6475 Commits

Author SHA1 Message Date
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots
Haag it!
2022-08-11 11:29:48 -07:00
Bhavin Patel a192bac909 Update windows_gather_victim_host_information_camera.yml 2022-08-11 11:13:41 -07:00
Bhavin Patel 45ae7df595 Merge branch 'develop' into dcrat-analytics3 2022-08-11 11:03:14 -07:00
pyth0n1c baf591f0d2 Branch was auto-updated. 2022-08-10 11:17:07 -07:00
pyth0n1c 2d62c07b81 Branch was auto-updated. 2022-08-09 16:57:18 -07:00
pyth0n1c 99cc720057 Branch was auto-updated. 2022-08-09 16:57:17 -07:00
pyth0n1c a7f76dca31 Branch was auto-updated. 2022-08-09 16:46:24 -07:00
pyth0n1c 697c14b151 Branch was auto-updated. 2022-08-09 16:46:20 -07:00
pyth0n1c d928024447 Branch was auto-updated. 2022-08-09 16:46:19 -07:00
tccontre fe394aa85c fix-clean-obj-name 2022-08-09 13:03:53 +02:00
tccontre 7422fb3eda dcrat-analytics3 2022-08-04 09:44:22 +02:00
tccontre ca11a32aeb dcrat-analytics3 2022-08-03 17:53:06 +02:00
pyth0n1c ce9980bcfb Branch was auto-updated. 2022-08-03 08:28:31 -07:00
pyth0n1c 3d16da7d47 Branch was auto-updated. 2022-08-03 08:28:25 -07:00
pyth0n1c 439779d28e Branch was auto-updated. 2022-08-03 08:28:23 -07:00
d1vious 66a679471c Merge branch 'develop' into faking_appcert 2022-08-02 11:36:23 -04:00
d1vious c9099e8a41 doing a fix to pass appcert 2022-08-02 11:28:58 -04:00
Michael Haag 83e57921ad iscsi fix 2022-08-02 08:35:54 -06:00
tccontre 9cfa2151e7 Update windows_ingress_tool_transfer_using_explorer.yml 2022-08-02 14:01:38 +02:00
tccontre da230f6ed6 dcrat-analytics3 2022-08-02 13:31:49 +02:00
tccontre e189299cf2 dcrat-analytics3 2022-08-02 12:00:40 +02:00
root c71b04a866 Updated detection files with recommended TA list. 2022-08-01 18:43:39 +00:00
tccontre 4fb7bb3306 Merge branch 'dcrat-analytics3' of github.com:splunk/security_content into dcrat-analytics3 2022-08-01 17:34:40 +02:00
tccontre 0fc18fcbdb dcrat-analytics3 2022-08-01 17:34:21 +02:00
tccontre 2df3a64798 Rename windows_ingress_tool_transfer_using_explorer_exe.yml to windows_ingress_tool_transfer_using_explorer.yml 2022-08-01 14:23:01 +02:00
tccontre f3f40edf9e Update windows_gather_victim_host_information_camera.yml 2022-08-01 14:22:03 +02:00
tccontre d8690a4386 Update windows_ingress_tool_transfer_using_explorer_exe.yml 2022-08-01 14:18:20 +02:00
tccontre b67f2c69a1 dcrat-analytics3 2022-08-01 14:15:02 +02:00
Michael Haag bbd4b67e9d fixed query
modified query to use NOT instead of !=
2022-07-30 06:02:04 -06:00
Michael Haag 8bc3086675 iscsicpl 2022-07-29 17:39:55 -06:00
pyth0n1c 9b9ee9b2bf Branch was auto-updated. 2022-07-29 15:44:01 -07:00
Michael Haag 978e4c3ef7 Update linux_ingress_tool_transfer_hunting.yml
fixed risk
2022-07-29 11:19:42 -06:00
Michael Haag 8ad83a0b5f Haag It
Linux Curl Upload File
Linux Ingress Tool Transfer Hunting
Linux Ingress Tool Transfer with Curl
Linux Proxy Socks Curl
2022-07-29 11:17:19 -06:00
tccontre a0336d013a dcrat-analytics3 2022-07-29 10:12:22 +02:00
tccontre bcb5aab4ee dcrat-analytics3 2022-07-29 10:06:40 +02:00
pyth0n1c 1423e955d7 Branch was auto-updated. 2022-07-28 14:33:11 -07:00
patel-bhavin 114df09d78 meta updates 2022-07-28 14:18:45 -07:00
Bhavin Patel 1b645a499c Update azure_ad_successful_single_factor_authentication.yml 2022-07-28 14:12:18 -07:00
Bhavin Patel 95e47b7fd4 Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml 2022-07-28 14:11:40 -07:00
Bhavin Patel 07290ffeb7 Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:08:32 -07:00
Bhavin Patel 42241b1b2e Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml 2022-07-28 14:07:47 -07:00
Bhavin Patel 72d0a37a12 Update azure_ad_authentication_failed_during_mfa_challenge.yml 2022-07-28 14:05:57 -07:00
Bhavin Patel f22813da22 Update azure_active_directory_high_risk_sign_in.yml 2022-07-28 14:05:14 -07:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
pyth0n1c 204bf3192b Branch was auto-updated. 2022-07-28 13:50:29 -07:00
pyth0n1c f4f375113e Branch was auto-updated. 2022-07-28 13:47:25 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
Bhavin Patel f2731454b1 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 13:30:37 -07:00
Bhavin Patel 979dd80466 Update windows_system_shutdown_commandline.yml 2022-07-28 13:28:00 -07:00