P4T12ICK
|
bc31f18450
|
Merge branch 'ssa_end_to_end_testing' of github.com:splunk/security-content into ssa_end_to_end_testing
|
2021-03-02 09:13:46 +01:00 |
|
P4T12ICK
|
fa561db694
|
wip
|
2021-03-02 09:13:27 +01:00 |
|
Ignacio Bermudez Corrales
|
1b0a0a4338
|
missing docker credentials
|
2021-03-02 00:02:35 -08:00 |
|
Ignacio Bermudez Corrales
|
742198d5e5
|
v0 of deployer
|
2021-03-01 23:52:22 -08:00 |
|
root
|
ef7af97e8e
|
Added detection testing service results inAWS Create Policy Version to allow all resources
|
2021-03-02 03:56:03 +00:00 |
|
divious1
|
3fc7550cdc
|
working hyper links
|
2021-03-01 22:04:55 -05:00 |
|
divious1
|
239745b2d6
|
added organized by kind for detections
|
2021-03-01 21:36:26 -05:00 |
|
mhaag-spl
|
16627bf207
|
update url
|
2021-03-01 18:28:25 -07:00 |
|
bpatel
|
46b623f7a0
|
tested on docker
|
2021-03-01 16:54:17 -08:00 |
|
bpatel
|
29a101da97
|
update local generator
|
2021-03-01 15:27:25 -08:00 |
|
root
|
17c68a56f0
|
Added detection testing service results inAWS Create Policy Version to allow all resources
|
2021-03-01 23:12:11 +00:00 |
|
mhaag-spl
|
9794fd13fb
|
Any PowerShell DownloadString
|
2021-03-01 16:02:36 -07:00 |
|
mhaag-spl
|
bd2c69ec28
|
Eventvwr UAC Bypass
|
2021-03-01 15:18:27 -07:00 |
|
bpatel
|
ea7ccd21bb
|
itworksss
|
2021-03-01 13:30:02 -08:00 |
|
bpatel
|
57871e4886
|
testing
|
2021-03-01 13:12:18 -08:00 |
|
mhaag-spl
|
bcbd2ebb19
|
Fodhelper uac bypass
|
2021-03-01 13:38:06 -07:00 |
|
mhaag-spl
|
5a09edf797
|
Suspicious Scheduled Task from Public Directory
|
2021-03-01 12:45:22 -07:00 |
|
bpatel
|
47dec9d123
|
test file
|
2021-03-01 11:27:29 -08:00 |
|
divious1
|
75c24a9f34
|
added markup
|
2021-03-01 13:49:16 -05:00 |
|
mhaag-spl
|
a576744f88
|
Ryuk Wake on LAN
|
2021-03-01 10:07:12 -07:00 |
|
P4T12ICK
|
05d3fad633
|
new test
|
2021-03-01 16:51:09 +01:00 |
|
P4T12ICK
|
a888b771c4
|
new test
|
2021-03-01 16:51:05 +01:00 |
|
P4T12ICK
|
edaf53ff1c
|
test
|
2021-03-01 16:44:26 +01:00 |
|
P4T12ICK
|
84984b453b
|
wip
|
2021-03-01 16:42:22 +01:00 |
|
mhaag-spl
|
ecb82ec8ca
|
Fixes
|
2021-03-01 06:52:02 -07:00 |
|
mhaag-spl
|
d265e72e8d
|
Silver Sparrow
|
2021-03-01 06:23:51 -07:00 |
|
P4T12ICK
|
dfab3ba794
|
small change
|
2021-03-01 13:13:37 +01:00 |
|
P4T12ICK
|
5e9bbaab75
|
attack data
|
2021-03-01 13:11:38 +01:00 |
|
P4T12ICK
|
f7f9db55d3
|
test branch
|
2021-03-01 10:36:45 +01:00 |
|
P4T12ICK
|
87e36c489e
|
test branch
|
2021-03-01 10:36:14 +01:00 |
|
P4T12ICK
|
30116dd3e8
|
add GitHub Service
|
2021-03-01 10:35:06 +01:00 |
|
P4T12ICK
|
e3b2e44776
|
add GitHub Service
|
2021-03-01 10:32:21 +01:00 |
|
miskoSplunk
|
7088a5ca43
|
Delete ssa___credential_extraction_getaddbaccount_from_dump.test.yml
|
2021-02-26 14:11:11 -08:00 |
|
miskoSplunk
|
9331a7899e
|
Delete ssa___credential_extraction_ms_debuggers_z_option.test.yml
|
2021-02-26 14:10:40 -08:00 |
|
miskoSplunk
|
023b1d6a47
|
Delete ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml
|
2021-02-26 14:10:15 -08:00 |
|
miskoSplunk
|
54d1c00df3
|
Delete ssa___credential_extraction_mimikatz_modules.test.yml
|
2021-02-26 14:09:56 -08:00 |
|
miskoSplunk
|
496e00240e
|
Delete ssa___illegal_account_creation_via_powersploit_modules.test.yml
|
2021-02-26 14:09:26 -08:00 |
|
miskoSplunk
|
26c314a6c7
|
Delete ssa___illegal_access_user_content_via_powersploit_modules.test.yml
|
2021-02-26 14:09:11 -08:00 |
|
miskoSplunk
|
f6fa021edc
|
Delete ssa___illegal_log_deletion_via_mimikatz_modules.test.yml
|
2021-02-26 14:08:49 -08:00 |
|
miskoSplunk
|
ceddaf134d
|
Delete ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.test.yml
|
2021-02-26 14:08:05 -08:00 |
|
miskoSplunk
|
53842f55b0
|
Delete ssa___illegal_account_enable_disable_via_dsinternals_modules.test.yml
|
2021-02-26 14:07:43 -08:00 |
|
miskoSplunk
|
cd84b7a659
|
Delete ssa___illegal_privilege_elevation_via_mimikatz_modules.test.yml
|
2021-02-26 14:07:14 -08:00 |
|
miskoSplunk
|
1295e2a8f9
|
Delete ssa___illegal_service_and_process_control_via_mimikatz_modules.test.yml
|
2021-02-26 14:06:57 -08:00 |
|
miskoSplunk
|
d346de0dad
|
Delete ssa___illegal_service_and_process_control_via_powersploit_modules.test.yml
|
2021-02-26 14:06:31 -08:00 |
|
miskoSplunk
|
6c7f50a875
|
Delete ssa___setting_credentials_via_dsinternals_modules.test.yml
|
2021-02-26 14:06:12 -08:00 |
|
miskoSplunk
|
8a3030b356
|
Delete ssa___setting_credentials_via_mimikatz_modules.test.yml
|
2021-02-26 14:05:47 -08:00 |
|
miskoSplunk
|
0b40494235
|
Delete ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.test.yml
|
2021-02-26 14:05:25 -08:00 |
|
miskoSplunk
|
b6343d93be
|
Delete ssa___setting_credentials_via_powersploit_modules.test.yml
|
2021-02-26 14:04:47 -08:00 |
|
miskoSplunk
|
8319b76803
|
Delete ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.test.yml
|
2021-02-26 14:04:35 -08:00 |
|
miskoSplunk
|
1a75a35fdd
|
Delete ssa___credential_extraction_powersploit_modules.test.yml
|
2021-02-26 14:04:23 -08:00 |
|