admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tccontre 9a5907c2b0 fin7 2021-09-17 12:31:03 +02:00
tccontre 68ba204036 fin7 2021-09-17 11:06:52 +02:00
P4T12ICK 5b98c86ba9 change dataset 2021-09-17 10:19:45 +02:00
tccontre f9360d8851 fin7 2021-09-17 09:59:49 +02:00
tccontre bb3a0f2d88 fin7 2021-09-17 09:55:04 +02:00
tccontre 12d15d17e3 fin7 2021-09-17 09:49:27 +02:00
tccontre 68c31b3c31 fin7 2021-09-17 09:39:45 +02:00
Stanislav Miskovic e5a7afa9a3 Adding Pth and PtT detections at logging devices and endpoints, tested on DSP 2021-09-16 22:15:58 -07:00
Stanislav Miskovic 784d940631 Returning signature_id into the detection 2021-09-16 20:44:41 -07:00
d1vious 5c1e02f436 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-16 23:00:12 -04:00
d1vious 62a89f9acf working detection gen 2021-09-16 23:00:07 -04:00
Detection Testing Service f7befe61e6 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:42:11 +00:00
root 5b301ca9b6 Added detection testing service results inProcesses created by netsh 2021-09-16 18:42:10 +00:00
Detection Testing Service f4162778e1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:36:03 +00:00
root 9156fe65e7 Added detection testing service results inExtract SAM from Registry 2021-09-16 18:36:02 +00:00
Detection Testing Service 5ec1bb98f0 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:28:51 +00:00
root e85e81804b Added detection testing service results inExtract SAM from Registry 2021-09-16 18:28:50 +00:00
Detection Testing Service 9a7e13f858 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:25:52 +00:00
root 2056548702 Added detection testing service results inDump LSASS via procdump 2021-09-16 18:25:52 +00:00
mhaag-spl fa785a991f Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 12:24:56 -06:00
mhaag-spl fbc3185dbc Update processes_launching_netsh.yml 2021-09-16 12:24:53 -06:00
Detection Testing Service 47db5dfd79 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:19:16 +00:00
root 4178c03b52 Added detection testing service results inDetect PsExec With accepteula Flag 2021-09-16 18:19:16 +00:00
mhaag-spl 6f9c536f8e error 2021-09-16 12:15:53 -06:00
mhaag-spl 9c08c1f2f4 fixes 2021-09-16 12:14:26 -06:00
mhaag-spl bd6a779b02 no longer need sysmon procdump - updated superior procdump 2021-09-16 12:06:20 -06:00
root 04e8fd24b2 Added detection testing service results inDomain Account Discovery With Net App 2021-09-16 17:56:37 +00:00
mhaag-spl 70fb8aaf78 fixes 2021-09-16 11:36:51 -06:00
mhaag-spl 583e962d23 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 11:13:16 -06:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
Detection Testing Service 325eb8e1c7 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 17:08:16 +00:00
root eeb3af0c16 Added detection testing service results inCredential Dumping via Symlink to Shadow Copy 2021-09-16 17:08:15 +00:00
Detection Testing Service 644e571292 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 17:07:21 +00:00
root 6c467dbb80 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy 2021-09-16 17:07:21 +00:00
Detection Testing Service c22058ceb4 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:57:26 +00:00
root 8fc4ca5e90 Added detection testing service results inCreation of Shadow Copy with wmic and powershell 2021-09-16 16:57:25 +00:00
Detection Testing Service ee1ef1ecd6 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:52:59 +00:00
root 13a917ea62 Added detection testing service results inCreate or delete windows shares using net exe 2021-09-16 16:52:59 +00:00
mhaag-spl 9e32a32bdd Update credential_dumping_via_symlink_to_shadow_copy.yml 2021-09-16 10:52:50 -06:00
Detection Testing Service ec15b54f16 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:51:08 +00:00
root 7acb54087f Added detection testing service results inCreate local admin accounts using net exe 2021-09-16 16:51:07 +00:00
mhaag-spl 261bdc4270 Update credential_dumping_via_copy_command_from_shadow_copy.yml 2021-09-16 10:50:21 -06:00
Detection Testing Service 7bf85e6245 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:45:19 +00:00
root ddae4670bb Added detection testing service results inBITSAdmin Download File 2021-09-16 16:45:19 +00:00
Detection Testing Service 85594da255 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:41:30 +00:00
root 6059b4e135 Added detection testing service results inBITS Job Persistence 2021-09-16 16:41:29 +00:00
mhaag-spl f43bffd899 Update creation_of_shadow_copy_with_wmic_and_powershell.yml 2021-09-16 10:37:34 -06:00
mhaag-spl 5fe3b8ad85 fixes 2021-09-16 10:33:18 -06:00
mhaag-spl c5cdccf1b4 Update create_local_admin_accounts_using_net_exe.yml 2021-09-16 10:32:08 -06:00
mhaag-spl 53806fe5f0 Update office_product_spawning_wmic.yml 2021-09-16 10:28:52 -06:00