admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 87c14110fc Merge pull request #719 from splunk/minor-text-update-lily Bhavin Patel 2020-10-08 14:45:54 -07:00
  • 5a60f56c57 Update kubernetes_aws_detect_sensitive_object_access.yml Jose Enrique Hernandez 2020-10-08 17:39:58 -04:00
  • 44bc49dc13 spl updates bpatel 2020-10-08 11:15:35 -07:00
  • b7ad212344 fix a metric ton of validation errors, also updated the specs divious1 2020-10-08 13:27:10 -04:00
  • d5e8a824aa Merge branch 'develop' into TR-159_linux_rootkits TR-159_linux_rootkits Jose Enrique Hernandez 2020-10-08 11:07:51 -04:00
  • ad49f59707 Added detection testing service results inDump LSASS via comsvcs DLL automated_detection_testing_2562 root 2020-10-08 14:39:16 +00:00
  • d916c060f3 Added detection testing service results inDetect Credential Dumping through LSASS access root 2020-10-08 14:39:16 +00:00
  • 3987951241 Merge branch 'develop' into response_phases divious1 2020-10-08 10:29:54 -04:00
  • b6fac54d24 updates P4T12ICK 2020-10-08 16:18:12 +02:00
  • e85f44a023 updates P4T12ICK 2020-10-08 15:34:17 +02:00
  • d8c8908406 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe automated_detection_testing_9190 root 2020-10-08 13:33:08 +00:00
  • 6d820ded74 updates P4T12ICK 2020-10-08 14:10:37 +02:00
  • f81abbc79d updates P4T12ICK 2020-10-08 13:01:52 +02:00
  • 4802b2e1b1 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe automated_detection_testing_3248 root 2020-10-08 08:42:17 +00:00
  • 8f28d1d222 adjusted common generate scripts divious1 2020-10-07 23:39:55 -04:00
  • 41c0ddeda3 adjusted generate divious1 2020-10-07 23:27:42 -04:00
  • eca687e7fb WIP of generate to support subfolders divious1 2020-10-07 23:11:27 -04:00
  • 4a81866045 adjusted validate to use sub folders divious1 2020-10-07 23:11:11 -04:00
  • 6ebb8db593 Merge pull request #714 from splunk/cloud_auth_spl_bugs Bhavin Patel 2020-10-07 19:56:39 -07:00
  • d3e72133c5 yml update bpatel 2020-10-07 19:47:06 -07:00
  • 4e253c5b2e updated all searches and tested bpatel 2020-10-07 19:29:11 -07:00
  • 5c4d027d79 spl updates bpatel 2020-10-07 18:02:52 -07:00
  • 124c2b5a90 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe automated_detection_testing_7505 root 2020-10-07 14:50:05 +00:00
  • 443d86c864 moved detections to their respective folders divious1 2020-10-07 10:31:25 -04:00
  • c03d944d3e updated detection service P4T12ICK 2020-10-07 15:37:59 +02:00
  • 86ab09b52e Added detection testing service results inAttempted Credential Dump From Registry via Reg exe automated_detection_testing_9425 root 2020-10-07 13:35:58 +00:00
  • e698b2936a Added detection testing service results inDump LSASS via comsvcs DLL automated_detection_testing_6717 root 2020-10-07 07:31:49 +00:00
  • e8a1e88d3d Added detection testing service results inDetect Credential Dumping through LSASS access root 2020-10-07 07:31:49 +00:00
  • 29c77e51ae Added detection testing service results inCreate Remote Thread into LSASS root 2020-10-07 07:31:49 +00:00
  • b7e4ae6b0c Added detection testing service results inAccess LSASS Memory for Dump Creation root 2020-10-07 07:31:49 +00:00
  • 18ba55a210 Merge branch 'develop' into automated_detection_service automated_detection_testing_7109 automated_detection_testing_6345 P4T12ICK 2020-10-07 08:57:01 +02:00
  • dfb06fb95d new detection service code P4T12ICK 2020-10-07 08:56:12 +02:00
  • 224abd200f Merge branch 'develop' into mustang_beta Bhavin Patel 2020-10-06 16:17:14 -07:00
  • 5701bda3ae Merge branch 'mustang_beta' into cloud_provisioning_spl_bugs cloud_provisioning_spl_bugs Bhavin Patel 2020-10-06 16:05:28 -07:00
  • 65f0729e29 Merge pull request #704 from splunk/TR-205_scadmin Bhavin Patel 2020-10-06 16:05:09 -07:00
  • c3828052af Merge pull request #707 from splunk/TR-209 Ignacio 2020-10-06 13:55:22 -07:00
  • b80016e3df update date key bpatel 2020-10-06 13:47:24 -07:00
  • 6ce4b851e9 fixed spl and tested bpatel 2020-10-06 12:11:07 -07:00
  • e5a008feb1 spl update bpatel 2020-10-06 12:01:10 -07:00
  • 95ff817a80 formatting Ignacio Bermudez Corrales 2020-10-06 11:21:36 -07:00
  • 4810237537 merging Jud changes Ignacio Bermudez Corrales 2020-10-06 11:05:10 -07:00
  • 0e64512127 changes for detections to work Ignacio Bermudez Corrales 2020-10-06 11:01:47 -07:00
  • ab9df3e5e5 Jud changes Ignacio Bermudez Corrales 2020-10-06 11:00:59 -07:00
  • 9a59760cbb adding missing change lost in the transition Ignacio Bermudez Corrales 2020-10-06 10:09:04 -07:00
  • bce8c34903 Added detection testing service results inDump LSASS via comsvcs DLL automated_detection_testing_6757 root 2020-10-06 15:17:41 +00:00
  • d4b28acfd4 Added detection testing service results inDetect Credential Dumping through LSASS access root 2020-10-06 15:17:41 +00:00
  • e91165ac92 Added detection testing service results inCreate Remote Thread into LSASS root 2020-10-06 15:17:41 +00:00
  • b53dc87066 Added detection testing service results inAccess LSASS Memory for Dump Creation root 2020-10-06 15:17:41 +00:00
  • 8541c1305f Added detection testing service results inAttempted Credential Dump From Registry via Reg exe automated_detection_testing_1616 root 2020-10-06 14:51:14 +00:00
  • 1ba4259f4e update for new attack range design P4T12ICK 2020-10-06 16:07:45 +02:00
  • b4c7b983af addding auth conf file bpatel 2020-10-05 20:30:16 -07:00
  • 6c8d908ad6 search updates bpatel 2020-10-05 20:13:52 -07:00
  • 162771b7fc updating spl bpatel 2020-10-05 19:41:05 -07:00
  • 4042597b3a formatting yml ssa_invalid_key_stanza bpatel 2020-10-05 16:22:26 -07:00
  • 5e62272a68 Merge branch 'develop' into mustang_beta Bhavin Patel 2020-10-05 16:20:10 -07:00
  • 15cfcfa873 Merge pull request #693 from splunk/TR-204_fix_workbench_panel Bhavin Patel 2020-10-05 14:44:24 -07:00
  • c735f51d1e Merge branch 'develop' into TR-204_fix_workbench_panel Bhavin Patel 2020-10-05 14:11:09 -07:00
  • bf2bc6bca5 removing extra sq bracket bpatel 2020-10-05 14:10:43 -07:00
  • 0a447c33c4 Merge pull request #675 from splunk/TR-104-missing-input-filters Bhavin Patel 2020-10-05 13:54:15 -07:00
  • 6e7c9c7a77 Merge branch 'develop' into TR-104-missing-input-filters jzsplunk 2020-10-05 13:29:05 -07:00
  • 947d1a465f Merge pull request #702 from splunk/mltk_bug Bhavin Patel 2020-10-05 11:14:52 -07:00
  • 42268eaf3e typo bpatel 2020-10-05 11:08:38 -07:00
  • 396f057b09 Merge pull request #700 from splunk/dependabot/pip/virtualenv-20.0.33 dependabot-preview[bot] 2020-10-04 18:37:40 +00:00
  • 41f5e69c07 Bump virtualenv from 20.0.32 to 20.0.33 dependabot-preview[bot] 2020-10-04 18:34:18 +00:00
  • 92b0b645b0 Merge pull request #699 from splunk/dependabot/pip/zipp-3.3.0 dependabot-preview[bot] 2020-10-03 19:11:17 +00:00
  • 0e17b736d0 Bump zipp from 3.2.0 to 3.3.0 dependabot-preview[bot] 2020-10-03 19:07:22 +00:00
  • 3c49885ad6 Merge branch 'develop' into TR-104-missing-input-filters jzsplunk 2020-10-02 08:01:15 -07:00
  • 1859ae42ca Merge pull request #698 from splunk/dependabot/pip/virtualenv-20.0.32 dependabot-preview[bot] 2020-10-02 01:42:57 +00:00
  • 4c2ab8c2df Bump virtualenv from 20.0.31 to 20.0.32 dependabot-preview[bot] 2020-10-02 01:38:50 +00:00
  • f5f33ccb70 Merge pull request #695 from splunk/TR-41_aws_ec2_mods Bhavin Patel 2020-10-01 15:42:23 -07:00
  • 1de07a187d spl error with lookup bpatel 2020-09-30 15:25:19 -07:00
  • a092b92d29 adding - Cloud Cryptomining in detection bpatel 2020-09-30 15:22:01 -07:00
  • 86c2491850 invalid key in ssa on splunk restart bpatel 2020-09-30 15:06:46 -07:00
  • 979a288fcb adding dist=expon back again bpatel 2020-09-30 14:57:55 -07:00
  • 13db9854d2 story name errors bpatel 2020-09-30 13:46:00 -07:00
  • 9ddce4f254 spl errors and typos bpatel 2020-09-30 13:29:38 -07:00
  • b9f18705e7 spl errors and typos bpatel 2020-09-30 13:24:29 -07:00
  • b70138ed69 creating collections and search updates bpatel 2020-09-30 11:25:37 -07:00
  • 1028f2c6d7 updating search aand fileames for consistenccy bpatel 2020-09-30 11:05:39 -07:00
  • d95a7452f5 removing dist param from baselines bpatel 2020-09-30 10:33:14 -07:00
  • 55fe731edb fix workbench panel fix_workbench_panel P4T12ICK 2020-09-30 09:52:38 +02:00
  • 9f3ff7c5e4 Merge branch 'develop' into TR-41_aws_ec2_mods Bhavin Patel 2020-09-29 16:58:02 -07:00
  • 5744d5d47e Merge pull request #689 from splunk/TR-201_ssa_content Bhavin Patel 2020-09-28 15:17:07 -07:00
  • 97c0d35947 Merge branch 'develop' into TR-41_aws_ec2_mods Bhavin Patel 2020-09-28 14:07:58 -07:00
  • caed35a67d fixed a small typo Rico Valdez 2020-09-28 14:24:52 -06:00
  • ead0a10d15 Merge branch 'develop' into automated_detection_service P4T12ICK 2020-09-28 12:27:38 +02:00
  • 6b1f02e7a7 Merge branch 'TR-201_ssa_content' of github.com:splunk/security-content into TR-201_ssa_content divious1 2020-09-25 16:57:55 -04:00
  • 48f5c8836f added subtext divious1 2020-09-25 16:57:49 -04:00
  • 990543cd38 Merge branch 'develop' into TR-201_ssa_content Jose Enrique Hernandez 2020-09-25 16:41:32 -04:00
  • cc031f1b9e fixing a mistake divious1 2020-09-25 16:39:29 -04:00
  • dac98c19b9 skeleton divious1 2020-09-24 18:05:10 -04:00
  • 73f666ae44 Merge pull request #686 from splunk/dependabot/pip/identify-1.5.5 dependabot-preview[bot] 2020-09-24 01:13:51 +00:00
  • 70abe5c20e Bump identify from 1.5.4 to 1.5.5 dependabot-preview[bot] 2020-09-24 01:08:49 +00:00
  • 3d029956cc text fixes Rico Valdez 2020-09-23 17:05:15 -06:00
  • a9fda765a7 Fixed search David Dorsey 2020-09-23 17:55:59 -05:00
  • e30924013c single and double quote order issue David Dorsey 2020-09-23 17:32:52 -05:00
  • 42549c5776 Macro fixes David Dorsey 2020-09-23 17:22:02 -05:00
  • 499acddcd4 More macro fixes David Dorsey 2020-09-23 17:18:07 -05:00
  • b681f5faa4 macro fixes David Dorsey 2020-09-23 17:16:35 -05:00
  • 5fbc68936b baseline update search fix with macros David Dorsey 2020-09-23 16:58:26 -05:00