57c1ef30dd
Merge pull request #1857 from splunk/RegistryDetectionFixes
...
Registry detection fixes
2021-12-01 15:41:01 -08:00
9f91279c51
Changed affected Registry.registry_value_name
...
fields to Registry.registry_value_data and changed
value from DWORD(0x...) to 0x...
This probably does not cover all the detections that
will need to be addressed in this fix, but is a good
initial pass to see if the fixes and new TA are working
properly.
2021-10-14 14:58:03 -07:00
3f01dc7409
Touched a number of detections to see if they
...
fail with the current sysmon TA before testing
against the sysmon TA update.
2021-10-14 14:24:25 -07:00
14e3597bf4
CARS_UPDATE_MITRE_ID_B4
...
CARS_UPDATE_MITRE_ID_B3
2021-10-13 11:13:24 +02:00
5e6e987fb7
resolved merge conflicts
2021-07-21 09:22:09 +02:00
44ea56053d
updating docs and package bits [ci skip]
2021-07-20 21:12:30 +00:00
2f33b99816
Merge branch 'develop' into Risky
2021-07-20 13:47:15 -06:00
3740535cca
updating docs and package bits [ci skip]
2021-07-20 17:49:09 +00:00
1c9f44bf37
Merge branch 'develop' into analytic_types
2021-07-20 16:46:34 +02:00
65a92a64e1
add analytic types to detections
2021-07-19 16:49:33 +02:00
b37882f7e7
Apger's second round of detection content updates
2021-07-14 20:58:54 -05:00
44f7892c19
RBA done
2021-07-14 15:43:38 -06:00
a40dc12832
updating docs and package bits [ci skip]
2021-04-15 19:40:20 +00:00
031a8a9945
Added detection testing service results inDisabling FolderOptions Windows Feature
2021-04-01 10:06:43 +00:00
c214e8dc53
def_evasion_detections
2021-03-31 14:42:47 +02:00
Bhavin Patel