admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 503e6acd96 Merge pull request #1358 from splunk/typos Jose Enrique Hernandez 2021-05-05 16:05:06 -04:00
  • af1503d1cd Added detection testing service results inSchedule Task with HTTP Command Arguments root 2021-05-05 20:00:43 +00:00
  • c34f829999 adding single quotes to description mvelazco 2021-05-05 15:45:03 -04:00
  • d77e1b6a2e Merge branch 'password_spraying_TR-515' of github.com:splunk/security_content into password_spraying_TR-515 mvelazco 2021-05-05 15:34:08 -04:00
  • 03c05248ac fix_typos tcontreras 2021-05-05 21:34:02 +02:00
  • 5736f72589 updating detections queries to use stdev mvelazco 2021-05-05 15:34:01 -04:00
  • d9cfd940d1 fix_typo tcontreras 2021-05-05 21:28:00 +02:00
  • 34974c3310 Merge branch 'develop' into feature/generate-reorg P4T12ICK 2021-05-05 10:31:48 +02:00
  • 2148f95f80 Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:38 +00:00
  • 01112a931d Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:37 +00:00
  • d42382160b Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:36 +00:00
  • 414763e282 Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:35 +00:00
  • 64c8103f8f Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:33 +00:00
  • c4fd9f61d3 Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:32 +00:00
  • 86c391f4ab Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:31 +00:00
  • 8ff7ba5f8d Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:29 +00:00
  • ebdbf3cab8 Branch was auto-updated. github-actions[bot] 2021-05-04 08:38:09 +00:00
  • 757f465608 Merge pull request #1351 from splunk/trickbot P4T12ICK 2021-05-04 10:37:46 +02:00
  • 652c386188 Added detection testing service results inAccount Discovery With Net App root 2021-05-03 18:08:30 +00:00
  • f4e25f9d5c minor tcontreras 2021-05-03 19:40:55 +02:00
  • cea3e29e62 Merge branch 'trickbot' of github.com:splunk/security_content into trickbot tcontreras 2021-05-03 19:36:49 +02:00
  • 9250aca10f net tcontreras 2021-05-03 19:36:17 +02:00
  • 0ef9cb1122 Added detection testing service results inWermgr Process Connecting To IP Check Web Services root 2021-05-03 16:48:23 +00:00
  • ecfecd44f7 Added detection testing service results inWermgr Process Create Executable File root 2021-05-03 16:29:11 +00:00
  • fe36e285e5 Added detection testing service results inPowershell Remote Thread To Known Windows Process root 2021-05-03 16:04:17 +00:00
  • 8386cfd475 Added detection testing service results inWermgr Process Spawned CMD Or Powershell Process root 2021-05-03 15:42:03 +00:00
  • d8650b69f7 [TR-605] add initial test files for each new dll detection. jzsplunk 2021-05-03 08:20:30 -07:00
  • 66556b135d test_tr tcontreras 2021-05-03 17:12:24 +02:00
  • 6fff5cd155 new_tst tcontreras 2021-05-03 15:20:24 +02:00
  • 74c4a949c6 mod_test tcontreras 2021-05-03 15:08:35 +02:00
  • 88f02eca66 [TR-605] intial logic for detections related to suspicious dll behavior. jzsplunk 2021-05-02 07:34:16 -07:00
  • 4fcc4068b9 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-04-30 05:36:50 -07:00
  • 7ed813a01c pw tcontreras 2021-04-30 13:05:20 +02:00
  • a845ca2f0d minor_mod tcontreras 2021-04-30 12:15:04 +02:00
  • 5aeadfbbaa Merge branch 'develop' into trickbot P4T12ICK 2021-04-30 09:33:44 +02:00
  • 1aeb0a9f6a updating docs and package bits [ci skip] research bot 2021-04-29 21:32:44 +00:00
  • fe0f142515 Merge branch 'develop' into feature/generate-reorg Jose Enrique Hernandez 2021-04-29 17:02:30 -04:00
  • 171b19b286 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:17 +00:00
  • 6b741f2c84 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:16 +00:00
  • 4e7d20c033 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:15 +00:00
  • 67aa862388 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:14 +00:00
  • 947222fa15 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:13 +00:00
  • 081a28fdc2 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:12 +00:00
  • 9cf05ff43d Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:11 +00:00
  • 1f2390cf13 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:10 +00:00
  • 1404844b09 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:09 +00:00
  • 370987dfb1 Branch was auto-updated. github-actions[bot] 2021-04-29 20:56:08 +00:00
  • 0758c2da57 Merge pull request #1356 from splunk/stpooood_clam v3.20.0 untagged-230af650cf7898e77220 Jose Enrique Hernandez 2021-04-29 16:55:51 -04:00
  • b8c4992f82 fix text bpatel 2021-04-29 13:51:45 -07:00
  • 94cccc2e9f t3st stooooopid_clam bpatel 2021-04-29 13:13:29 -07:00
  • 8d22e9934f Update generate.py Thomas Nicholson 2021-04-29 12:48:12 +01:00
  • fbf3edaa11 Update generate.py Thomas Nicholson 2021-04-29 12:39:56 +01:00
  • 581bd1b3a7 Update generate.py Thomas Nicholson 2021-04-29 11:59:38 +01:00
  • e9e1be755f Update generate.py Thomas Nicholson 2021-04-29 11:44:25 +01:00
  • d7cece2f53 Update generate.py Thomas Nicholson 2021-04-29 10:48:01 +01:00
  • 8389cce2c0 Rearranged generate Thomas Nicholson 2021-04-29 09:48:06 +01:00
  • c5a8ace7e7 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:49 +00:00
  • 99e8370b4c Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:48 +00:00
  • 23d31f6408 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:47 +00:00
  • 9fd052fda4 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:45 +00:00
  • 951e90e549 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:44 +00:00
  • eecde7a4d1 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:43 +00:00
  • d558f3c03c Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:42 +00:00
  • b8791e76ed Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:41 +00:00
  • c79394c5b6 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:40 +00:00
  • bc402ec670 Branch was auto-updated. github-actions[bot] 2021-04-28 18:09:39 +00:00
  • fc82334017 Merge pull request #1353 from splunk/ssa_tbd Michael Haag 2021-04-28 12:09:19 -06:00
  • a2e62c08b9 removed dest id from a body field since it is already part of the anomaly divious1 2021-04-28 14:01:05 -04:00
  • e334484b1e Update ssa___illegal_service_and_process_control_via_mimikatz_modules.yml Jose Enrique Hernandez 2021-04-28 13:56:54 -04:00
  • 87d7cb0f4d Update ssa___illegal_privilege_elevation_via_mimikatz_modules.yml Jose Enrique Hernandez 2021-04-28 13:56:41 -04:00
  • 2bd7255d19 Update ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.yml Jose Enrique Hernandez 2021-04-28 13:56:30 -04:00
  • 5d7c94f508 Update ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.yml Jose Enrique Hernandez 2021-04-28 13:56:17 -04:00
  • 8f1e5f6a0e Update ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.yml Jose Enrique Hernandez 2021-04-28 13:56:03 -04:00
  • 3980104962 Update ssa___illegal_log_deletion_via_mimikatz_modules.yml Jose Enrique Hernandez 2021-04-28 13:55:52 -04:00
  • d0c21456ae Update ssa___illegal_account_enable_disable_via_dsinternals_modules.yml Jose Enrique Hernandez 2021-04-28 13:55:40 -04:00
  • df8c60d58f Update ssa___illegal_account_creation_via_powersploit_modules.yml Jose Enrique Hernandez 2021-04-28 13:55:07 -04:00
  • acae84ab62 Update ssa___illegal_access_user_content_via_powersploit_modules.yml Jose Enrique Hernandez 2021-04-28 13:54:52 -04:00
  • 5eec0c731a Update ssa___detect_pass_hash.yml Jose Enrique Hernandez 2021-04-28 13:54:35 -04:00
  • 2877c3679e Update ssa___credential_extraction_powersploit_modules.yml Jose Enrique Hernandez 2021-04-28 13:53:51 -04:00
  • 05f4acb4c2 Update ssa___credential_extraction_ms_debuggers_z_option.yml Jose Enrique Hernandez 2021-04-28 13:53:38 -04:00
  • 65dc6f1402 Update ssa___credential_extraction_ms_debuggers_kernel_peek.yml Jose Enrique Hernandez 2021-04-28 13:53:25 -04:00
  • 1a0c351e64 Update ssa___credential_extraction_mimikatz_modules.yml Jose Enrique Hernandez 2021-04-28 13:53:09 -04:00
  • 485af4308d Update ssa___credential_extraction_lazagne_command_options.yml Jose Enrique Hernandez 2021-04-28 13:52:55 -04:00
  • 5309d6546d Update ssa___credential_extraction_getaddbaccount_from_dump.yml Jose Enrique Hernandez 2021-04-28 13:52:05 -04:00
  • 1298161c3a Update ssa___credential_extraction_fgdump_cachedump_v_option.yml Jose Enrique Hernandez 2021-04-28 13:51:01 -04:00
  • c9953b5c8a Update ssa___credential_extraction_fgdump_cachedump_s_option.yml Jose Enrique Hernandez 2021-04-28 13:50:45 -04:00
  • ff215bb999 Update ssa___credential_extraction_dsinternals_modules.yml Jose Enrique Hernandez 2021-04-28 13:50:29 -04:00
  • 0ac46abe29 Update ssa___credential_extraction_dsinternals_conversion_modules.yml Jose Enrique Hernandez 2021-04-28 13:50:09 -04:00
  • f2953fe5ea Update ssa___attempted_credential_dump_from_registry_via_reg_exe.yml Jose Enrique Hernandez 2021-04-28 13:49:49 -04:00
  • 6e043a8e9a Update ssa___assess_credential_strength_via_dsinternals_modules.yml Jose Enrique Hernandez 2021-04-28 13:49:27 -04:00
  • 38706ea53e Update ssa___applying_stolen_credentials_via_powersploit_modules.yml Jose Enrique Hernandez 2021-04-28 13:49:01 -04:00
  • 76083b30b2 Update ssa___applying_stolen_credentials_via_mimikatz_modules.yml Jose Enrique Hernandez 2021-04-28 13:48:15 -04:00
  • 2b8ab04c98 Merge branch 'develop' into ssa_tbd Michael Haag 2021-04-28 10:28:39 -06:00
  • 79dd8f833c all SSA TBD bodies Done mhaag-spl 2021-04-28 10:25:26 -06:00
  • 8a7525ff1c Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-04-27 16:03:43 -07:00
  • 458147e1e7 SSA TBD mhaag-spl 2021-04-27 14:32:30 -06:00
  • 468dd8bfaa Branch was auto-updated. github-actions[bot] 2021-04-27 17:56:18 +00:00
  • 645e03b42e Branch was auto-updated. github-actions[bot] 2021-04-27 17:56:17 +00:00
  • 8064cb61ad Branch was auto-updated. github-actions[bot] 2021-04-27 17:56:16 +00:00
  • 8bf1f213f4 Branch was auto-updated. github-actions[bot] 2021-04-27 17:56:15 +00:00