 Bhavin Patel
|
ce6c10e35d
|
Branch was auto-updated.
|
2021-09-06 04:07:11 -07:00 |
|
|
P4T12ICK
|
0e9319ff48
|
Merge pull request #1587 from splunk/AD_Discovery_TR-789_2
AD_Discovery_TR-789_2
|
2021-09-06 13:06:50 +02:00 |
|
|
P4T12ICK
|
6cdc9a4809
|
Update adsisearcher_account_discovery.yml
|
2021-09-06 13:02:28 +02:00 |
|
|
Bhavin Patel
|
7d572128a2
|
Branch was auto-updated.
|
2021-09-06 03:57:26 -07:00 |
|
|
pyth0n1c
|
489f869487
|
Branch was auto-updated.
|
2021-09-02 21:52:55 -07:00 |
|
|
pyth0n1c
|
0a1d55fd81
|
Branch was auto-updated.
|
2021-09-02 21:52:52 -07:00 |
|
|
mvelazco
|
1997f68d39
|
Update field
|
2021-09-02 23:59:29 -04:00 |
|
|
Bhavin Patel
|
d7759b6dfc
|
Update get_addefaultdomainpasswordpolicy_with_powershell.yml
|
2021-09-02 16:56:29 -07:00 |
|
|
pyth0n1c
|
16575c55b9
|
Branch was auto-updated.
|
2021-09-02 12:34:56 -07:00 |
|
|
Detection Testing Service
|
c2bcaa4668
|
Merge branch 'proxyshellz' of https://github.com/splunk/security_content into proxyshellz
|
2021-09-02 18:06:16 +00:00 |
|
|
root
|
052594e937
|
Added detection testing service results inWindows Desired Access Request
|
2021-09-02 18:06:15 +00:00 |
|
|
root
|
f7e5005bb1
|
Added detection testing service results inPetitPotam Suspicious Kerberos TGT Request
|
2021-09-02 18:02:24 +00:00 |
|
|
Bhavin Patel
|
d344c7cda8
|
Update getlocaluser_with_powershell.yml
|
2021-09-02 08:50:28 -07:00 |
|
|
mvelazco
|
3bc899dac9
|
Update detection name and description
|
2021-09-02 10:19:19 -04:00 |
|
|
mhaag-spl
|
e8de140562
|
fixes
|
2021-09-01 16:58:23 -06:00 |
|
|
Michael Haag
|
5090a3c2d7
|
Update and rename petitpotam_network_share_access.yml to petitpotam_network_share_access_request.yml
|
2021-09-01 15:19:23 -06:00 |
|
|
github-actions[bot]
|
f6b93579ce
|
Branch was auto-updated.
|
2021-09-01 20:47:21 +00:00 |
|
|
github-actions[bot]
|
65505aad2b
|
Branch was auto-updated.
|
2021-09-01 20:47:20 +00:00 |
|
|
mvelazco
|
900559e872
|
updating petitpotam analytic story and detections
|
2021-09-01 16:08:40 -04:00 |
|
|
Bhavin Patel
|
237f346319
|
Update getwmiobject_user_account_with_powershell_script_block.yml
SPL Fix
|
2021-09-01 12:56:08 -07:00 |
|
|
patel-bhavin
|
c871aeb563
|
Merge branch 'develop' into AD_Discovery_TR-789
|
2021-09-01 12:02:51 -07:00 |
|
|
mhaag-spl
|
6f1f2c8626
|
Create windows_kerberos_auth_ticket_request.yml
|
2021-09-01 11:56:04 -06:00 |
|
|
mhaag-spl
|
4cde27f0fe
|
Create windows_desired_access_request.yml
|
2021-09-01 08:27:24 -06:00 |
|
|
github-actions[bot]
|
e2c15f64e8
|
Branch was auto-updated.
|
2021-09-01 12:32:25 +00:00 |
|
|
patel-bhavin
|
670571ab19
|
Merge branch 'issue_1557_bug_with_lnk_file' of github.com:splunk/security_content into issue_1557_bug_with_lnk_file
|
2021-08-31 13:49:55 -07:00 |
|
|
patel-bhavin
|
7a7341f9ba
|
spl update
|
2021-08-31 13:48:25 -07:00 |
|
|
Bhavin Patel
|
39db6357ae
|
Update process_creating_lnk_file_in_suspicious_location.yml
|
2021-08-31 13:08:47 -07:00 |
|
|
patel-bhavin
|
8a465cec87
|
Merge branch 'develop' into issue_1557_bug_with_lnk_file
|
2021-08-31 12:57:36 -07:00 |
|
|
Bhavin Patel
|
07a732bf06
|
Update detect_exchange_web_shell.yml
|
2021-08-31 12:12:04 -07:00 |
|
|
Bhavin Patel
|
1f5c139f60
|
Update process_creating_lnk_file_in_suspicious_location.yml
|
2021-08-31 12:09:55 -07:00 |
|
|
Bhavin Patel
|
322c804d87
|
Update adsisearcher_account_discovery.yml
|
2021-08-31 11:53:30 -07:00 |
|
|
github-actions[bot]
|
0871c9b0ff
|
Branch was auto-updated.
|
2021-08-31 18:15:33 +00:00 |
|
|
github-actions[bot]
|
8deedaf6c3
|
Branch was auto-updated.
|
2021-08-31 18:15:31 +00:00 |
|
|
github-actions[bot]
|
0e20dc1794
|
Branch was auto-updated.
|
2021-08-31 18:15:30 +00:00 |
|
|
patel-bhavin
|
d2c2cf38f7
|
add observable and clean up
|
2021-08-31 11:06:47 -07:00 |
|
|
root
|
84bf0e3ec2
|
Added detection testing service results inPassword Policy Discovery with Net
|
2021-08-31 13:48:54 +00:00 |
|
|
root
|
4ecb10aff7
|
Added detection testing service results inGet DomainPolicy with Powershell Script Block
|
2021-08-31 11:43:10 +00:00 |
|
|
root
|
4d4ed72a51
|
Added detection testing service results inGet DomainPolicy with Powershell
|
2021-08-31 10:37:41 +00:00 |
|
|
root
|
4d91dcbe0f
|
Added detection testing service results inGet ADUserResultantPasswordPolicy with Powershell Script Block
|
2021-08-31 10:15:36 +00:00 |
|
|
root
|
c1b5706e22
|
Added detection testing service results inGet ADUserResultantPasswordPolicy with Powershell
|
2021-08-31 09:38:54 +00:00 |
|
|
root
|
048d9e6e1d
|
Added detection testing service results inGet ADDefaultDomainPasswordPolicy with Powershell Script Block
|
2021-08-31 09:12:42 +00:00 |
|
|
root
|
76a46e2b83
|
Added detection testing service results inGet ADDefaultDomainPasswordPolicy with Powershell
|
2021-08-31 08:49:23 +00:00 |
|
|
github-actions[bot]
|
18dfefd6db
|
Branch was auto-updated.
|
2021-08-30 23:14:43 +00:00 |
|
|
patel-bhavin
|
23dd1e6f64
|
test
|
2021-08-30 15:13:16 -07:00 |
|
|
patel-bhavin
|
29c6e20ddb
|
detection testing
|
2021-08-30 13:48:04 -07:00 |
|
|
Bhavin Patel
|
05b10cecab
|
Update create_local_admin_accounts_using_net_exe.yml
|
2021-08-30 11:47:43 -07:00 |
|
|
mvelazco
|
9bbcf96620
|
minor fixes
|
2021-08-30 13:32:51 -04:00 |
|
|
root
|
f7db3ebe94
|
Added detection testing service results inGet DomainUser with PowerShell Script Block
|
2021-08-30 15:04:32 +00:00 |
|
|
Detection Testing Service
|
12eaa06631
|
Merge branch 'AD_Discovery_TR-789_2' of https://github.com/splunk/security_content into AD_Discovery_TR-789_2
|
2021-08-30 13:55:52 +00:00 |
|
|
root
|
2d4e4d11d1
|
Added detection testing service results inGetWmiObject DS User with PowerShell
|
2021-08-30 13:55:51 +00:00 |
|