admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • b6ad8f0efb Added detection testing service results inWinword Spawning PowerShell root 2021-04-21 17:56:41 +00:00
  • ae87327c98 dllhost test again mhaag-spl 2021-04-21 11:55:18 -06:00
  • 5d51234dec Update winword_spawning_powershell.yml mhaag-spl 2021-04-21 11:34:42 -06:00
  • d5b4f28efa Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:38 +00:00
  • 203a1edb93 Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:37 +00:00
  • 7bde465bcb Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:37 +00:00
  • a6f5cdd2ee Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:36 +00:00
  • 247d91a61c Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:35 +00:00
  • 28566a1b9c Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:34 +00:00
  • c31021ee24 Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:33 +00:00
  • 0ea2f2b110 Branch was auto-updated. github-actions[bot] 2021-04-21 17:31:32 +00:00
  • 5e2985a899 Merge pull request #1340 from splunk/TR-542_move_to_deprecated Jose Enrique Hernandez 2021-04-21 13:31:15 -04:00
  • a22e361f72 Update dllhost_with_no_command_line_arguments_with_network.test.yml mhaag-spl 2021-04-21 11:19:30 -06:00
  • 5c5139cf5a moved detection ssa___rare_parent_process_relationship_lolbas to deprecated divious1 2021-04-21 13:17:07 -04:00
  • a386c06827 Update winword_spawning_powershell.test.yml mhaag-spl 2021-04-21 10:55:51 -06:00
  • 86a0a2e117 Winword spawning powershell mhaag-spl 2021-04-21 10:52:23 -06:00
  • c2306af1c2 Update searchprotocolhost_with_no_command_line_with_network.yml mhaag-spl 2021-04-21 10:51:30 -06:00
  • dc319b6eda Spearphishing Attachments detections mhaag-spl 2021-04-21 10:16:49 -06:00
  • e040c8bc04 rename phishing payloads to spearphishing attachments mhaag-spl 2021-04-21 10:04:40 -06:00
  • 76d2d207b0 Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:47 +00:00
  • 375bea5164 Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:46 +00:00
  • d3556b634e Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:46 +00:00
  • 42b2181f6e Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:45 +00:00
  • b7079f3555 Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:44 +00:00
  • e6fd51e255 Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:43 +00:00
  • 3b00708960 Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:43 +00:00
  • 7b5c265ff4 Branch was auto-updated. github-actions[bot] 2021-04-21 08:48:41 +00:00
  • cd9f4413c1 Merge pull request #1331 from splunk/sphear_attach P4T12ICK 2021-04-21 10:48:24 +02:00
  • 629928024f minor - fixing filename mvelazco 2021-04-20 18:43:30 -04:00
  • 8380603e54 Update multiple_disabled_users_failing_to_authenticate_from_one_source_using_kerberos.test.yml mvelazco 2021-04-20 18:38:59 -04:00
  • 365f35b1b7 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:59 +00:00
  • 9b3dd8fbd4 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:58 +00:00
  • 47368a427e Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:57 +00:00
  • ff9403bb63 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:56 +00:00
  • 2d3ac48db4 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:55 +00:00
  • 3acfe97bf8 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:54 +00:00
  • 5060510a07 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:53 +00:00
  • 7606ced212 Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:53 +00:00
  • 7992c20b9b Branch was auto-updated. github-actions[bot] 2021-04-20 22:28:52 +00:00
  • 5c22609da7 Merge pull request #1338 from splunk/search_name_length_check Jose Enrique Hernandez 2021-04-20 18:28:35 -04:00
  • fb3941f9e9 Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:58 +00:00
  • 2838af7f2a Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:56 +00:00
  • ccea2938b8 Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:56 +00:00
  • 6ec896590f Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:55 +00:00
  • d237f66daf Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:52 +00:00
  • abea55f34f Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:52 +00:00
  • 9aea18973c Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:49 +00:00
  • f3569ca50e Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:48 +00:00
  • a696403082 Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:46 +00:00
  • 73d8b17a98 Branch was auto-updated. github-actions[bot] 2021-04-20 22:08:45 +00:00
  • ead6b26dfb Merge pull request #1339 from splunk/pyattck_bug Bhavin Patel 2021-04-20 15:08:29 -07:00
  • cfdef45bfb fixing pyattck bug plus some minor things with references divious1 2021-04-20 18:02:44 -04:00
  • c829a64ddd updating reqs with latest pyattck divious1 2021-04-20 17:55:06 -04:00
  • 2efc199543 fixing minor doc gen bug divious1 2021-04-20 17:44:12 -04:00
  • c0169b76ee adding dataset metadata mvelazco 2021-04-20 17:41:57 -04:00
  • 310bbc8884 Update dllhost_with_no_command_line_arguments_with_network.test.yml mhaag-spl 2021-04-20 15:16:14 -06:00
  • 609c1e275e minor bpatel 2021-04-20 13:24:16 -07:00
  • 8e12d73bde minor bpatel 2021-04-20 13:14:33 -07:00
  • c0e9a5dc1d search name and file renames bpatel 2021-04-20 13:10:00 -07:00
  • 3e44ef77fa validate check for search length name bpatel 2021-04-20 12:49:32 -07:00
  • 0a55bf791f updated queries mhaag-spl 2021-04-20 13:05:11 -06:00
  • dee37ff335 Added detection testing service results inOffice Document Spawned Child Process To Download root 2021-04-20 16:04:58 +00:00
  • 868af21f74 Added detection testing service results inGPUpdate with no Command Line Arguments with Network root 2021-04-19 21:30:03 +00:00
  • 64288e39c7 searchprotocolhost mhaag-spl 2021-04-19 13:41:41 -06:00
  • 4925bae6b5 typo mhaag-spl 2021-04-19 13:13:17 -06:00
  • 962aa311d2 Update dllhost_with_no_command_line_arguments_with_network.test.yml mhaag-spl 2021-04-19 13:10:15 -06:00
  • 1d6c20d587 dllhost and gpupdate fix mhaag-spl 2021-04-19 13:08:04 -06:00
  • 9fb74f12ea Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-19 19:00:08 +00:00
  • b8e07910a4 Added detection testing service results inWinEvent Scheduled Task Created to Spawn Shell root 2021-04-19 19:00:07 +00:00
  • 5daf227b3f gpupdate mhaag-spl 2021-04-19 12:58:24 -06:00
  • a69c363313 Update active_directory_password_spraying.yml mvelazco 2021-04-19 14:54:00 -04:00
  • c143c99ad8 Update winevent_scheduled_task_created_to_spawn_shell.test.yml mhaag-spl 2021-04-19 12:37:35 -06:00
  • b9d4c096b9 Added detection testing service results inRundll32 with no Command Line Arguments with Network root 2021-04-19 18:17:41 +00:00
  • 9579f2d708 Update rundll32_with_no_command_line_arguments_with_network.test.yml mhaag-spl 2021-04-19 11:57:51 -06:00
  • 868df41593 Added detection testing service results inShedule Task with HTTP Command Arguments root 2021-04-19 17:26:14 +00:00
  • 663d1b04a2 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags mhaag-spl 2021-04-19 11:21:19 -06:00
  • b2dc244920 rundll32 mhaag-spl 2021-04-19 11:21:05 -06:00
  • 8f119308cc Added detection testing service results inWinEvent Scheduled Task Created Within Public Path root 2021-04-19 16:58:36 +00:00
  • a5cf51e9d5 task_sched tcontreras 2021-04-19 18:58:16 +02:00
  • ac370189ee winevent fix mhaag-spl 2021-04-19 10:39:42 -06:00
  • 0e3bf4835f spear2 tcontreras 2021-04-19 16:45:03 +02:00
  • 3d390bc1d6 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach tcontreras 2021-04-19 16:41:30 +02:00
  • 8f80520df7 spear tcontreras 2021-04-19 16:40:53 +02:00
  • e961931cff skeleton migrate_to_poetry divious1 2021-04-18 21:24:02 -04:00
  • 4cb46fcd21 Update active_directory_password_spraying.yml mvelazco 2021-04-16 10:48:18 -04:00
  • c1e23d5cc0 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-04-16 00:06:17 -07:00
  • 6139a30ce7 Adding a more deterministic matching of command line options. Stanislav Miskovic 2021-04-15 15:49:59 -07:00
  • 5d81ce6926 winevent public path mhaag-spl 2021-04-15 15:14:50 -06:00
  • 5361b73924 Merge branch 'develop' into cloudywithachanceofhaags Michael Haag 2021-04-15 15:05:15 -06:00
  • 18586f6bb0 winevents task registered mhaag-spl 2021-04-15 14:54:22 -06:00
  • a74171d7e3 removals mhaag-spl 2021-04-15 14:25:15 -06:00
  • cc38063d6f Added detection testing service results inAWS IAM Successful Group Deletion root 2021-04-15 20:16:33 +00:00
  • 10d6fccda7 Added detection testing service results inAWS IAM Failure Group Deletion root 2021-04-15 19:53:19 +00:00
  • a40dc12832 updating docs and package bits [ci skip] research bot 2021-04-15 19:40:20 +00:00
  • 7c192a8e44 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-15 19:21:10 +00:00
  • 7f30daf301 Added detection testing service results inAWS IAM Delete Policy root 2021-04-15 19:21:10 +00:00
  • 7b0e2bbf68 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags Detection Testing Service 2021-04-15 19:17:21 +00:00
  • f07a6cd445 Added detection testing service results inAWS IAM Assume Role Policy Brute Force root 2021-04-15 19:17:21 +00:00
  • cd2cc7675b Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-04-15 12:12:59 -07:00
  • 2e6fab0dc0 Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:19 +00:00