 Bhavin Patel
|
c778a2e35c
|
Branch was auto-updated.
|
2021-11-25 05:07:24 -08:00 |
|
|
Detection Testing Service
|
6d8151d915
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:13:52 +00:00 |
|
|
root
|
1b28033819
|
Added detection testing service results inPowershell Windows Defender Exclusion Commands
|
2021-11-25 12:13:51 +00:00 |
|
|
Detection Testing Service
|
724101f8ed
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:00:54 +00:00 |
|
|
root
|
4ed89e21a2
|
Added detection testing service results inWindows Defender Exclusion Registry Entry
|
2021-11-25 12:00:54 +00:00 |
|
|
root
|
b6bb18d20c
|
Added detection testing service results inAdd or Set Windows Defender Exclusion
|
2021-11-25 11:55:39 +00:00 |
|
|
tccontre
|
dfd210cf29
|
remcos_evasion
|
2021-11-25 12:27:39 +01:00 |
|
|
Bhavin Patel
|
6d291d2600
|
Branch was auto-updated.
|
2021-11-25 01:25:29 -08:00 |
|
|
P4T12ICK
|
40a80473a2
|
Merge branch 'develop' into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:36:33 +01:00 |
|
|
Bhavin Patel
|
a619c9829e
|
Branch was auto-updated.
|
2021-11-24 23:36:29 -08:00 |
|
|
Bhavin Patel
|
c57f06c3a9
|
Branch was auto-updated.
|
2021-11-24 09:13:35 -08:00 |
|
|
Bhavin Patel
|
fd77109f22
|
Branch was auto-updated.
|
2021-11-24 09:13:34 -08:00 |
|
|
Michael Haag
|
144b6971d2
|
Update wsmprovhost_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:08:13 -07:00 |
|
|
Michael Haag
|
097683ffbb
|
Update wmiprsve_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:07:35 -07:00 |
|
|
root
|
ba111107f8
|
Added detection testing service results inWindows Service Created Within Public Path
|
2021-11-24 15:24:21 +00:00 |
|
|
root
|
9f122d542c
|
Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn
|
2021-11-24 14:58:42 +00:00 |
|
|
mvelazco
|
42913444c4
|
update dataset location
|
2021-11-24 09:37:47 -05:00 |
|
|
P4T12ICK
|
9310c27941
|
ssa test ci cd
|
2021-11-24 09:17:42 +01:00 |
|
|
P4T12ICK
|
421aebbf68
|
ssa test ci cd
|
2021-11-24 08:28:45 +01:00 |
|
|
mvelazco
|
46aa673605
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 21:04:10 -05:00 |
|
|
mvelazco
|
33e9597304
|
updating logic and adding datasets
|
2021-11-23 21:04:04 -05:00 |
|
|
root
|
9e165574c0
|
Added detection testing service results inWsmprovhost.exe LOLBAS Execution Process Spawn
|
2021-11-24 01:53:58 +00:00 |
|
|
mvelazco
|
eba7f33aa9
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 20:33:28 -05:00 |
|
|
mvelazco
|
ad273d4ca1
|
update datasets
|
2021-11-23 20:33:27 -05:00 |
|
|
Detection Testing Service
|
25a60dfdc7
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-24 00:03:26 +00:00 |
|
|
root
|
6c45a549e3
|
Added detection testing service results inWmiprsve.exe LOLBAS Execution Process Spawn
|
2021-11-24 00:03:25 +00:00 |
|
|
Detection Testing Service
|
2c6ae766cc
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 23:52:09 +00:00 |
|
|
root
|
e7ad40a54b
|
Added detection testing service results inMmc.exe LOLBAS Execution Process Spawn
|
2021-11-23 23:52:08 +00:00 |
|
|
mvelazco
|
2e86ded458
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 18:42:50 -05:00 |
|
|
mvelazco
|
c13de25f73
|
update dataset metadata
|
2021-11-23 18:42:48 -05:00 |
|
|
root
|
37f4a32647
|
Added detection testing service results inServices.exe LOLBAS Execution Process Spawn
|
2021-11-23 22:39:17 +00:00 |
|
|
mvelazco
|
c2fd0a4b29
|
adding dataset fields
|
2021-11-23 17:15:06 -05:00 |
|
|
mvelazco
|
190c0cba21
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 16:00:06 -05:00 |
|
|
mvelazco
|
5211a97f11
|
update detections
|
2021-11-23 16:00:04 -05:00 |
|
|
root
|
c8c731e449
|
Added detection testing service results inWindows Service Created With Suspicious Service Path
|
2021-11-23 19:20:48 +00:00 |
|
|
mvelazco
|
4c696f9ad8
|
updating detections
|
2021-11-23 14:01:28 -05:00 |
|
|
mvelazco
|
9b944b67a2
|
adding 4 new detections
|
2021-11-23 10:13:07 -05:00 |
|
|
P4T12ICK
|
8cf8efb30f
|
SSA anommalous usage of archive tools
|
2021-11-23 13:05:00 +01:00 |
|
|
P4T12ICK
|
4d6e83bd25
|
SSA anommalous usage of archive tools
|
2021-11-23 12:46:02 +01:00 |
|
|
tccontre
|
83576ecb74
|
more_ioc_detections
|
2021-11-23 11:56:00 +01:00 |
|
|
P4T12ICK
|
e48bf8c257
|
SSA anommalous usage of archive tools
|
2021-11-23 10:14:50 +01:00 |
|
|
mvelazco
|
f2a7006482
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-22 16:21:46 -05:00 |
|
|
mvelazco
|
8c2baf103e
|
creating an extra detection
|
2021-11-22 16:21:43 -05:00 |
|
|
root
|
8482d30656
|
Added detection testing service results inPossible Browser Pass View Parameter
|
2021-11-22 14:44:57 +00:00 |
|
|
tccontre
|
04c433eedf
|
more_ioc_detections
|
2021-11-22 15:09:53 +01:00 |
|
|
tccontre
|
3b2bb44e91
|
more_ioc_detections
|
2021-11-22 12:39:31 +01:00 |
|
|
Bhavin Patel
|
a1bee25acb
|
Branch was auto-updated.
|
2021-11-22 02:53:47 -08:00 |
|
|
Bhavin Patel
|
fe491600d5
|
Branch was auto-updated.
|
2021-11-22 02:53:45 -08:00 |
|
|
P4T12ICK
|
8b174b9967
|
small change
|
2021-11-22 11:07:10 +01:00 |
|
|
tccontre
|
45e691bd0d
|
ssa_sdelete
|
2021-11-22 10:39:45 +01:00 |
|