admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,904 Commits 697 Branches 195 Tags
RemcosDetectionTest
Commit Graph

3671 Commits

Author SHA1 Message Date
pyth0n1c 09ca049536 changed author to Splunk! 2021-09-30 15:05:05 -07:00
root 39d6b408ec Added detection testing service results inRemcos client registry install entry 2021-09-30 21:53:10 +00:00
pyth0n1c e5ce16791a Testing Detection Testing Batch 2021-09-30 13:50:04 -07:00
Bhavin Patel 128e7e57ea Merge pull request #1688 from splunk/remcos_registry 
Remcos registry
 2021-09-30 11:11:53 -07:00
root 18c89103a9 Added detection testing service results inRemcos client registry install entry 2021-09-29 18:26:30 +00:00
patel-bhavin a3d731d5ed success on AR 2021-09-29 11:07:22 -07:00
patel-bhavin 0216feb542 trail 2021-09-28 14:31:34 -07:00
patel-bhavin fd2a7f0adc macro 2021-09-28 11:09:14 -07:00
patel-bhavin 1026e7430f remove macro 2021-09-28 10:49:53 -07:00
patel-bhavin 05702a61bf search update 2021-09-27 16:09:04 -07:00
patel-bhavin 1641e15810 yml changes 2021-09-27 15:33:28 -07:00
patel-bhavin f3e47ca555 minor 2021-09-27 14:43:28 -07:00
patel-bhavin 00cb3cd69d adding default 2021-09-27 14:04:21 -07:00
research bot 961a81d4a5 updating docs and package bits [ci skip] 2021-09-27 18:54:15 +00:00
Bhavin Patel 9740a785b1 Branch was auto-updated. 2021-09-27 10:20:34 -07:00
Bhavin Patel cb29959b97 Branch was auto-updated. 2021-09-27 10:04:27 -07:00
Bhavin Patel 170e4e1ae8 Branch was auto-updated. 2021-09-27 10:04:10 -07:00
Bhavin Patel 2b8d3776fe Branch was auto-updated. 2021-09-24 14:54:22 -07:00
Bhavin Patel a6bf5c2c7a Branch was auto-updated. 2021-09-24 14:54:14 -07:00
Bhavin Patel 8340e8bf00 Branch was auto-updated. 2021-09-24 14:54:13 -07:00
peter 2944cbb6fa Merge pull request #1685 from splunk/ssa_lolbas_spike 
Adding some basic body info for unusual lolbas count
 2021-09-24 16:53:58 -05:00
peter-cg 3512cb812c Adding some basic body info for unusual lolbas count 2021-09-24 15:23:43 -05:00
Bhavin Patel 418e7b4c4d Branch was auto-updated. 2021-09-24 11:38:41 -07:00
Bhavin Patel 68040d2072 Branch was auto-updated. 2021-09-24 11:38:40 -07:00
Bhavin Patel 159393a693 Branch was auto-updated. 2021-09-24 11:38:28 -07:00
Stanislav Miskovic 9cc5d2a177 Fixing a problem with time being in milliseconds vs seconds - setting observation confirence interval back to 30 min 2021-09-24 11:19:38 -07:00
tccontre 74c7b3c753 remcos_agent 2021-09-24 09:20:07 +02:00
Detection Testing Service 9831efea63 Merge branch 'remcos_agent' of https://github.com/splunk/security_content into remcos_agent 2021-09-23 08:09:44 +00:00
root 6abadead7c Added detection testing service results inRemcos RAT File Creation in Remcos Folder 2021-09-23 08:09:43 +00:00
root d445133a16 Added detection testing service results inSuspicious Image Creation In Appdata Folder 2021-09-23 08:07:07 +00:00
mhaag-spl 38ee2f9319 Revert "Update searchprotocolhost_with_no_command_line_with_network.yml" 
This reverts commit 958e195593.
 2021-09-22 14:11:27 -06:00
root b34bbb097b Added detection testing service results inSuspicious WAV file in Appdata Folder 2021-09-22 16:01:40 +00:00
tccontre 821d97981e remcos_agent 2021-09-22 14:08:13 +02:00
Detection Testing Service ac575d31f2 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:59:41 +00:00
root 36476e9d69 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques 2021-09-21 19:59:40 +00:00
Detection Testing Service 50f47cc360 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:58:13 +00:00
root 71fd03b1ec Added detection testing service results inMalicious PowerShell Process - Execution Policy Bypass 2021-09-21 19:58:12 +00:00
Detection Testing Service 29164395f1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:56:37 +00:00
root 7863894512 Added detection testing service results inMalicious PowerShell Process - Encoded Command 2021-09-21 19:56:36 +00:00
Detection Testing Service 50609ee581 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:53:33 +00:00
root 863848a8d4 Added detection testing service results inMalicious PowerShell Process - Connect To Internet With Hidden Window 2021-09-21 19:53:32 +00:00
Detection Testing Service 405b5c2570 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:43:20 +00:00
root 4feb74f09a Added detection testing service results inCertUtil Download With URLCache and Split Arguments 2021-09-21 19:43:19 +00:00
Detection Testing Service 9598a3ab4d Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:41:08 +00:00
root f720679ba3 Added detection testing service results inAllow Network Discovery In Firewall 2021-09-21 19:41:07 +00:00
Detection Testing Service a4498adb91 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:31:27 +00:00
root 389002fc9d Added detection testing service results inAny Powershell DownloadFile 2021-09-21 19:31:26 +00:00
Detection Testing Service 2035cfb8c1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:29:12 +00:00
root 1e4a51b5ef Added detection testing service results inAllow File And Printing Sharing In Firewall 2021-09-21 19:29:11 +00:00
Detection Testing Service 6626da0f12 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-21 19:28:59 +00:00