c6cea Merge pull request #1464 from splunk/fixing_doc_gen_ci_issue tccontre 2021-06-25 09:49:10 +02:00
  • 3acbb20716 Merge branch 'fixing_doc_gen_ci_issue' into fixing_reporting_bugs divious1 2021-06-24 23:31:36 -04:00
  • 76107973ac changing ci logic and doc_gen logic to not use pyattck any longer, lib has issues divious1 2021-06-24 23:28:08 -04:00
  • ea80ec525b removing go divious1 2021-06-24 15:57:07 -04:00
  • df8ff867bb updating circleci image since there is a breaking change divious1 2021-06-24 15:08:40 -04:00
  • 7cc3e82403 fixing a bug in how data is reported also added some additonal print statements divious1 2021-06-24 14:44:11 -04:00
  • eb3a3607f0 updating docs and package bits [ci skip] research bot 2021-06-24 18:23:02 +00:00
  • 0a71bc9949 Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 Detection Testing Service 2021-06-24 10:54:37 +00:00
  • 0e06923a61 Added detection testing service results inExcessive Usage Of SC Service Utility root 2021-06-24 10:54:36 +00:00
  • 3372c1f2aa Added detection testing service results inRecursive Delete of Directory In Batch CMD root 2021-06-24 10:46:33 +00:00
  • 366ad3ba5d Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 Detection Testing Service 2021-06-24 10:23:34 +00:00
  • d894ebbafa Added detection testing service results inPowershell Enable SMB1Protocol Feature root 2021-06-24 10:23:34 +00:00
  • 1a3f0a8bd0 Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 Detection Testing Service 2021-06-24 10:19:05 +00:00
  • 177ed8339f Added detection testing service results inExecute Javascript With Jscript COM CLSID root 2021-06-24 10:19:05 +00:00
  • 5e2ee527a0 Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 Detection Testing Service 2021-06-24 10:04:03 +00:00
  • 9cef2041f7 Added detection testing service results inDisable ETW Through Registry root 2021-06-24 10:04:02 +00:00
  • cf3bf43cb6 Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 Detection Testing Service 2021-06-24 09:58:25 +00:00
  • 4539c6a06d Added detection testing service results inDisable AMSI Through Registry root 2021-06-24 09:58:24 +00:00
  • 2e0c274c4c Added detection testing service results inAllow Network Discovery In Firewall root 2021-06-24 09:47:59 +00:00
  • aecddd31b1 Added detection testing service results inAllow File And Printing Sharing In Firewall root 2021-06-24 09:27:04 +00:00
  • 66452f52c8 rtp5 tccontre 2021-06-24 10:54:02 +02:00
  • 1af19c52c7 rttp5 tccontre 2021-06-24 10:51:56 +02:00
  • 894f110cba Merge branch 'ransom_ttp2' of github.com:splunk/security_content into ransom_ttp2 tccontre 2021-06-24 10:46:21 +02:00
  • fc13134276 rttp4 tccontre 2021-06-24 10:43:36 +02:00
  • 5d39a5eed2 [PR-1444] fix branch reversion. jzsplunk 2021-06-24 01:36:15 -07:00
  • ea074049c7 Branch was auto-updated. github-actions[bot] 2021-06-24 02:50:04 +00:00
  • 51a80ac676 Branch was auto-updated. github-actions[bot] 2021-06-24 02:50:03 +00:00
  • 181a8b7d2a Branch was auto-updated. github-actions[bot] 2021-06-24 02:50:02 +00:00
  • 9f1e4d4f9e Branch was auto-updated. github-actions[bot] 2021-06-24 02:50:01 +00:00