admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 97a9046a10 Bump path from 15.0.0 to 15.0.1 dependabot[bot] 2020-12-09 21:18:13 +00:00
  • 9381ffae94 Merge pull request #1001 from splunk/dependabot/pip/pre-commit-2.9.3 dependabot[bot] 2020-12-09 21:17:22 +00:00
  • 41a2a7129b Merge branch 'develop' into remove_wrong_workbench_panels Bhavin Patel 2020-12-09 13:13:47 -08:00
  • 16c75bf7c1 Bump pre-commit from 2.9.2 to 2.9.3 dependabot[bot] 2020-12-09 21:12:35 +00:00
  • 5b8932056f Merge branch 'develop' into update_appinspect Bhavin Patel 2020-12-09 13:12:29 -08:00
  • 8f69a18f97 Merge pull request #1009 from splunk/deprecated_responses Jose Enrique Hernandez 2020-12-09 16:11:37 -05:00
  • 2f75d1aeaa organizing dirs in response tasks bpatel 2020-12-09 12:49:22 -08:00
  • 22e367077c requirement fix bpatel 2020-12-09 12:26:42 -08:00
  • 47bdb75d77 moving to deprecated responses bpatel 2020-12-09 12:23:27 -08:00
  • c192fa2ae7 checking build number in CI bpatel 2020-12-09 11:29:43 -08:00
  • 0ec46e7727 adding build number add_build_number divious1 2020-12-09 14:03:48 -05:00
  • abe8c635c1 updates P4T12ICK 2020-12-09 18:12:30 +01:00
  • 128661b0a1 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-12-09 09:07:45 -08:00
  • 04a456fa5b test file debugging P4T12ICK 2020-12-09 13:55:13 +01:00
  • 4d3bbb5e41 test file debugging P4T12ICK 2020-12-09 13:27:13 +01:00
  • bbc520c3bd new test file P4T12ICK 2020-12-09 12:39:17 +01:00
  • 48d0ae9f7f Added detection testing service results inCreate or delete windows shares using net exe root 2020-12-09 11:19:43 +00:00
  • 04e72ce0f2 Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two P4T12ICK 2020-12-09 12:01:00 +01:00
  • 132f536d44 new test file P4T12ICK 2020-12-09 12:00:49 +01:00
  • f14305b7f0 Added detection testing service results inAttempt To Set Default PowerShell Execution Policy To Unrestricted or Bypass root 2020-12-09 09:18:47 +00:00
  • b85dd98c8a Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two P4T12ICK 2020-12-09 10:00:41 +01:00
  • 442edba8d8 new attack data P4T12ICK 2020-12-09 10:00:12 +01:00
  • 2dc3c7546c fixed logic error divious1 2020-12-08 20:43:57 -05:00
  • 5e17508f09 Merge branch 'remove_wrong_workbench_panels' of https://github.com/splunk/security-content into remove_wrong_workbench_panels bpatel 2020-12-08 16:29:27 -08:00
  • aae12c594d delete empty lookup files bpatel 2020-12-08 15:19:34 -08:00
  • ba7d519a70 more app inspect bpatel 2020-12-08 15:14:11 -08:00
  • 5be5ec5b53 app inspect failures fixes bpatel 2020-12-08 14:56:39 -08:00
  • 627fcff9f5 update metric searches bpatel 2020-12-08 14:13:50 -08:00
  • e76a8cf175 files not needed bpatel 2020-12-08 11:15:24 -08:00
  • c75cc7d06b another response update bpatel 2020-12-08 10:36:06 -08:00
  • 82e59434ea delim update bpatel 2020-12-07 17:56:56 -08:00
  • cde633fde7 requireements CI error bpatel 2020-12-07 17:31:34 -08:00
  • cdf7bef98f testing CI bpatel 2020-12-07 17:25:44 -08:00
  • 17624547a8 adding all stories to notable histroy bpatel 2020-12-07 17:16:30 -08:00
  • 2ac0df4058 prilimary updates to response searches bpatel 2020-12-03 17:58:49 -08:00
  • 96bad5fa63 minor condition bpatel 2020-12-03 16:22:16 -08:00
  • b55ae9c5b9 remove duplicate response files bpatel 2020-12-03 16:14:58 -08:00
  • 6d4cb6228c notable history and udpate token bpatel 2020-12-03 15:51:05 -08:00
  • d2f76d075f update jinja for investigations bpatel 2020-12-03 15:18:40 -08:00
  • 592cb3667d remove panels which are already shipped by ES bpatel 2020-12-03 15:13:42 -08:00
  • 6efb131078 fixing syntax error divious1 2020-12-08 19:05:05 -05:00
  • 7eb7e1b3a4 merge with origin/update_appinspect bpatel 2020-12-08 15:33:07 -08:00
  • f80c40d3b7 Merge remote-tracking branch 'origin/remove_wrong_workbench_panels' into update_appinspect divious1 2020-12-08 18:32:34 -05:00
  • 404756c950 delete empty lookup files bpatel 2020-12-08 15:19:34 -08:00
  • dd647457c6 more app inspect bpatel 2020-12-08 15:14:11 -08:00
  • 25c7f33866 app inspect failures fixes bpatel 2020-12-08 14:56:39 -08:00
  • de6518d93b update metric searches bpatel 2020-12-08 14:13:50 -08:00
  • 5f5f80906f updated to artifacts divious1 2020-12-08 17:06:04 -05:00
  • 57e4ecbe37 moved logic to bash script divious1 2020-12-08 15:43:28 -05:00
  • c156c18b6b files not needed bpatel 2020-12-08 11:15:24 -08:00
  • 087e2093c9 another response update bpatel 2020-12-08 10:36:06 -08:00
  • d06c9439e5 changed loop divious1 2020-12-08 11:59:12 -05:00
  • 8b1225cdee fixed or clause divious1 2020-12-08 11:16:20 -05:00
  • a926dd52bb Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two Detection Testing Service 2020-12-08 15:11:33 +00:00
  • 12ac913b13 Added detection testing service results inSuspicious LNK file launching a process root 2020-12-08 15:11:32 +00:00
  • 6c8a8172a8 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two Detection Testing Service 2020-12-08 14:58:23 +00:00
  • 0838a2835d Added detection testing service results inWMI Permanent Event Subscription - Sysmon root 2020-12-08 14:58:22 +00:00
  • 8de0985548 new test file P4T12ICK 2020-12-08 15:55:35 +01:00
  • 9a77cf6057 new test file P4T12ICK 2020-12-08 15:43:25 +01:00
  • 8651a35dce Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two P4T12ICK 2020-12-08 15:17:14 +01:00
  • 23ac763f02 new test file P4T12ICK 2020-12-08 15:17:01 +01:00
  • 5bb3f16aa5 Added detection testing service results inUSN Journal Deletion root 2020-12-08 13:34:34 +00:00
  • 3b411763d3 new test file P4T12ICK 2020-12-08 14:18:59 +01:00
  • dd3e31cd44 new test file P4T12ICK 2020-12-08 14:18:08 +01:00
  • f020f30c5e Added detection testing service results inUnusually Long Command Line root 2020-12-08 13:17:15 +00:00
  • 268ba8ad21 new test file P4T12ICK 2020-12-08 14:00:25 +01:00
  • aea4ee11b3 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two Detection Testing Service 2020-12-08 12:46:08 +00:00
  • d52882f2c3 Added detection testing service results inSystem Processes Run From Unexpected Locations root 2020-12-08 12:46:06 +00:00
  • b00298de86 new test file P4T12ICK 2020-12-08 13:38:41 +01:00
  • b789637035 new test file P4T12ICK 2020-12-08 13:27:58 +01:00
  • 99aa182a5a Added detection testing service results inSuspicious writes to windows Recycle Bin root 2020-12-08 11:06:38 +00:00
  • 3d2776df2c Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two P4T12ICK 2020-12-08 11:48:13 +01:00
  • fb36b0d93a new test file P4T12ICK 2020-12-08 11:47:59 +01:00
  • 499da30671 Added detection testing service results inSuspicious File Write root 2020-12-08 10:37:22 +00:00
  • 466735ac5a new test file P4T12ICK 2020-12-08 11:19:49 +01:00
  • 235cf9a5b5 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two Detection Testing Service 2020-12-08 09:28:47 +00:00
  • ee4a9ae5f5 Added detection testing service results inSingle Letter Process On Endpoint root 2020-12-08 09:28:45 +00:00
  • 552760a579 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two Detection Testing Service 2020-12-08 09:18:08 +00:00
  • c442ea740a Added detection testing service results inShim Database File Creation root 2020-12-08 09:18:06 +00:00
  • 12124c6280 Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two P4T12ICK 2020-12-08 10:12:39 +01:00
  • 927e09bf1f new test file P4T12ICK 2020-12-08 10:12:15 +01:00
  • fe3e942301 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two Detection Testing Service 2020-12-08 09:09:38 +00:00
  • 0b74cc710d Added detection testing service results inSchtasks used for forcing a reboot root 2020-12-08 09:09:37 +00:00
  • 059949037c test detection P4T12ICK 2020-12-08 10:02:38 +01:00
  • fef37092a7 added exit codes divious1 2020-12-07 22:52:40 -05:00
  • b078b5b240 adding path change divious1 2020-12-07 22:45:55 -05:00
  • 566aa38237 Update ssa___applying_stolen_credentials_via_powersploit_modules.yml miskoSplunk 2020-12-07 19:44:47 -08:00
  • 1599239f13 fixing path divious1 2020-12-07 22:40:55 -05:00
  • 322eb49dbd missing jq dep divious1 2020-12-07 22:25:27 -05:00
  • 71b3bb51d7 spacing error divious1 2020-12-07 22:10:22 -05:00
  • 694302ffcd fixed now token is passed divious1 2020-12-07 22:00:03 -05:00
  • f94267b741 more syntax errors divious1 2020-12-07 21:53:50 -05:00
  • 755130125b fixed minor syntax error divious1 2020-12-07 21:41:55 -05:00
  • 756ba72b4c fixed issue with requirements divious1 2020-12-07 21:37:49 -05:00
  • c1f2f5b1e9 moved appinspect to use api divious1 2020-12-07 21:28:05 -05:00
  • c2e0d1b90b delim update bpatel 2020-12-07 17:56:56 -08:00
  • 940640cf32 requireements CI error bpatel 2020-12-07 17:31:34 -08:00
  • 3dd2ac69c4 testing CI bpatel 2020-12-07 17:25:44 -08:00
  • 65b80a1e50 Merge branch 'develop' into remove_wrong_workbench_panels bpatel 2020-12-07 17:25:11 -08:00
  • c160f86fb3 adding all stories to notable histroy bpatel 2020-12-07 17:16:30 -08:00