 mhaag-spl
|
4171a3cd63
|
Update bitsadmin_download_file.yml
|
2021-09-16 10:23:55 -06:00 |
|
|
mhaag-spl
|
e8ddb9aadc
|
Update bits_job_persistence.yml
|
2021-09-16 10:23:11 -06:00 |
|
|
mhaag-spl
|
3844ad4bcb
|
Update batch_file_write_to_system32.yml
|
2021-09-16 10:22:24 -06:00 |
|
|
Detection Testing Service
|
3dc11fae91
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-09-16 16:18:21 +00:00 |
|
|
root
|
2e2f4546df
|
Added detection testing service results inBatch File Write to System32
|
2021-09-16 16:18:21 +00:00 |
|
|
Detection Testing Service
|
8f17362947
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-09-16 16:07:37 +00:00 |
|
|
root
|
abc6aa1eb7
|
Added detection testing service results inAttempted Credential Dump From Registry via Reg exe
|
2021-09-16 16:07:36 +00:00 |
|
|
Detection Testing Service
|
6fd71dfec2
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-09-16 16:03:34 +00:00 |
|
|
root
|
48f5786538
|
Added detection testing service results inAttempt To Add Certificate To Untrusted Store
|
2021-09-16 16:03:33 +00:00 |
|
|
Detection Testing Service
|
89265b45e7
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-09-16 16:02:24 +00:00 |
|
|
root
|
f68371cc3f
|
Added detection testing service results inAccount Discovery With Net App
|
2021-09-16 16:02:23 +00:00 |
|
|
mhaag-spl
|
9111b9a0a5
|
Update batch_file_write_to_system32.yml
|
2021-09-16 09:58:07 -06:00 |
|
|
mhaag-spl
|
46c20ccb77
|
Update attempted_credential_dump_from_registry_via_reg_exe.yml
|
2021-09-16 09:47:25 -06:00 |
|
|
root
|
dc90473679
|
Added detection testing service results inCmdline Tool Not Executed In CMD Shell
|
2021-09-16 15:43:53 +00:00 |
|
|
mhaag-spl
|
217d7fd23e
|
updates
|
2021-09-16 09:42:56 -06:00 |
|
|
Lou Stella
|
9c31c30fde
|
Added png for GSuite_DevSecops
|
2021-09-16 10:29:47 -05:00 |
|
|
Lou Stella
|
c7c7583ec8
|
Added demo playbook for development
|
2021-09-16 10:21:27 -05:00 |
|
|
root
|
1daee13b11
|
Added detection testing service results inCheck Elevated CMD using whoami
|
2021-09-16 15:17:07 +00:00 |
|
|
tccontre
|
13062c170a
|
Merge branch 'fin7' of github.com:splunk/security_content into fin7
|
2021-09-16 16:57:15 +02:00 |
|
|
tccontre
|
d03f534e68
|
fin7
|
2021-09-16 16:56:51 +02:00 |
|
|
Detection Testing Service
|
907cce2415
|
Merge branch 'fin7' of https://github.com/splunk/security_content into fin7
|
2021-09-16 14:48:11 +00:00 |
|
|
root
|
cbb2198d65
|
Added detection testing service results inOffice Application Drop Executable
|
2021-09-16 14:48:10 +00:00 |
|
|
tccontre
|
2480f3c4b7
|
fin7
|
2021-09-16 16:45:49 +02:00 |
|
|
tccontre
|
f764f730ec
|
fin7
|
2021-09-16 16:04:40 +02:00 |
|
|
tccontre
|
ad6761f6b9
|
Merge branch 'fin7' of github.com:splunk/security_content into fin7
|
2021-09-16 16:00:27 +02:00 |
|
|
tccontre
|
b869a0de99
|
fin7
|
2021-09-16 15:54:32 +02:00 |
|
|
P4T12ICK
|
9db514182b
|
added phase to detection
|
2021-09-16 15:39:29 +02:00 |
|
|
root
|
a30c746aeb
|
Added detection testing service results inNon Chrome Process Accessing Chrome Default Dir
|
2021-09-16 10:03:01 +00:00 |
|
|
Stanislav Miskovic
|
05820da35d
|
Adding SLP confirmed in DSP
|
2021-09-15 16:11:02 -07:00 |
|
|
patel-bhavin
|
9e22174115
|
revert
|
2021-09-15 15:48:01 -07:00 |
|
|
Jose Enrique Hernandez
|
aec4f7c772
|
adding dataset url
|
2021-09-15 17:34:51 -04:00 |
|
|
patel-bhavin
|
a110285399
|
deprecate
|
2021-09-15 13:13:38 -07:00 |
|
|
Lou Stella
|
afe7e98f06
|
Added DevSecOps demo playbook
|
2021-09-15 14:21:50 -05:00 |
|
|
Bhavin Patel
|
23f2c7d20e
|
Branch was auto-updated.
|
2021-09-15 11:36:20 -07:00 |
|
|
pyth0n1c
|
3f5b996824
|
Merge pull request #1664 from splunk/TR-851
removed submodule, no need for additonal detection testing run. Semgrep error is due to issue in semgrep repo
|
2021-09-15 11:36:01 -07:00 |
|
|
Lou Stella
|
e3a84e4840
|
removed submodule
|
2021-09-15 12:54:05 -05:00 |
|
|
root
|
b23dbeed08
|
Added detection testing service results inNon Firefox Process Access Firefox Profile Dir
|
2021-09-15 16:00:56 +00:00 |
|
|
root
|
50c9e38337
|
Added detection testing service results inJscript Execution Using Cscript App
|
2021-09-15 13:59:55 +00:00 |
|
|
root
|
f42e2cd255
|
Added detection testing service results inOffice Application Drop Executable
|
2021-09-15 13:03:19 +00:00 |
|
|
root
|
8422a53a20
|
Added detection testing service results inXSL Script Execution With WMIC
|
2021-09-15 12:43:04 +00:00 |
|
|
tccontre
|
d0eff26cde
|
fin7
|
2021-09-15 13:48:22 +02:00 |
|
|
tccontre
|
d96f70cf8e
|
fin7
|
2021-09-15 13:45:42 +02:00 |
|
|
Bhavin Patel
|
ceb2b3b0fb
|
Branch was auto-updated.
|
2021-09-14 12:34:49 -07:00 |
|
|
mvelazco
|
1fde288203
|
Merge pull request #1662 from splunk/AD_Discovery_TR-789_5
May The Haag Be With You
|
2021-09-14 15:34:29 -04:00 |
|
|
root
|
575377d312
|
Added detection testing service results inPowerShell Get LocalGroup Discovery
|
2021-09-14 18:46:53 +00:00 |
|
|
Detection Testing Service
|
6bed1bdc71
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 18:20:58 +00:00 |
|
|
root
|
70dfb3b5d1
|
Added detection testing service results inWmic Group Discovery
|
2021-09-14 18:20:57 +00:00 |
|
|
Detection Testing Service
|
1a5e50fbec
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 18:14:29 +00:00 |
|
|
root
|
eaacec47db
|
Added detection testing service results inPowershell Get LocalGroup Discovery with Script Block Logging
|
2021-09-14 18:14:29 +00:00 |
|
|
Detection Testing Service
|
84f5346fdf
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 18:02:07 +00:00 |
|