Repository navigation

The Day After Log4Shell - #1887

Merged

josehelps merged 68 commits into

developfrom

The_Day_After_Log4shell

Dec 15, 2021

Merged

The Day After Log4Shell#1887
josehelps merged 68 commits into
developfrom
The_Day_After_Log4shell

Commits on Dec 11, 2021
- added story
  josehelps
  committed
  5d1a882
Commits on Dec 13, 2021
- wget curl
  MHaggis
  committed
  f4de314
- bagged and tagged
  MHaggis
  committed
  d64ce21
- Update malicious_powershell_process___connect_to_internet_with_hidden_window.yml
  MHaggis
  committed
  2f2e16b
- java Shells
  MHaggis
  committed
  f3b31c1
- Windows shells
  MHaggis
  committed
  7129543
- :coffee:
  MHaggis
  committed
  050bc8d
- Update java_class_file_download_by_java_user_agent.yml
  MHaggis
  committed
  28633f0
- adding detection
  mvelazc0
  committed
  2c62039
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  mvelazc0
  committed
  1671728
- updating dataset tag
  mvelazc0
  committed
  cb4d003
- Update windows_shells.yml
  MHaggis
  authored
  2565ad2
- fixing minor issue
  mvelazc0
  committed
  5269273
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  mvelazc0
  committed
  1c26e47
- Added detection testing service results inJava Class File download by Java User Agent
  root
  committed
  8f1408b
- updating sysmon macro
  mvelazc0
  committed
  19bd2fd
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  mvelazc0
  committed
  72005d4
- Added detection testing service results inOutbound Network Connection from Java Using Default Ports
  root
  committed
  c1dac05
Commits on Dec 14, 2021
- Update outbound_network_connection_from_java_using_default_ports.yml
  mvelazc0
  committed
  10418d2
- added two new detections, ymls are not finished
  josehelps
  committed
  946503d
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  josehelps
  committed
  7e6cb93
- Improved Proxy detection
  P4T12ICK
  committed
  f84b613
- initial commit of playbook yamls
  ljstella
  committed
  b33a057
- Renamed splunk investigation playbook
  ljstella
  committed
  50ef5d4
- log4j
  P4T12ICK
  committed
  3dc854e
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  P4T12ICK
  committed
  45cd729
- log4j
  P4T12ICK
  committed
  a9edbc2
- removed files causing generate to break
  ljstella
  committed
  3bf46de
- log4j
  P4T12ICK
  committed
  3f59f79
- Added detection testing service results inLog4Shell JNDI Payload Injection Attempt
  root
  committed
  f03ab2f
- log4j
  P4T12ICK
  committed
  b278b43
- log4j
  P4T12ICK
  committed
  f599611
- Added detection testing service results inLog4Shell JNDI Payload Injection with Outbound Connection
  root
  committed
  66a72df
- ldap outbound
  patel-bhavin
  committed
  05b1892
- Update cmd_carry_out_string_command_parameter.yml
  patel-bhavin
  authored
  9ba2c45
- Update outbound_network_connection_from_java_using_default_ports.yml
  patel-bhavin
  authored
  a4aaf03
- Create hunting_for_log4shell.yml
  MHaggis
  committed
  303d082
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  patel-bhavin
  committed
  55ccb09
- Update hunting_for_log4shell.yml
  MHaggis
  committed
  918e73d
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  patel-bhavin
  committed
  6eb4eab
Commits on Dec 15, 2021
- Initial YAML commit
  ljstella
  committed
  62e14b6
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  ljstella
  committed
  bf1fec5
- Add screenshot & updated description text
  ljstella
  committed
  6726096
- Some playbooks
  ljstella
  committed
  d33ed87
- Another one
  ljstella
  committed
  54c8f81
- adding tags to detections
  josehelps
  committed
  16b771e
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  josehelps
  committed
  bba9f90
- minor playbook updates
  josehelps
  committed
  1d04e6f
- Create log4j_investigate_and_respond.png
  ljstella
  committed
  94b3fa5
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  ljstella
  committed
  4b7e38c
- ... and another one
  ljstella
  committed
  60e3d4f
- fixing stories spelling mistakes
  josehelps
  committed
  b9987c6
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  josehelps
  committed
  a6fbee3
- Update internal_host_splunk_investigate_log4j.yml
  ljstella
  committed
  fa976bc
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  ljstella
  committed
  7eef18e
- Another playbook
  ljstella
  committed
  5fb532e
- parent playbook
  ljstella
  committed
  544c7b0
- Update java_class_file_download_by_java_user_agent.yml
  patel-bhavin
  authored
  f453a53
- the YAMLfication of words
  ljstella
  committed
  4a51545
- Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
  ljstella
  committed
  da086f8
- Two more yamls
  ljstella
  committed
  2cd9e39
- fixing backslide
  ljstella
  committed
  fafa45f
- SSH response
  ljstella
  committed
  f8d3d5a
- the final push
  ljstella
  committed
  82b45a1
- Create hunting_for_log4shell.test.yml
  MHaggis
  committed
  cea91f7
- Added detection testing service results inHunting for Log4Shell
  root
  committed
  97a20df
- updating docs
  josehelps
  committed
  7c72f6e
- Merge branch 'develop' into The_Day_After_Log4shell
  josehelps
  committed
  53b9f90

Commits

Commits on Dec 11, 2021

Commits on Dec 13, 2021

Commits on Dec 14, 2021

Commits on Dec 15, 2021