pyth0n1c
|
9995e9123d
|
Added some additional arguments to control which detections we will test.
|
2021-10-19 17:14:30 -07:00 |
|
pyth0n1c
|
9e76ab75fc
|
Working better during testing, but still needs a huge amount of cleanup. Lots of dead code and magic strings.
|
2021-10-19 16:49:43 -07:00 |
|
mhaag-spl
|
ee54fa595a
|
Update windows_curl_download_to_suspicious_path.yml
|
2021-10-19 10:45:39 -06:00 |
|
mhaag-spl
|
f8d6ce147d
|
Curling
|
2021-10-19 10:44:17 -06:00 |
|
root
|
590722abf9
|
Added detection testing service results inDisable Defender AntiVirus Registry
|
2021-10-19 13:20:04 +00:00 |
|
root
|
8cc1b51807
|
Added detection testing service results inDisable Defender BlockAtFirstSeen Feature
|
2021-10-19 11:19:35 +00:00 |
|
root
|
810f878c7f
|
Added detection testing service results inDisable Defender Enhanced Notification
|
2021-10-19 10:55:31 +00:00 |
|
root
|
dba4e97378
|
Added detection testing service results inDisable Defender MpEngine Registry
|
2021-10-19 10:24:05 +00:00 |
|
root
|
a201b87285
|
Added detection testing service results inDisable Defender Spynet Reporting
|
2021-10-19 10:00:24 +00:00 |
|
root
|
498f464337
|
Added detection testing service results inDisable Defender Submit Samples Consent Feature
|
2021-10-19 09:28:48 +00:00 |
|
root
|
6048d9697a
|
Added detection testing service results inDisable Schedule Task
|
2021-10-19 08:42:46 +00:00 |
|
pyth0n1c
|
cebe2118e5
|
Fixed name of one of the test files.
|
2021-10-18 16:45:34 -07:00 |
|
pyth0n1c
|
46fb396506
|
Changed one registry related detection to
fix field name.
|
2021-10-18 13:55:49 -07:00 |
|
tccontre
|
fc7e90bd37
|
iceid_ttps
|
2021-10-18 17:11:53 +02:00 |
|
tccontre
|
794adbe6f3
|
iceid_ttps
|
2021-10-18 16:56:46 +02:00 |
|
pyth0n1c
|
2460d6b93b
|
Fixing the naming of more Registry values
|
2021-10-15 16:19:37 -07:00 |
|
pyth0n1c
|
a6522d37b6
|
Changed registry_key_name to
registry_value_name in a number of
detections in response to sysmonTA
updates (correcting a previous error).
|
2021-10-15 15:31:54 -07:00 |
|
pyth0n1c
|
69b809579d
|
Fixed filenames on some tests. There were named
*.yml.test.yml instead of *.test.yml
|
2021-10-15 14:58:21 -07:00 |
|
pyth0n1c
|
75fe6a9f61
|
More progress. Now build and upload apps from local file system as well as install from splunkbase.
|
2021-10-15 13:55:46 -07:00 |
|
Bhavin Patel
|
5fe2633537
|
Branch was auto-updated.
|
2021-10-15 13:42:49 -07:00 |
|
Bhavin Patel
|
e63f04d84b
|
Branch was auto-updated.
|
2021-10-15 13:42:47 -07:00 |
|
Bhavin Patel
|
9624d3d31b
|
Branch was auto-updated.
|
2021-10-15 13:42:46 -07:00 |
|
Bhavin Patel
|
078dbb5d6e
|
Branch was auto-updated.
|
2021-10-15 13:42:45 -07:00 |
|
Bhavin Patel
|
f872cfa2d0
|
Branch was auto-updated.
|
2021-10-15 13:42:44 -07:00 |
|
Bhavin Patel
|
ae63d4a14d
|
Branch was auto-updated.
|
2021-10-15 13:42:42 -07:00 |
|
Bhavin Patel
|
552b67da94
|
Merge pull request #1726 from splunk/tr-1076
Process_id to Process_guid
|
2021-10-15 13:42:23 -07:00 |
|
Detection Testing Service
|
6b60df3cba
|
Merge branch 'setspn' of https://github.com/splunk/security_content into setspn
|
2021-10-15 19:26:27 +00:00 |
|
root
|
d16e2b2829
|
Added detection testing service results inServicePrincipalNames Discovery with SetSPN
|
2021-10-15 19:26:26 +00:00 |
|
root
|
611e8b9595
|
Added detection testing service results inServicePrincipalNames Discovery with PowerShell
|
2021-10-15 19:25:19 +00:00 |
|
Bhavin Patel
|
49a31364e7
|
Branch was auto-updated.
|
2021-10-15 11:51:40 -07:00 |
|
Bhavin Patel
|
4f7403a485
|
Branch was auto-updated.
|
2021-10-15 11:51:39 -07:00 |
|
Bhavin Patel
|
b3617991aa
|
Branch was auto-updated.
|
2021-10-15 11:51:37 -07:00 |
|
Bhavin Patel
|
e49f8681d2
|
Branch was auto-updated.
|
2021-10-15 11:51:37 -07:00 |
|
Bhavin Patel
|
65de958ba8
|
Branch was auto-updated.
|
2021-10-15 11:51:35 -07:00 |
|
Bhavin Patel
|
cd4f49f6e2
|
Branch was auto-updated.
|
2021-10-15 11:51:34 -07:00 |
|
Bhavin Patel
|
40cac59e7c
|
Branch was auto-updated.
|
2021-10-15 11:51:33 -07:00 |
|
Bhavin Patel
|
4b3a13848f
|
Merge pull request #1729 from splunk/CARS_UPDATE_MITRE_ID_B8
Cars update mitre id b8
|
2021-10-15 11:51:13 -07:00 |
|
Bhavin Patel
|
d4c5acae4a
|
Branch was auto-updated.
|
2021-10-15 11:48:06 -07:00 |
|
Bhavin Patel
|
7fa141e029
|
Branch was auto-updated.
|
2021-10-15 11:48:05 -07:00 |
|
Bhavin Patel
|
1fd4d51e2f
|
Branch was auto-updated.
|
2021-10-15 11:48:04 -07:00 |
|
Bhavin Patel
|
6c0b36c073
|
Branch was auto-updated.
|
2021-10-15 11:48:02 -07:00 |
|
Bhavin Patel
|
afc7957096
|
Branch was auto-updated.
|
2021-10-15 11:48:01 -07:00 |
|
Bhavin Patel
|
1bf4771966
|
Branch was auto-updated.
|
2021-10-15 11:47:59 -07:00 |
|
Bhavin Patel
|
fbece0a91c
|
Branch was auto-updated.
|
2021-10-15 11:47:58 -07:00 |
|
Bhavin Patel
|
d75c54f1eb
|
Branch was auto-updated.
|
2021-10-15 11:47:57 -07:00 |
|
Bhavin Patel
|
3c470bbc3a
|
Merge pull request #1725 from splunk/CARS_UPDATE_MITRE_ID_B7
Cars update mitre id b7
|
2021-10-15 11:47:40 -07:00 |
|
mhaag-spl
|
9b8ff687ae
|
HaagRoast
|
2021-10-15 12:31:33 -06:00 |
|
Bhavin Patel
|
3e87c75d6a
|
Branch was auto-updated.
|
2021-10-15 10:33:19 -07:00 |
|
Bhavin Patel
|
ccf51c7abe
|
Branch was auto-updated.
|
2021-10-15 10:33:19 -07:00 |
|
Bhavin Patel
|
2d65d39e0d
|
Branch was auto-updated.
|
2021-10-15 10:33:18 -07:00 |
|