root
|
8f6fe7cc45
|
Added detection testing service results inWindows DiskCryptor Usage
|
2021-11-15 22:17:34 +00:00 |
|
Bhavin Patel
|
6cb7daf9b1
|
Branch was auto-updated.
|
2021-11-15 13:49:27 -08:00 |
|
Bhavin Patel
|
5df971fe13
|
Branch was auto-updated.
|
2021-11-15 13:49:25 -08:00 |
|
Bhavin Patel
|
c0038f5c82
|
Branch was auto-updated.
|
2021-11-15 13:49:22 -08:00 |
|
Bhavin Patel
|
1a20a79a1b
|
Branch was auto-updated.
|
2021-11-15 13:49:19 -08:00 |
|
Bhavin Patel
|
8f9eb87116
|
Branch was auto-updated.
|
2021-11-15 13:49:18 -08:00 |
|
Bhavin Patel
|
4ec3670291
|
Branch was auto-updated.
|
2021-11-15 13:49:18 -08:00 |
|
Bhavin Patel
|
6e68c6b3f5
|
Branch was auto-updated.
|
2021-11-15 13:49:17 -08:00 |
|
pyth0n1c
|
a83e0ce977
|
Merge pull request #1798 from splunk/fixing_issues
Fixed Regex
Minor changes - manually reviewed and looks good!
|
2021-11-15 13:48:56 -08:00 |
|
mhaag-spl
|
ee3e77b45c
|
DefaultAccount
|
2021-11-15 14:30:14 -07:00 |
|
mhaag-spl
|
084e781385
|
dcrypt
|
2021-11-15 14:22:39 -07:00 |
|
mhaag-spl
|
7f5475ff8b
|
plink
|
2021-11-15 14:17:20 -07:00 |
|
mvelazco
|
d7e88b2e1a
|
adding first two detections
|
2021-11-15 15:09:47 -05:00 |
|
Detection Testing Service
|
3bbc33ef4a
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 18:48:08 +00:00 |
|
root
|
24b1994699
|
Added detection testing service results inWindows InstallUtil Remote Network Connection
|
2021-11-15 18:48:07 +00:00 |
|
Detection Testing Service
|
592504ff67
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 18:46:36 +00:00 |
|
root
|
48c0b7d039
|
Added detection testing service results inWindows InstallUtil Credential Theft
|
2021-11-15 18:46:36 +00:00 |
|
Detection Testing Service
|
734b8575db
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 18:38:46 +00:00 |
|
root
|
000a3acefb
|
Added detection testing service results inWindows InstallUtil URL in Command Line
|
2021-11-15 18:38:45 +00:00 |
|
root
|
87fe65ac66
|
Added detection testing service results inWindows InstallUtil Uninstall Option with Network
|
2021-11-15 18:38:15 +00:00 |
|
root
|
5446bc59a8
|
Added detection testing service results inWindows InstallUtil URL in Command Line
|
2021-11-15 17:59:30 +00:00 |
|
mhaag-spl
|
6e5b06270e
|
Update windows_installutil_credential_theft.yml
|
2021-11-15 10:21:17 -07:00 |
|
mhaag-spl
|
1aa5852b19
|
Update exchange_powershell_module_usage.yml
|
2021-11-15 07:53:20 -07:00 |
|
tccontre
|
e6cc42371e
|
minor_ssa_update
|
2021-11-15 11:39:06 +01:00 |
|
pyth0n1c
|
f64fef09d7
|
Still needs a lot of rework and cleanup - can't run right now. Looking to finish cleanup on Monday.
|
2021-11-12 17:11:10 -08:00 |
|
pyth0n1c
|
4e16ab139d
|
More maintenance to make the testing code more modular and better documented.
|
2021-11-12 16:37:05 -08:00 |
|
pyth0n1c
|
b20d34c6a2
|
Huge changes to refactor docker based detection testing. Broke down massive testing file into smaller files. Not running or tested yet, but in progress.
|
2021-11-12 15:32:02 -08:00 |
|
root
|
07c0bd828b
|
Added detection testing service results inWindows InstallUtil Uninstall Option
|
2021-11-12 22:11:12 +00:00 |
|
root
|
c2f0b8d0f6
|
Added detection testing service results inSchtasks scheduling job on remote system
|
2021-11-12 21:38:18 +00:00 |
|
root
|
dcad854d1b
|
Added detection testing service results inRemote Process Instantiation via WMI
|
2021-11-12 21:17:29 +00:00 |
|
Detection Testing Service
|
28ea433a81
|
Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 20:56:42 +00:00 |
|
root
|
159faea4c6
|
Added detection testing service results inWindows Service Initiation on Remote Endpoint
|
2021-11-12 20:56:41 +00:00 |
|
root
|
8ff650ebe8
|
Added detection testing service results inWindows Service Creation on Remote Endpoint
|
2021-11-12 20:56:33 +00:00 |
|
mvelazco
|
a7a85f2fc3
|
Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 15:06:22 -05:00 |
|
mvelazco
|
4c7108e0a3
|
fixing unsupported character
|
2021-11-12 15:06:16 -05:00 |
|
Detection Testing Service
|
9903554d3a
|
Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 20:05:57 +00:00 |
|
root
|
1307c28bf1
|
Added detection testing service results inRemote Process Instantiation via WinRM and Winrs
|
2021-11-12 20:05:57 +00:00 |
|
mhaag-spl
|
c5e962acfd
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-12 13:05:49 -07:00 |
|
mhaag-spl
|
878c0c775b
|
InstallUTIL 🍺
|
2021-11-12 13:05:19 -07:00 |
|
Bhavin Patel
|
9d6cd1093b
|
Branch was auto-updated.
|
2021-11-12 12:03:35 -08:00 |
|
Bhavin Patel
|
34a3ed8e74
|
Branch was auto-updated.
|
2021-11-12 12:03:34 -08:00 |
|
Bhavin Patel
|
d5bd756c96
|
Branch was auto-updated.
|
2021-11-12 12:03:32 -08:00 |
|
Bhavin Patel
|
694527c8d8
|
Branch was auto-updated.
|
2021-11-12 12:03:32 -08:00 |
|
Bhavin Patel
|
4c754f2030
|
Branch was auto-updated.
|
2021-11-12 12:03:31 -08:00 |
|
Bhavin Patel
|
d0616f5d34
|
Branch was auto-updated.
|
2021-11-12 12:03:30 -08:00 |
|
Bhavin Patel
|
dac4ecee18
|
Merge pull request #1832 from splunk/duplicate_1796
spll update
|
2021-11-12 12:03:13 -08:00 |
|
mvelazco
|
81aa84283e
|
Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 14:46:05 -05:00 |
|
mvelazco
|
aebcc438f4
|
fixing test yml
|
2021-11-12 14:45:56 -05:00 |
|
root
|
700383c15f
|
Added detection testing service results inAWS IAM AccessDenied Discovery Events
|
2021-11-12 19:26:05 +00:00 |
|
Detection Testing Service
|
d2fe1d784f
|
Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 19:22:53 +00:00 |
|