admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e0cb05ca26 Bump ansible from 2.10.6 to 2.10.7 dependabot[bot] 2021-02-10 02:33:57 +00:00
  • 1295228b0d Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:16 +00:00
  • 61695d038b Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:15 +00:00
  • 0c8aa75117 Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:14 +00:00
  • da1cfd0220 Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:12 +00:00
  • 2fbb9c083b Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:11 +00:00
  • 523db0fbc6 Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:08 +00:00
  • a1ed9d781f Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:06 +00:00
  • 33ec5aa35f Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:05 +00:00
  • 85bb5bf62b Branch was auto-updated. github-actions[bot] 2021-02-10 02:33:01 +00:00
  • 1792ec428b Merge pull request #1181 from splunk/dependabot/pip/automated_detection_testing/cryptography-3.3.2 dependabot[bot] 2021-02-10 02:32:44 +00:00
  • c6f3096d5d Bump cryptography from 3.3.1 to 3.3.2 in /automated_detection_testing dependabot[bot] 2021-02-10 02:25:12 +00:00
  • 405ebb4dae spl update and test file bpatel 2021-02-09 16:33:53 -08:00
  • b6840c14f8 Update suspicious_rundll32_activity.yml mhaag-spl 2021-02-09 15:30:10 -07:00
  • c2c8d9c320 Update suspicious_regsvr32_activity.yml mhaag-spl 2021-02-09 15:27:37 -07:00
  • 03a48cd47d formatting mhaag-spl 2021-02-09 14:24:39 -07:00
  • c99b478d72 format fixing mhaag-spl 2021-02-09 14:18:56 -07:00
  • 07ffc993b4 removing for now mhaag-spl 2021-02-09 14:14:49 -07:00
  • 9db73e43c8 Create suspicious_rundll32_activity.yml mhaag-spl 2021-02-09 14:11:38 -07:00
  • 2ce3a6adcb Update suspicious_regsvr32_activity.yml mhaag-spl 2021-02-09 14:01:59 -07:00
  • c26c9a9989 Update dump_lsass_via_comsvcs_dll.yml mhaag-spl 2021-02-09 13:57:50 -07:00
  • d6a219f0b5 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 mhaag-spl 2021-02-09 13:13:07 -07:00
  • 9c08582cfa Update suspicious_regsvr32_rename.yml mhaag-spl 2021-02-09 13:13:05 -07:00
  • d53f30cff7 Added detection testing service results inSuspicious Rundll32 dllregisterserver root 2021-02-09 19:37:50 +00:00
  • 157d8770e6 rundll32 dllregisterserver mhaag-spl 2021-02-09 12:10:39 -07:00
  • 525e1ff46c Added detection testing service results inSuspicious Rundll32 with no Command Line Arguments root 2021-02-09 18:46:55 +00:00
  • bc508128e9 misspell mhaag-spl 2021-02-09 11:27:19 -07:00
  • c34083adf3 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 mhaag-spl 2021-02-09 11:25:10 -07:00
  • 3ead4c2840 rundll32 with no cmdline arguments mhaag-spl 2021-02-09 11:25:01 -07:00
  • f9a6635e70 Added detection testing service results inSuspicious Rundll32 startw root 2021-02-09 18:18:34 +00:00
  • f89c21964d Rundll32,StartW mhaag-spl 2021-02-09 10:54:34 -07:00
  • ea3d18287c Bump azure-core from 1.10.0 to 1.11.0 dependabot[bot] 2021-02-09 14:02:49 +00:00
  • 33af6dfb13 Merge branch 'develop' into cloudfederationcredentialabuse Bhavin Patel 2021-02-08 11:29:49 -08:00
  • 2ae854b678 fixing gitlab CI job to adjust for new types divious1 2021-02-08 10:38:49 -05:00
  • 004db3e825 renaming analytic stories divious1 2021-02-08 10:21:38 -05:00
  • 9a7dee893c renamed in response tasks divious1 2021-02-08 10:19:31 -05:00
  • eef01502f3 renamed stories divious1 2021-02-08 10:18:57 -05:00
  • 1ec15cf044 renamed on all detections divious1 2021-02-08 10:18:16 -05:00
  • b4c31d718a fixing minor generate bug, since we added response type action divious1 2021-02-08 10:10:05 -05:00
  • 7cb093cd0b adding risk score values divious1 2021-02-08 09:46:18 -05:00
  • cdf6e11170 Bump more-itertools from 8.6.0 to 8.7.0 dependabot[bot] 2021-02-08 14:03:42 +00:00
  • acaf6e2501 added type batch to story divious1 2021-02-05 15:41:56 -05:00
  • b68e05685e modified type for detections divious1 2021-02-05 14:35:49 -05:00
  • 3eca0fd3f2 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 Detection Testing Service 2021-02-05 14:50:30 +00:00
  • 783bc38a1d Added detection testing service results inDetect Rundll32 Application Control Bypass - setupapi root 2021-02-05 14:50:28 +00:00
  • e02e30e423 Added detection testing service results inDetect Rundll32 Application Control Bypass - syssetup root 2021-02-05 14:50:23 +00:00
  • 3d37e93d99 rundll32 syssetup, setupapi mhaag-spl 2021-02-05 07:27:02 -07:00
  • bbdd2bd860 add products to responses, added new type response, also new checks for product tag and mitre_attack_id in validate divious1 2021-02-04 22:28:19 -05:00
  • 6c950af9d4 Merge branch 'develop' into TR-380_reuse_type divious1 2021-02-04 21:24:00 -05:00
  • 71d22f6c80 Merge branch 'develop' into TR-380_reuse_type divious1 2021-02-04 21:16:12 -05:00
  • a74d64f874 Branch was auto-updated. github-actions[bot] 2021-02-05 00:53:42 +00:00
  • 706186936b Branch was auto-updated. github-actions[bot] 2021-02-05 00:53:41 +00:00
  • 8d869fd507 Branch was auto-updated. github-actions[bot] 2021-02-05 00:53:39 +00:00
  • 754af70021 Branch was auto-updated. github-actions[bot] 2021-02-05 00:53:38 +00:00
  • f22e7a85a4 Merge pull request #1175 from splunk/ci_api_cleans Jose Enrique Hernandez 2021-02-04 19:53:21 -05:00
  • 7fd34c3fc0 fixing API bug divious1 2021-02-04 19:43:19 -05:00
  • 7fbe713056 Branch was auto-updated. github-actions[bot] 2021-02-04 23:51:13 +00:00
  • 7f4cc7d3f3 Branch was auto-updated. github-actions[bot] 2021-02-04 23:51:12 +00:00
  • 4683767e49 Branch was auto-updated. github-actions[bot] 2021-02-04 23:51:10 +00:00
  • c8fca00546 Branch was auto-updated. github-actions[bot] 2021-02-04 23:51:09 +00:00
  • 9102da2606 updating docs and package bits [ci skip] research bot 2021-02-04 23:50:47 +00:00
  • 0a13434910 Branch was auto-updated. github-actions[bot] 2021-02-04 23:37:27 +00:00
  • ee4501eca8 Branch was auto-updated. github-actions[bot] 2021-02-04 23:37:26 +00:00
  • c43b027c41 Branch was auto-updated. github-actions[bot] 2021-02-04 23:37:25 +00:00
  • 8c609b3219 Branch was auto-updated. github-actions[bot] 2021-02-04 23:37:23 +00:00
  • f241796909 Merge branch 'develop' of github.com:splunk/security_content into develop v3.14.0 divious1 2021-02-04 18:36:28 -05:00
  • c7667b5740 fixing a error which was causing API to fail divious1 2021-02-04 18:36:10 -05:00
  • fc002d018d Branch was auto-updated. github-actions[bot] 2021-02-04 23:07:58 +00:00
  • a12518125b Branch was auto-updated. github-actions[bot] 2021-02-04 23:07:57 +00:00
  • f3d8385624 Branch was auto-updated. github-actions[bot] 2021-02-04 23:07:55 +00:00
  • dd4e45e56d Branch was auto-updated. github-actions[bot] 2021-02-04 23:07:53 +00:00
  • 63a8fed102 updating docs and package bits [ci skip] research bot 2021-02-04 23:07:26 +00:00
  • 2de7634378 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 Detection Testing Service 2021-02-04 22:03:43 +00:00
  • bfec79252f Added detection testing service results inDetect Renamed rundll32.exe Rename root 2021-02-04 22:03:42 +00:00
  • a2aec12a9f Added detection testing service results inDetect Rundll32 Application Control Bypass - advpack and ieadvpack root 2021-02-04 22:03:10 +00:00
  • b2aed2b816 rundll32 advpack and rename mhaag-spl 2021-02-04 14:38:54 -07:00
  • 46cc94b8ab Branch was auto-updated. github-actions[bot] 2021-02-04 20:36:24 +00:00
  • 45658a212b Branch was auto-updated. github-actions[bot] 2021-02-04 20:36:22 +00:00
  • ed5a556a4d Branch was auto-updated. github-actions[bot] 2021-02-04 20:36:21 +00:00
  • 16b738c414 Branch was auto-updated. github-actions[bot] 2021-02-04 20:36:20 +00:00
  • 144bcfa736 Update README.md Jose Enrique Hernandez 2021-02-04 15:36:01 -05:00
  • 83c2b44d6d Branch was auto-updated. github-actions[bot] 2021-02-04 20:34:05 +00:00
  • 1101d1a4b4 Branch was auto-updated. github-actions[bot] 2021-02-04 20:34:01 +00:00
  • a6d98a59c5 Branch was auto-updated. github-actions[bot] 2021-02-04 20:33:57 +00:00
  • 1e95e74fd0 Branch was auto-updated. github-actions[bot] 2021-02-04 20:33:54 +00:00
  • f770ab56bc Merge pull request #1172 from splunk/TR-379_add_product_tags Jose Enrique Hernandez 2021-02-04 15:33:19 -05:00
  • a5ffdefcd4 udpating to correct a merge error divious1 2021-02-04 15:08:51 -05:00
  • 8bbfbdadb4 remove explicit deployment check for Mustang bpatel 2021-02-04 10:57:48 -08:00
  • f4ed009d16 fixing conflicts divious1 2021-02-04 12:43:41 -05:00
  • ff3918ca17 Branch was auto-updated. github-actions[bot] 2021-02-04 16:36:16 +00:00
  • b4dbaee9f8 Branch was auto-updated. github-actions[bot] 2021-02-04 16:36:14 +00:00
  • a62ad21de7 Branch was auto-updated. github-actions[bot] 2021-02-04 16:36:13 +00:00
  • 774ce3dfe7 Branch was auto-updated. github-actions[bot] 2021-02-04 16:36:11 +00:00
  • d905041aff Branch was auto-updated. github-actions[bot] 2021-02-04 16:36:10 +00:00
  • 8c430fd32a Branch was auto-updated. github-actions[bot] 2021-02-04 16:36:08 +00:00
  • 91931235d8 Merge pull request #1136 from splunk/sh_test Bhavin Patel 2021-02-04 08:35:43 -08:00
  • a390051bdd fixing but I hit in generate divious1 2021-02-04 11:22:34 -05:00
  • 8a772c721f adding product tags and type to baselines divious1 2021-02-04 10:59:44 -05:00
  • 7c0a849eda updated stories with product tags divious1 2021-02-04 10:54:26 -05:00
  • e14fade976 adding product tag to all detections divious1 2021-02-03 21:42:46 -05:00