Commit Graph

12922 Commits

Author SHA1 Message Date
mhaag-spl 5708e3d999 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:41:56 -07:00
mhaag-spl d84f20ab5a Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:32:41 -07:00
mhaag-spl 77e720a1ad Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:21:46 -07:00
mhaag-spl 9f549140c2 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:16:59 -07:00
mhaag-spl 306b65a6bc Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:13:36 -07:00
mhaag-spl 56031c3f3e Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:10:22 -07:00
mhaag-spl 5271462bb4 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 13:00:30 -07:00
mhaag-spl 2d0e9bb7a7 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 12:55:44 -07:00
mhaag-spl 50be4077f3 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 12:53:47 -07:00
Bhavin Patel 17c64de9d6 Merge branch 'develop' into detection_testing_branch 2021-01-21 11:43:46 -08:00
mhaag-spl 2e5c1bfa10 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 12:41:06 -07:00
bpatel 549fb5d197 minor text 2021-01-21 11:39:57 -08:00
mhaag-spl eea72fdf44 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-21 12:37:48 -07:00
mhaag-spl 9dc0988a36 Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-21 12:37:38 -07:00
github-actions[bot] 40e7295a08 Branch was auto-updated. 2021-01-21 19:34:16 +00:00
github-actions[bot] e874b32dd3 Branch was auto-updated. 2021-01-21 19:34:14 +00:00
Jose Enrique Hernandez b6b65ab7b4 Merge pull request #1120 from splunk/ransomeware_lookup
Ransome ware lookup : duplicate PR
2021-01-21 14:33:56 -05:00
mhaag-spl 802d15bed0 MSBuild story update 2021-01-21 12:27:43 -07:00
bpatel f5e653a552 duplicate PR 2021-01-21 11:27:24 -08:00
github-actions[bot] deb8e2488b Branch was auto-updated. 2021-01-21 19:02:16 +00:00
Jose Enrique Hernandez b13b01452c Merge pull request #1087 from splunk/dependabot/pip/importlib-metadata-3.4.0
Bump importlib-metadata from 3.3.0 to 3.4.0
2021-01-21 14:01:56 -05:00
Jose Enrique Hernandez ffa1a8de10 Merge branch 'develop' into dependabot/pip/importlib-metadata-3.4.0 2021-01-21 12:54:08 -05:00
Jose Enrique Hernandez d79327153c Merge branch 'develop' into issue_1101 2021-01-21 12:53:57 -05:00
Jose Enrique Hernandez 1c2db6ad24 Merge pull request #1117 from splunk/dependabot/pip/pyyaml-5.4
Bump pyyaml from 5.3.1 to 5.4
2021-01-21 11:48:40 -05:00
P4T12ICK 3ccfea4dcc Merge branch 'develop' into detection_testing_branch 2021-01-21 16:07:41 +01:00
bpatel 369dab3488 minor 2021-01-20 17:32:03 -08:00
bpatel 0b7f46489a adding deployment file for Mustang 2021-01-20 16:40:33 -08:00
bpatel e02498dbf2 Merge branch 'develop' into issue_1101 2021-01-20 15:39:49 -08:00
bpatel f7ae31682a adding product field in tags for mustang 2021-01-20 15:39:29 -08:00
root 6697920c84 Added detection testing service results inDetect mshta spawn 2021-01-20 22:31:06 +00:00
mhaag-spl b60d75a587 renamed testing 2021-01-20 14:46:45 -07:00
mhaag-spl f3d274c0f8 ID changes
ID changes and a test file needed moved
2021-01-20 14:45:27 -07:00
mhaag-spl 03ac6e1174 Suspicious mshta spawn
Suspicious mshta spawn
2021-01-20 14:16:29 -07:00
Michael Haag b29378ff57 Merge branch 'develop' into msbuild 2021-01-20 14:09:16 -07:00
mhaag-spl 492c70d6ba Update detect_mshta_renamed.yml 2021-01-20 13:54:17 -07:00
mhaag-spl c3197d003e mshta renamed 2021-01-20 13:50:57 -07:00
mhaag-spl 9205419f90 Update detect_mshta_inline_hta_execution.yml 2021-01-20 13:16:33 -07:00
mhaag-spl 676a51159e Update detect_mshta_inline_hta_execution.yml 2021-01-20 12:53:19 -07:00
mhaag-spl dfc9ac84c5 Update detect_mshta_inline_hta_execution.yml 2021-01-20 12:48:28 -07:00
mhaag-spl 5e516b427e Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-20 12:44:24 -07:00
mhaag-spl 5b0ff63278 rename mshta inline hta execution 2021-01-20 12:44:21 -07:00
root db1265ad84 Added detection testing service results inDetect mshta url in command line 2021-01-20 19:24:25 +00:00
mhaag-spl 1d11230510 MSHTA
Updated story
added mshta url in cmdline analytic
2021-01-20 12:00:25 -07:00
mhaag-spl 4299138f97 Update detect_rundll32_inline_hta_execution.yml 2021-01-20 11:43:42 -07:00
root 267b33b9b4 Added detection testing service results inDetect rundll32 executing hta with inline protocols 2021-01-20 18:13:10 +00:00
P4T12ICK 753d2dc00f add custom badge for detection coverage 2021-01-20 18:59:09 +01:00
mhaag-spl ed6e40433c rundll32 inline hta
Rundll32 inline hta execution
2021-01-20 10:48:25 -07:00
P4T12ICK fae32c8fd2 add custom badge for detection coverage 2021-01-20 17:47:46 +01:00
P4T12ICK cf290ce750 add custom badge for detection coverage 2021-01-20 17:45:21 +01:00
P4T12ICK 82f13f9f8d add custom badge for detection coverage 2021-01-20 17:37:19 +01:00