admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • ad1564ceb7 Added detection testing service results inDetect wmiprvse spawn msbuild root 2021-01-19 21:01:30 +00:00
  • 44a9d0bc8c URL Fixes mhaag-spl 2021-01-19 13:43:37 -07:00
  • 420bc3fc62 Update suspicious_msbuild_rename.yml mhaag-spl 2021-01-19 13:22:44 -07:00
  • 65b4f2827b Update suspicious_msbuild_rename.yml mhaag-spl 2021-01-19 13:19:38 -07:00
  • cdb6d034c4 Removing netconn mhaag-spl 2021-01-19 12:23:00 -07:00
  • 15c4883ef5 updating docs and package bits [ci skip] research bot 2021-01-19 18:27:52 +00:00
  • fc7afc28b7 Branch was auto-updated. github-actions[bot] 2021-01-19 18:12:48 +00:00
  • 3a81e29abb Merge pull request #1115 from splunk/add_notables v3.12.0 Jose Enrique Hernandez 2021-01-19 13:12:29 -05:00
  • 494684ac35 added notables again divious1 2021-01-19 13:08:54 -05:00
  • 4da2f7e4c4 Merge branch 'develop' into lookup_name_duplicate Bhavin Patel 2021-01-19 08:59:30 -08:00
  • c0fbbfda16 updating docs and package bits [ci skip] research bot 2021-01-19 16:47:19 +00:00
  • e63954f9e2 Branch was auto-updated. github-actions[bot] 2021-01-19 16:27:02 +00:00
  • 86d5723341 Branch was auto-updated. github-actions[bot] 2021-01-19 16:26:59 +00:00
  • b5655d40b4 Branch was auto-updated. github-actions[bot] 2021-01-19 16:26:57 +00:00
  • c49f46bc4a Merge branch 'develop' into dependabot/pip/importlib-metadata-3.4.0 Jose Enrique Hernandez 2021-01-19 11:26:49 -05:00
  • c05ee8d29d Merge pull request #1091 from splunk/dependabot/pip/azure-core-1.10.0 Jose Enrique Hernandez 2021-01-19 11:26:31 -05:00
  • 3fa5c378cc Timestamp mhaag-spl 2021-01-19 08:21:59 -07:00
  • f799b2abcf Added detection testing service results inMalicious PowerShell Process - Execution Policy Bypass root 2021-01-19 14:02:32 +00:00
  • 442d944890 new test file P4T12ICK 2021-01-19 14:44:01 +01:00
  • 29ba7a7c41 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-19 14:40:00 +01:00
  • fc19205eb1 new test file P4T12ICK 2021-01-19 14:39:44 +01:00
  • 40be1e58a8 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques root 2021-01-19 13:35:25 +00:00
  • 094c88a6ce new test file P4T12ICK 2021-01-19 14:17:24 +01:00
  • feb909bb55 new test file P4T12ICK 2021-01-19 14:08:44 +01:00
  • 6b3da6f94f Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-19 13:55:55 +01:00
  • 0d75faf323 new test file P4T12ICK 2021-01-19 13:55:33 +01:00
  • 4153917caf Merge branch 'develop' into dependabot/pip/azure-core-1.10.0 Jose Enrique Hernandez 2021-01-18 16:02:31 -05:00
  • d6fa6a6b5d Branch was auto-updated. github-actions[bot] 2021-01-18 15:43:18 +00:00
  • 034a6f7488 Branch was auto-updated. github-actions[bot] 2021-01-18 15:43:17 +00:00
  • 7ee039fed9 Merge pull request #1111 from splunk/dependabot/pip/pyjwt-2.0.1 bug_fix_lnk_file_temp_folder dependabot[bot] 2021-01-18 15:42:57 +00:00
  • 9c3fb5f7e1 Branch was auto-updated. github-actions[bot] 2021-01-18 15:07:05 +00:00
  • 1862ec83c8 Branch was auto-updated. github-actions[bot] 2021-01-18 15:07:03 +00:00
  • e485b54b05 Branch was auto-updated. github-actions[bot] 2021-01-18 15:07:01 +00:00
  • 943c63ca89 Merge pull request #1110 from splunk/dependabot/pip/mysql-connector-python-8.0.23 dependabot[bot] 2021-01-18 15:06:40 +00:00
  • 93bee4b41d Branch was auto-updated. github-actions[bot] 2021-01-18 15:01:16 +00:00
  • 4b4ddd6562 Branch was auto-updated. github-actions[bot] 2021-01-18 15:01:15 +00:00
  • 3e09d68dfc Branch was auto-updated. github-actions[bot] 2021-01-18 15:01:13 +00:00
  • ed5a803fc0 Branch was auto-updated. github-actions[bot] 2021-01-18 15:01:12 +00:00
  • 592ea03f9c Merge pull request #1112 from splunk/dependabot/pip/boto3-1.16.56 dependabot[bot] 2021-01-18 15:00:28 +00:00
  • 83876dc08c Branch was auto-updated. github-actions[bot] 2021-01-18 14:55:00 +00:00
  • 6c3887fbad Branch was auto-updated. github-actions[bot] 2021-01-18 14:54:58 +00:00
  • ee119695ee Branch was auto-updated. github-actions[bot] 2021-01-18 14:54:57 +00:00
  • 605db3faa9 Branch was auto-updated. github-actions[bot] 2021-01-18 14:54:55 +00:00
  • f3efa92e5e Branch was auto-updated. github-actions[bot] 2021-01-18 14:54:54 +00:00
  • 14233ee019 Merge pull request #1108 from splunk/dependabot/pip/deprecated-1.2.11 dependabot[bot] 2021-01-18 14:54:32 +00:00
  • 439e41c56c Branch was auto-updated. github-actions[bot] 2021-01-18 14:49:23 +00:00
  • cff2962651 Branch was auto-updated. github-actions[bot] 2021-01-18 14:49:22 +00:00
  • 26b1b533cd Branch was auto-updated. github-actions[bot] 2021-01-18 14:49:20 +00:00
  • ea6ed1f13d Branch was auto-updated. github-actions[bot] 2021-01-18 14:49:19 +00:00
  • e87ac5d63b Branch was auto-updated. github-actions[bot] 2021-01-18 14:49:17 +00:00
  • ab37770fb8 Branch was auto-updated. github-actions[bot] 2021-01-18 14:49:15 +00:00
  • a419f0994a Merge pull request #1114 from splunk/dependabot/pip/identify-1.5.13 dependabot[bot] 2021-01-18 14:48:53 +00:00
  • 98175156b7 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-18 15:47:15 +01:00
  • 477221da99 detection testing P4T12ICK 2021-01-18 15:46:53 +01:00
  • f7b8edd6cf Bump boto3 from 1.16.55 to 1.16.56 dependabot[bot] 2021-01-18 14:43:25 +00:00
  • 180f8696cb Bump pyjwt from 2.0.0 to 2.0.1 dependabot[bot] 2021-01-18 14:43:25 +00:00
  • 7c07c7b11a Bump mysql-connector-python from 8.0.22 to 8.0.23 dependabot[bot] 2021-01-18 14:43:24 +00:00
  • be08008e6e Bump deprecated from 1.2.10 to 1.2.11 dependabot[bot] 2021-01-18 14:43:17 +00:00
  • 1255a7799a Bump identify from 1.5.12 to 1.5.13 dependabot[bot] 2021-01-18 14:42:59 +00:00
  • 4ab3a4a90b Branch was auto-updated. github-actions[bot] 2021-01-18 14:42:42 +00:00
  • 0bc70a4ae4 Merge pull request #1109 from splunk/dependabot/pip/botocore-1.19.56 dependabot[bot] 2021-01-18 14:42:22 +00:00
  • a88d8291fe Added detection testing service results inDNS Query Length With High Standard Deviation root 2021-01-18 14:41:53 +00:00
  • 44bf41a678 new test file P4T12ICK 2021-01-18 15:22:05 +01:00
  • 48530732a2 Bump botocore from 1.19.55 to 1.19.56 dependabot[bot] 2021-01-18 14:03:52 +00:00
  • 27b27a5b59 detection testing branch P4T12ICK 2021-01-18 14:10:47 +01:00
  • c964e5274c Msbuild Story name and analytics fix mhaag-spl 2021-01-17 20:21:25 -07:00
  • 7d6017aa2b Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-17 20:16:42 -07:00
  • dbf7e128af MSBuild Story mhaag-spl 2021-01-17 20:09:52 -07:00
  • 28827c7fdb MSHTA mhaag-spl 2021-01-17 20:02:56 -07:00
  • bcf56faa51 Update suspicious_msbuild_netconn.yml mhaag-spl 2021-01-17 19:49:13 -07:00
  • 7414436df5 ID Collision mhaag-spl 2021-01-17 19:46:00 -07:00
  • 2e9bd74689 MSBuild mhaag-spl 2021-01-17 19:43:38 -07:00
  • 08488e067e Revert "Revert "Revert "Revert "T1127.001 MSbuild"""" mhaag-spl 2021-01-17 19:38:36 -07:00
  • fd5e4adfb1 Revert "Revert "Revert "T1127.001 MSbuild""" mhaag-spl 2021-01-17 19:37:58 -07:00
  • 9617d4d9b3 Revert "Revert "T1127.001 MSbuild"" mhaag-spl 2021-01-15 15:06:53 -07:00
  • e27ad1399a Revert "T1127.001 MSbuild" mhaag-spl 2021-01-15 15:06:15 -07:00
  • 0eba4877ff T1127.001 MSbuild mhaag-spl 2021-01-15 14:25:25 -07:00
  • f15c2d33cb Merge pull request #1104 from splunk/allow_external_prs Bhavin Patel 2021-01-15 12:37:51 -08:00
  • 2287dc02ee Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-01-15 12:02:12 -08:00
  • 8cad455781 Merge branch 'develop' into allow_external_prs Bhavin Patel 2021-01-15 11:53:13 -08:00
  • 13801b6a0e fixed bug where it did not checkout external branches divious1 2021-01-15 11:14:47 -05:00
  • 7b4836b01b Merge pull request #1103 from splunk/dependabot/pip/botocore-1.19.55 dependabot[bot] 2021-01-15 14:18:11 +00:00
  • 2ae044f136 Bump botocore from 1.19.54 to 1.19.55 dependabot[bot] 2021-01-15 14:12:10 +00:00
  • c7109e1eef Merge pull request #1102 from splunk/dependabot/pip/boto3-1.16.55 dependabot[bot] 2021-01-15 14:11:10 +00:00
  • 28b54bef7d Bump boto3 from 1.16.54 to 1.16.55 dependabot[bot] 2021-01-15 14:05:20 +00:00
  • 92485a8acd Merge pull request #1097 from splunk/TR-318_mfa P4T12ICK 2021-01-15 10:21:56 +01:00
  • b99d01458e first commit with product tag bpatel 2021-01-14 17:09:00 -08:00
  • 18ba87492f Branch was auto-updated. github-actions[bot] 2021-01-14 20:29:17 +00:00
  • a772e74a83 Merge pull request #1078 from splunk/detection_testing_branch jzsplunk 2021-01-14 12:28:53 -08:00
  • b751d5ddb8 Added detection testing service results inDetect hosts connecting to dynamic domain providers root 2021-01-14 15:15:59 +00:00
  • 50c3e8ead2 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch P4T12ICK 2021-01-14 15:57:55 +01:00
  • 2e1234c594 improved detections and tests P4T12ICK 2021-01-14 15:57:42 +01:00
  • 42419b043e Branch was auto-updated. github-actions[bot] 2021-01-14 14:21:59 +00:00
  • e127c23ba0 Merge pull request #1100 from splunk/dependabot/pip/boto3-1.16.54 dependabot[bot] 2021-01-14 14:21:38 +00:00
  • 1e0bc6e64a Bump boto3 from 1.16.53 to 1.16.54 dependabot[bot] 2021-01-14 14:14:35 +00:00
  • 7e6acc5465 Merge pull request #1099 from splunk/dependabot/pip/botocore-1.19.54 dependabot[bot] 2021-01-14 14:13:29 +00:00
  • a55f2a129a Bump botocore from 1.19.53 to 1.19.54 dependabot[bot] 2021-01-14 14:05:31 +00:00
  • c871d6804a improved detections and tests P4T12ICK 2021-01-14 15:01:16 +01:00
  • d72747ccd4 new generate feature P4T12ICK 2021-01-14 12:33:36 +01:00
  • 050b89ebef Added detection testing service results inO365 Bypass MFA via Trusted IP root 2021-01-14 02:45:18 +00:00