Commit Graph

12922 Commits

Author SHA1 Message Date
root c514bf1361 Added detection testing service results inNet Localgroup Discovery 2021-09-14 18:02:07 +00:00
Detection Testing Service 5cf90f60b2 Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5 2021-09-14 17:55:42 +00:00
root 7ccd84ccfd Added detection testing service results inGet WMIObject Group Discovery with Script Block Logging 2021-09-14 17:55:41 +00:00
root 9836d8c263 Added detection testing service results inGet WMIObject Group Discovery 2021-09-14 17:52:46 +00:00
mhaag-spl 358917d733 May The Haag Be With You 2021-09-14 11:05:59 -06:00
Bhavin Patel 29051d9cd3 Branch was auto-updated. 2021-09-14 09:02:32 -07:00
Michael Haag cd5bbf6cca Merge pull request #1660 from splunk/AD_Discovery_TR-789_9
AD_Discovery_TR-789_9
2021-09-14 10:02:13 -06:00
mvelazco 47e3c2bf9e fixing message field 2021-09-14 11:54:58 -04:00
mvelazco 2e6bb4886b Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9 2021-09-14 10:01:54 -04:00
mvelazco 379f8e82c1 adding required_fields 2021-09-14 10:01:52 -04:00
Detection Testing Service 042f7e0c74 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 2021-09-14 13:35:29 +00:00
root 31a0177b31 Added detection testing service results inGetCurrent User with PowerShell Script Block 2021-09-14 13:35:28 +00:00
root 4abb769c46 Added detection testing service results inGetCurrent User with PowerShell 2021-09-14 13:33:53 +00:00
tccontre d3c2aed6b0 fin7 2021-09-14 12:20:02 +02:00
tccontre d8d8c4e44c FIN7 2021-09-14 12:17:55 +02:00
Detection Testing Service 893822a9c9 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 2021-09-13 22:58:59 +00:00
root a51106c70d Added detection testing service results inUser Discovery With Env Vars PowerShell 2021-09-13 22:58:58 +00:00
Detection Testing Service d953fb05b1 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 2021-09-13 22:58:57 +00:00
root 137aa7a5e5 Added detection testing service results inUser Discovery With Env Vars PowerShell Script Block 2021-09-13 22:58:57 +00:00
root e4719b9437 Added detection testing service results inSystem User Discovery With Whoami 2021-09-13 22:56:08 +00:00
root 07e27ba6ae Added detection testing service results inSystem User Discovery With Query 2021-09-13 22:03:33 +00:00
mvelazco 2959c2edb7 Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9 2021-09-13 17:22:33 -04:00
mvelazco 687fb1745c adding 4 detections 2021-09-13 17:22:30 -04:00
Bhavin Patel 9522b364c5 Branch was auto-updated. 2021-09-13 11:10:27 -07:00
Bhavin Patel 70dc4c3414 Merge pull request #1658 from splunk/AD_Discovery_TR-789_8
AD_Discovery_TR-789_8
2021-09-13 11:10:10 -07:00
Bhavin Patel eca9191516 Branch was auto-updated. 2021-09-13 11:09:36 -07:00
Bhavin Patel b94510f831 Merge pull request #1624 from splunk/AD_Discovery_TR-789_3
AD_Discovery_TR-789_3
2021-09-13 11:09:16 -07:00
Bhavin Patel 5cd91c53c2 Branch was auto-updated. 2021-09-13 11:07:52 -07:00
Bhavin Patel 2a06605804 Merge pull request #1596 from splunk/AD_Discovery_TR-789_6
AD_Discovery_TR-789_6
2021-09-13 11:07:33 -07:00
Bhavin Patel 20913cd362 Branch was auto-updated. 2021-09-13 11:06:38 -07:00
Bhavin Patel 361c57dfc7 Merge pull request #1620 from splunk/AD_Discovery_TR-789_7
AD_Discovery_TR-789_7
2021-09-13 11:06:16 -07:00
mvelazco ce3b5cadfd initial 2 detections 2021-09-13 12:08:42 -04:00
Jose Enrique Hernandez 6684db4aab Delete CNAME 2021-09-13 11:30:38 -04:00
P4T12ICK 1d1c93893b add new alert action 2021-09-13 17:10:37 +02:00
mhaag-spl fd34f91dcd Update create_or_delete_windows_shares_using_net_exe.yml 2021-09-13 07:34:37 -06:00
d1vious 8c10f910e7 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-13 09:13:36 -04:00
P4T12ICK a3cc73a53d add new alert action 2021-09-13 13:48:46 +02:00
P4T12ICK f6df3344bb add new alert action 2021-09-13 12:59:00 +02:00
P4T12ICK 8cae9d0130 add new alert action 2021-09-13 12:56:16 +02:00
P4T12ICK f69826e682 changed dashboard 2021-09-13 12:36:59 +02:00
P4T12ICK b708b3a376 changed dashboard 2021-09-13 09:19:51 +02:00
d1vious c9cadfe6fb updating index 2021-09-13 00:16:26 -04:00
Jose Enrique Hernandez 6d0a679a9d Create CNAME 2021-09-12 20:40:25 -04:00
d1vious bbf6df82bd added analytic stories, cleaned up view a bit 2021-09-12 20:39:15 -04:00
d1vious 43a2bd5713 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-11 21:34:23 -04:00
mvelazco 9d694d78a6 Merge pull request #1659 from splunk/cab-in-the-inf
Haag With the Wind: CVE-2021-40444 Edition
2021-09-10 15:08:29 -04:00
root b138ecff4e Added detection testing service results inOffice Product Writing cab or inf 2021-09-10 18:18:08 +00:00
root 7ea257e5e5 Added detection testing service results inNetwork Connection Discovery With Arp 2021-09-10 18:09:54 +00:00
mvelazco d6e3761f86 Merge branch 'AD_Discovery_TR-789_8' of github.com:splunk/security_content into AD_Discovery_TR-789_8 2021-09-10 13:50:54 -04:00
mvelazco 81055f2176 updating required fields 2021-09-10 13:50:29 -04:00