admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 2ca32c65c9 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-04-23 10:01:05 -07:00
  • cfce74c34b fixed comments for story divious1 2021-04-23 12:41:19 -04:00
  • aacb65becb improve comments divious1 2021-04-23 12:37:01 -04:00
  • be079f9654 cleaning up old docs divious1 2021-04-23 12:28:29 -04:00
  • fbdd8c30b0 fixing bug with mitre sub technique URLs divious1 2021-04-23 12:23:43 -04:00
  • bd66b44311 Added detection testing service results inMultiple Archive Files Http Post Traffic root 2021-04-23 15:06:39 +00:00
  • 7e31007e97 Added detection testing service results inPlain HTTP POST Exfiltrated Data root 2021-04-23 14:49:36 +00:00
  • 1488915fca minor_chg tcontreras 2021-04-23 16:25:28 +02:00
  • 09a84d93b4 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:32 +00:00
  • 13f5e86e33 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:31 +00:00
  • 9f181bba19 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:31 +00:00
  • 7a3be1f88a Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:29 +00:00
  • a9b06de212 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:29 +00:00
  • fa24209b92 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:28 +00:00
  • 1b02f48bef Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:27 +00:00
  • b413ca816d Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:26 +00:00
  • fe3be35371 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:25 +00:00
  • cae111f759 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:22 +00:00
  • 36f58e61ec Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:19 +00:00
  • ea1df186d5 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:16 +00:00
  • 10db696fe8 Branch was auto-updated. github-actions[bot] 2021-04-23 12:24:15 +00:00
  • b4c5b309a3 Merge pull request #1348 from splunk/removed_unused_test_files P4T12ICK 2021-04-23 14:23:58 +02:00
  • ebffd874e8 fix the 101% detection coverage P4T12ICK 2021-04-23 14:11:58 +02:00
  • 044b01c28c Merge branch 'net_exfil' of github.com:splunk/security_content into net_exfil tcontreras 2021-04-23 14:07:28 +02:00
  • e86eb625fb stream_source tcontreras 2021-04-23 14:07:00 +02:00
  • 25a4be5d98 updating docs and package bits [ci skip] research bot 2021-04-22 21:55:11 +00:00
  • 8eb9f0727a fixing ci job with package version v3.19.0 divious1 2021-04-22 17:32:06 -04:00
  • ad1361674b Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:56 +00:00
  • 50a55e688d Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:54 +00:00
  • d587c0e7d8 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:52 +00:00
  • f07f98c0c8 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:51 +00:00
  • 11486d2e7d Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:50 +00:00
  • a4f9e9df12 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:48 +00:00
  • 2ac1d5f0ca Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:47 +00:00
  • 1ea0dd1256 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:46 +00:00
  • e94eafd157 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:45 +00:00
  • eae2b1a5c7 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:43 +00:00
  • 7b8d883b63 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:42 +00:00
  • cb8ce9b777 Branch was auto-updated. github-actions[bot] 2021-04-22 20:59:41 +00:00
  • 0f9a41e8c2 Merge pull request #1322 from splunk/cloudywithachanceofhaags Bhavin Patel 2021-04-22 13:59:21 -07:00
  • f058903076 Added detection testing service results inAnomalous usage of 7zip root 2021-04-22 20:23:48 +00:00
  • c1e90a20b7 Anomalous Usage of 7z mhaag-spl 2021-04-22 13:27:47 -06:00
  • cf280e71b4 allow skew setting for mustang detections bpatel 2021-04-22 12:09:52 -07:00
  • e2b22babe0 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-22 18:20:11 +00:00
  • 825cab7da1 Added detection testing service results inWinword Spawning Windows Script Host root 2021-04-22 18:20:10 +00:00
  • 9d12c84810 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:57 +00:00
  • 1dd4707000 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:56 +00:00
  • df81bd1a15 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:55 +00:00
  • 074665d209 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:55 +00:00
  • de05d6bafc Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:54 +00:00
  • 3edee8dab8 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:53 +00:00
  • a2fe5a4eba Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:53 +00:00
  • 668a5c5b0f Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:51 +00:00
  • 4cb6362ae3 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:50 +00:00
  • bdff1aaeb8 Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:49 +00:00
  • 3790936f7a Branch was auto-updated. github-actions[bot] 2021-04-22 18:19:49 +00:00
  • 24c0967b15 Merge pull request #1343 from splunk/rename_product_splunk_behavioral_analytics Bhavin Patel 2021-04-22 11:19:34 -07:00
  • 8491518f08 Update winword_spawning_windows_script_host.yml mhaag-spl 2021-04-22 11:59:19 -06:00
  • aa62997e60 removed detections mhaag-spl 2021-04-22 11:52:20 -06:00
  • 4ef58f8af2 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-22 17:49:23 +00:00
  • 9c7965ed1f Added detection testing service results inOffice Product Spawning Rundll32 with no DLL root 2021-04-22 17:49:23 +00:00
  • cf41087f7b Update aws_iam_failure_group_deletion.yml Bhavin Patel 2021-04-22 10:47:38 -07:00
  • 60842e5dc9 Update aws_iam_delete_policy.yml Bhavin Patel 2021-04-22 10:46:57 -07:00
  • 69debe6e26 Update aws_iam_assume_role_policy_brute_force.yml Bhavin Patel 2021-04-22 10:46:16 -07:00
  • fbb1986114 Update aws_iam_successful_group_deletion.yml Bhavin Patel 2021-04-22 10:44:46 -07:00
  • 102ccc889b Update aws_iam_root_account_login.yml Bhavin Patel 2021-04-22 10:44:02 -07:00
  • 47212a6443 Update aws_iam_root_account_login.yml Bhavin Patel 2021-04-22 10:42:12 -07:00
  • 621a5ec81b Update aws_iam_accessdenied_discovery_events.yml Bhavin Patel 2021-04-22 10:41:02 -07:00
  • 56c645560a Update winword_spawning_windows_script_host.test.yml mhaag-spl 2021-04-22 11:29:59 -06:00
  • 77d1364c16 Office Product Spawning Rundll32 with no DLL mhaag-spl 2021-04-22 11:20:45 -06:00
  • ddf4aaf210 Added detection testing service results inWinword Spawning Cmd root 2021-04-22 16:40:19 +00:00
  • 7a5e449119 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-22 16:22:45 +00:00
  • 48acf37045 Added detection testing service results inSearchProtocolHost with no Command Line with Network root 2021-04-22 16:22:45 +00:00
  • 2b40cfec8b remove root aws detections and update aws detection mhaag-spl 2021-04-22 10:21:36 -06:00
  • 88688f9960 duplicate detection mhaag-spl 2021-04-22 10:10:47 -06:00
  • 029c463ce8 Update searchprotocolhost_with_no_command_line_with_network.test.yml mhaag-spl 2021-04-22 10:00:32 -06:00
  • b86ece00d8 Update winword_spawning_cmd.test.yml mhaag-spl 2021-04-22 09:52:23 -06:00
  • c00de66c2f winword cmd mhaag-spl 2021-04-22 09:50:32 -06:00
  • 57bfcdaf62 Added detection testing service results inExcessive Usage of NSLOOKUP App root 2021-04-22 15:47:09 +00:00
  • 9bb6de8ed2 Added detection testing service results inDNS Exfiltration Using Nslookup App root 2021-04-22 15:29:40 +00:00
  • 6973e30290 winword wsh mhaag-spl 2021-04-22 09:23:46 -06:00
  • 28a498daa7 Added detection testing service results inExcel Spawning Windows Script Host root 2021-04-22 14:01:17 +00:00
  • 6ed8a29e4e fix_error tcontreras 2021-04-22 15:48:54 +02:00
  • 5f85f5e7e9 Excel WSH mhaag-spl 2021-04-22 07:38:08 -06:00
  • 162b9f0cc3 net_exfil tcontreras 2021-04-22 15:37:09 +02:00
  • a8a69a97a5 renaming product to new name divious1 2021-04-21 18:23:09 -04:00
  • 62473d7fb1 Update multiple_users_failing_to_authenticate_from_host_using_kerberos.yml Michael Haag 2021-04-21 15:04:57 -06:00
  • e40721c648 Update multiple_disabled_users_failing_to_authenticate_from_host_using_kerberos.yml Michael Haag 2021-04-21 15:04:01 -06:00
  • 0ae6b31e32 Merge branch 'develop' into password_spraying_TR-515 mvelazco 2021-04-21 13:56:43 -07:00
  • 4647b51f9c Fixing yaml issues mvelazco 2021-04-21 16:54:55 -04:00
  • 21d2a14ece adding required fields mvelazco 2021-04-21 16:17:06 -04:00
  • 9782bf5029 removing detection with no dataset mvelazco 2021-04-21 16:10:29 -04:00
  • 6bfafdd4a5 removing unused filepath mvelazco 2021-04-21 16:07:26 -04:00
  • 35525253a4 file and detection name updates mvelazco 2021-04-21 16:04:12 -04:00
  • 2d5ea36b0f upgrading detection to avoid FPs and also added bodies divious1 2021-04-21 15:54:11 -04:00
  • c0835e27c4 Added detection testing service results inExcel Spawning PowerShell root 2021-04-21 19:42:18 +00:00
  • 93bde1ecea Update excel_spawning_powershell.yml mhaag-spl 2021-04-21 13:13:37 -06:00
  • 59b1f289d7 Excel posh mhaag-spl 2021-04-21 13:11:40 -06:00
  • 94df7ff665 Added detection testing service results inDLLHost with no Command Line Arguments with Network root 2021-04-21 18:14:25 +00:00
  • 9bce42d494 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-21 17:56:42 +00:00