root
|
c514bf1361
|
Added detection testing service results inNet Localgroup Discovery
|
2021-09-14 18:02:07 +00:00 |
|
Detection Testing Service
|
5cf90f60b2
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 17:55:42 +00:00 |
|
root
|
7ccd84ccfd
|
Added detection testing service results inGet WMIObject Group Discovery with Script Block Logging
|
2021-09-14 17:55:41 +00:00 |
|
root
|
9836d8c263
|
Added detection testing service results inGet WMIObject Group Discovery
|
2021-09-14 17:52:46 +00:00 |
|
mhaag-spl
|
358917d733
|
May The Haag Be With You
|
2021-09-14 11:05:59 -06:00 |
|
Bhavin Patel
|
29051d9cd3
|
Branch was auto-updated.
|
2021-09-14 09:02:32 -07:00 |
|
Michael Haag
|
cd5bbf6cca
|
Merge pull request #1660 from splunk/AD_Discovery_TR-789_9
AD_Discovery_TR-789_9
|
2021-09-14 10:02:13 -06:00 |
|
mvelazco
|
47e3c2bf9e
|
fixing message field
|
2021-09-14 11:54:58 -04:00 |
|
mvelazco
|
2e6bb4886b
|
Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-14 10:01:54 -04:00 |
|
mvelazco
|
379f8e82c1
|
adding required_fields
|
2021-09-14 10:01:52 -04:00 |
|
Detection Testing Service
|
042f7e0c74
|
Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-14 13:35:29 +00:00 |
|
root
|
31a0177b31
|
Added detection testing service results inGetCurrent User with PowerShell Script Block
|
2021-09-14 13:35:28 +00:00 |
|
root
|
4abb769c46
|
Added detection testing service results inGetCurrent User with PowerShell
|
2021-09-14 13:33:53 +00:00 |
|
tccontre
|
d3c2aed6b0
|
fin7
|
2021-09-14 12:20:02 +02:00 |
|
tccontre
|
d8d8c4e44c
|
FIN7
|
2021-09-14 12:17:55 +02:00 |
|
Detection Testing Service
|
893822a9c9
|
Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-13 22:58:59 +00:00 |
|
root
|
a51106c70d
|
Added detection testing service results inUser Discovery With Env Vars PowerShell
|
2021-09-13 22:58:58 +00:00 |
|
Detection Testing Service
|
d953fb05b1
|
Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-13 22:58:57 +00:00 |
|
root
|
137aa7a5e5
|
Added detection testing service results inUser Discovery With Env Vars PowerShell Script Block
|
2021-09-13 22:58:57 +00:00 |
|
root
|
e4719b9437
|
Added detection testing service results inSystem User Discovery With Whoami
|
2021-09-13 22:56:08 +00:00 |
|
root
|
07e27ba6ae
|
Added detection testing service results inSystem User Discovery With Query
|
2021-09-13 22:03:33 +00:00 |
|
mvelazco
|
2959c2edb7
|
Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-13 17:22:33 -04:00 |
|
mvelazco
|
687fb1745c
|
adding 4 detections
|
2021-09-13 17:22:30 -04:00 |
|
Bhavin Patel
|
9522b364c5
|
Branch was auto-updated.
|
2021-09-13 11:10:27 -07:00 |
|
Bhavin Patel
|
70dc4c3414
|
Merge pull request #1658 from splunk/AD_Discovery_TR-789_8
AD_Discovery_TR-789_8
|
2021-09-13 11:10:10 -07:00 |
|
Bhavin Patel
|
eca9191516
|
Branch was auto-updated.
|
2021-09-13 11:09:36 -07:00 |
|
Bhavin Patel
|
b94510f831
|
Merge pull request #1624 from splunk/AD_Discovery_TR-789_3
AD_Discovery_TR-789_3
|
2021-09-13 11:09:16 -07:00 |
|
Bhavin Patel
|
5cd91c53c2
|
Branch was auto-updated.
|
2021-09-13 11:07:52 -07:00 |
|
Bhavin Patel
|
2a06605804
|
Merge pull request #1596 from splunk/AD_Discovery_TR-789_6
AD_Discovery_TR-789_6
|
2021-09-13 11:07:33 -07:00 |
|
Bhavin Patel
|
20913cd362
|
Branch was auto-updated.
|
2021-09-13 11:06:38 -07:00 |
|
Bhavin Patel
|
361c57dfc7
|
Merge pull request #1620 from splunk/AD_Discovery_TR-789_7
AD_Discovery_TR-789_7
|
2021-09-13 11:06:16 -07:00 |
|
mvelazco
|
ce3b5cadfd
|
initial 2 detections
|
2021-09-13 12:08:42 -04:00 |
|
Jose Enrique Hernandez
|
6684db4aab
|
Delete CNAME
|
2021-09-13 11:30:38 -04:00 |
|
P4T12ICK
|
1d1c93893b
|
add new alert action
|
2021-09-13 17:10:37 +02:00 |
|
mhaag-spl
|
fd34f91dcd
|
Update create_or_delete_windows_shares_using_net_exe.yml
|
2021-09-13 07:34:37 -06:00 |
|
d1vious
|
8c10f910e7
|
Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs
|
2021-09-13 09:13:36 -04:00 |
|
P4T12ICK
|
a3cc73a53d
|
add new alert action
|
2021-09-13 13:48:46 +02:00 |
|
P4T12ICK
|
f6df3344bb
|
add new alert action
|
2021-09-13 12:59:00 +02:00 |
|
P4T12ICK
|
8cae9d0130
|
add new alert action
|
2021-09-13 12:56:16 +02:00 |
|
P4T12ICK
|
f69826e682
|
changed dashboard
|
2021-09-13 12:36:59 +02:00 |
|
P4T12ICK
|
b708b3a376
|
changed dashboard
|
2021-09-13 09:19:51 +02:00 |
|
d1vious
|
c9cadfe6fb
|
updating index
|
2021-09-13 00:16:26 -04:00 |
|
Jose Enrique Hernandez
|
6d0a679a9d
|
Create CNAME
|
2021-09-12 20:40:25 -04:00 |
|
d1vious
|
bbf6df82bd
|
added analytic stories, cleaned up view a bit
|
2021-09-12 20:39:15 -04:00 |
|
d1vious
|
43a2bd5713
|
Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs
|
2021-09-11 21:34:23 -04:00 |
|
mvelazco
|
9d694d78a6
|
Merge pull request #1659 from splunk/cab-in-the-inf
Haag With the Wind: CVE-2021-40444 Edition
|
2021-09-10 15:08:29 -04:00 |
|
root
|
b138ecff4e
|
Added detection testing service results inOffice Product Writing cab or inf
|
2021-09-10 18:18:08 +00:00 |
|
root
|
7ea257e5e5
|
Added detection testing service results inNetwork Connection Discovery With Arp
|
2021-09-10 18:09:54 +00:00 |
|
mvelazco
|
d6e3761f86
|
Merge branch 'AD_Discovery_TR-789_8' of github.com:splunk/security_content into AD_Discovery_TR-789_8
|
2021-09-10 13:50:54 -04:00 |
|
mvelazco
|
81055f2176
|
updating required fields
|
2021-09-10 13:50:29 -04:00 |
|