admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • a156b9b4f1 Delete ssa___credential_extraction_dsinternals_conversion_modules.test.yml miskoSplunk 2021-02-26 14:03:16 -08:00
  • 0fc70f4957 Delete ssa___applying_stolen_credentials_via_powersploit_modules.test.yml miskoSplunk 2021-02-26 14:01:56 -08:00
  • 8f84e76b4e Delete ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml miskoSplunk 2021-02-26 14:01:41 -08:00
  • 574b3c6aca Merge branch 'develop' into ssa_misko_raw_event_datasets Jose Enrique Hernandez 2021-02-26 16:06:11 -05:00
  • d49ff42b57 first workbook example Philip Royer 2021-02-26 15:56:18 -05:00
  • 6bb01daf98 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-02-26 11:22:53 -08:00
  • c01c4f32c8 Merge pull request #1214 from splunk/ssa_etet_ig P4T12ICK 2021-02-26 12:45:10 +01:00
  • efd8467269 timers that account for ssa delays Ignacio Bermudez Corrales 2021-02-25 20:15:22 -08:00
  • 135456391b remove unused code from ssa_utils.py Ignacio Bermudez Corrales 2021-02-25 16:03:06 -08:00
  • 1e6ea714e0 fixed job and service accounts to match vault Ignacio Bermudez Corrales 2021-02-25 15:53:56 -08:00
  • 10c6f54604 fixed up a few items with markdown divious1 2021-02-25 18:53:26 -05:00
  • 2c996886e3 Update cobalt_strike.yml mhaag-spl 2021-02-25 15:13:32 -07:00
  • 4cae9952d5 Update cobalt_strike.yml mhaag-spl 2021-02-25 15:06:29 -07:00
  • fbeb021a40 Merge branch 'develop' into awsiamsearches Rod Soto 2021-02-25 16:30:46 -05:00
  • ae2d09b066 deletedtestetsfixedlastsearches Rod Soto 2021-02-25 16:28:48 -05:00
  • 762bed4384 fix mhaag-spl 2021-02-25 14:24:44 -07:00
  • 1bab0244ef fixingsearches2 Rod Soto 2021-02-25 16:19:44 -05:00
  • 65a9f81411 Update suspicious_curl_network_connection.yml mhaag-spl 2021-02-25 14:19:00 -07:00
  • 5ec99d2c76 Update suspicious_curl_network_connection.yml mhaag-spl 2021-02-25 14:16:05 -07:00
  • a2212ee3a0 fixingsearches Rod Soto 2021-02-25 16:15:21 -05:00
  • 1f8d6f95b4 Merge branch 'develop' into dependabot/pip/python-daemon-2.3.0 Jose Enrique Hernandez 2021-02-25 16:12:42 -05:00
  • 0e1de2f89f Update suspicious_curl_network_connection.yml mhaag-spl 2021-02-25 14:11:35 -07:00
  • 7748c9dc65 update mhaag-spl 2021-02-25 14:07:36 -07:00
  • 54cc612093 fix mhaag-spl 2021-02-25 14:02:38 -07:00
  • 1f93a7a46e movedtoresponsetasks Rod Soto 2021-02-25 16:00:18 -05:00
  • 691139a8cc Update suspicious_sqlite3_lsquarantine_behavior.yml mhaag-spl 2021-02-25 13:58:41 -07:00
  • 5332f24256 silver sparrow test mhaag-spl 2021-02-25 13:57:08 -07:00
  • 5536f1045a Update suspicious_plistbuddy_usage.yml mhaag-spl 2021-02-25 13:46:22 -07:00
  • 82e153c4d3 describeaccountgetgrouplistentitiesrootsauthpolicy Rod Soto 2021-02-25 15:45:22 -05:00
  • 92f9acc5e1 listgroupsinstanceusers Rod Soto 2021-02-25 14:45:34 -05:00
  • df6d9cadd3 Update suspicious_plistbuddy_usage.yml mhaag-spl 2021-02-25 12:19:43 -07:00
  • 1af1421263 Update silver_sparrow.yml mhaag-spl 2021-02-25 12:17:10 -07:00
  • 356400defd Merge branch 'ssa_etet_ig' into playground-testing Ignacio Bermudez Corrales 2021-02-25 11:17:07 -08:00
  • dcc4060a87 Update silver_sparrow.yml mhaag-spl 2021-02-25 12:09:28 -07:00
  • 1c86fc84af describeorgsestoken Rod Soto 2021-02-25 14:08:10 -05:00
  • 7fc33f259e Update silver_sparrow.yml mhaag-spl 2021-02-25 12:03:56 -07:00
  • 9d96fc34e6 silver sparrow mhaag-spl 2021-02-25 11:59:21 -07:00
  • 12354c0bdd listattachedpolattrolepolices Rod Soto 2021-02-25 13:16:32 -05:00
  • 3371833509 data can change Ignacio Bermudez Corrales 2021-02-25 09:53:24 -08:00
  • 9846ce772c listroles Rod Soto 2021-02-25 12:51:28 -05:00
  • 9cdd4d8807 Branch was auto-updated. github-actions[bot] 2021-02-25 14:13:18 +00:00
  • 7e0d895fdb Branch was auto-updated. github-actions[bot] 2021-02-25 14:13:17 +00:00
  • f4572a43cb Branch was auto-updated. detection_test_update github-actions[bot] 2021-02-25 14:13:16 +00:00
  • ec7b3b117e Branch was auto-updated. github-actions[bot] 2021-02-25 14:13:15 +00:00
  • f771fb5dd4 Merge pull request #1213 from splunk/improvements_contentctl P4T12ICK 2021-02-25 15:12:56 +01:00
  • ef5e89be50 Merge pull request #1212 from splunk/ssa_etet_ig P4T12ICK 2021-02-25 12:58:36 +01:00
  • 721afd048b improvements contentctl P4T12ICK 2021-02-25 10:06:52 +01:00
  • d3a983d0a5 added example divious1 2021-02-25 01:21:52 -05:00
  • 46d9f30f85 fixing divider divious1 2021-02-25 01:20:16 -05:00
  • 9f3045df33 minor updates to jinja template divious1 2021-02-25 01:17:31 -05:00
  • d8d90111a0 markdown_detections divious1 2021-02-25 01:10:17 -05:00
  • f720ba4c44 adding troubleshoot testing with index Ignacio Bermudez Corrales 2021-02-24 16:32:01 -08:00
  • e0265be396 SSA macros replace pulsar topics Ignacio Bermudez Corrales 2021-02-24 15:44:06 -08:00
  • 2e7d3aba94 documentation cleaning Ignacio Bermudez Corrales 2021-02-24 12:59:36 -08:00
  • cf69880ed0 refactoring + assertion fix + readme Ignacio Bermudez Corrales 2021-02-24 12:49:18 -08:00
  • b51faae370 Added detection testing service results inAWS Create Policy Version to allow all resources bpatel 2021-02-24 11:17:36 -08:00
  • c939de7140 detection service test bpatel 2021-02-24 10:26:12 -08:00
  • eb98f6b27a Merge branch 'develop' into detection_test_update P4T12ICK 2021-02-24 18:03:08 +01:00
  • 90032c3af5 Merge pull request #1211 from splunk/ssa_testing_with_staging P4T12ICK 2021-02-24 16:02:13 +01:00
  • 8cacc203cf Prepared to work in playground and staging P4T12ICK 2021-02-24 15:14:49 +01:00
  • 814aeaee3e Update silver_sparrow.yml mhaag-spl 2021-02-24 05:42:43 -07:00
  • 10e028c9fa Silver Sparrow mhaag-spl 2021-02-24 05:38:44 -07:00
  • 3b67057979 Merge branch 'ssa_end_to_end_testing' of github.com:splunk/security-content into ssa_end_to_end_testing P4T12ICK 2021-02-24 10:14:53 +01:00
  • 8b745ad8df Merge pull request #1208 from splunk/ssa_etet_ig P4T12ICK 2021-02-24 10:14:45 +01:00
  • 8632dcfe10 Modified detection and test files to point to new test datasets containing raw multiline Windows events for SSA. Stanislav Miskovic 2021-02-23 23:48:03 -08:00
  • 09734d1e1d Unique temporal index per test Ignacio Bermudez Corrales 2021-02-23 21:12:05 -08:00
  • e41c1bdc43 skeleton divious1 2021-02-23 22:41:48 -05:00
  • b07c716c36 Added detection testing service results inAWS Create Policy Version to allow all resources bpatel 2021-02-23 19:08:57 -08:00
  • eb7db58e0c minor update for output bpatel 2021-02-23 18:10:25 -08:00
  • bdeb45daf7 updating path for detection service bpatel 2021-02-23 18:02:54 -08:00
  • 0f2eef7b2f remove bpatel 2021-02-23 17:59:51 -08:00
  • ce5c9678f0 deleted bpatel 2021-02-23 17:59:32 -08:00
  • 90f73ba943 updates to use content ctl bpatel 2021-02-23 17:00:31 -08:00
  • c9c805127d Update suspicious_searchprotocolhost_no_command_line_arguments.yml mhaag-spl 2021-02-23 15:17:46 -07:00
  • 75998a3ddf SearchprotocolHost mhaag-spl 2021-02-23 15:04:11 -07:00
  • 393065bc66 Update suspicious_dllhost_no_command_line_arguments.test.yml mhaag-spl 2021-02-23 14:22:23 -07:00
  • 8be12639f3 remove macro bpatel 2021-02-23 13:04:32 -08:00
  • 3d437f9e66 test generate with ctl bpatel 2021-02-23 12:51:17 -08:00
  • b7f587b127 Update suspicious_gpupdate_no_command_line_arguments.test.yml mhaag-spl 2021-02-23 13:48:57 -07:00
  • 4e8e25259f addAS bpatel 2021-02-23 12:29:48 -08:00
  • 1233dd14ba Update suspicious_gpupdate_no_command_line_arguments.yml mhaag-spl 2021-02-23 13:17:29 -07:00
  • 99729a95ee uid issue mhaag-spl 2021-02-23 13:11:42 -07:00
  • bb5bc07dab fixes and new mhaag-spl 2021-02-23 13:04:17 -07:00
  • b21536034f fixed index search Ignacio Bermudez Corrales 2021-02-23 11:50:54 -08:00
  • 9188143fea gpupdate no cmdline arguments mhaag-spl 2021-02-23 12:34:52 -07:00
  • 73f000b1d5 test time bpatel 2021-02-23 10:57:01 -08:00
  • 5659890755 Update cobalt_strike_named_pipes.yml mhaag-spl 2021-02-23 09:19:05 -07:00
  • cb7dcf184a Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:23 +00:00
  • 5a84c8dc11 Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:23 +00:00
  • 624f64f559 Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:21 +00:00
  • dbbb2806e8 Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:20 +00:00
  • 23ffb1d135 Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:19 +00:00
  • 71452fb146 Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:18 +00:00
  • 1f2b5a0fca Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:17 +00:00
  • 2827efdb0b Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:15 +00:00
  • 8d4409139f Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:14 +00:00
  • b141c57c30 Branch was auto-updated. github-actions[bot] 2021-02-23 14:18:13 +00:00
  • 5a6e68be32 Merge pull request #1201 from splunk/contentctl Jose Enrique Hernandez 2021-02-23 09:17:53 -05:00
  • a99d1b66a6 test P4T12ICK 2021-02-23 10:59:18 +01:00
  • df4728786a test P4T12ICK 2021-02-23 10:49:11 +01:00