Commit Graph

14763 Commits

Author SHA1 Message Date
Michael Hart f71e3fe202 Adding references 2022-01-27 13:13:42 -05:00
P4T12ICK 228cc28a3b after changing test file format 2022-01-27 16:12:01 +01:00
P4T12ICK 35bb5de26a before changing test file format 2022-01-27 15:56:11 +01:00
tccontre cb94e13bfb Update disabling_controlpanel.yml 2022-01-27 10:19:49 +01:00
tccontre 0c7bfdfb91 Update disabling_cmd_application.yml 2022-01-27 10:19:35 +01:00
tccontre 9a53ad9418 Update disable_windows_smartscreen_protection.yml 2022-01-27 10:19:12 +01:00
tccontre 5f5c573995 Update disable_windows_behavior_monitoring.yml 2022-01-27 10:18:57 +01:00
tccontre e49de99c4e Update disable_windows_app_hotkeys.yml 2022-01-27 10:18:41 +01:00
tccontre ff4554d647 Update disable_uac_remote_restriction.yml 2022-01-27 10:18:28 +01:00
tccontre 00f141b909 Update disable_show_hidden_files.yml 2022-01-27 10:18:14 +01:00
tccontre be9b30dac2 Update disable_security_logs_using_minint_registry.yml 2022-01-27 10:17:58 +01:00
tccontre c31354c68c Update disable_registry_tool.yml 2022-01-27 10:17:43 +01:00
tccontre ee396fd819 Update disable_etw_through_registry.yml 2022-01-27 10:17:29 +01:00
tccontre 6e369a316f reg_yml_analytics_updates_2 2022-01-27 10:14:52 +01:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK a630b8a4b5 before removing SAAWS 2022-01-27 09:39:14 +01:00
truptilangalia-crest 7cc2713064 Delete detect_mimipenguin.yml 2022-01-27 11:54:33 +05:30
truptilangalia-crest 81809b4dcc Delete detect_linux_exploit_suggester_execution.yml 2022-01-27 11:54:16 +05:30
truptilangalia-crest 93a1d46758 Delete detect_linpeas_execution.yml 2022-01-27 11:53:59 +05:30
truptilangalia-crest aea9333e44 Delete detect_linenum_execution.yml 2022-01-27 11:53:33 +05:30
truptilangalia-crest 4e720c0415 Delete detect_autosuid_post_exploitation_tool.yml 2022-01-27 11:52:54 +05:30
truptilangalia-crest 807dd99672 Merge branch 'splunk:develop' into test/enrich_detections 2022-01-27 11:49:35 +05:30
Michael Hart b80af6f151 Editing the macro to put the apply statement into the search query so that it's clear that MLTK is being used 2022-01-26 22:38:13 -05:00
d1vious e85fe9f5e7 updating mitre coverage map 2022-01-26 20:41:55 -05:00
patel-bhavin fe5db9e78e adding lookup files 2022-01-26 15:34:10 -08:00
research bot 55a62e8365 updating docs and package bits [ci skip] 2022-01-26 22:55:37 +00:00
patel-bhavin 328417d4fa test files 2022-01-26 14:31:04 -08:00
patel-bhavin 5fa5def4d3 remove conflicts 2022-01-26 14:29:41 -08:00
patel-bhavin 3d3638c2e4 story file 2022-01-26 14:20:54 -08:00
pyth0n1c 0f3cc3e4f7 Branch was auto-updated. 2022-01-26 14:10:09 -08:00
Michael Haag 3058c7fa57 Merge pull request #1959 from splunk/remove_linux_post
Remove linux post exploitation story
v3.34.0
2022-01-26 15:09:43 -07:00
patel-bhavin 341385a97c wrong file 2022-01-26 13:54:01 -08:00
patel-bhavin 45c4a7b600 remove files that are already merged 2022-01-26 13:51:51 -08:00
patel-bhavin df46c560d6 Merge branch 'develop' of github.com:splunk/security_content into develop 2022-01-26 13:45:21 -08:00
patel-bhavin 7078e714cf Merge branch 'nixpost3' of github.com:splunk/security_content into nixpost3 2022-01-26 13:45:05 -08:00
patel-bhavin b095a62681 minor upddates 2022-01-26 13:44:57 -08:00
pyth0n1c e737a019b9 Branch was auto-updated. 2022-01-26 13:36:12 -08:00
pyth0n1c 3068824d4f Branch was auto-updated. 2022-01-26 13:36:08 -08:00
Bhavin Patel 67ba0750ef Merge pull request #1945 from splunk/whisper
WhisperTangoFoxtrot
2022-01-26 13:35:35 -08:00
mhaag-spl 8cb1e0abe0 dataset again 2022-01-26 13:50:32 -07:00
Detection Testing Service 5bc6118cb0 test:updated logic to remove unnesseary tas 2022-01-27 02:18:31 +05:30
mhaag-spl bed6990986 datasets 2022-01-26 13:40:09 -07:00
Michael Haag 67e413d0e0 Update __mlspl_unusual_commandline_detection.yml 2022-01-26 11:26:25 -07:00
P4T12ICK 9148e13dd0 test generate 2022-01-26 16:19:38 +01:00
P4T12ICK 48fb45327b test generate 2022-01-26 15:11:46 +01:00
tccontre ec66a35885 Update time_provider_persistence_registry.yml 2022-01-26 11:42:05 +01:00
tccontre c792da85e8 Update start_up_during_safe_mode_boot.yml 2022-01-26 11:41:47 +01:00
tccontre 28342ca7dc Update remcos_client_registry_install_entry.yml 2022-01-26 11:41:25 +01:00
tccontre 708552a3d0 Update registry_keys_used_for_privilege_escalation.yml 2022-01-26 11:41:06 +01:00
tccontre bcdf46a631 Update registry_keys_used_for_persistence.yml 2022-01-26 11:40:46 +01:00