Commit Graph

  • 1384d69043 Merge pull request #3651 from PJS-Cyber/patch-1 Bhavin Patel 2025-08-25 12:50:11 -07:00
  • 05be24dec3 Merge branch 'develop' into patch-1 Bhavin Patel 2025-08-25 12:35:17 -07:00
  • 6db1a3c95d Merge pull request #3650 from splunk/disable_lsa Bhavin Patel 2025-08-25 11:40:49 -07:00
  • 6b8b7c14d4 Merge branch 'develop' into disable_lsa Bhavin Patel 2025-08-25 11:39:43 -07:00
  • d6c886c30d Merge pull request #3657 from splunk/macro_fix Bhavin Patel 2025-08-25 10:35:42 -07:00
  • 897986eaa5 objectivity_stealer Teoderick Contreras 2025-08-25 18:46:15 +02:00
  • 9e56adf724 Update stories/obj3ctivity_stealer.yml Br3akp0int 2025-08-25 18:02:15 +02:00
  • 6abb0f792a Merge branch 'develop' into objectivity_stealer Nasreddine Bencherchali 2025-08-25 17:55:06 +02:00
  • 9a2ed13cac Update windows_dll_module_loaded_in_temp_dir.yml Br3akp0int 2025-08-25 16:13:48 +02:00
  • f488577b9d Update windows_dll_module_loaded_in_temp_dir.yml Br3akp0int 2025-08-25 16:09:47 +02:00
  • c50b5fd119 Merge branch 'develop' into macro_fix Lou Stella 2025-08-25 08:43:58 -05:00
  • f8b9b828cb Merge pull request #3660 from splunk/auto-ta-update-368 Lou Stella 2025-08-25 08:43:39 -05:00
  • 0dde715c39 Update stories/pathwiper.yml Br3akp0int 2025-08-25 13:22:30 +02:00
  • 73c6caaff4 secret_blizzard Teoderick Contreras 2025-08-25 13:22:07 +02:00
  • 80e1f506b8 Delete detections/endpoint/windows_firewallapi_dll_load_from_unusual_path.yml Br3akp0int 2025-08-25 13:15:28 +02:00
  • 8e8c58b418 Delete detections/endpoint/windows_certutil_certificate_addition_in_temp_path.yml Br3akp0int 2025-08-25 13:14:46 +02:00
  • 02156728f4 Delete detections/endpoint/windows_firewallapi_dll_load_from_temp.yml Br3akp0int 2025-08-25 13:14:29 +02:00
  • 039ac190e2 Update stories/secret_blizzard.yml Br3akp0int 2025-08-25 13:12:56 +02:00
  • 05b159153c Update WMI Process and Service List version and date Nasreddine Bencherchali 2025-08-25 12:53:21 +02:00
  • e4135caf6e Updated TAs patel-bhavin 2025-08-25 06:59:36 +00:00
  • b97f560da8 Updated TAs auto-ta-update-367 patel-bhavin 2025-08-24 06:58:05 +00:00
  • 2c24135b4c Updated TAs auto-ta-update-366 patel-bhavin 2025-08-23 06:57:55 +00:00
  • 5efd078769 Remove duplicate filter macro ljstella 2025-08-22 10:24:02 -04:00
  • e99692b3e6 objectivity_stealer Teoderick Contreras 2025-08-22 09:54:09 +02:00
  • 2e739a4056 Updated TAs auto-ta-update-365 patel-bhavin 2025-08-22 06:59:32 +00:00
  • a063ed3249 Merge pull request #3654 from splunk/fixes_5130 v5.13.0 Bhavin Patel 2025-08-21 14:22:21 -07:00
  • 227bb64ccc remove drilldown Bhavin Patel 2025-08-21 14:04:16 -07:00
  • 2f988c5fd7 Merge pull request #3653 from splunk/ciscoios2018 Bhavin Patel 2025-08-21 13:45:30 -07:00
  • 6a561d6119 updating macro Bhavin Patel 2025-08-21 13:10:38 -07:00
  • 23944ac544 adding detection from pcap Bhavin Patel 2025-08-21 12:59:30 -07:00
  • 5efc96202d updating spl Bhavin Patel 2025-08-21 12:21:54 -07:00
  • c58213d18e Create cisco_configuration_archive_logging_analysis.yml Michael Haag 2025-08-21 13:18:04 -06:00
  • 900803f962 Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018 Michael Haag 2025-08-21 13:16:33 -06:00
  • aea4629c0a Create cisco_configuration_file_exfiltration_attempts.yml Michael Haag 2025-08-21 13:16:32 -06:00
  • 7541c45be5 data source description Bhavin Patel 2025-08-21 11:24:20 -07:00
  • 62f32549c9 fixing dd Bhavin Patel 2025-08-21 11:17:12 -07:00
  • d895fa6034 yaml fixes Bhavin Patel 2025-08-21 11:12:52 -07:00
  • 9bc27c2b0d Create cisco_tftp_server_configuration_for_data_exfiltration.yml Michael Haag 2025-08-21 11:43:59 -06:00
  • ec698f88ec Create cisco_network_interface_modifications.yml Michael Haag 2025-08-21 11:43:03 -06:00
  • 91c9a99d62 Merge branch 'ciscoios2018' of https://github.com/splunk/security_content into ciscoios2018 Michael Haag 2025-08-21 11:27:07 -06:00
  • 1781f034ba Create cisco_snmp_community_string_configuration_changes.yml Michael Haag 2025-08-21 11:26:58 -06:00
  • 7ec158832d adding a new detections for snort with static tundra sigs Bhavin Patel 2025-08-21 10:16:45 -07:00
  • 94a7f291e8 updating dataset link Bhavin Patel 2025-08-21 10:08:55 -07:00
  • b24cb334a3 Create cisco_ios_suspicious_privileged_account_creation.yml Michael Haag 2025-08-21 11:06:59 -06:00
  • c31013241b updatings with snort detection and lookup also contentctl Bhavin Patel 2025-08-21 09:43:02 -07:00
  • 125486536c DS + new Michael Haag 2025-08-21 10:08:59 -06:00
  • 521cfc1d2c Create cisco_smart_install_remote_code_execution_cve_2018_0171.yml Michael Haag 2025-08-21 08:16:14 -06:00
  • 77c7751cb0 path_wiper Teoderick Contreras 2025-08-21 12:42:07 +02:00
  • 2e7cf28401 path_wiper Teoderick Contreras 2025-08-21 12:37:58 +02:00
  • 3b713fae62 Update windows_wmi_process_and_service_list.yml PJS-Cyber 2025-08-20 15:51:44 -04:00
  • 69fd51bbd7 disable_lsa Teoderick Contreras 2025-08-20 17:16:02 +02:00
  • ffa784db1e path_wiper Teoderick Contreras 2025-08-20 12:13:44 +02:00
  • 6826018ef1 Merge pull request #3648 from splunk/inte_512 v5.12.0 Bhavin Patel 2025-08-19 10:29:53 -07:00
  • 742d24ed3a messsage Bhavin Patel 2025-08-19 09:35:58 -07:00
  • 93aafa6e5c Merge pull request #3646 from splunk/MSIX-Resurrection Bhavin Patel 2025-08-18 16:35:15 -07:00
  • dc9bd32b13 udpating searches Bhavin Patel 2025-08-18 16:31:03 -07:00
  • 34d8db9847 updates Michael Haag 2025-08-18 16:21:35 -06:00
  • 2600cb12e9 Merge branch 'develop' into MSIX-Resurrection Bhavin Patel 2025-08-18 13:33:48 -07:00
  • 9837cae2d0 Merge pull request #3647 from splunk/3886_updates Bhavin Patel 2025-08-18 12:48:23 -07:00
  • 76480006ce fixes Michael Haag 2025-08-18 13:34:48 -06:00
  • 5e9242d20f add additional references Raven Tait 2025-08-18 15:23:14 -04:00
  • 5e948ce3fc Updates for 3886 Raven Tait 2025-08-18 15:17:37 -04:00
  • af23304095 Merge branch 'MSIX-Resurrection' of https://github.com/splunk/security_content into MSIX-Resurrection Michael Haag 2025-08-18 12:53:35 -06:00
  • 3b2ec13094 Update windows_powershell_msix_package_installation.yml Michael Haag 2025-08-18 12:53:23 -06:00
  • 295d094bd2 Merge branch 'develop' into MSIX-Resurrection Bhavin Patel 2025-08-18 11:30:14 -07:00
  • 5396102148 Merge pull request #3628 from splunk/rdp_artifacts_and_evasion Bhavin Patel 2025-08-18 11:02:13 -07:00
  • 1f709a9d67 The Lost Payload: MSIX Resurrection Michael Haag 2025-08-18 11:46:34 -06:00
  • 4796778d91 rdp_artifacts_and_evasion Teoderick Contreras 2025-08-18 16:17:51 +02:00
  • 1b36c0ffda Merge branch 'develop' into rdp_artifacts_and_evasion Bhavin Patel 2025-08-14 10:47:48 -07:00
  • 6300c3b81c Merge pull request #3633 from splunk/3886 Bhavin Patel 2025-08-14 10:47:45 -07:00
  • 7d43731cee Merge branch 'develop' into 3886 Bhavin Patel 2025-08-14 10:46:45 -07:00
  • 91446e2d47 secret_blizzard Teoderick Contreras 2025-08-14 12:59:20 +02:00
  • 1cb141ab70 secret_blizzard Teoderick Contreras 2025-08-14 12:53:44 +02:00
  • 6433b529f4 Merge pull request #3642 from splunk/dependabot/github_actions/actions/checkout-5 Bhavin Patel 2025-08-12 12:32:22 -07:00
  • e14a3033c9 Merge branch 'develop' into dependabot/github_actions/actions/checkout-5 Bhavin Patel 2025-08-12 11:29:58 -07:00
  • c4e7747a7f Bump actions/checkout from 4 to 5 dependabot[bot] 2025-08-12 09:09:35 +00:00
  • be099bc092 Merge pull request #3641 from splunk/dean_slack_bug Bhavin Patel 2025-08-11 17:33:02 -07:00
  • 4c07f16bea mionr tick Bhavin Patel 2025-08-11 15:56:22 -07:00
  • 92a4b78a59 Merge branch 'develop' into dean_slack_bug Bhavin Patel 2025-08-11 15:29:03 -07:00
  • 593ec5b02a Merge pull request #3640 from splunk/esx-ta Bhavin Patel 2025-08-11 15:28:07 -07:00
  • 34d0a9d9c1 updating detections after taking screenshorts Bhavin Patel 2025-08-11 15:27:03 -07:00
  • 23facdcd6a updating SPL with deans feedback Bhavin Patel 2025-08-11 15:11:53 -07:00
  • d8327871fe Merge branch 'develop' into rdp_artifacts_and_evasion Bhavin Patel 2025-08-11 13:41:39 -07:00
  • b85d38566a updating title Bhavin Patel 2025-08-11 13:25:13 -07:00
  • 9cff1a1671 Merge branch 'develop' into 3886 Bhavin Patel 2025-08-11 11:19:16 -07:00
  • 9ea500c06f Merge pull request #3636 from splunk/more_interlock_rat Bhavin Patel 2025-08-11 11:18:59 -07:00
  • 60cdf5723b Merge branch 'develop' into more_interlock_rat Bhavin Patel 2025-08-11 10:17:43 -07:00
  • e349a984b7 Merge pull request #3639 from splunk/auto-ta-update-354 Bhavin Patel 2025-08-11 10:17:02 -07:00
  • 9572eb1853 Updated TAs patel-bhavin 2025-08-11 07:02:06 +00:00
  • 1e7c263375 Updated TAs auto-ta-update-353 patel-bhavin 2025-08-10 06:59:20 +00:00
  • 8c76650937 Updated TAs auto-ta-update-352 patel-bhavin 2025-08-09 06:59:32 +00:00
  • c5f13c70f3 Merge pull request #3634 from splunk/ctl_5.12.0 Bhavin Patel 2025-08-08 16:24:18 -05:00
  • 01e4f16476 udpating version Bhavin Patel 2025-08-07 13:49:21 -05:00
  • dae1c7243e Merge branch 'develop' into ctl_5.12.0 Bhavin Patel 2025-08-07 12:46:03 -05:00
  • bb6f8b86ac Merge pull request #3624 from splunk/sysmon_5_detection_fixes pyth0n1c 2025-08-07 10:25:29 -07:00
  • 21d89f98ac Merge branch 'develop' into ctl_5.12.0 Bhavin Patel 2025-08-07 12:16:53 -05:00
  • 919f2fd093 Merge branch 'develop' into sysmon_5_detection_fixes pyth0n1c 2025-08-07 10:10:23 -07:00
  • ea56997f1c Merge pull request #3635 from splunk/auto-ta-update-350 pyth0n1c 2025-08-07 10:09:37 -07:00
  • 3843faec9c Merge branch 'develop' into sysmon_5_detection_fixes Bhavin Patel 2025-08-07 12:02:09 -05:00
  • ed31e4367e rdp_artifacts_and_evasion Teoderick Contreras 2025-08-07 14:29:17 +02:00