Commit Graph

4041 Commits

Author SHA1 Message Date
Rod Soto 92a782df3c fixedtagcb 2022-05-03 09:45:47 -07:00
pyth0n1c c51b02f1d7 Branch was auto-updated. 2022-05-02 13:07:07 -07:00
mvelazco 1ddbd68f21 adding missing req fields 2022-05-02 14:52:18 -04:00
mvelazco c3037dc1b8 minor changes 2022-05-02 14:25:25 -04:00
patel-bhavin 489829b2a6 Merge branch 'develop' into cyclopsblink_fix 2022-05-02 11:06:38 -07:00
mhaag-spl b9be566fe8 service 2022-05-02 11:40:31 -06:00
pyth0n1c ffb1bf2e1a Branch was auto-updated. 2022-05-02 08:59:30 -07:00
tccontre 1106c798a3 cyclopsblink_fix 2022-04-29 17:47:59 +02:00
tccontre 6194e9075d Update linux_iptables_firewall_modification.yml 2022-04-29 17:40:36 +02:00
tccontre a1ad406a56 Update linux_iptables_firewall_modification.yml 2022-04-29 17:10:53 +02:00
tccontre 0d9944051f Update linux_iptables_firewall_modification.yml 2022-04-29 17:02:50 +02:00
tccontre 0785cb279f Update linux_iptables_firewall_modification.yml 2022-04-29 16:09:09 +02:00
tccontre 8c334270d8 cyclopsblink_fix 2022-04-29 12:11:29 +02:00
tccontre 37d0a8b7bd cyclopsblink_fix 2022-04-29 12:06:55 +02:00
mvelazco fce3ecbfa6 updating analytic story name 2022-04-28 18:10:40 -04:00
mhaag-spl 4afce144f2 krb 2022-04-28 09:18:03 -06:00
pyth0n1c 46fcfbdf7c Branch was auto-updated. 2022-04-25 11:32:00 -07:00
Bhavin Patel 93b1f025dc Update windows_registry_modification_for_safe_mode_persistence.yml 2022-04-25 13:46:43 -04:00
Bhavin Patel 324b7b9dfc Update windows_iso_lnk_file_creation.yml
minor change
2022-04-25 13:44:30 -04:00
tccontre 1acfac609c industroyer2 2022-04-25 12:03:54 +02:00
tccontre 11d372b63c industroyer2 2022-04-25 09:36:55 +02:00
Michael Haag e04e3690f8 Update windows_registry_delete_task_sd.yml 2022-04-22 11:37:08 -06:00
Michael Haag 7d4e75523f Update windows_drivers_loaded_by_signature.yml 2022-04-22 10:32:33 -06:00
mhaag-spl abd668b260 updates and story 2022-04-22 10:21:29 -06:00
mhaag-spl 6ba1225077 SD Delete 2022-04-18 10:55:08 -06:00
mhaag-spl 12350f451e Update nltest_domain_trust_discovery.yml 2022-04-18 10:01:25 -06:00
pyth0n1c 3cdd79a0dd Branch was auto-updated. 2022-04-14 13:34:35 -07:00
mhaag-spl 327042ede5 Merge branch 'fishsticks' of https://github.com/splunk/security_content into fishsticks 2022-04-14 14:13:26 -06:00
mhaag-spl b356157dc0 Update ssa___windows_rundll32_comsvcs_memory_dump.yml 2022-04-14 14:13:22 -06:00
pyth0n1c ef83f1ed8f Branch was auto-updated. 2022-04-14 13:09:52 -07:00
pyth0n1c 9ff0da4725 Branch was auto-updated. 2022-04-14 13:09:51 -07:00
Michael Haag ccffa29e3f Merge pull request #2171 from splunk/ssa_mshta_fix
Unicode + Regex = There be demons
2022-04-14 14:09:32 -06:00
mhaag-spl 79ee477a19 comsvcs 2022-04-14 14:04:13 -06:00
Lou Stella 71ad17def8 Modified 'required fields' 2022-04-14 14:43:30 -05:00
Lou Stella b75f8ed6aa Modifying field name 2022-04-14 14:40:38 -05:00
mhaag-spl c3e7e4c850 Update ssa___windows_lolbin_binary_in_non_standard_path.yml 2022-04-14 13:40:01 -06:00
mhaag-spl be60ac00b4 Revert "Update ssa___windows_lolbin_binary_in_non_standard_path.yml"
This reverts commit b25fc779c3.
2022-04-14 13:39:00 -06:00
Lou Stella 81e57c3591 Modified Regex 2022-04-14 14:37:01 -05:00
mhaag-spl b25fc779c3 Update ssa___windows_lolbin_binary_in_non_standard_path.yml 2022-04-14 13:20:46 -06:00
Lou Stella 3ad0e714fc push for Jud 2022-04-13 19:46:49 -05:00
pyth0n1c 558d47a35d Branch was auto-updated. 2022-04-13 05:29:58 -07:00
tccontre ce0f0852dd acidrain 2022-04-13 10:07:22 +02:00
tccontre a7bf512c15 acidrain 2022-04-13 09:34:11 +02:00
mhaag-spl cab258e211 Update windows_registry_certificate_added.yml 2022-04-12 15:29:20 -06:00
pyth0n1c 790b753e70 Branch was auto-updated. 2022-04-12 11:29:17 -07:00
pyth0n1c 03e2cf0b91 Branch was auto-updated. 2022-04-12 11:29:14 -07:00
Lou Stella ec66e01b78 Fixed formatting 2022-04-12 13:11:57 -05:00
Lou Stella da5eb1be3a Updated logic & fixed pathing 2022-04-12 12:01:48 -05:00
Lou Stella 63968601d2 parentheses to separate logic 2022-04-12 11:40:08 -05:00
tccontre 7c95560d2d Update linux_high_frequency_of_file_deletion_in_etc_folder.yml 2022-04-12 14:36:01 +02:00