admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • dc9533c386 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:56 +00:00
  • 77d85aefa3 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:55 +00:00
  • 719a763e0c Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:54 +00:00
  • a492070a58 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:53 +00:00
  • ad305e860d Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:53 +00:00
  • eb541f3091 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:52 +00:00
  • 06c1ccf168 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:50 +00:00
  • 8243a67f46 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:49 +00:00
  • 73555375eb Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:47 +00:00
  • 08fddcc84a Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:45 +00:00
  • 787f78d666 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:44 +00:00
  • bd5d395782 Branch was auto-updated. github-actions[bot] 2021-03-02 20:59:42 +00:00
  • ea36d1969a Merge pull request #1220 from splunk/fix_contentctl_bug Michael Haag 2021-03-02 13:59:20 -07:00
  • 666c53d1b4 wrong path in test file specs divious1 2021-03-02 15:44:05 -05:00
  • 14915ca789 adding pyattck to libs divious1 2021-03-02 15:37:50 -05:00
  • 1f6fd5b915 Added detection testing service results inFodHelper UAC Bypass root 2021-03-02 20:12:27 +00:00
  • 355e1a4558 verbose true bpatel 2021-03-02 11:52:53 -08:00
  • 54b50fe92f Merge branch '02rel3' of https://github.com/splunk/security_content into 02rel3 mhaag-spl 2021-03-02 12:52:10 -07:00
  • d5cdffe5fa Update fodhelper_uac_bypass.test.yml mhaag-spl 2021-03-02 12:52:07 -07:00
  • de916f2e60 Added detection testing service results inSuspicious SearchProtocolHost no Command Line Arguments root 2021-03-02 19:26:38 +00:00
  • 00cb86916c Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:26 +00:00
  • 30f63d8d0f Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:26 +00:00
  • ab7a3a4d15 Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:25 +00:00
  • 9e10364a4e Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:24 +00:00
  • 115df4d76f Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:23 +00:00
  • 7b09668c35 Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:22 +00:00
  • e10ca2c91b Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:22 +00:00
  • 1cb815451d Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:21 +00:00
  • a767a7fa85 Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:20 +00:00
  • f869ff7107 Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:19 +00:00
  • 81575f390e Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:18 +00:00
  • 93f42f247a Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:18 +00:00
  • 68ce98d68e Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:17 +00:00
  • fb39062072 Branch was auto-updated. github-actions[bot] 2021-03-02 19:02:16 +00:00
  • 3c074e2665 Merge pull request #1218 from splunk/TR-495_misspelling mhart-splunk 2021-03-02 14:01:50 -05:00
  • 9c1bcaf16d Added detection testing service results inSuspicious DLLHost no Command Line Arguments root 2021-03-02 18:36:41 +00:00
  • e37aa006db Fixed misspelling in ransomware Michael Hart 2021-03-02 13:31:55 -05:00
  • 1efa4bcf5f Update ryuk_wake_on_lan_command.yml mhaag-spl 2021-03-02 11:19:04 -07:00
  • 66d9b7de7b Merge branch '02rel3' of https://github.com/splunk/security_content into 02rel3 Detection Testing Service 2021-03-02 17:58:45 +00:00
  • eb16361776 Added detection testing service results inSuspicious GPUpdate no Command Line Arguments root 2021-03-02 17:58:44 +00:00
  • 6952b99ea4 Update windows_disableantispyware_reg.yml mhaag-spl 2021-03-02 10:53:49 -07:00
  • 66b650d835 Windows DisableAntiSpyware Registry mhaag-spl 2021-03-02 10:42:08 -07:00
  • 16b9deabf8 cant read from user repos Ignacio Bermudez Corrales 2021-03-02 09:37:17 -08:00
  • c43f7c8878 WIP P4T12ICK 2021-03-02 18:06:15 +01:00
  • 0e18f64414 powershell mhaag-spl 2021-03-02 09:43:31 -07:00
  • 34f64d972c required_fields for detections P4T12ICK 2021-03-02 10:32:55 +01:00
  • bc31f18450 Merge branch 'ssa_end_to_end_testing' of github.com:splunk/security-content into ssa_end_to_end_testing P4T12ICK 2021-03-02 09:13:46 +01:00
  • fa561db694 wip P4T12ICK 2021-03-02 09:13:27 +01:00
  • 1b0a0a4338 missing docker credentials Ignacio Bermudez Corrales 2021-03-02 00:02:35 -08:00
  • 742198d5e5 v0 of deployer Ignacio Bermudez Corrales 2021-03-01 23:52:09 -08:00
  • ef7af97e8e Added detection testing service results inAWS Create Policy Version to allow all resources root 2021-03-02 03:56:03 +00:00
  • 3fc7550cdc working hyper links divious1 2021-03-01 22:04:55 -05:00
  • 239745b2d6 added organized by kind for detections divious1 2021-03-01 21:36:26 -05:00
  • 16627bf207 update url mhaag-spl 2021-03-01 18:28:25 -07:00
  • 46b623f7a0 tested on docker bpatel 2021-03-01 16:54:17 -08:00
  • 29a101da97 update local generator bpatel 2021-03-01 15:27:25 -08:00
  • 17c68a56f0 Added detection testing service results inAWS Create Policy Version to allow all resources root 2021-03-01 23:12:11 +00:00
  • 9794fd13fb Any PowerShell DownloadString mhaag-spl 2021-03-01 16:02:36 -07:00
  • bd2c69ec28 Eventvwr UAC Bypass mhaag-spl 2021-03-01 15:18:27 -07:00
  • ea7ccd21bb itworksss bpatel 2021-03-01 13:30:02 -08:00
  • 57871e4886 testing bpatel 2021-03-01 13:12:18 -08:00
  • bcbd2ebb19 Fodhelper uac bypass mhaag-spl 2021-03-01 13:38:06 -07:00
  • 5a09edf797 Suspicious Scheduled Task from Public Directory mhaag-spl 2021-03-01 12:45:22 -07:00
  • 47dec9d123 test file bpatel 2021-03-01 11:27:29 -08:00
  • 75c24a9f34 added markup divious1 2021-03-01 13:49:16 -05:00
  • a576744f88 Ryuk Wake on LAN mhaag-spl 2021-03-01 10:07:12 -07:00
  • 05d3fad633 new test P4T12ICK 2021-03-01 16:51:09 +01:00
  • a888b771c4 new test P4T12ICK 2021-03-01 16:51:05 +01:00
  • edaf53ff1c test P4T12ICK 2021-03-01 16:44:26 +01:00
  • 84984b453b wip P4T12ICK 2021-03-01 16:42:22 +01:00
  • ecb82ec8ca Fixes mhaag-spl 2021-03-01 06:52:02 -07:00
  • d265e72e8d Silver Sparrow mhaag-spl 2021-03-01 06:23:51 -07:00
  • dfab3ba794 small change P4T12ICK 2021-03-01 13:13:37 +01:00
  • 5e9bbaab75 attack data P4T12ICK 2021-03-01 13:11:38 +01:00
  • f7f9db55d3 test branch P4T12ICK 2021-03-01 10:36:45 +01:00
  • 87e36c489e test branch P4T12ICK 2021-03-01 10:36:14 +01:00
  • 30116dd3e8 add GitHub Service P4T12ICK 2021-03-01 10:35:06 +01:00
  • e3b2e44776 add GitHub Service P4T12ICK 2021-03-01 10:32:21 +01:00
  • 7088a5ca43 Delete ssa___credential_extraction_getaddbaccount_from_dump.test.yml miskoSplunk 2021-02-26 14:11:11 -08:00
  • 9331a7899e Delete ssa___credential_extraction_ms_debuggers_z_option.test.yml miskoSplunk 2021-02-26 14:10:40 -08:00
  • 023b1d6a47 Delete ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml miskoSplunk 2021-02-26 14:10:15 -08:00
  • 54d1c00df3 Delete ssa___credential_extraction_mimikatz_modules.test.yml miskoSplunk 2021-02-26 14:09:56 -08:00
  • 496e00240e Delete ssa___illegal_account_creation_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:09:26 -08:00
  • 26c314a6c7 Delete ssa___illegal_access_user_content_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:09:11 -08:00
  • f6fa021edc Delete ssa___illegal_log_deletion_via_mimikatz_modules.test.yml miskoSplunk 2021-02-26 14:08:49 -08:00
  • ceddaf134d Delete ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:08:05 -08:00
  • 53842f55b0 Delete ssa___illegal_account_enable_disable_via_dsinternals_modules.test.yml miskoSplunk 2021-02-26 14:07:43 -08:00
  • cd84b7a659 Delete ssa___illegal_privilege_elevation_via_mimikatz_modules.test.yml miskoSplunk 2021-02-26 14:07:14 -08:00
  • 1295e2a8f9 Delete ssa___illegal_service_and_process_control_via_mimikatz_modules.test.yml miskoSplunk 2021-02-26 14:06:57 -08:00
  • d346de0dad Delete ssa___illegal_service_and_process_control_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:06:31 -08:00
  • 6c7f50a875 Delete ssa___setting_credentials_via_dsinternals_modules.test.yml miskoSplunk 2021-02-26 14:06:12 -08:00
  • 8a3030b356 Delete ssa___setting_credentials_via_mimikatz_modules.test.yml miskoSplunk 2021-02-26 14:05:47 -08:00
  • 0b40494235 Delete ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:05:25 -08:00
  • b6343d93be Delete ssa___setting_credentials_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:04:47 -08:00
  • 8319b76803 Delete ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.test.yml miskoSplunk 2021-02-26 14:04:35 -08:00
  • 1a75a35fdd Delete ssa___credential_extraction_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:04:23 -08:00
  • 57a760619a Delete ssa___credential_extraction_lazagne_command_options.test.yml miskoSplunk 2021-02-26 14:04:12 -08:00
  • daf441733b Delete ssa___credential_extraction_fgdump_cachedump_v_option.test.yml miskoSplunk 2021-02-26 14:04:02 -08:00
  • 6e9483929f Delete ssa___credential_extraction_dsinternals_modules.test.yml miskoSplunk 2021-02-26 14:03:49 -08:00
  • 01cee15948 Delete ssa___credential_extraction_fgdump_cachedump_s_option.test.yml miskoSplunk 2021-02-26 14:03:28 -08:00