admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 6d32677981 Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:49 +00:00
  • c9adc9c5bf Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:48 +00:00
  • 5956aa8d3f Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:48 +00:00
  • 2799a08c6b Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:47 +00:00
  • 7038092e43 Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:46 +00:00
  • 569e8d4435 Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:45 +00:00
  • 06bbfc9e4b Branch was auto-updated. github-actions[bot] 2021-06-01 21:53:44 +00:00
  • aef4720328 Merge pull request #1425 from splunk/skew Jose Enrique Hernandez 2021-06-01 17:53:28 -04:00
  • d0bf659d82 skew for all apps bpatel 2021-06-01 14:48:43 -07:00
  • 3a70eff360 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-06-01 10:45:38 -07:00
  • 37afdb6e11 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:54 +00:00
  • 827d4a17c1 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:53 +00:00
  • 3a4fb93178 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:53 +00:00
  • 7574c2f393 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:52 +00:00
  • ca6bade0f4 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:51 +00:00
  • dbd865dc26 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:50 +00:00
  • 507f8611e5 Branch was auto-updated. github-actions[bot] 2021-06-01 17:26:49 +00:00
  • 49aac61dd3 Merge pull request #1424 from splunk/bump-version-system_process_running_unexpected_location.yml Jose Enrique Hernandez 2021-06-01 13:26:27 -04:00
  • 1ee26a7172 bumping version of detection since it should have been done in previous change. Jose Enrique Hernandez 2021-06-01 13:22:43 -04:00
  • 488318f19d Merge branch 'develop' into automated_detections_testing_2 P4T12ICK 2021-06-01 13:42:37 +02:00
  • f77eb50c2b new detection testing P4T12ICK 2021-06-01 13:37:06 +02:00
  • 7b985cc728 rename .yaml to .yml P4T12ICK 2021-05-31 11:21:38 +02:00
  • 3edaf869b6 detection testing v2 P4T12ICK 2021-05-31 09:41:09 +02:00
  • 1b3d5d27b3 Clear out old CI pipelines peter-cg 2021-05-28 16:15:31 -05:00
  • 74455c03b0 Merge branch 'develop' into dependabot/pip/ansible-3.4.0 Bhavin Patel 2021-05-28 11:33:28 -07:00
  • cac94b27e7 Added detection testing service results inExcessive Usage of NSLOOKUP App root 2021-05-28 07:50:13 +00:00
  • 9df9309087 nslookup tccontre 2021-05-28 09:17:34 +02:00
  • 059beca313 fix ssa_validate and add required field to lolbas detection peter-cg 2021-05-27 11:17:03 -05:00
  • b7e82d565d Added detection testing service results inCMD Echo Pipe - Escalation root 2021-05-27 14:55:40 +00:00
  • 95c1b4408c Cobalt Jump mhaag-spl 2021-05-27 08:22:53 -06:00
  • 2110e8ddd3 Adding v2 of ssa___rare_..._lolbas peter-cg 2021-05-26 16:39:15 -05:00
  • 259842d958 Added detection testing service results inMailsniper Invoke functions root 2021-05-26 16:41:52 +00:00
  • 27007cc19d Added detection testing service results inAllow Inbound Traffic In Firewall Rule root 2021-05-26 16:17:03 +00:00
  • 819c8f4db8 Added detection testing service results inSecretDumps Offline NTDS Dumping Tool root 2021-05-26 15:51:03 +00:00
  • 2f27504cba Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-05-26 08:44:39 -07:00
  • affae55ecf Added detection testing service results inEnable RDP In Other Port Number root 2021-05-26 15:07:28 +00:00
  • e824025040 Added detection testing service results inAllow Inbound Traffic By Firewall Rule Registry root 2021-05-26 14:15:44 +00:00
  • fdb1a955c2 Merge branch 'develop' into bug_fix_detection_testing P4T12ICK 2021-05-26 15:58:13 +02:00
  • 731649641b bug fix in detection testing P4T12ICK 2021-05-26 15:20:32 +02:00
  • 3f7f50814d new automated detection testing P4T12ICK 2021-05-26 14:45:51 +02:00
  • 91978e5c10 Update enable_rdp_in_other_port_number.test.yml tccontre 2021-05-26 13:37:03 +02:00
  • 80210ef7d8 casper1 tccontre 2021-05-26 13:33:47 +02:00
  • 58b0385e5b new automated detection testing P4T12ICK 2021-05-26 13:24:00 +02:00
  • c03387c9a1 validate error bpatel 2021-05-25 14:31:02 -07:00
  • 41fe22d831 update TTPs and test file bpatel 2021-05-25 13:08:41 -07:00
  • 94f3c4f941 updated search and list of tools bpatel 2021-05-25 12:07:11 -07:00
  • f925bdc572 Merge branch 'develop' of github.com:splunk/security_content into develop tccontre 2021-05-25 15:12:14 +02:00
  • 351be39b61 updating docs and package bits [ci skip] research bot 2021-05-24 20:58:23 +00:00
  • fd7e136120 Merge pull request #1415 from splunk/restore_yanked_out_UI v3.22.0 Bhavin Patel 2021-05-24 13:34:32 -07:00
  • 5ac5e86558 Merge branch 'develop' into restore_yanked_out_UI restore_yanked_out_UI Michael Haag 2021-05-24 14:29:26 -06:00
  • 891122875a remove package folder bpatel 2021-05-24 13:18:55 -07:00
  • 5769165c6b restored from commits bpatel 2021-05-24 12:53:37 -07:00
  • 2d61b8e675 updating docs and package bits [ci skip] research bot 2021-05-24 17:47:29 +00:00
  • 9231ff15aa test code bpatel 2021-05-24 09:28:08 -07:00
  • be07049784 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-05-24 01:23:43 -07:00
  • 8108211dac Merge branch 'splunk:develop' into develop drew 2021-05-21 20:10:16 -07:00
  • 04227fd8ee Branch was auto-updated. github-actions[bot] 2021-05-21 17:57:32 +00:00
  • 2ba0bc3978 Branch was auto-updated. xmrigrod github-actions[bot] 2021-05-21 17:57:31 +00:00
  • efa3db50c5 Merge pull request #1413 from splunk/den-haag Bhavin Patel 2021-05-21 10:57:16 -07:00
  • 45d45a345e Merge branch 'develop' into den-haag Bhavin Patel 2021-05-21 10:53:33 -07:00
  • 40a7a4494d Added detection testing service results inServices Escalate Exe root 2021-05-21 17:50:02 +00:00
  • 75e9673370 Merge branch 'splunk:develop' into develop drew 2021-05-21 10:45:01 -07:00
  • b411f2b1fc CVE-2021-31166 mhaag-spl 2021-05-21 11:25:37 -06:00
  • ce81bcc4c8 Merge branch 'develop' of github.com:splunk/security_content into develop tccontre 2021-05-21 12:55:59 +02:00
  • 2e335b317d Branch was auto-updated. github-actions[bot] 2021-05-21 00:33:36 +00:00
  • 5ad14e5dbd Branch was auto-updated. github-actions[bot] 2021-05-21 00:33:35 +00:00
  • 9a2a30ae97 Merge pull request #1412 from splunk/tr-662_risk_scores Rod Soto 2021-05-20 17:33:21 -07:00
  • 1a3df7445e Branch was auto-updated. github-actions[bot] 2021-05-20 23:01:11 +00:00
  • 7d7bcb497e Branch was auto-updated. github-actions[bot] 2021-05-20 23:01:10 +00:00
  • 9155a244a3 Branch was auto-updated. github-actions[bot] 2021-05-20 23:01:08 +00:00
  • 618a06fda1 Merge pull request #1381 from splunk/xmrig Bhavin Patel 2021-05-20 16:00:47 -07:00
  • a5b0e785ae adding risk tags bpatel 2021-05-20 13:00:47 -07:00
  • ece4317cc9 Merge branch 'develop' into xmrig Bhavin Patel 2021-05-20 11:15:23 -07:00
  • e0e8d2b322 xmr_str tccontre 2021-05-20 10:56:00 +02:00
  • 7f4d032edd updating story name bpatel 2021-05-19 15:21:25 -07:00
  • 2c54c39ea9 Branch was auto-updated. github-actions[bot] 2021-05-19 20:31:47 +00:00
  • 92485f1f2c Merge pull request #1411 from splunk/updating_darkside_date Bhavin Patel 2021-05-19 13:31:33 -07:00
  • 7dce7ba174 date of story is wrong Jose Enrique Hernandez 2021-05-19 16:26:40 -04:00
  • 981ce357fa Branch was auto-updated. github-actions[bot] 2021-05-19 19:38:53 +00:00
  • 5a5ea37b5d Merge pull request #1294 from splunk/TR-532_escu_remove_ui Bhavin Patel 2021-05-19 12:38:33 -07:00
  • 8ce5e748d2 Merge branch 'develop' into TR-532_escu_remove_ui TR-532_escu_remove_ui Jose Enrique Hernandez 2021-05-19 14:42:25 -04:00
  • 20657de83c Branch was auto-updated. github-actions[bot] 2021-05-19 18:42:19 +00:00
  • 193f6ae9d3 Merge pull request #1345 from splunk/allow_skew Jose Enrique Hernandez 2021-05-19 14:41:59 -04:00
  • 54210d1cf6 Merge branch 'develop' into allow_skew Jose Enrique Hernandez 2021-05-19 14:37:35 -04:00
  • 898b886536 Merge branch 'develop' into xmrigrod P4T12ICK 2021-05-19 18:43:07 +02:00
  • 9ace8fb3fd Update xmrig.yml Michael Haag 2021-05-19 10:05:12 -06:00
  • 5f7f6fb7cd Update xmrig_driver_loaded.yml Michael Haag 2021-05-19 09:36:10 -06:00
  • f6aa338124 adding doc_gen and reportin to the updated tools divious1 2021-05-19 11:00:41 -04:00
  • 66c567ef4f Update suspicious_process_file_path.yml Michael Haag 2021-05-19 08:49:51 -06:00
  • 5109ed792c Update suspicious_driver_loaded_path.yml Michael Haag 2021-05-19 08:29:34 -06:00
  • b3d12aaf91 Update schtasks_run_task_on_demand.yml Michael Haag 2021-05-19 08:24:01 -06:00
  • e6df825b27 Update process_kill_base_on_file_path.yml Michael Haag 2021-05-19 08:21:30 -06:00
  • 134db53975 Update modify_acl_permission_to_files_or_folder.yml Michael Haag 2021-05-19 08:11:59 -06:00
  • 8e0c29a6a7 Update icacls_grant_command.yml Michael Haag 2021-05-19 08:08:39 -06:00
  • 99681d7f46 lndn1 tccontre 2021-05-19 16:06:45 +02:00
  • b592b27f8d Update icacls_deny_command.yml Michael Haag 2021-05-19 07:19:26 -06:00
  • 53451f407d Update hide_user_account_from_sign_in_screen.yml Michael Haag 2021-05-19 07:17:18 -06:00
  • 14b838e094 Update executables_or_script_creation_in_suspicious_path.yml Michael Haag 2021-05-19 07:13:11 -06:00
  • 2473db53a1 Update excessive_usage_of_taskkill.yml Michael Haag 2021-05-19 07:06:39 -06:00
  • 1b65498b30 Update excessive_usage_of_net_app.yml Michael Haag 2021-05-19 07:04:54 -06:00