admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • c0e034ad04 fixed yaml and changed output for label Ignacio Bermudez Corrales 2020-10-15 01:43:56 -07:00
  • 1ace7057bd adding >= bpatel 2020-10-14 15:09:39 -07:00
  • dbd9314b1c spl updates bpatel 2020-10-14 14:43:16 -07:00
  • c5c7f2c847 Merge branch 'develop' into add_gitlab_ci Jose Enrique Hernandez 2020-10-14 13:20:58 -04:00
  • 8b52241175 fixed syntax Ignacio Bermudez Corrales 2020-10-14 09:53:15 -07:00
  • 6938154a94 ready for PR P4T12ICK 2020-10-14 16:13:55 +02:00
  • 7b9a2d682b Merge branch 'automated_detection_service' of github.com:splunk/security-content into automated_detection_service P4T12ICK 2020-10-14 14:36:08 +02:00
  • 779acf37b8 test P4T12ICK 2020-10-14 14:36:03 +02:00
  • 6aae51fa5c Added detection testing service results inSystem Information Discovery Detection root 2020-10-14 12:23:58 +00:00
  • c9ead8f05b updates to new testing structure P4T12ICK 2020-10-14 11:30:24 +02:00
  • c23fe12605 updated with develop P4T12ICK 2020-10-14 09:26:19 +02:00
  • 323138fe5f improved detection P4T12ICK 2020-10-14 09:22:03 +02:00
  • 3a87fe518f Merge pull request #715 from splunk/organize_detections unit_data_phishing P4T12ICK 2020-10-14 09:20:26 +02:00
  • a000e58de8 Merge branch 'develop' into organize_detections Jose Enrique Hernandez 2020-10-13 22:26:39 -04:00
  • 1683b9848f Merge branch 'develop' into add_gitlab_ci Jose Enrique Hernandez 2020-10-13 22:24:43 -04:00
  • b8ca9e5fd9 Merge branch 'develop' into gcploit Jose Enrique Hernandez 2020-10-13 22:08:22 -04:00
  • f644615b9c Merge pull request #745 from wesinator/dyndns-additions orga Jose Enrique Hernandez 2020-10-13 20:27:44 -04:00
  • 556fbd12a3 udpating to use glob divious1 2020-10-13 20:25:11 -04:00
  • dca8fad264 Merge branch 'develop' into organize_detections divious1 2020-10-13 20:19:08 -04:00
  • c84795fd80 security api calls mltk bpatel 2020-10-13 17:08:25 -07:00
  • d1cb61f159 api calls search mltk bpatel 2020-10-13 16:20:47 -07:00
  • 743ada6db8 Added detection testing service results inSystem Information Discovery Detection root 2020-10-13 17:50:09 +00:00
  • c19f355fb8 testing P4T12ICK 2020-10-13 19:15:56 +02:00
  • eeed5fb0b8 testing P4T12ICK 2020-10-13 19:06:26 +02:00
  • 91a8cf9e08 add additional dynamic domains wesinator 2020-10-13 12:44:52 -04:00
  • 565c8610cd Added detection testing service results inSystem Information Discovery Detection root 2020-10-13 15:40:24 +00:00
  • e33bda29b8 Merge branch 'automated_detection_service' of github.com:splunk/security-content into automated_detection_service P4T12ICK 2020-10-13 16:57:23 +02:00
  • 2565e75939 working P4T12ICK 2020-10-13 16:56:53 +02:00
  • b355f71dbd Added detection testing service results inSystem Information Discovery Detection root 2020-10-13 14:54:12 +00:00
  • 3bc8e0677e improve generate cmd P4T12ICK 2020-10-13 16:15:42 +02:00
  • a14a15c4b3 test P4T12ICK 2020-10-13 16:04:13 +02:00
  • 1661a807f5 test P4T12ICK 2020-10-13 14:56:54 +02:00
  • 78cfb8328b test P4T12ICK 2020-10-13 14:54:27 +02:00
  • e016ad556f WIP P4T12ICK 2020-10-13 14:24:29 +02:00
  • bf18c1514d updates P4T12ICK 2020-10-13 13:50:28 +02:00
  • a30f8e89a6 WIP P4T12ICK 2020-10-13 11:55:02 +02:00
  • 4e5136131a Merge pull request #740 from splunk/cloud_crypto_spl_bugs Bhavin Patel 2020-10-12 16:09:54 -07:00
  • 6a07f70a07 Merge branch 'mustang_beta' into cloud_crypto_spl_bugs Bhavin Patel 2020-10-12 12:47:31 -07:00
  • dac1086b04 spl bugs - fully tested bpatel 2020-10-12 12:37:05 -07:00
  • abac1c8b62 convert to kvstore and spl updates bpatel 2020-10-12 12:14:50 -07:00
  • 97ac9c5f62 spl updates and kvstore file bpatel 2020-10-12 11:49:37 -07:00
  • d237a2d984 lookup errors and consistency bpatel 2020-10-12 11:26:57 -07:00
  • aac5f2b4bc unseen image bpatel 2020-10-12 10:29:19 -07:00
  • 9aa0e5d61d update requirements P4T12ICK 2020-10-12 17:05:39 +02:00
  • 60f65fffae WIP P4T12ICK 2020-10-12 16:58:08 +02:00
  • 750e0ec81a Added detection testing service results inSystem Information Discovery Detection automated_detection_testing_3044 root 2020-10-12 11:13:23 +00:00
  • 65b37d17ae fix in detection P4T12ICK 2020-10-12 12:42:33 +02:00
  • 24394df216 new detection for T1082 automated_detection_testing_5859 P4T12ICK 2020-10-12 12:03:32 +02:00
  • 6f5b418bc5 testing if ci job triggers divious1 2020-10-10 13:56:51 -04:00
  • dbefc4eeef mispelling of file name divious1 2020-10-10 13:51:21 -04:00
  • 48c83af177 renaming divious1 2020-10-10 13:44:42 -04:00
  • 606002a335 test gitlab job divious1 2020-10-10 13:34:33 -04:00
  • da1463792d more response task fixes divious1 2020-10-10 12:58:56 -04:00
  • b6963f232a Merge pull request #733 from splunk/dependabot/pip/identify-1.5.6 dependabot-preview[bot] 2020-10-10 16:29:02 +00:00
  • 4210d62c32 Bump identify from 1.5.5 to 1.5.6 dependabot-preview[bot] 2020-10-10 16:25:24 +00:00
  • 17d81429e8 cloud provisiong ip spl bpatel 2020-10-09 15:56:42 -07:00
  • 689be427f9 redoing provision story bpatel 2020-10-09 15:49:46 -07:00
  • 3fea68239f Merge pull request #721 from splunk/TR-193 Jose Enrique Hernandez 2020-10-09 18:18:44 -04:00
  • 6142a2415e Merge branch 'mustang_beta' of https://github.com/splunk/security-content into mustang_beta bpatel 2020-10-09 12:19:10 -07:00
  • e9ea5ee90b remove extra pipe bpatel 2020-10-09 12:18:54 -07:00
  • ed6b1fafa1 Merge branch 'develop' into mustang_beta Bhavin Patel 2020-10-09 11:56:19 -07:00
  • 0d61252373 Merge branch 'develop' into gcploit Bhavin Patel 2020-10-09 10:27:34 -07:00
  • b64ca7010c seearch bugs bpatel 2020-10-09 10:23:53 -07:00
  • 1da0f22a6a baseline re write bpatel 2020-10-09 09:59:07 -07:00
  • 07bae7a2b7 ../detections/gcp_detect_high_risk_permissions_by_resource_and_account.yml Rod Soto 2020-10-09 11:37:48 -04:00
  • 202da1aa8a gcpdetectsearchesfixed2 Rod Soto 2020-10-09 10:57:14 -04:00
  • cb93a1df16 gcpdetecthighriskpermissionsv1 Rod Soto 2020-10-09 10:43:27 -04:00
  • 8115fbd312 gcpdetectaccounthighriskrolesbyproject2 Rod Soto 2020-10-09 10:12:21 -04:00
  • e6a967a412 gcpdetectaccounthighriskrolesbyproject Rod Soto 2020-10-09 10:07:42 -04:00
  • d93735f0e2 Added detection testing service results inUnload Sysmon Filter Driver automated_detection_testing_4445 root 2020-10-09 11:14:42 +00:00
  • 9478afe731 Added detection testing service results inCreate local admin accounts using net exe automated_detection_testing_5460 root 2020-10-09 11:14:20 +00:00
  • c032d5f64f Added detection testing service results inShort Lived Windows Accounts root 2020-10-09 11:14:20 +00:00
  • c9875509d4 new test file P4T12ICK 2020-10-09 12:54:09 +02:00
  • 1836583f37 Added detection testing service results inWindows Event Log Cleared automated_detection_testing_7781 root 2020-10-09 10:46:46 +00:00
  • fca5966c65 Added detection testing service results inDetect Path Interception By Creation Of program exe automated_detection_testing_6608 root 2020-10-09 10:34:58 +00:00
  • e48567ac56 new test file P4T12ICK 2020-10-09 12:28:07 +02:00
  • 389e25b2e3 new test file P4T12ICK 2020-10-09 12:12:06 +02:00
  • d6ea1dc995 Added detection testing service results inSuspicious Reg exe Process automated_detection_testing_7107 root 2020-10-09 09:51:09 +00:00
  • e30c83593a new test file P4T12ICK 2020-10-09 11:32:38 +02:00
  • 51ff574655 new test file automated_detection_testing_2030 P4T12ICK 2020-10-09 11:29:48 +02:00
  • fd0b90bd2d new test file P4T12ICK 2020-10-09 11:28:23 +02:00
  • 8e0674655d Added detection testing service results inSchtasks scheduling job on remote system automated_detection_testing_1364 root 2020-10-09 09:00:50 +00:00
  • ccb244c9f7 Added detection testing service results inProcess execution via wmi automated_detection_testing_847 root 2020-10-09 08:49:37 +00:00
  • e1cfe5f961 Added detection testing service results inMalicious PowerShell Process - Encoded Command automated_detection_testing_1700 root 2020-10-09 08:42:59 +00:00
  • 44bbdf8927 new_test_file P4T12ICK 2020-10-09 10:35:28 +02:00
  • 9f85f5f34e new_test_file P4T12ICK 2020-10-09 10:31:00 +02:00
  • 6588eef977 new_test_file P4T12ICK 2020-10-09 10:21:21 +02:00
  • a79db3748e Added detection testing service results inCredential Dumping via Symlink to Shadow Copy automated_detection_testing_6370 root 2020-10-09 07:51:28 +00:00
  • 454777b514 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy root 2020-10-09 07:51:28 +00:00
  • f9ac55bb01 Added detection testing service results inCreation of Shadow Copy with wmic and powershell root 2020-10-09 07:51:28 +00:00
  • 193a718f09 Added detection testing service results inCreation of Shadow Copy root 2020-10-09 07:51:28 +00:00
  • dbc9f267d0 new test P4T12ICK 2020-10-09 09:29:38 +02:00
  • a63539b0c3 Merge branch 'develop' into TR-193 Ignacio 2020-10-08 19:37:19 -07:00
  • 57dddc7310 updated detection for long command line Ignacio Bermudez Corrales 2020-10-08 19:30:17 -07:00
  • 0226d62cfc Merge pull request #720 from splunk/dependabot/pip/configparser-5.0.1 dependabot-preview[bot] 2020-10-09 00:53:51 +00:00
  • 4539bc9632 Bump configparser from 5.0.0 to 5.0.1 dependabot-preview[bot] 2020-10-09 00:48:30 +00:00
  • d094bd30a9 Merge branch 'mustang_beta' of https://github.com/splunk/security-content into mustang_beta bpatel 2020-10-08 15:45:17 -07:00
  • 786c68090c spl logic update bpatel 2020-10-08 15:45:07 -07:00
  • b0938997a4 Merge branch 'develop' into mustang_beta Bhavin Patel 2020-10-08 15:43:00 -07:00
  • e6080d9022 firstiterationgcploitdetect Rod Soto 2020-10-08 17:51:57 -04:00