Commit Graph

  • 436906b79f Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:18 +00:00
  • 26ada2e1f7 Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:17 +00:00
  • 7c9df4018e Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:16 +00:00
  • 6b8f60c80f Branch was auto-updated. awsiamsearches github-actions[bot] 2021-04-15 19:10:15 +00:00
  • 456e4e3722 Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:15 +00:00
  • 4e9f4a8175 Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:14 +00:00
  • 7ada42b190 Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:13 +00:00
  • 31f285a4b0 Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:11 +00:00
  • 5373b817bc Branch was auto-updated. github-actions[bot] 2021-04-15 19:10:10 +00:00
  • 85220f56bf Merge pull request #1335 from splunk/saaws_appinspect Jose Enrique Hernandez 2021-04-15 15:09:53 -04:00
  • cc3d3cd7e2 remove configs that are not needed by saaws bpatel 2021-04-15 12:00:29 -07:00
  • d6a32d4bd5 Added detection testing service results inAWS IAM AccessDenied Discovery Events root 2021-04-15 18:47:13 +00:00
  • 453b0accec Added detection testing service results inAWS Excessive List Command Usage root 2021-04-15 18:13:33 +00:00
  • 07e5528918 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach tcontreras 2021-04-15 19:40:46 +02:00
  • 7a0d9be5a5 spear_update tcontreras 2021-04-15 19:39:21 +02:00
  • c84656c87b adding one extra detection, NTLM spray with invalid users mvelazco 2021-04-15 10:45:10 -04:00
  • e0cbf01590 adding 2 extra detections mvelazco 2021-04-15 09:42:36 -04:00
  • 8cd49a3f7a Added detection testing service results inOffice Document Executing Macro Code root 2021-04-15 08:25:53 +00:00
  • 0fa575ad4a Delete office_application_spawned_cmd_shell.test.yml tccontre 2021-04-15 09:46:20 +02:00
  • e85860be6c Delete office_application_spawned_cmd_shell.yml tccontre 2021-04-15 09:46:00 +02:00
  • 81fad1383b Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:13 +00:00
  • 897c19c0ec Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:13 +00:00
  • 35d9401cbc Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:12 +00:00
  • 6dff266bb3 Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:11 +00:00
  • 3a32b59e9a Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:10 +00:00
  • cf0ea3ca61 Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:09 +00:00
  • 632bae41ca Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:08 +00:00
  • 788b1b9550 Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:07 +00:00
  • 995bae1d0e Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:06 +00:00
  • 63af5b09a7 Branch was auto-updated. github-actions[bot] 2021-04-15 07:31:01 +00:00
  • 274e5f1b43 Merge pull request #1334 from splunk/fix_malicious_ps_as_service P4T12ICK 2021-04-15 09:30:41 +02:00
  • a0914ddcdd Added detection testing service results inMalicious Powershell Executed As A Service root 2021-04-15 07:23:08 +00:00
  • 62ed90ccbd Added various ways to execute powershell, made match of the powershell executable mandatory, added that execution must be followed by one of the hidding or no-exit options. Stanislav Miskovic 2021-04-14 22:46:38 -07:00
  • 94eccb2565 Update winevent_scheduled_task_created_within_public_path.yml mhaag-spl 2021-04-14 21:28:49 -06:00
  • 79bff151de Update winevent_scheduled_task_created_within_public_path.yml mhaag-spl 2021-04-14 21:25:26 -06:00
  • f18542b214 Update winevent_scheduled_task_created_within_public_path.yml mhaag-spl 2021-04-14 21:23:30 -06:00
  • 537be8ede4 Update winevent_scheduled_task_created_within_public_path.yml mhaag-spl 2021-04-14 21:17:59 -06:00
  • bc572e94fa Update aws_iam_delete_policy.yml mhaag-spl 2021-04-14 21:14:35 -06:00
  • 8a81aee71b AWS Detections mhaag-spl 2021-04-14 21:10:46 -06:00
  • 271bb6d85a updaing password spraying detection names mvelazco 2021-04-14 15:40:17 -04:00
  • d4f3d601f7 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:21 +00:00
  • f05f1210c4 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:20 +00:00
  • 3b09117d62 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:18 +00:00
  • 8935b08bdf Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:17 +00:00
  • 8775f8b463 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:16 +00:00
  • a23dfb57e4 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:15 +00:00
  • 13cedb2cc9 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:13 +00:00
  • d0550f2202 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:12 +00:00
  • 9a942f0d23 Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:10 +00:00
  • beb49969cf Branch was auto-updated. github-actions[bot] 2021-04-14 19:27:09 +00:00
  • 65b9300449 Merge pull request #1325 from splunk/fixing_deployments Bhavin Patel 2021-04-14 12:26:51 -07:00
  • 3d2a90f694 merge with develop bpatel 2021-04-14 12:18:36 -07:00
  • fa72657d67 conflicts bpatel 2021-04-14 11:13:40 -07:00
  • 4fa6bd1c72 pushing initial password spraying content mvelazco 2021-04-14 14:00:05 -04:00
  • 55885cf24b Added detection testing service results inOffice Document Creating Schedule Task root 2021-04-14 17:05:09 +00:00
  • ac1b96681e Added detection testing service results inOffice Application Spawned CMD Shell root 2021-04-14 16:35:28 +00:00
  • b8092f7981 Added detection testing service results inOffice Application Spawn rundll32 process root 2021-04-14 16:12:49 +00:00
  • 71b663937e spear_detections tcontreras 2021-04-14 16:00:16 +02:00
  • 15dae52e30 Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:46 +00:00
  • 7c8a6d421c Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:45 +00:00
  • 215f792a01 Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:44 +00:00
  • 42b8114b90 Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:43 +00:00
  • aed9380409 Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:42 +00:00
  • 164140c710 Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:41 +00:00
  • d2e8f137c7 Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:40 +00:00
  • 8f38c9b3af Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:40 +00:00
  • b4a436906a Branch was auto-updated. github-actions[bot] 2021-04-14 11:30:39 +00:00
  • 4abef2023b Merge pull request #1328 from splunk/aws_iam_detections P4T12ICK 2021-04-14 13:30:19 +02:00
  • 884fb57647 Added detection testing service results inAWS Excessive Security Scanning root 2021-04-14 11:25:51 +00:00
  • d59baf9915 Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:20 +00:00
  • a972620dcd Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:19 +00:00
  • 6969c766b3 Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:19 +00:00
  • 5fd868f2a9 Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:18 +00:00
  • 77e61301fa Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:17 +00:00
  • 50f0b3c10f Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:16 +00:00
  • 57bf504b41 Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:16 +00:00
  • 0b4027bb3a Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:15 +00:00
  • d55f467687 Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:14 +00:00
  • 646828f597 Branch was auto-updated. github-actions[bot] 2021-04-14 11:06:12 +00:00
  • a67d72e419 Merge pull request #1326 from splunk/test_batch_fork P4T12ICK 2021-04-14 13:05:51 +02:00
  • f2515576aa Merge branch 'test_batch_fork' of github.com:splunk/security-content into test_batch_fork P4T12ICK 2021-04-14 13:00:31 +02:00
  • f0ae0ed41f small improvements P4T12ICK 2021-04-14 13:00:14 +02:00
  • 04152c8ef3 Added detection testing service results inMalicious Powershell Executed As A Service root 2021-04-14 10:55:27 +00:00
  • f6525b4d2f Added detection testing service results inAttempted Credential Dump From Registry via Reg exe automated_detection_testing_1618393289 root 2021-04-14 10:06:31 +00:00
  • c6803f1a88 remove print bpatel 2021-04-13 14:40:44 -07:00
  • 8de6aa31a9 AWS Updates mhaag-spl 2021-04-13 14:11:56 -06:00
  • 3d839f0f11 Updated AWS IAM Detections mhaag-spl 2021-04-13 14:08:45 -06:00
  • b5bb4d22b1 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-04-13 12:59:15 -07:00
  • 396e5fa928 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:15 +00:00
  • 3bdef645e4 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:14 +00:00
  • 23a2814b20 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:13 +00:00
  • 1a7c4537e8 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:12 +00:00
  • a7da0dcf1e Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:11 +00:00
  • 9c1956f2cb Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:10 +00:00
  • b210e07067 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:09 +00:00
  • d002fd4da3 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:08 +00:00
  • 15488bf2f2 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:07 +00:00
  • 291406676d Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:06 +00:00
  • f977083fc2 Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:05 +00:00
  • c96368308c Branch was auto-updated. github-actions[bot] 2021-04-13 17:34:04 +00:00