Commits

Commit history

1. Commits on Apr 2, 2020

   • slim failure

     patel-bhavin

     committed
     41bfc4cView commit details

     Copy full SHA for 41bfc4c

     View code at this pointBrowse repository at this point

   • updates to story manifest

     

     Rico Valdez

     committed
     ea97a75View commit details

     Copy full SHA for ea97a75

     View code at this pointBrowse repository at this point

   • some naming tweaks to detections, and detctions in stories. Need text for story

     

     Rico Valdez

     committed
     26446e0View commit details

     Copy full SHA for 26446e0

     View code at this pointBrowse repository at this point

   • new files for okta story

     

     Rico Valdez

     committed
     576debfView commit details

     Copy full SHA for 576debf

     View code at this pointBrowse repository at this point
2. Commits on Mar 4, 2020

   • removing another dead ref

     josehelps

     committed
     820e13bView commit details

     Copy full SHA for 820e13b

     View code at this pointBrowse repository at this point

   • removing deadlink

     josehelps

     committed
     13d05c8View commit details

     Copy full SHA for 13d05c8

     View code at this pointBrowse repository at this point
3. Commits on Mar 2, 2020

   • updated manifests

     patel-bhavin

     committed
     7c53ce1View commit details

     Copy full SHA for 7c53ce1

     View code at this pointBrowse repository at this point
4. Commits on Feb 28, 2020

   • Update credential_dumping.yml

     Show description for 826e8c1
     

     rvaldez617

     authored
     826e8c1View commit details

     Copy full SHA for 826e8c1

     View code at this pointBrowse repository at this point
5. Commits on Feb 27, 2020

   • Merge pull request #372 from splunk/container_implantation

     Show description for 637fdf3
     josehelps

     authored
     637fdf3View commit details

     Copy full SHA for 637fdf3

     View code at this pointBrowse repository at this point

   • fixing story error

     josehelps

     committed
     cfec1a0View commit details

     Copy full SHA for cfec1a0

     View code at this pointBrowse repository at this point

   • fixing references fix

     josehelps

     committed
     b2c0c65View commit details

     Copy full SHA for b2c0c65

     View code at this pointBrowse repository at this point

   • bug fix

     

     Patrick Bareiss

     committed
     4210384View commit details

     Copy full SHA for 4210384

     View code at this pointBrowse repository at this point

   • Merge branch 'container_implantation' of https://github.com/splunk/security-content into container_implantation

     

     Patrick Bareiss

     committed
     b7bb8f2View commit details

     Copy full SHA for b7bb8f2

     View code at this pointBrowse repository at this point

   • bug fix

     

     Patrick Bareiss

     committed
     43effcdView commit details

     Copy full SHA for 43effcd

     View code at this pointBrowse repository at this point

   • updating spec version

     josehelps

     committed
     e3d6b11View commit details

     Copy full SHA for e3d6b11

     View code at this pointBrowse repository at this point

   • fixedstory

     rosplk

     committed
     9d12936View commit details

     Copy full SHA for 9d12936

     View code at this pointBrowse repository at this point
6. Commits on Feb 21, 2020

   • new credentia dumping detection

     

     Patrick Bareiss

     committed
     ef1b56fView commit details

     Copy full SHA for ef1b56f

     View code at this pointBrowse repository at this point

   • fixedyml

     rosplk

     committed
     4aa2e28View commit details

     Copy full SHA for 4aa2e28

     View code at this pointBrowse repository at this point
7. Commits on Feb 20, 2020

   • story_container

     rosplk

     committed
     c2a2060View commit details

     Copy full SHA for c2a2060

     View code at this pointBrowse repository at this point
8. Commits on Feb 7, 2020

   • removing bad reference, dead link

     josehelps

     committed
     bdedd41View commit details

     Copy full SHA for bdedd41

     View code at this pointBrowse repository at this point

   • Merge pull request #327 from splunk/supicious_email_updates

     Show description for 6b2c9e4
     patel-bhavin

     authored
     6b2c9e4View commit details

     Copy full SHA for 6b2c9e4

     View code at this pointBrowse repository at this point

   • update mod dates of stories:

     patel-bhavin

     committed
     ff7a6feView commit details

     Copy full SHA for ff7a6fe

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into CRL-1725_Processes.parent_process.Correction

     patel-bhavin

     authored
     f682a22View commit details

     Copy full SHA for f682a22

     View code at this pointBrowse repository at this point

   • Merge pull request #324 from splunk/first_time_seen_cmd_updates

     Show description for 9819572
     patel-bhavin

     authored
     9819572View commit details

     Copy full SHA for 9819572

     View code at this pointBrowse repository at this point

   • Merge pull request #348 from splunk/CRL-1723

     Show description for 44761d1
     patel-bhavin

     authored
     44761d1View commit details

     Copy full SHA for 44761d1

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into CRL-1725_Processes.parent_process.Correction

     patel-bhavin

     authored
     7d61248View commit details

     Copy full SHA for 7d61248

     View code at this pointBrowse repository at this point

   • Merge pull request #351 from splunk/issue_336

     Show description for 382d0d7
     josehelps

     authored
     382d0d7View commit details

     Copy full SHA for 382d0d7

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into first_time_seen_cmd_updates

     patel-bhavin

     authored
     9849b76View commit details

     Copy full SHA for 9849b76

     View code at this pointBrowse repository at this point

   • story mod updates

     patel-bhavin

     committed
     f307274View commit details

     Copy full SHA for f307274

     View code at this pointBrowse repository at this point
9. Commits on Feb 4, 2020

   • updating mod dates and version

     patel-bhavin

     committed
     8b0f74cView commit details

     Copy full SHA for 8b0f74c

     View code at this pointBrowse repository at this point

   • updating files as per Dons feedback

     patel-bhavin

     committed
     9276847View commit details

     Copy full SHA for 9276847

     View code at this pointBrowse repository at this point

   • CRL-1723 : corrected field name in SPL Filesystem.filepath [which does not exist] to Filesystem.file_path.

     

     Jason Brewer

     committed
     e18a140View commit details

     Copy full SHA for e18a140

     View code at this pointBrowse repository at this point
10. Commits on Feb 3, 2020

    • CRL-1725 - Changed prohibited_apps_spawning_cmdprompt.yml to use parent_process_name as entity. Changed supress field to add user. Bumped detection version number and story version numbers on stori…

      Show description for 346709b
      

      Jason Brewer

      committed
      346709bView commit details

      Copy full SHA for 346709b

      View code at this pointBrowse repository at this point
11. Commits on Jan 22, 2020

    • CRL-1719 - Fixing reference to https://attack.mitre.org/wiki/Privilege_Escalation >>> https://attack.mitre.org/tactics/TA0004/

      

      Jason Brewer

      committed
      c3b0437View commit details

      Copy full SHA for c3b0437

      View code at this pointBrowse repository at this point
12. Commits on Jan 21, 2020

    • Merge pull request #314 from splunk/CRL-1712_netsh_abuse

      Show description for c6a904b
      josehelps

      authored
      c6a904bView commit details

      Copy full SHA for c6a904b

      View code at this pointBrowse repository at this point