Commits

Commit history

1. Commits on May 6, 2020

   • new generate script

     

     Patrick Bareiss

     committed
     cda505dView commit details

     Copy full SHA for cda505d

     View code at this pointBrowse repository at this point
2. Commits on May 5, 2020

   • updated content

     

     Patrick Bareiss

     committed
     cc464c8View commit details

     Copy full SHA for cc464c8

     View code at this pointBrowse repository at this point
3. Commits on Apr 30, 2020

   • validate script

     

     Patrick Bareiss

     committed
     9098068View commit details

     Copy full SHA for 9098068

     View code at this pointBrowse repository at this point

   • WIP validate script

     

     Patrick Bareiss

     committed
     442a575View commit details

     Copy full SHA for 442a575

     View code at this pointBrowse repository at this point
4. Commits on Apr 17, 2020

   • Merge pull request #429 from splunk/crl-1749ssh

     Show description for 916e54d
     patel-bhavin

     authored
     916e54dView commit details

     Copy full SHA for 916e54d

     View code at this pointBrowse repository at this point
5. Commits on Apr 2, 2020

   • Merge pull request #430 from splunk/first_okta_story

     Show description for dde27b9
     patel-bhavin

     authored
     dde27b9View commit details

     Copy full SHA for dde27b9

     View code at this pointBrowse repository at this point

   • detection, spec and macroupdates

     patel-bhavin

     committed
     500a21eView commit details

     Copy full SHA for 500a21e

     View code at this pointBrowse repository at this point
6. Commits on Mar 28, 2020

   • fixedssh

     rosplk

     committed
     542f78bView commit details

     Copy full SHA for 542f78b

     View code at this pointBrowse repository at this point
7. Commits on Mar 23, 2020

   • adding macro and updating spl

     patel-bhavin

     committed
     3d5891bView commit details

     Copy full SHA for 3d5891b

     View code at this pointBrowse repository at this point
8. Commits on Mar 16, 2020

   • Merge branch 'develop' into CRL-1746

     patel-bhavin

     authored
     45ffbdeView commit details

     Copy full SHA for 45ffbde

     View code at this pointBrowse repository at this point

   • Merge pull request #385 from splunk/CRL-1733

     Show description for 9363ded
     

     rvaldez617

     authored
     9363dedView commit details

     Copy full SHA for 9363ded

     View code at this pointBrowse repository at this point

   • Merge pull request #402 from splunk/CRL-1744_macro_fixes

     Show description for bd439c0
     patel-bhavin

     authored
     bd439c0View commit details

     Copy full SHA for bd439c0

     View code at this pointBrowse repository at this point
9. Commits on Mar 12, 2020

   • updating macro name too

     josehelps

     committed
     1e3299dView commit details

     Copy full SHA for 1e3299d

     View code at this pointBrowse repository at this point
10. Commits on Mar 10, 2020

    • macro ymls and detection update

      patel-bhavin

      committed
      7ee8310View commit details

      Copy full SHA for 7ee8310

      View code at this pointBrowse repository at this point
11. Commits on Mar 4, 2020

    • fixes for a couple broken macros

      

      Rico Valdez

      committed
      573e8e3View commit details

      Copy full SHA for 573e8e3

      View code at this pointBrowse repository at this point
12. Commits on Mar 2, 2020

    • updating instructions for better clarification

      patel-bhavin

      committed
      5199a94View commit details

      Copy full SHA for 5199a94

      View code at this pointBrowse repository at this point
13. Commits on Feb 27, 2020

    • Merge pull request #372 from splunk/container_implantation

      Show description for 637fdf3
      josehelps

      authored
      637fdf3View commit details

      Copy full SHA for 637fdf3

      View code at this pointBrowse repository at this point

    • addedmacros

      rosplk

      committed
      187a00cView commit details

      Copy full SHA for 187a00c

      View code at this pointBrowse repository at this point
14. Commits on Feb 21, 2020

    • new credentia dumping detection

      

      Patrick Bareiss

      committed
      ef1b56fView commit details

      Copy full SHA for ef1b56f

      View code at this pointBrowse repository at this point
15. Commits on Feb 7, 2020

    • Merge pull request #327 from splunk/supicious_email_updates

      Show description for 6b2c9e4
      patel-bhavin

      authored
      6b2c9e4View commit details

      Copy full SHA for 6b2c9e4

      View code at this pointBrowse repository at this point

    • Merge pull request #325 from splunk/dns_query_updates

      Show description for 556efc4
      patel-bhavin

      authored
      556efc4View commit details

      Copy full SHA for 556efc4

      View code at this pointBrowse repository at this point

    • Merge pull request #324 from splunk/first_time_seen_cmd_updates

      Show description for 9819572
      patel-bhavin

      authored
      9819572View commit details

      Copy full SHA for 9819572

      View code at this pointBrowse repository at this point

    • Merge pull request #326 from splunk/smb_detection_updates

      Show description for 0432161
      patel-bhavin

      authored
      0432161View commit details

      Copy full SHA for 0432161

      View code at this pointBrowse repository at this point

    • Merge branch 'develop' into first_time_seen_cmd_updates

      patel-bhavin

      authored
      9849b76View commit details

      Copy full SHA for 9849b76

      View code at this pointBrowse repository at this point
16. Commits on Feb 4, 2020

    • updating files as per Dons feedback

      patel-bhavin

      committed
      9276847View commit details

      Copy full SHA for 9276847

      View code at this pointBrowse repository at this point
17. Commits on Jan 27, 2020

    • updating boiler plate, detection not working out of box against T1193 but this may be due to error loading lookup table for supicious file extensions.

      jzsplunk

      committed
      c92d097View commit details

      Copy full SHA for c92d097

      View code at this pointBrowse repository at this point

    • update smb related content. The outbound_smb_connections detection works out of the box against attack ID T1110 when testing in the attack range.

      jzsplunk

      committed
      d4aa6bcView commit details

      Copy full SHA for d4aa6bc

      View code at this pointBrowse repository at this point

    • update version info and macros, attack range freezing on testing detection against attack ID T1071 so query is untested against atomic red team test for now

      jzsplunk

      committed
      b762034View commit details

      Copy full SHA for b762034

      View code at this pointBrowse repository at this point

    • update version info, add macros for first time seen cmd line detection

      jzsplunk

      committed
      6406cfbView commit details

      Copy full SHA for 6406cfb

      View code at this pointBrowse repository at this point
18. Commits on Jan 23, 2020

    • adding definitions

      patel-bhavin

      committed
      9e6becdView commit details

      Copy full SHA for 9e6becd

      View code at this pointBrowse repository at this point

    • Merge pull request #320 from splunk/don_young_bug

      Show description for 2fd12b9
      josehelps

      authored
      2fd12b9View commit details

      Copy full SHA for 2fd12b9

      View code at this pointBrowse repository at this point
19. Commits on Jan 22, 2020

    • Merge pull request #316 from splunk/CRL-1717_addMacroDefinitionsWhereMissing

      Show description for 75485ef
      patel-bhavin

      authored
      75485efView commit details

      Copy full SHA for 75485ef

      View code at this pointBrowse repository at this point

    • Merge pull request #319 from splunk/dns_hijack_story_update

      Show description for dd5b1ee
      patel-bhavin

      authored
      dd5b1eeView commit details

      Copy full SHA for dd5b1ee

      View code at this pointBrowse repository at this point

    • Merge pull request #318 from splunk/CRL-1495-update_share_creation_and_deletion

      Show description for 38b8411
      patel-bhavin

      authored
      38b8411View commit details

      Copy full SHA for 38b8411

      View code at this pointBrowse repository at this point

    • Merge pull request #315 from splunk/CRL-1716-FixPowerShellObfusc

      Show description for 0cef2e7
      patel-bhavin

      authored
      0cef2e7View commit details

      Copy full SHA for 0cef2e7

      View code at this pointBrowse repository at this point