Commit Graph

12922 Commits

Author SHA1 Message Date
root 8f6fe7cc45 Added detection testing service results inWindows DiskCryptor Usage 2021-11-15 22:17:34 +00:00
Bhavin Patel 6cb7daf9b1 Branch was auto-updated. 2021-11-15 13:49:27 -08:00
Bhavin Patel 5df971fe13 Branch was auto-updated. 2021-11-15 13:49:25 -08:00
Bhavin Patel c0038f5c82 Branch was auto-updated. 2021-11-15 13:49:22 -08:00
Bhavin Patel 1a20a79a1b Branch was auto-updated. 2021-11-15 13:49:19 -08:00
Bhavin Patel 8f9eb87116 Branch was auto-updated. 2021-11-15 13:49:18 -08:00
Bhavin Patel 4ec3670291 Branch was auto-updated. 2021-11-15 13:49:18 -08:00
Bhavin Patel 6e68c6b3f5 Branch was auto-updated. 2021-11-15 13:49:17 -08:00
pyth0n1c a83e0ce977 Merge pull request #1798 from splunk/fixing_issues
Fixed Regex
Minor changes - manually reviewed and looks good!
2021-11-15 13:48:56 -08:00
mhaag-spl ee3e77b45c DefaultAccount 2021-11-15 14:30:14 -07:00
mhaag-spl 084e781385 dcrypt 2021-11-15 14:22:39 -07:00
mhaag-spl 7f5475ff8b plink 2021-11-15 14:17:20 -07:00
mvelazco d7e88b2e1a adding first two detections 2021-11-15 15:09:47 -05:00
Detection Testing Service 3bbc33ef4a Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag 2021-11-15 18:48:08 +00:00
root 24b1994699 Added detection testing service results inWindows InstallUtil Remote Network Connection 2021-11-15 18:48:07 +00:00
Detection Testing Service 592504ff67 Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag 2021-11-15 18:46:36 +00:00
root 48c0b7d039 Added detection testing service results inWindows InstallUtil Credential Theft 2021-11-15 18:46:36 +00:00
Detection Testing Service 734b8575db Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag 2021-11-15 18:38:46 +00:00
root 000a3acefb Added detection testing service results inWindows InstallUtil URL in Command Line 2021-11-15 18:38:45 +00:00
root 87fe65ac66 Added detection testing service results inWindows InstallUtil Uninstall Option with Network 2021-11-15 18:38:15 +00:00
root 5446bc59a8 Added detection testing service results inWindows InstallUtil URL in Command Line 2021-11-15 17:59:30 +00:00
mhaag-spl 6e5b06270e Update windows_installutil_credential_theft.yml 2021-11-15 10:21:17 -07:00
mhaag-spl 1aa5852b19 Update exchange_powershell_module_usage.yml 2021-11-15 07:53:20 -07:00
tccontre e6cc42371e minor_ssa_update 2021-11-15 11:39:06 +01:00
pyth0n1c f64fef09d7 Still needs a lot of rework and cleanup - can't run right now. Looking to finish cleanup on Monday. 2021-11-12 17:11:10 -08:00
pyth0n1c 4e16ab139d More maintenance to make the testing code more modular and better documented. 2021-11-12 16:37:05 -08:00
pyth0n1c b20d34c6a2 Huge changes to refactor docker based detection testing. Broke down massive testing file into smaller files. Not running or tested yet, but in progress. 2021-11-12 15:32:02 -08:00
root 07c0bd828b Added detection testing service results inWindows InstallUtil Uninstall Option 2021-11-12 22:11:12 +00:00
root c2f0b8d0f6 Added detection testing service results inSchtasks scheduling job on remote system 2021-11-12 21:38:18 +00:00
root dcad854d1b Added detection testing service results inRemote Process Instantiation via WMI 2021-11-12 21:17:29 +00:00
Detection Testing Service 28ea433a81 Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement 2021-11-12 20:56:42 +00:00
root 159faea4c6 Added detection testing service results inWindows Service Initiation on Remote Endpoint 2021-11-12 20:56:41 +00:00
root 8ff650ebe8 Added detection testing service results inWindows Service Creation on Remote Endpoint 2021-11-12 20:56:33 +00:00
mvelazco a7a85f2fc3 Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement 2021-11-12 15:06:22 -05:00
mvelazco 4c7108e0a3 fixing unsupported character 2021-11-12 15:06:16 -05:00
Detection Testing Service 9903554d3a Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement 2021-11-12 20:05:57 +00:00
root 1307c28bf1 Added detection testing service results inRemote Process Instantiation via WinRM and Winrs 2021-11-12 20:05:57 +00:00
mhaag-spl c5e962acfd Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag 2021-11-12 13:05:49 -07:00
mhaag-spl 878c0c775b InstallUTIL 🍺 2021-11-12 13:05:19 -07:00
Bhavin Patel 9d6cd1093b Branch was auto-updated. 2021-11-12 12:03:35 -08:00
Bhavin Patel 34a3ed8e74 Branch was auto-updated. 2021-11-12 12:03:34 -08:00
Bhavin Patel d5bd756c96 Branch was auto-updated. 2021-11-12 12:03:32 -08:00
Bhavin Patel 694527c8d8 Branch was auto-updated. 2021-11-12 12:03:32 -08:00
Bhavin Patel 4c754f2030 Branch was auto-updated. 2021-11-12 12:03:31 -08:00
Bhavin Patel d0616f5d34 Branch was auto-updated. 2021-11-12 12:03:30 -08:00
Bhavin Patel dac4ecee18 Merge pull request #1832 from splunk/duplicate_1796
spll update
2021-11-12 12:03:13 -08:00
mvelazco 81aa84283e Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement 2021-11-12 14:46:05 -05:00
mvelazco aebcc438f4 fixing test yml 2021-11-12 14:45:56 -05:00
root 700383c15f Added detection testing service results inAWS IAM AccessDenied Discovery Events 2021-11-12 19:26:05 +00:00
Detection Testing Service d2fe1d784f Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement 2021-11-12 19:22:53 +00:00